$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa File: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (raw, json) Hash identifier: 90AGQSZUT827FAhfK6m2RL5WFH3krw0cgILny+yUoj8= Subject key identifier: 45:28:79:0B:44:1E:83:3F:6D:87:95:ED:07:C9:36:B7:7D:5B:16:65 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 1F14D4390C80AD609CBCB82EECAFBDAD37BDF597 Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa Signing time: Fri 03 Apr 2026 16:00:02 +0000 ROA not before: Fri 03 Apr 2026 15:55:02 +0000 ROA not after: Fri 02 Apr 2027 16:00:02 +0000 asID: 150960 IP address blocks: 103.122.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:14:d4:39:0c:80:ad:60:9c:bc:b8:2e:ec:af:bd:ad:37:bd:f5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Apr 3 15:55:02 2026 GMT Not After : Apr 2 16:00:02 2027 GMT Subject: CN=4528790B441E833F6D8795ED07C936B77D5B1665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:cb:c1:c7:1f:28:9e:d0:af:fb:04:1e:8a: 83:c6:4d:1d:2b:80:ed:61:ba:e3:92:c5:6d:64:da: a3:cf:76:a5:1d:9f:75:68:9c:6b:cf:6d:61:a6:46: c9:55:f9:cc:e6:f3:a7:19:72:84:18:02:c9:55:0c: b2:b6:9b:e9:3d:80:30:e8:35:8c:40:76:c3:31:28: 5d:2a:c3:1c:a5:c9:80:d3:38:4c:dd:5c:05:72:88: 73:a0:a5:21:c0:fb:a9:97:48:3a:3e:c4:1c:65:7c: 15:4c:5d:1c:e3:d3:dd:20:29:bb:7e:ef:34:4b:91: 86:0e:c7:42:8c:82:82:33:6b:d7:9f:f2:94:51:3c: bd:66:68:7f:7d:3c:2f:c1:df:8c:9e:a3:2d:9e:37: 23:aa:54:05:45:05:28:18:8d:0c:2e:1f:e5:77:68: b3:60:df:a6:d3:1d:9e:9b:88:a0:76:4c:71:b2:bd: c3:07:da:b3:ce:09:f1:17:fb:5d:b1:e1:80:9d:4f: 43:11:6d:d0:5d:a6:40:53:de:5d:86:c4:ab:77:96: 86:4a:4c:33:06:05:a3:aa:1c:1c:ab:54:cd:50:4f: bc:94:5d:c4:f4:27:63:ba:59:8b:06:27:0c:15:bf: e9:93:e1:0a:33:5e:85:93:e9:53:10:df:ba:4e:ad: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:28:79:0B:44:1E:83:3F:6D:87:95:ED:07:C9:36:B7:7D:5B:16:65 X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.212.0/23 Signature Algorithm: sha256WithRSAEncryption 76:24:53:5d:0c:6b:96:8c:83:b2:47:42:13:71:9f:ad:a6:e8: e1:64:8e:26:6b:4c:10:f2:bb:c1:66:c9:7d:31:b8:57:0e:61: 40:61:bb:37:3f:d1:75:79:9c:ec:8d:ca:f8:f1:84:e6:16:3e: 47:76:2c:9f:30:b3:26:50:b1:df:9d:8a:6a:1d:1a:47:3c:4a: 25:7e:4b:38:5a:13:45:08:9e:4c:cf:64:58:de:29:03:79:7e: 5a:cc:bb:ef:1e:e9:1e:b5:72:7f:b4:c3:62:ce:5a:7d:6f:2c: c8:8e:80:49:b0:52:58:dd:e7:4f:90:ca:64:d3:2b:af:8a:07: d0:d1:28:4e:1f:20:00:fb:14:ce:bf:44:01:75:eb:7d:d4:8a: 9b:9e:c9:05:32:d3:47:eb:81:b3:6a:34:7a:9c:1c:78:db:27: 92:2a:e2:78:22:ff:07:8b:de:5b:53:d4:78:05:d7:12:5f:b6: 15:be:ff:b3:d0:26:f2:09:20:b2:89:b8:db:e2:87:32:c6:c9: 4b:98:26:0a:77:0a:ee:8b:7f:63:91:13:5a:99:a0:4c:9f:f1: be:ae:c3:6c:92:2d:ed:a1:28:fa:a6:d5:82:bb:85:cf:ea:59: c3:bb:33:4f:e6:4c:4f:5e:d4:01:e5:60:03:f8:aa:4c:05:a1: aa:2c:37:96 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHxTUOQyArWCcvLgu7K+9rTe99ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNjA0MDMxNTU1MDJaFw0yNzA0MDIxNjAwMDJaMDMxMTAvBgNV BAMTKDQ1Mjg3OTBCNDQxRTgzM0Y2RDg3OTVFRDA3QzkzNkI3N0Q1QjE2NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3eMvBxx8ontCv+wQeioPGTR0r gO1huuOSxW1k2qPPdqUdn3VonGvPbWGmRslV+czm86cZcoQYAslVDLK2m+k9gDDo NYxAdsMxKF0qwxylyYDTOEzdXAVyiHOgpSHA+6mXSDo+xBxlfBVMXRzj090gKbt+ 7zRLkYYOx0KMgoIza9ef8pRRPL1maH99PC/B34yeoy2eNyOqVAVFBSgYjQwuH+V3 aLNg36bTHZ6biKB2THGyvcMH2rPOCfEX+12x4YCdT0MRbdBdpkBT3l2GxKt3loZK TDMGBaOqHByrVM1QT7yUXcT0J2O6WYsGJwwVv+mT4QozXoWT6VMQ37pOrbbrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURSh5C0Qegz9th5XtB8k2t31bFmUwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhYWJkZGJmLWQxMTktNGM4MC04 ODI3LTdhODg4YTkzY2UwMy8wLzMxMzAzMzJlMzEzMjMyMmUzMjMxMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM2MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnetQwDQYJ KoZIhvcNAQELBQADggEBAHYkU10Ma5aMg7JHQhNxn62m6OFkjiZrTBDyu8FmyX0x uFcOYUBhuzc/0XV5nOyNyvjxhOYWPkd2LJ8wsyZQsd+dimodGkc8SiV+SzhaE0UI nkzPZFjeKQN5flrMu+8e6R61cn+0w2LOWn1vLMiOgEmwUljd50+QymTTK6+KB9DR KE4fIAD7FM6/RAF1633UipueyQUy00frgbNqNHqcHHjbJ5Iq4ngi/weL3ltT1HgF 1xJfthW+/7PQJvIJILKJuNvihzLGyUuYJgp3Cu6Lf2ORE1qZoEyf8b6uw2ySLe2h KPqm1YK7hc/qWcO7M0/mTE9e1AHlYAP4qkwFoaosN5Y= -----END CERTIFICATE-----Generated at Sun Apr 19 11:45:01 2026 by rpki-client