$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa File: 3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa (raw, json) Hash identifier: n0aih7S4luHlGXFV6eu6HhEFge7cXVphHuUCbH02eHg= Subject key identifier: E4:A7:09:E3:C6:CC:3D:22:16:39:3E:9A:5A:5A:D8:83:8B:31:DA:FA Certificate issuer: /CN=74D4F2785CA261D018C909BA622D8244292BCB3E Certificate serial: 598B696501A7764D98CE02D5299F4236FE7D8A1D Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa Signing time: Wed 08 Apr 2026 12:00:03 +0000 ROA not before: Wed 08 Apr 2026 11:55:03 +0000 ROA not after: Wed 07 Apr 2027 12:00:03 +0000 asID: 136861 IP address blocks: 103.103.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 22:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:8b:69:65:01:a7:76:4d:98:ce:02:d5:29:9f:42:36:fe:7d:8a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E Validity Not Before: Apr 8 11:55:03 2026 GMT Not After : Apr 7 12:00:03 2027 GMT Subject: CN=E4A709E3C6CC3D2216393E9A5A5AD8838B31DAFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2d:d9:ae:a1:a1:9a:bc:ff:07:6d:15:04:8f: 32:e5:04:5d:a8:7b:90:a3:ab:29:3d:af:61:d6:0b: 91:1e:b0:0a:82:7b:59:58:0f:ea:82:ae:ea:b6:f5: 48:be:8a:4a:76:6c:79:cb:99:95:de:b0:33:04:cf: e4:85:14:c0:60:d6:a6:6e:07:7a:37:90:8c:16:6a: e1:fe:ee:b4:18:97:94:90:d5:74:09:54:c7:f8:2a: 8a:2f:b6:df:24:a1:65:f4:7f:9b:2d:ec:ea:89:3b: 55:cd:38:c0:f3:7a:d6:53:e6:8f:55:da:ca:71:74: bf:14:ae:b7:33:17:a9:9a:27:9e:a8:6b:ad:ba:1b: f3:d1:fb:f4:6a:a0:cb:32:44:d3:f8:7a:e6:7d:a2: c8:27:2f:9b:fc:78:0c:21:94:17:31:f5:09:c7:5c: 78:41:d5:1d:ff:e1:7a:47:a3:fb:c8:59:10:11:38: 3c:8d:ce:ef:1b:19:58:11:32:a7:0c:c9:d4:fd:e0: d5:0b:7d:5a:ac:f0:90:61:8d:78:b3:54:b0:3a:c2: 4d:74:4a:63:b0:28:4e:ac:f7:e1:85:c0:82:2d:c2: a7:9c:f0:c9:5c:ab:1f:e9:e0:b4:f1:a8:a0:51:7c: 2c:2f:bc:93:04:28:d3:52:c4:c7:42:7e:72:29:f2: 56:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:09:E3:C6:CC:3D:22:16:39:3E:9A:5A:5A:D8:83:8B:31:DA:FA X509v3 Authority Key Identifier: keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134352e302f32342d3234203d3e20313336383631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.145.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:57:a1:9b:48:f2:8c:17:c0:b9:0c:b7:6c:2d:08:46:a0:b6: f3:13:62:56:ce:f8:74:42:aa:5b:50:92:bf:97:e9:fc:e9:eb: df:b0:53:1b:12:20:e1:8a:87:04:ba:0e:06:f8:8b:35:dc:e7: 07:42:db:79:77:b7:d0:3d:c9:bd:b3:14:02:aa:c4:ed:72:76: 1f:d0:47:d4:db:8a:e8:2e:80:71:42:b0:66:2c:ab:fc:31:7b: 2c:33:15:32:f9:d7:5f:b4:21:fc:81:76:bb:be:b7:bd:76:6b: 31:86:f5:f5:f6:87:71:de:7a:92:13:14:41:da:d2:ad:e4:46: af:28:de:06:ad:87:38:3a:0a:c6:eb:4b:eb:3b:79:5c:dd:f3: 83:f4:5f:69:fc:47:28:c2:cc:77:b9:3d:fa:fb:42:9c:f5:18: d2:74:63:54:69:20:96:45:7e:6e:15:44:43:f4:19:3b:19:63: d7:f8:bc:86:44:21:65:38:66:71:8e:48:68:1c:83:d8:4f:7b: 31:08:8b:fb:6e:e6:4a:32:a0:35:a9:a4:ba:b4:af:51:46:da: c4:e2:3e:57:79:7f:b4:96:66:c5:9f:f1:48:40:4d:50:2b:1c: c6:89:1b:d6:b8:d6:19:32:ee:7a:a4:f2:74:be:4c:45:1a:29: 7a:40:88:ad -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWYtpZQGndk2YzgLVKZ9CNv59ih0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQy OTJCQ0IzRTAeFw0yNjA0MDgxMTU1MDNaFw0yNzA0MDcxMjAwMDNaMDMxMTAvBgNV BAMTKEU0QTcwOUUzQzZDQzNEMjIxNjM5M0U5QTVBNUFEODgzOEIzMURBRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLdmuoaGavP8HbRUEjzLlBF2o e5Cjqyk9r2HWC5EesAqCe1lYD+qCruq29Ui+ikp2bHnLmZXesDMEz+SFFMBg1qZu B3o3kIwWauH+7rQYl5SQ1XQJVMf4Koovtt8koWX0f5st7OqJO1XNOMDzetZT5o9V 2spxdL8UrrczF6maJ56oa626G/PR+/RqoMsyRNP4euZ9osgnL5v8eAwhlBcx9QnH XHhB1R3/4XpHo/vIWRARODyNzu8bGVgRMqcMydT94NULfVqs8JBhjXizVLA6wk10 SmOwKE6s9+GFwIItwqec8Mlcqx/p4LTxqKBRfCwvvJMEKNNSxMdCfnIp8lb5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5KcJ48bMPSIWOT6aWlrYg4sx2vowHwYDVR0j BBgwFoAUdNTyeFyiYdAYyQm6Yi2CRCkryz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmVhNzdiNS04OGY3LTQwODUtYjMzMS05NzUwMjRjZDA0NmQvMC83NEQ0RjI3ODVD QTI2MUQwMThDOTA5QkE2MjJEODI0NDI5MkJDQjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzRENEYyNzg1Q0EyNjFEMDE4QzkwOUJBNjIyRDgyNDQyOTJC Q0IzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyZWE3N2I1LTg4ZjctNDA4NS1i MzMxLTk3NTAyNGNkMDQ2ZC8wLzMxMzAzMzJlMzEzMDMzMmUzMTM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ5EwDQYJ KoZIhvcNAQELBQADggEBAEpXoZtI8owXwLkMt2wtCEagtvMTYlbO+HRCqltQkr+X 6fzp69+wUxsSIOGKhwS6Dgb4izXc5wdC23l3t9A9yb2zFAKqxO1ydh/QR9Tbiugu gHFCsGYsq/wxeywzFTL511+0IfyBdru+t712azGG9fX2h3HeepITFEHa0q3kRq8o 3gathzg6CsbrS+s7eVzd84P0X2n8RyjCzHe5Pfr7Qpz1GNJ0Y1RpIJZFfm4VREP0 GTsZY9f4vIZEIWU4ZnGOSGgcg9hPezEIi/tu5koyoDWppLq0r1FG2sTiPld5f7SW ZsWf8UhATVArHMaJG9a41hky7nqk8nS+TEUaKXpAiK0= -----END CERTIFICATE-----Generated at Sun Apr 19 11:54:58 2026 by rpki-client