$ rpki-client -vvf repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa File: 3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa (raw, json) Hash identifier: vIdWvMmfluMelQHkhyfoZHyeqo8LPRhVZA8PTloxyKI= Subject key identifier: F4:B4:5B:0B:D5:2E:C5:1B:6D:CA:23:AB:08:3D:CA:C1:88:2A:D6:35 Certificate issuer: /CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Certificate serial: 6BDBFEC7A230C623BDAFF3F5A3E5BF567FECA9F2 Authority key identifier: 94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa Signing time: Sat 07 Feb 2026 01:48:00 +0000 ROA not before: Sat 07 Feb 2026 01:43:00 +0000 ROA not after: Sat 06 Feb 2027 01:48:00 +0000 asID: 151600 IP address blocks: 103.203.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:db:fe:c7:a2:30:c6:23:bd:af:f3:f5:a3:e5:bf:56:7f:ec:a9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Validity Not Before: Feb 7 01:43:00 2026 GMT Not After : Feb 6 01:48:00 2027 GMT Subject: CN=F4B45B0BD52EC51B6DCA23AB083DCAC1882AD635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:af:85:0f:55:c4:d6:0c:1f:65:3d:96:05:57: e8:42:ad:a3:13:53:10:05:60:24:0b:ed:63:b1:3d: b4:1a:af:c3:3a:10:b5:59:34:9a:54:1b:5f:2c:d7: d6:03:6f:59:48:49:ad:e3:27:37:f6:77:38:6c:50: bb:c0:ee:22:ec:ac:63:a5:10:d9:4d:27:8c:2f:01: 3f:dc:4d:bb:05:64:7f:81:42:4b:8f:bb:14:f8:11: 25:95:c5:db:f7:be:34:f8:ea:ab:dd:cc:73:41:4a: 1c:4f:1e:ef:94:91:d9:1a:35:75:ef:0a:96:97:cf: a8:a9:2f:f7:fa:9a:74:67:81:19:ee:52:77:8d:92: e3:a6:e1:ec:44:91:39:12:9b:eb:fb:68:93:43:ec: 1a:25:38:68:0c:ab:22:df:43:78:8c:9d:08:01:e8: ab:8d:96:7a:fb:bb:a7:6d:c0:b0:9b:da:7d:5b:18: bb:75:09:fc:c6:a3:5a:46:0d:34:ba:4e:c4:03:04: 16:71:66:46:fe:aa:6f:f2:2e:16:65:ea:f5:8f:88: 62:86:cc:8f:1b:e6:42:90:55:61:50:ed:94:f0:36: 5c:5b:06:08:3f:e5:b5:7a:a0:de:be:e6:e3:bd:cc: e5:21:2c:4c:0b:28:9e:dc:18:be:74:c4:99:6f:c3: 8c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B4:5B:0B:D5:2E:C5:1B:6D:CA:23:AB:08:3D:CA:C1:88:2A:D6:35 X509v3 Authority Key Identifier: keyid:94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/3130332e3230332e3233332e302f32342d3234203d3e20313531363030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.203.233.0/24 Signature Algorithm: sha256WithRSAEncryption 56:3e:c8:83:6e:22:51:fe:d2:dd:8c:ee:a2:0a:48:80:4b:d2: e9:20:12:f5:3d:46:ea:46:4d:03:f8:16:ac:ea:80:2e:4e:6b: 47:55:9e:f7:c4:fd:59:08:a0:4a:ef:31:ac:0f:da:df:b0:7e: 