$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa File: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (raw, json) Hash identifier: IX4uPd9N3SkfP7LEqX7tm7Aw2XVAAH51yq8xtLADMD0= Subject key identifier: 30:EF:9F:A4:3F:D8:16:63:DB:FB:A9:57:16:CF:47:B7:32:99:30:AF Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 79D7E0CD86DF5DB4AD3C6904F3E60CB41CAA1785 Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa Signing time: Tue 03 Feb 2026 06:02:35 +0000 ROA not before: Tue 03 Feb 2026 05:57:35 +0000 ROA not after: Tue 02 Feb 2027 06:02:35 +0000 asID: 136841 IP address blocks: 103.100.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d7:e0:cd:86:df:5d:b4:ad:3c:69:04:f3:e6:0c:b4:1c:aa:17:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Feb 3 05:57:35 2026 GMT Not After : Feb 2 06:02:35 2027 GMT Subject: CN=30EF9FA43FD81663DBFBA95716CF47B7329930AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:5c:24:a4:d7:07:c8:dd:d4:00:24:56:db: 4e:f2:b0:86:0b:9d:ac:0c:44:ed:b1:0e:f2:ce:07: b2:a7:26:50:05:64:40:1a:2e:dd:af:ab:ce:71:15: df:3f:03:9d:63:6c:dc:bb:51:e9:88:5f:c4:46:1b: fd:29:9c:76:e6:87:62:91:e7:f2:82:94:d3:3d:64: 65:66:fc:d8:32:b2:d9:b1:4a:23:5a:3a:a2:0c:6e: fe:d1:a3:86:e9:5d:d4:36:b7:ce:8a:05:0f:de:75: 67:6c:46:59:05:ce:c9:77:7b:6f:79:b7:d1:17:e0: 78:87:e6:e3:1d:1e:e2:eb:ba:62:45:7f:75:ca:8b: d1:b6:ce:57:85:4e:bc:e8:7f:a9:fb:e4:07:a4:d5: 99:55:02:a6:5c:36:49:6c:10:d6:33:ec:78:71:dc: 3d:90:30:86:9e:20:c3:45:82:fe:c7:95:24:03:0d: 6f:a7:75:13:0b:93:04:03:24:3a:12:38:a1:73:d0: 0e:51:e9:7c:69:9e:b3:d1:b6:1c:74:7b:09:a2:b9: 92:fb:60:f5:9d:60:0b:9d:34:2d:11:0d:04:20:4d: 66:7e:ec:22:5c:41:b7:3e:59:75:18:49:db:66:95: ec:39:98:d2:8f:d3:e4:27:e4:02:86:de:e1:fc:b5: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EF:9F:A4:3F:D8:16:63:DB:FB:A9:57:16:CF:47:B7:32:99:30:AF X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.100.175.0/24 Signature Algorithm: sha256WithRSAEncryption 35:80:35:05:e8:f1:e0:0a:7b:38:9e:5e:13:fd:e9:a5:44:35: e7:5d:c0:eb:5a:95:15:6c:b5:1e:19:27:a6:3f:61:4b:54:4e: d9:bd:59:4a:21:99:83:23:75:4e:88:f2:12:4c:18:fc:17:39: d4:35:d0:ac:31:36:b9:50:10:f0:55:26:16:a7:ca:32:31:55: 6f:c1:f2:b5:11:53:5f:00:d0:66:ca:d3:aa:da:62:bb:99:8a: f1:36:c0:9f:f3:eb:47:55:c1:00:75:ad:6b:a9:b2:e1:81:4f: 35:7a:54:13:e7:52:c5:ba:dc:fc:5b:22:27:24:9e:eb:d8:48: 21:30:16:01:84:a4:92:1e:df:63:76:32:b5:cb:49:e3:3c:ee: 68:ae:7b:09:36:a0:1b:9e:a0:e4:4b:db:67:00:d4:d2:ad:26: 56:ad:2e:5f:e4:45:96:ed:17:bb:c2:6d:78:a0:4b:53:98:f5: 20:62:bb:43:bf:08:7f:03:0d:24:2d:d9:21:23:96:9c:d3:bb: bb:62:cd:55:98:0a:8c:25:70:b5:cd:17:fa:99:30:28:69:67: 79:41:b0:7c:5d:9e:2c:26:20:b2:ef:f5:ea:3d:c9:c7:29:39: 93:2c:1d:4e:be:a7:3c:f8:b8:66:26:a8:11:2a:f8:c0:81:37: 92:25:75:a2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUedfgzYbfXbStPGkE8+YMtByqF4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNjAyMDMwNTU3MzVaFw0yNzAyMDIwNjAyMzVaMDMxMTAvBgNV BAMTKDMwRUY5RkE0M0ZEODE2NjNEQkZCQTk1NzE2Q0Y0N0I3MzI5OTMwQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EFwkpNcHyN3UACRW207ysIYL nawMRO2xDvLOB7KnJlAFZEAaLt2vq85xFd8/A51jbNy7UemIX8RGG/0pnHbmh2KR 5/KClNM9ZGVm/NgystmxSiNaOqIMbv7Ro4bpXdQ2t86KBQ/edWdsRlkFzsl3e295 t9EX4HiH5uMdHuLrumJFf3XKi9G2zleFTrzof6n75Aek1ZlVAqZcNklsENYz7Hhx 3D2QMIaeIMNFgv7HlSQDDW+ndRMLkwQDJDoSOKFz0A5R6XxpnrPRthx0ewmiuZL7 YPWdYAudNC0RDQQgTWZ+7CJcQbc+WXUYSdtmlew5mNKP0+Qn5AKG3uH8tUeBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMO+fpD/YFmPb+6lXFs9HtzKZMK8wHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3MzA0YjgzLTMwYWEtNGJiZi05 ZmQ3LTJmY2VhZGJmMDAzMC8wLzMxMzAzMzJlMzEzMDMwMmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZK8wDQYJ KoZIhvcNAQELBQADggEBADWANQXo8eAKezieXhP96aVENeddwOtalRVstR4ZJ6Y/ YUtUTtm9WUohmYMjdU6I8hJMGPwXOdQ10KwxNrlQEPBVJhanyjIxVW/B8rURU18A 0GbK06raYruZivE2wJ/z60dVwQB1rWupsuGBTzV6VBPnUsW63PxbIicknuvYSCEw FgGEpJIe32N2MrXLSeM87miuewk2oBueoORL22cA1NKtJlatLl/kRZbtF7vCbXig S1OY9SBiu0O/CH8DDSQt2SEjlpzTu7tizVWYCowlcLXNF/qZMChpZ3lBsHxdniwm ILLv9eo9yccpOZMsHU6+pzz4uGYmqBEq+MCBN5IldaI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:50:51 2026 by rpki-client