$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa File: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (raw, json) Hash identifier: RmcTSNRb4aZHsTyIQG1pExZoYxPr3P86MsdiwAWVKTA= Subject key identifier: 01:CC:FB:06:1F:55:B2:4E:ED:6D:97:1D:1F:B1:9C:2B:94:20:87:5F Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Certificate serial: 37E396F3E01792A1953BA84F54F69C579D34CF8F Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa Signing time: Sun 22 Mar 2026 18:00:01 +0000 ROA not before: Sun 22 Mar 2026 17:55:01 +0000 ROA not after: Sun 21 Mar 2027 18:00:01 +0000 asID: 147138 IP address blocks: 103.177.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e3:96:f3:e0:17:92:a1:95:3b:a8:4f:54:f6:9c:57:9d:34:cf:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Validity Not Before: Mar 22 17:55:01 2026 GMT Not After : Mar 21 18:00:01 2027 GMT Subject: CN=01CCFB061F55B24EED6D971D1FB19C2B9420875F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:31:11:82:50:1e:09:11:e3:ef:84:36:f5: 80:8e:9b:2c:27:df:4d:26:58:63:1f:5a:d7:a9:74: b1:f3:fd:4e:d1:97:1f:56:38:7f:c5:92:69:e5:bc: f7:2e:49:84:14:f0:a6:9a:9d:d6:73:82:df:66:2f: 5f:9e:a7:07:a9:18:d0:4b:ae:95:12:aa:58:d8:c4: 65:b8:37:b2:02:ec:bb:65:8c:bc:8d:85:00:a5:d5: 53:79:40:95:e6:71:c7:82:da:6d:62:19:a3:3e:45: 9a:c7:f7:77:12:68:14:1a:11:05:76:d2:16:67:7c: cd:cd:0b:db:af:ef:4c:e9:83:e0:a7:7b:e5:a3:38: 14:6f:c8:7f:6e:60:3d:28:28:28:83:a8:bc:12:e9: 8d:09:1a:68:a3:9e:cf:57:58:1c:7c:4a:8a:af:3c: bd:94:0c:34:ea:9f:4a:2b:3e:a0:ad:d5:28:ea:e7: a9:aa:f8:0f:d5:fb:5b:f4:cf:2a:76:51:ae:12:0e: 92:12:bb:b4:61:55:89:ba:76:43:1f:36:21:c9:9d: 89:11:7b:8c:4b:3d:49:6d:71:8a:5f:7e:51:59:ba: b2:89:f7:cc:82:cb:1c:fa:97:66:17:42:9c:8d:b3: 3c:4b:84:24:2d:25:e2:ee:da:96:62:7c:d4:9a:6c: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CC:FB:06:1F:55:B2:4E:ED:6D:97:1D:1F:B1:9C:2B:94:20:87:5F X509v3 Authority Key Identifier: keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.15.0/24 Signature Algorithm: sha256WithRSAEncryption b4:9f:29:c5:35:9d:bf:02:85:d4:0d:b5:53:18:a9:e7:f8:d3: 09:d3:73:ec:29:f4:68:92:03:92:a4:fe:87:36:23:03:72:e4: 80:fb:f9:b2:96:10:88:ea:d4:46:ee:64:75:34:be:9a:eb:09: 65:d7:f3:6a:5b:9a:f4:23:85:dc:2d:aa:38:bd:50:c6:92:ab: f9:ab:a0:4d:85:5d:3c:62:3f:a7:a2:7b:b9:f8:e7:ad:b1:a2: 91:03:0e:38:e0:7d:93:8c:4f:cb:f3:33:d1:6b:2a:b7:2e:ce: 0d:a5:0f:24:f4:f3:13:bf:c4:65:f5:ca:1b:32:e7:25:1a:77: 42:dc:06:83:53:a6:d3:24:2f:f5:ff:ad:b8:89:30:f1:d6:e5: 6a:e1:c6:a2:e7:ef:67:ae:2b:6b:bc:cc:84:92:13:da:3f:03: fb:76:60:c6:cf:93:76:ae:bc:e2:ad:42:37:fc:b8:08:be:22: dd:c2:b2:21:29:00:7a:36:32:a1:4a:cf:de:9d:ec:ec:c3:89: 04:65:07:5f:5a:00:8d:fb:da:37:40:72:d5:07:8e:fa:4a:26: 01:52:7f:dc:bd:db:58:59:a5:1e:fa:e1:df:d4:ed:41:b8:05: cf:cb:38:c2:dc:d0:8a:4a:3d:87:11:b5:5f:b3:d5:4d:a1:e2: 73:cb:1c:35 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUN+OW8+AXkqGVO6hPVPacV500z48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYx QzFGNkRENDAeFw0yNjAzMjIxNzU1MDFaFw0yNzAzMjExODAwMDFaMDMxMTAvBgNV BAMTKDAxQ0NGQjA2MUY1NUIyNEVFRDZEOTcxRDFGQjE5QzJCOTQyMDg3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+jERglAeCRHj74Q29YCOmywn 300mWGMfWtepdLHz/U7Rlx9WOH/FkmnlvPcuSYQU8KaandZzgt9mL1+epwepGNBL rpUSqljYxGW4N7IC7LtljLyNhQCl1VN5QJXmcceC2m1iGaM+RZrH93cSaBQaEQV2 0hZnfM3NC9uv70zpg+Cne+WjOBRvyH9uYD0oKCiDqLwS6Y0JGmijns9XWBx8Soqv PL2UDDTqn0orPqCt1Sjq56mq+A/V+1v0zyp2Ua4SDpISu7RhVYm6dkMfNiHJnYkR e4xLPUltcYpfflFZurKJ98yCyxz6l2YXQpyNszxLhCQtJeLu2pZifNSabJTHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAcz7Bh9Vsk7tbZcdH7GcK5Qgh18wHwYDVR0j BBgwFoAU/3dQfm0fDgtusBEunPvRrxwfbdQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMC9GRjc3NTA3RTZE MUYwRTBCNkVCMDExMkU5Q0ZCRDFBRjFDMUY2REQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY3NzUwN0U2RDFGMEUwQjZFQjAxMTJFOUNGQkQxQUYxQzFG NkRENC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiZTA0MDM4LWExYjYtNDMyYy04 NTRiLWNjNmU4Y2YzMmUwNi8wLzMxMzAzMzJlMzEzNzM3MmUzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7EPMA0GCSqG SIb3DQEBCwUAA4IBAQC0nynFNZ2/AoXUDbVTGKnn+NMJ03PsKfRokgOSpP6HNiMD cuSA+/mylhCI6tRG7mR1NL6a6wll1/NqW5r0I4XcLao4vVDGkqv5q6BNhV08Yj+n onu5+OetsaKRAw444H2TjE/L8zPRayq3Ls4NpQ8k9PMTv8Rl9cobMuclGndC3AaD U6bTJC/1/624iTDx1uVq4cai5+9nritrvMyEkhPaPwP7dmDGz5N2rrzirUI3/LgI viLdwrIhKQB6NjKhSs/enezsw4kEZQdfWgCN+9o3QHLVB476SiYBUn/cvdtYWaUe +uHf1O1BuAXPyzjC3NCKSj2HEbVfs9VNoeJzyxw1 -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:15 2026 by rpki-client