4e:44:29:d5:48:4b:4c:4e:a4:bd:4e:ea:54:5d:ff:b1:ef:e6: a5:0f:7c:0d:b0:97:a4:0d:4a:0d:df:43:7b:ee:e2:c9:0b:91: 83:d6:45:81:12:fb:8e:e5:08:e0:0a:20:c5:b4:00:5f:a7:69: 77:39:13:72:54:96:04:b8:2d:a7:9b:49:79:68:50:20:78:0f: 3c:e4:ec:1e:ad:c0:b4:0d:21:8d:f9:a5:c8:d8:01:86:b8:34: 0f:33:c2:b7:7b:86:49:1d:58:ee:66:87:92:5d:2e:6a:6a:a6: a3:4e:4b:5f:85:3f:c7:56:77:d4:f5:c4:bd:9e:2d:b9:d4:60: 0e:b3:8f:89:95:64:59:82:1d:54:47:0c:87:3a:c7:4c:c2:46: a9:95:85:cd:d1:de:27:a2:00:c7:b1:ea:e3:bb:6c:7f:48:61: a8:5b:74:dc:6f:74:f1:d7:b2:d4:6e:68:1f:2c:09:84:4e:c2: 6a:82:8a:09:34:d6:f7:b9:f4:4b:f0:81:16:a2:51:df:4e:34: 7d:64:35:40 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUa9v+x6IwxiO9r/P1o+W/Vn/sqfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEz M0YxMTA0RTAeFw0yNjAyMDcwMTQzMDBaFw0yNzAyMDYwMTQ4MDBaMDMxMTAvBgNV BAMTKEY0QjQ1QjBCRDUyRUM1MUI2RENBMjNBQjA4M0RDQUMxODgyQUQ2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYr4UPVcTWDB9lPZYFV+hCraMT UxAFYCQL7WOxPbQar8M6ELVZNJpUG18s19YDb1lISa3jJzf2dzhsULvA7iLsrGOl ENlNJ4wvAT/cTbsFZH+BQkuPuxT4ESWVxdv3vjT46qvdzHNBShxPHu+UkdkaNXXv CpaXz6ipL/f6mnRngRnuUneNkuOm4exEkTkSm+v7aJND7BolOGgMqyLfQ3iMnQgB 6KuNlnr7u6dtwLCb2n1bGLt1CfzGo1pGDTS6TsQDBBZxZkb+qm/yLhZl6vWPiGKG zI8b5kKQVWFQ7ZTwNlxbBgg/5bV6oN6+5uO9zOUhLEwLKJ7cGL50xJlvw4wpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU9LRbC9UuxRttyiOrCD3KwYgq1jUwHwYDVR0j BBgwFoAUlDLTeCF6i+7jTZU6i//VqjPxEE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzY2MDdlYS1hZGQ3LTRjYTUtOGYyZC1kYThiNzkxYTNiNDIvMC85NDMyRDM3ODIx N0E4QkVFRTM0RDk1M0E4QkZGRDVBQTMzRjExMDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQzMkQzNzgyMTdBOEJFRUUzNEQ5NTNBOEJGRkQ1QUEzM0Yx MTA0RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3NjYwN2VhLWFkZDctNGNhNS04 ZjJkLWRhOGI3OTFhM2I0Mi8wLzMxMzAzMzJlMzIzMDMzMmUzMjMzMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNjMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABny+kwDQYJ KoZIhvcNAQELBQADggEBAFY+yINuIlH+0t2M7qIKSIBL0ukgEvU9RupGTQP4Fqzq gC5Oa0dVnvfE/VkIoErvMawP2t+wfk5EKdVIS0xOpL1O6lRd/7Hv5qUPfA2wl6QN Sg3fQ3vu4skLkYPWRYES+47lCOAKIMW0AF+naXc5E3JUlgS4LaebSXloUCB4Dzzk 7B6twLQNIY35pcjYAYa4NA8zwrd7hkkdWO5mh5JdLmpqpqNOS1+FP8dWd9T1xL2e LbnUYA6zj4mVZFmCHVRHDIc6x0zCRqmVhc3R3ieiAMex6uO7bH9IYahbdNxvdPHX stRuaB8sCYROwmqCigk01ve59EvwgRaiUd9ONH1kNUA= -----END CERTIFICATE-----Generated at Mon Mar 2 16:39:46 2026 by rpki-client