$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa File: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (raw, json) Hash identifier: KE1lMtasfHajvAT4hQBitWQJIMm3oss3cXTQ3t2jS64= Subject key identifier: 44:19:45:58:CF:4D:A1:E5:BD:41:9F:2E:33:00:E2:FE:09:37:7E:56 Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20 Certificate serial: 23F7E540E018C3811600013DA84EA2F5C1945312 Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa Signing time: Fri 13 Feb 2026 09:00:01 +0000 ROA not before: Fri 13 Feb 2026 08:55:01 +0000 ROA not after: Fri 12 Feb 2027 09:00:01 +0000 asID: 149742 IP address blocks: 103.189.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f7:e5:40:e0:18:c3:81:16:00:01:3d:a8:4e:a2:f5:c1:94:53:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A271B82B6185862B06F250499140113F6FE20 Validity Not Before: Feb 13 08:55:01 2026 GMT Not After : Feb 12 09:00:01 2027 GMT Subject: CN=44194558CF4DA1E5BD419F2E3300E2FE09377E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a6:0d:7a:4b:7e:4a:e6:b7:93:e8:90:bb:20: 61:27:f4:78:9e:31:3a:91:cf:42:18:79:bf:46:2f: 03:00:33:aa:7a:f3:59:04:20:ef:de:b5:3f:1c:8e: ef:d8:92:7f:d6:27:2c:c3:fc:8e:8c:11:f6:b5:77: 27:1c:23:86:45:7b:6c:79:10:e6:bf:32:6c:b1:ae: d5:05:86:4b:44:85:c5:6d:8f:90:4a:24:56:85:e6: 91:62:f9:e1:41:a0:08:7d:9b:22:35:68:68:25:2f: 0b:6b:2d:15:43:6e:8a:d7:41:80:c0:64:e7:99:08: 46:cd:bb:98:5f:dc:ff:ea:32:74:19:59:ab:01:b9: ef:e4:59:5b:a4:bc:e4:6a:df:4e:8e:b8:c4:1e:44: 43:52:cb:35:03:a9:0d:15:ff:2d:66:5f:6a:1d:02: ee:f0:d0:10:5a:16:07:73:64:48:62:7f:a7:88:ad: 0d:f4:32:13:42:3d:92:d5:15:d6:e3:4f:9d:2f:9f: 30:fb:cc:e1:fd:bc:42:47:68:ed:f0:4f:2a:65:bb: fc:95:31:43:80:a5:be:ed:19:11:0c:53:ea:83:79: c8:68:06:d7:bb:c5:7e:2b:a0:e7:f0:03:2b:22:32: c6:b6:9c:7f:70:e5:5f:34:1e:98:04:ae:a8:72:65: cb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:19:45:58:CF:4D:A1:E5:BD:41:9F:2E:33:00:E2:FE:09:37:7E:56 X509v3 Authority Key Identifier: keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.60.0/23 Signature Algorithm: sha256WithRSAEncryption 00:6d:0d:e6:bd:53:c7:b6:36:95:d3:f7:63:39:4c:8f:45:a3: 6b:b5:54:e1:ba:72:43:5c:37:4e:7c:9e:34:f7:a8:58:e5:29: 54:48:3b:09:3f:d6:c3:61:6d:c3:3b:b2:ed:b3:b8:eb:49:09: bc:9e:21:1f:25:c5:0a:62:ac:ba:2d:4c:77:8c:11:90:b4:e6: 2e:be:87:7c:d1:8f:90:26:91:11:74:fe:9c:63:f1:68:7b:f5: 46:b3:70:53:38:e1:b0:56:82:3a:84:22:49:fc:8b:f6:67:a0: f1:92:95:93:de:68:96:f2:6b:59:13:f5:39:c5:5b:37:81:a2: bb:2a:d2:5c:7e:55:27:78:a0:3c:1e:1b:b6:38:8b:ac:c9:99: 26:f6:05:46:33:f1:14:ab:d9:77:09:e0:ba:c4:35:c6:5f:e1: 1b:66:86:7e:02:63:85:e5:15:ad:27:11:06:4d:78:dd:6c:92: bf:3f:c9:7a:95:ed:35:4b:81:79:53:0e:3c:55:18:62:c6:0d: 60:c7:18:40:1a:8c:bc:fa:bf:0d:eb:af:1a:e8:b5:2b:df:c4: 49:0b:4b:73:b7:58:bb:6d:14:99:15:b8:c7:c4:a3:d8:88:e7: 12:e5:0b:ca:f8:8a:0d:1f:ac:1f:6c:3b:76:cb:1b:aa:6b:4c: c8:c6:69:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI/flQOAYw4EWAAE9qE6i9cGUUxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDEx M0Y2RkUyMDAeFw0yNjAyMTMwODU1MDFaFw0yNzAyMTIwOTAwMDFaMDMxMTAvBgNV BAMTKDQ0MTk0NTU4Q0Y0REExRTVCRDQxOUYyRTMzMDBFMkZFMDkzNzdFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pg16S35K5reT6JC7IGEn9Hie MTqRz0IYeb9GLwMAM6p681kEIO/etT8cju/Ykn/WJyzD/I6MEfa1dyccI4ZFe2x5 EOa/MmyxrtUFhktEhcVtj5BKJFaF5pFi+eFBoAh9myI1aGglLwtrLRVDborXQYDA ZOeZCEbNu5hf3P/qMnQZWasBue/kWVukvORq306OuMQeRENSyzUDqQ0V/y1mX2od Au7w0BBaFgdzZEhif6eIrQ30MhNCPZLVFdbjT50vnzD7zOH9vEJHaO3wTyplu/yV MUOApb7tGREMU+qDechoBte7xX4roOfwAysiMsa2nH9w5V80HpgErqhyZcttAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURBlFWM9NoeW9QZ8uMwDi/gk3flYwHwYDVR0j BBgwFoAUUoonG4K2GFhisG8lBJkUARP2/iAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMC81MjhBMjcxQjgy QjYxODU4NjJCMDZGMjUwNDk5MTQwMTEzRjZGRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDExM0Y2 RkUyMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhZDNjYzhhLTk3MzgtNDUxYi1h Nzk4LTdiNzZiMDk0MGI0Yi8wLzMxMzAzMzJlMzEzODM5MmUzNjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ708MA0GCSqG SIb3DQEBCwUAA4IBAQAAbQ3mvVPHtjaV0/djOUyPRaNrtVThunJDXDdOfJ4096hY 5SlUSDsJP9bDYW3DO7Lts7jrSQm8niEfJcUKYqy6LUx3jBGQtOYuvod80Y+QJpER dP6cY/Foe/VGs3BTOOGwVoI6hCJJ/Iv2Z6DxkpWT3miW8mtZE/U5xVs3gaK7KtJc flUneKA8Hhu2OIusyZkm9gVGM/EUq9l3CeC6xDXGX+EbZoZ+AmOF5RWtJxEGTXjd bJK/P8l6le01S4F5Uw48VRhixg1gxxhAGoy8+r8N668a6LUr38RJC0tzt1i7bRSZ FbjHxKPYiOcS5QvK+IoNH6wfbDt2yxuqa0zIxmlV -----END CERTIFICATE-----Generated at Mon Mar 2 18:29:32 2026 by rpki-client