$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa File: 3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa (raw, json) Hash identifier: L+cExX3/7uWr/hDyt2UkMn9zUU41LC6rMVWy+5SJhTc= Subject key identifier: 4B:B6:91:48:29:A8:6F:58:AB:A1:70:8B:CF:3C:E7:0E:1E:28:57:D0 Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 6D628C008AF398E3518E921F131D8ECD74F0A853 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa Signing time: Sun 01 Mar 2026 07:00:00 +0000 ROA not before: Sun 01 Mar 2026 06:55:00 +0000 ROA not after: Sun 28 Feb 2027 07:00:00 +0000 asID: 23951 IP address blocks: 103.101.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:62:8c:00:8a:f3:98:e3:51:8e:92:1f:13:1d:8e:cd:74:f0:a8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Mar 1 06:55:00 2026 GMT Not After : Feb 28 07:00:00 2027 GMT Subject: CN=4BB6914829A86F58ABA1708BCF3CE70E1E2857D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:cf:80:17:59:b3:c0:1d:7e:6d:cf:30:73: ea:e1:f3:2a:0f:e9:4c:1b:34:f3:fa:cc:26:9f:e2: 10:89:3d:d9:93:fc:25:d7:9e:87:dc:34:1f:a5:79: d3:7e:6d:91:01:c5:f5:fb:6c:88:74:2a:4e:60:a6: c7:d6:6b:90:07:33:b9:02:1e:44:40:e9:8c:22:b5: a2:c3:e6:66:d8:bb:1f:19:cf:3a:42:f1:11:44:61: 14:ea:33:4b:6f:17:49:bb:17:fa:bd:06:06:cb:ac: c9:da:2d:1c:dc:e6:16:98:7f:e4:d2:b8:60:c5:4d: f2:c7:c1:8f:b0:1d:38:b3:77:00:a0:e5:24:a9:ba: fd:25:92:e9:3e:53:dc:73:c0:9d:db:b3:1e:c9:a7: 31:c7:1a:14:98:19:9b:c0:8b:05:11:71:b7:b4:83: 09:bb:d6:53:03:08:45:a9:20:e4:bf:70:20:d1:81: 2b:ac:c5:ce:f1:77:b4:ee:0d:79:b6:02:30:ea:66: e4:1b:ee:1d:2b:22:47:45:8f:bf:4e:46:2c:12:eb: 4a:55:8f:ef:56:0b:c7:23:1f:95:fd:a1:35:06:57: 40:b0:ee:3b:0f:1d:ec:3b:56:92:1f:15:cc:1d:b6: cd:49:7d:8e:f5:cb:86:8f:95:59:47:b6:33:5b:25: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B6:91:48:29:A8:6F:58:AB:A1:70:8B:CF:3C:E7:0E:1E:28:57:D0 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32322d3232203d3e203233393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.136.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:5f:9c:fd:ac:d1:50:c7:bc:c9:28:3e:9e:ff:d7:3d:30:81: 40:9c:93:8d:c0:22:74:67:8f:69:58:7f:c8:3c:54:8e:99:b1: 0c:8d:5a:e1:04:ed:df:05:b2:de:3e:d4:a1:7f:e8:0e:08:8c: fa:37:44:29:5d:3e:dd:b2:01:d4:fe:18:c5:b6:10:10:95:06: 1d:ed:d5:ce:9d:09:13:69:63:bd:f8:eb:82:4c:91:8b:71:35: 23:83:6f:6f:83:5b:11:45:a4:8e:72:a8:00:64:93:ca:ec:6c: 65:3c:6e:da:cb:4f:b0:06:0e:5f:da:5a:9d:47:19:32:e7:0a: 6d:c1:e1:ec:31:6a:70:bc:74:30:74:29:42:62:8a:9f:b3:16: aa:6e:2d:81:dd:64:8b:74:ed:40:02:77:88:c8:72:3f:7d:62: 1f:ce:88:52:d6:8e:fe:38:df:00:48:fb:98:25:0c:56:19:73: 52:76:75:72:f6:73:40:a7:cf:89:f5:f9:3d:ee:35:6b:54:50: 56:7e:ce:c5:6a:42:35:f9:fe:58:8f:6f:c3:0b:bf:37:46:ff: 02:c3:06:b2:58:d5:50:a0:28:82:1a:bc:7e:d3:22:66:ca:d9: 4e:6b:c9:76:87:47:9c:89:13:9a:72:3f:0d:b8:14:13:b6:d4: 2e:18:6d:52 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbWKMAIrzmONRjpIfEx2OzXTwqFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNjAzMDEwNjU1MDBaFw0yNzAyMjgwNzAwMDBaMDMxMTAvBgNV BAMTKDRCQjY5MTQ4MjlBODZGNThBQkExNzA4QkNGM0NFNzBFMUUyODU3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57s+AF1mzwB1+bc8wc+rh8yoP 6UwbNPP6zCaf4hCJPdmT/CXXnofcNB+ledN+bZEBxfX7bIh0Kk5gpsfWa5AHM7kC HkRA6YwitaLD5mbYux8ZzzpC8RFEYRTqM0tvF0m7F/q9BgbLrMnaLRzc5haYf+TS uGDFTfLHwY+wHTizdwCg5SSpuv0lkuk+U9xzwJ3bsx7JpzHHGhSYGZvAiwURcbe0 gwm71lMDCEWpIOS/cCDRgSusxc7xd7TuDXm2AjDqZuQb7h0rIkdFj79ORiwS60pV j+9WC8cjH5X9oTUGV0Cw7jsPHew7VpIfFcwdts1JfY71y4aPlVlHtjNbJRQfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUS7aRSCmob1iroXCLzzznDh4oV9AwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i OTMwLTFhYjBiZjAyZGQ1ZC8wLzMxMzAzMzJlMzEzMDMxMmUzMTMzMzYyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMjMzMzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2WIMA0GCSqG SIb3DQEBCwUAA4IBAQBvX5z9rNFQx7zJKD6e/9c9MIFAnJONwCJ0Z49pWH/IPFSO mbEMjVrhBO3fBbLePtShf+gOCIz6N0QpXT7dsgHU/hjFthAQlQYd7dXOnQkTaWO9 +OuCTJGLcTUjg29vg1sRRaSOcqgAZJPK7GxlPG7ay0+wBg5f2lqdRxky5wptweHs MWpwvHQwdClCYoqfsxaqbi2B3WSLdO1AAneIyHI/fWIfzohS1o7+ON8ASPuYJQxW GXNSdnVy9nNAp8+J9fk97jVrVFBWfs7FakI1+f5Yj2/DC783Rv8CwwayWNVQoCiC Grx+0yJmytlOa8l2h0eciROacj8NuBQTttQuGG1S -----END CERTIFICATE-----Generated at Mon Mar 2 10:41:54 2026 by rpki-client