$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa File: 3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa (raw, json) Hash identifier: L07oO7f3vw0DUvy59vVd0Qr/06ehYbsWyVpjAPoMAUI= Subject key identifier: 4E:BD:01:3B:32:AA:00:DB:E9:46:B5:F2:7C:96:50:92:AA:4C:73:57 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 0A1777374A5EFFF542A827F97005763696362E6F Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa Signing time: Mon 02 Feb 2026 11:00:01 +0000 ROA not before: Mon 02 Feb 2026 10:55:01 +0000 ROA not after: Mon 01 Feb 2027 11:00:01 +0000 asID: 141673 IP address blocks: 103.163.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:17:77:37:4a:5e:ff:f5:42:a8:27:f9:70:05:76:36:96:36:2e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Feb 2 10:55:01 2026 GMT Not After : Feb 1 11:00:01 2027 GMT Subject: CN=4EBD013B32AA00DBE946B5F27C965092AA4C7357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:d5:be:9b:8d:11:84:05:68:32:49:04:89: 72:be:09:d8:10:3d:59:46:c9:b5:7d:a7:a8:54:52: 4f:42:c5:eb:0a:6e:ee:3e:ba:22:66:33:ab:2f:4a: a0:30:93:cf:17:28:f7:63:2f:99:50:90:0a:a2:7f: 8c:c5:85:38:84:c5:46:57:39:2a:a5:12:ea:d2:2a: 6e:ad:a8:03:42:14:a4:73:20:a2:ab:46:02:0f:2a: 81:0f:d4:3f:d1:40:36:19:04:a0:b3:45:b2:0b:05: 7d:8d:d1:5b:c7:e2:f0:7d:3f:b9:76:d6:26:83:78: b8:6f:2e:b9:d3:5c:6e:ad:75:7b:63:8c:1e:f4:b1: 15:83:ea:db:49:4d:b0:ea:fe:6d:46:c5:8e:8d:5f: 27:1f:7a:34:9f:4a:39:37:8b:17:c8:1f:ec:8b:bc: 72:81:0d:78:d9:68:fd:12:47:c3:d0:f7:f7:8c:02: 98:0d:92:4e:91:d7:2e:fe:09:d5:1b:b4:6b:6c:cd: fb:13:e0:12:b3:d3:f9:2a:9c:8a:b2:f4:fc:d4:12: db:e0:08:14:a9:ee:aa:14:90:45:8a:27:f9:83:f4: 32:f0:83:d3:1f:05:ba:a7:08:ab:57:9c:ac:da:e7: 9a:05:95:15:b9:1f:53:22:b7:f0:23:eb:0f:fe:ad: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BD:01:3B:32:AA:00:DB:E9:46:B5:F2:7C:96:50:92:AA:4C:73:57 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32342d3234203d3e20313431363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.102.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d3:09:f7:d0:73:2e:63:ee:ce:87:a6:18:bb:51:fd:64:5d: 6f:88:bf:3e:ed:9a:cf:b4:26:56:36:ab:b8:64:36:58:ef:7d: 00:c7:12:8b:16:99:81:71:fb:f2:a6:53:2d:8a:e6:fc:1b:b1: dd:02:88:da:83:33:8a:51:b7:4b:1f:a5:28:7a:70:3e:86:d3: b7:54:48:75:a4:df:dc:92:3a:2c:d9:2b:40:67:35:34:f4:81: a9:b6:aa:fe:59:d7:f4:07:2d:27:c8:88:3a:e6:1b:ef:18:be: 27:f2:85:07:a3:5c:d8:d3:4a:53:a6:36:af:ad:68:12:00:aa: 89:75:f8:43:24:35:df:c7:a2:f2:55:09:a4:b5:cc:eb:56:2a: e4:27:9e:d2:37:6a:d0:b9:1d:9f:b1:6b:db:aa:66:0a:ab:4d: 4e:d0:96:11:1a:71:c2:d9:d1:09:06:e2:ae:fa:81:1d:24:63: 95:83:13:62:87:fb:20:fd:f6:8c:2e:ca:4c:88:5a:d1:25:05: 0a:79:66:1e:5a:de:42:15:fe:03:75:12:c8:a4:dd:b3:99:12: 4b:47:f8:fa:39:18:c5:ac:8c:c0:f0:eb:72:0b:c4:86:0e:63: 99:79:17:5c:d4:26:85:96:5b:5e:18:eb:1b:01:97:82:a3:f2: 39:ed:ba:bc -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUChd3N0pe//VCqCf5cAV2NpY2Lm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNjAyMDIxMDU1MDFaFw0yNzAyMDExMTAwMDFaMDMxMTAvBgNV BAMTKDRFQkQwMTNCMzJBQTAwREJFOTQ2QjVGMjdDOTY1MDkyQUE0QzczNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2dW+m40RhAVoMkkEiXK+CdgQ PVlGybV9p6hUUk9CxesKbu4+uiJmM6svSqAwk88XKPdjL5lQkAqif4zFhTiExUZX OSqlEurSKm6tqANCFKRzIKKrRgIPKoEP1D/RQDYZBKCzRbILBX2N0VvH4vB9P7l2 1iaDeLhvLrnTXG6tdXtjjB70sRWD6ttJTbDq/m1GxY6NXycfejSfSjk3ixfIH+yL vHKBDXjZaP0SR8PQ9/eMApgNkk6R1y7+CdUbtGtszfsT4BKz0/kqnIqy9PzUEtvg CBSp7qoUkEWKJ/mD9DLwg9MfBbqnCKtXnKza55oFlRW5H1Mit/Aj6w/+rXQnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTr0BOzKqANvpRrXyfJZQkqpMc1cwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMWU0OWFiLTUwY2EtNGIzZS04 MjNjLThiM2QzMWJhODVmMi8wLzMxMzAzMzJlMzEzNjMzMmUzMTMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABno2YwDQYJ KoZIhvcNAQELBQADggEBABDTCffQcy5j7s6Hphi7Uf1kXW+Ivz7tms+0JlY2q7hk NljvfQDHEosWmYFx+/KmUy2K5vwbsd0CiNqDM4pRt0sfpSh6cD6G07dUSHWk39yS OizZK0BnNTT0gam2qv5Z1/QHLSfIiDrmG+8YvifyhQejXNjTSlOmNq+taBIAqol1 +EMkNd/HovJVCaS1zOtWKuQnntI3atC5HZ+xa9uqZgqrTU7QlhEaccLZ0QkG4q76 gR0kY5WDE2KH+yD99owuykyIWtElBQp5Zh5a3kIV/gN1Esik3bOZEktH+Po5GMWs jMDw63ILxIYOY5l5F1zUJoWWW14Y6xsBl4Kj8jnturw= -----END CERTIFICATE-----Generated at Mon Mar 2 21:11:50 2026 by rpki-client