$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/3130332e342e3234302e302f32342d3234203d3e20313439363834.roa File: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (raw, json) Hash identifier: zDhU5/5RfI0V8ymqm/BDcf0iSN5UmSfxRPVbXBCBMFk= Subject key identifier: D0:E5:61:7B:FB:A0:FE:33:E7:A5:11:A9:0B:A2:38:6A:EC:55:2A:EE Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 34ACC5B75D043621AE4B696D5CB6A6FC33D915FC Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/3130332e342e3234302e302f32342d3234203d3e20313439363834.roa Signing time: Fri 20 Feb 2026 04:00:02 +0000 ROA not before: Fri 20 Feb 2026 03:55:02 +0000 ROA not after: Fri 19 Feb 2027 04:00:02 +0000 asID: 149684 IP address blocks: 103.4.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ac:c5:b7:5d:04:36:21:ae:4b:69:6d:5c:b6:a6:fc:33:d9:15:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Feb 20 03:55:02 2026 GMT Not After : Feb 19 04:00:02 2027 GMT Subject: CN=D0E5617BFBA0FE33E7A511A90BA2386AEC552AEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:c8:71:d3:21:8b:23:ed:2d:df:f5:d1:ed: c1:40:fe:d3:b7:10:85:32:4b:e5:46:46:0d:a8:a1: e8:25:19:b7:13:e2:04:35:c7:5a:6b:c3:b6:75:fa: da:9c:c2:4c:ec:6c:0f:11:f1:72:bd:02:09:83:fc: ad:a0:4e:72:65:69:7c:8c:46:fa:bf:5b:94:a4:f6: 5e:2c:87:48:73:59:05:04:dd:e0:c1:5f:b4:57:dd: 44:05:73:2c:ef:fa:64:bc:b8:5c:8d:31:a3:f5:b8: 52:a9:c0:3f:8f:14:88:b6:4e:a7:69:2d:6d:1a:b3: d8:4b:18:c5:7c:2d:49:dc:15:a5:f9:e2:01:1d:1c: 7f:15:76:3d:0e:38:0d:e5:36:38:af:09:f1:6d:d0: 4c:22:53:8f:46:b2:16:0e:eb:3c:ff:82:0d:09:bf: cf:b6:eb:06:74:d1:50:1a:e7:11:6b:ec:18:f6:98: 6e:20:0f:9d:d2:6f:52:88:59:16:c5:90:1b:60:a7: d3:4a:0b:88:71:e0:7c:7c:50:fa:d4:6c:0f:f7:d3: b5:5d:89:ce:8a:36:86:89:e6:cc:b3:61:fb:b8:5d: f4:a3:da:e0:7f:2f:a1:76:65:9e:2d:f4:9a:66:be: 27:e2:c7:a5:c2:f7:9b:96:f4:4a:38:eb:e4:e8:46: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E5:61:7B:FB:A0:FE:33:E7:A5:11:A9:0B:A2:38:6A:EC:55:2A:EE X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/3130332e342e3234302e302f32342d3234203d3e20313439363834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.240.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:e7:5b:23:2c:84:9c:f4:30:0a:19:cb:3d:d1:16:25:e3:6a: e4:b7:1a:4e:ee:ee:c7:ec:ce:11:c0:94:a7:a9:f8:e1:83:02: 6f:90:bb:91:fc:90:89:2a:28:35:b4:03:86:a7:31:af:31:a9: 74:82:5d:21:a7:09:9a:39:60:76:83:ee:ab:4b:a0:bd:47:60: 18:5f:bc:3f:21:23:08:7e:e7:86:2d:29:64:21:dd:16:9b:07: 8d:d8:de:b1:95:ca:fb:a8:28:6b:a5:34:75:ce:fe:b5:08:2d: 30:cd:98:17:6c:09:5c:c8:cc:47:28:b9:26:28:e2:6a:e6:c9: 9e:33:f6:0d:3a:f4:27:cc:28:99:43:3c:86:4e:80:40:9f:3d: 37:83:53:d6:6b:84:35:32:a3:94:52:04:2d:52:bb:2f:ff:87: c0:6e:34:d3:44:88:6a:86:7b:c1:cf:44:63:c0:f5:9c:5c:76: 08:ac:94:0c:bc:77:6a:dc:cf:48:fa:ea:d8:ad:d7:87:52:c8: bc:70:04:40:21:e5:e7:a2:8f:14:30:c6:4c:87:36:1b:46:04: d1:63:3f:f4:1d:fe:d2:86:51:e6:0f:c9:d5:b2:e7:de:55:bc: 98:ec:e6:bf:76:72:8f:b5:db:ed:ae:88:d2:ab:3d:87:af:e7: ee:57:11:9e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNKzFt10ENiGuS2ltXLam/DPZFfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNjAyMjAwMzU1MDJaFw0yNzAyMTkwNDAwMDJaMDMxMTAvBgNV BAMTKEQwRTU2MTdCRkJBMEZFMzNFN0E1MTFBOTBCQTIzODZBRUM1NTJBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ7Mhx0yGLI+0t3/XR7cFA/tO3 EIUyS+VGRg2ooeglGbcT4gQ1x1prw7Z1+tqcwkzsbA8R8XK9AgmD/K2gTnJlaXyM Rvq/W5Sk9l4sh0hzWQUE3eDBX7RX3UQFcyzv+mS8uFyNMaP1uFKpwD+PFIi2Tqdp LW0as9hLGMV8LUncFaX54gEdHH8Vdj0OOA3lNjivCfFt0EwiU49GshYO6zz/gg0J v8+26wZ00VAa5xFr7Bj2mG4gD53Sb1KIWRbFkBtgp9NKC4hx4Hx8UPrUbA/307Vd ic6KNoaJ5syzYfu4XfSj2uB/L6F2ZZ4t9Jpmvifix6XC95uW9Eo46+ToRrSfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU0OVhe/ug/jPnpRGpC6I4auxVKu4wHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZThkZDQwLWJiOTQtNGQ0My1i ODg5LThhMDk4ZDdmNDVhYy8wLzMxMzAzMzJlMzQyZTMyMzQzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM2MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcE8DANBgkqhkiG 9w0BAQsFAAOCAQEAC+dbIyyEnPQwChnLPdEWJeNq5LcaTu7ux+zOEcCUp6n44YMC b5C7kfyQiSooNbQDhqcxrzGpdIJdIacJmjlgdoPuq0ugvUdgGF+8PyEjCH7nhi0p ZCHdFpsHjdjesZXK+6goa6U0dc7+tQgtMM2YF2wJXMjMRyi5JijiaubJnjP2DTr0 J8womUM8hk6AQJ89N4NT1muENTKjlFIELVK7L/+HwG4000SIaoZ7wc9EY8D1nFx2 CKyUDLx3atzPSPrq2K3Xh1LIvHAEQCHl56KPFDDGTIc2G0YE0WM/9B3+0oZR5g/J 1bLn3lW8mOzmv3Zyj7Xb7a6I0qs9h6/n7lcRng== -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:00 2026 by rpki-client