$ rpki-client -vvf repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa File: 3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa (raw, json) Hash identifier: 9Uz1YR0iTgOvm7UaD7Tg7g6FNpfb/PScm7M9Tqt3tUs= Subject key identifier: 09:CE:2B:4D:93:51:C7:10:27:8F:0B:80:DF:EE:21:65:08:05:7E:2F Certificate issuer: /CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Certificate serial: 7AEEE0195BB57181E88635BEEAF7A40ECFD1E4F6 Authority key identifier: 94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa Signing time: Sat 07 Feb 2026 01:48:14 +0000 ROA not before: Sat 07 Feb 2026 01:43:14 +0000 ROA not after: Sat 06 Feb 2027 01:48:14 +0000 asID: 151600 IP address blocks: 103.203.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ee:e0:19:5b:b5:71:81:e8:86:35:be:ea:f7:a4:0e:cf:d1:e4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Validity Not Before: Feb 7 01:43:14 2026 GMT Not After : Feb 6 01:48:14 2027 GMT Subject: CN=09CE2B4D9351C710278F0B80DFEE216508057E2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:34:a7:70:fc:37:17:42:04:4b:39:df:eb:20: 07:4c:d8:3d:a5:bb:5c:45:25:b8:ec:a5:09:71:22: 92:c2:65:fc:79:9b:3c:97:3b:8e:87:da:95:dd:ed: 8a:f5:5a:e8:57:7a:94:d7:fc:a2:60:ba:84:e1:b0: 88:47:08:ef:48:14:02:e6:df:76:d7:3f:b7:b5:52: fd:cc:39:27:bc:01:b5:c0:c6:61:f9:4d:1f:1c:bc: bd:af:91:8a:cb:e3:64:5c:b4:4c:fe:15:3c:8c:13: f1:96:b1:18:64:c8:4a:2e:6b:e8:4d:d9:37:70:e7: ba:14:1a:c3:76:24:aa:69:b7:a1:48:18:2e:79:fd: de:e3:42:69:4a:59:86:1a:f2:2e:b7:cc:55:bb:b9: 45:c1:27:d4:5e:c3:3d:f8:95:af:a1:d8:59:e8:7c: e4:71:f6:36:b8:45:e3:c6:84:e6:16:e1:71:be:d0: b4:e0:d7:a8:3c:60:bf:a0:ce:79:94:2e:ab:27:90: 0a:3c:50:d2:25:3b:c0:8e:95:dd:f1:5a:b0:e5:e7: 84:c1:65:fe:75:b5:ca:cd:e0:9d:a1:61:27:cd:8b: 9a:5e:7e:60:7b:6e:40:4a:52:1f:89:7a:2c:2b:88: 17:40:34:c0:d4:01:3a:20:e9:fb:b6:eb:80:49:fb: ed:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CE:2B:4D:93:51:C7:10:27:8F:0B:80:DF:EE:21:65:08:05:7E:2F X509v3 Authority Key Identifier: keyid:94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233322e302f32332d3233203d3e20313531363030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.203.232.0/23 Signature Algorithm: sha256WithRSAEncryption 08:a4:93:fa:01:28:16:d2:e4:bd:ce:a9:3b:71:c5:92:32:7b: bd:7d:ea:a9:ce:19:73:dc:66:09:b0:ec:44:c4:87:a9:11:0b: 5d:4f:51:dc:61:75:c2:59:f5:21:29:d3:25:d9:55:72:cb:d3: 80:e3:91:b4:cb:fa:60:ec:a4:ed:a6:17:94:aa:f6:22:57:c4: cb:9c:d3:30:47:2b:51:4e:6d:28:9b:3c:83:eb:a4:55:7b:7d: b9:7b:f1:95:19:52:6e:8a:e8:92:07:06:72:34:3d:f7:58:a8: c2:c3:2d:09:3d:84:cb:70:9b:10:b8:71:c6:43:a6:08:27:0a: a2:af:e6:13:d8:bb:3b:3e:78:46:39:f8:ec:50:40:dc:ba:51: de:03:05:98:ad:fa:96:11:0c:dc:a2:38:cc:8f:b5:60:40:68: 4f:a3:ac:e2:0b:55:42:8f:d8:62:85:d1:18:96:cf:14:19:12: 00:ad:76:48:73:ac:d9:0e:99:50:ef:59:20:f4:77:e4:fb:58: 58:64:fb:87:23:48:96:df:54:b2:62:91:59:33:3d:82:5f:5e: 3f:f7:d1:83:4a:57:8a:8d:75:aa:7b:17:aa:8a:4e:7a:f9:f5: a9:d2:69:7b:80:cf:59:d2:6c:3a:73:fa:b0:63:12:88:4e:7f: 9c:30:bc:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeu7gGVu1cYHohjW+6vekDs/R5PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEz M0YxMTA0RTAeFw0yNjAyMDcwMTQzMTRaFw0yNzAyMDYwMTQ4MTRaMDMxMTAvBgNV BAMTKDA5Q0UyQjREOTM1MUM3MTAyNzhGMEI4MERGRUUyMTY1MDgwNTdFMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNKdw/DcXQgRLOd/rIAdM2D2l u1xFJbjspQlxIpLCZfx5mzyXO46H2pXd7Yr1WuhXepTX/KJguoThsIhHCO9IFALm 33bXP7e1Uv3MOSe8AbXAxmH5TR8cvL2vkYrL42RctEz+FTyME/GWsRhkyEoua+hN 2Tdw57oUGsN2JKppt6FIGC55/d7jQmlKWYYa8i63zFW7uUXBJ9Rewz34la+h2Fno fORx9ja4RePGhOYW4XG+0LTg16g8YL+gznmULqsnkAo8UNIlO8COld3xWrDl54TB Zf51tcrN4J2hYSfNi5pefmB7bkBKUh+JeiwriBdANMDUATog6fu264BJ++0lAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUCc4rTZNRxxAnjwuA3+4hZQgFfi8wHwYDVR0j BBgwFoAUlDLTeCF6i+7jTZU6i//VqjPxEE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzY2MDdlYS1hZGQ3LTRjYTUtOGYyZC1kYThiNzkxYTNiNDIvMC85NDMyRDM3ODIx N0E4QkVFRTM0RDk1M0E4QkZGRDVBQTMzRjExMDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEzM0Yx MTA0RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3NjYwN2VhLWFkZDctNGNhNS04 ZjJkLWRhOGI3OTFhM2I0Mi8wLzMxMzAzMzJlMzIzMDMzMmUzMjMzMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzEzNjMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFny+gwDQYJ KoZIhvcNAQELBQADggEBAAikk/oBKBbS5L3OqTtxxZIye7196qnOGXPcZgmw7ETE h6kRC11PUdxhdcJZ9SEp0yXZVXLL04DjkbTL+mDspO2mF5Sq9iJXxMuc0zBHK1FO bSibPIPrpFV7fbl78ZUZUm6K6JIHBnI0PfdYqMLDLQk9hMtwmxC4ccZDpggnCqKv 5hPYuzs+eEY5+OxQQNy6Ud4DBZit+pYRDNyiOMyPtWBAaE+jrOILVUKP2GKF0RiW zxQZEgCtdkhzrNkOmVDvWSD0d+T7WFhk+4cjSJbfVLJikVkzPYJfXj/30YNKV4qN dap7F6qKTnr59anSaXuAz1nSbDpz+rBjEohOf5wwvBA= -----END CERTIFICATE-----Generated at Mon Mar 2 19:58:23 2026 by rpki-client