$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa File: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (raw, json) Hash identifier: 5dmBKfeza3gGUh/V2sAdhjNmfeP3Q+riH0GOcBizRKA= Subject key identifier: 5F:F9:18:5F:18:82:7B:21:AF:C8:E4:EA:2C:87:16:DA:19:45:68:50 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 62969A2969D73846234923B412A90E50E3CFE239 Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa Signing time: Sun 29 Mar 2026 22:00:03 +0000 ROA not before: Sun 29 Mar 2026 21:55:03 +0000 ROA not after: Sun 28 Mar 2027 22:00:03 +0000 asID: 140482 IP address blocks: 103.152.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:96:9a:29:69:d7:38:46:23:49:23:b4:12:a9:0e:50:e3:cf:e2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Mar 29 21:55:03 2026 GMT Not After : Mar 28 22:00:03 2027 GMT Subject: CN=5FF9185F18827B21AFC8E4EA2C8716DA19456850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c7:56:2c:e3:32:b5:f9:4c:3a:08:cf:47:d9: 36:77:0d:06:db:86:a1:95:2f:1b:df:c3:e3:5f:33: 0b:24:73:3e:24:93:33:5c:a9:03:a5:5a:4a:a9:ac: cf:87:75:16:3e:c2:53:12:1b:7d:ca:23:f1:e6:84: 53:61:93:6f:bf:0b:e4:95:61:70:4e:4a:18:ce:d2: c6:2f:c0:12:cb:a3:71:b9:ef:b0:ed:ca:e2:f2:74: e3:03:83:6f:0d:44:be:12:27:c6:e9:f8:06:e3:f6: c8:39:8f:15:99:d3:96:bd:a1:da:1d:86:fc:98:a4: c1:2a:f5:a1:0c:09:96:70:06:33:ea:c7:fb:6e:78: 41:de:24:0a:5a:f0:42:fd:72:53:ca:1d:69:02:06: ca:72:d9:04:8d:42:c0:18:31:31:b4:34:0c:8d:66: 1d:7c:8c:7c:68:ef:eb:52:a6:31:12:12:b7:92:b5: 19:1c:23:cb:82:c2:e7:35:54:42:91:ae:87:c0:3c: 38:b2:cf:68:1d:56:c5:7f:3d:56:52:fe:ce:1f:de: 30:21:bf:bd:9f:cd:72:60:86:83:06:7c:d4:bb:32: 77:35:e5:fd:b0:d5:7a:65:50:04:a3:34:4a:0f:4c: aa:b2:cf:db:7c:07:2e:0c:97:9f:85:3f:31:c2:6d: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F9:18:5F:18:82:7B:21:AF:C8:E4:EA:2C:87:16:DA:19:45:68:50 X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.140.0/23 Signature Algorithm: sha256WithRSAEncryption 95:ec:0a:8c:08:56:10:16:7e:b2:fd:c9:cd:b4:cf:13:9d:e2: 0c:09:54:7b:20:34:20:05:bf:46:93:19:e3:aa:27:d9:f8:fc: 53:41:95:e3:fc:6c:72:a3:26:b8:db:70:d5:37:85:a6:6f:81: 97:f5:b8:b6:09:ba:d0:70:3d:9b:a7:4d:c8:52:9e:2d:34:4f: c5:2f:88:c2:3f:b2:87:6c:a3:fe:18:51:7c:6a:67:e9:b9:ef: 30:6a:3b:dc:fc:d8:9e:84:db:72:9a:32:70:1f:50:36:2b:b5: 4a:20:2f:32:1f:c4:99:e9:f3:d1:24:f4:cd:6a:b0:cc:f6:4f: 54:a3:53:53:38:db:73:d1:14:82:9c:19:04:2a:01:ad:ef:26: 4b:24:3a:b5:23:35:50:56:44:c2:25:7e:33:9d:6c:b4:fc:18: d7:53:3b:74:60:b0:31:78:e4:21:f3:58:58:40:e5:c4:65:83: 51:7b:78:4e:3e:d1:03:2f:56:f1:d9:41:35:1d:70:76:2b:2c: 78:2e:bc:9d:d0:3a:64:cf:9d:2e:d2:b8:25:fa:a6:7a:89:43: 61:2b:ac:b1:0f:36:c2:46:a2:1f:8b:bc:68:fb:e3:67:ff:0a: 39:2e:f5:7e:9d:24:ea:8e:0c:95:20:ed:d0:de:38:2a:55:be: 97:0a:57:3e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYpaaKWnXOEYjSSO0EqkOUOPP4jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNjAzMjkyMTU1MDNaFw0yNzAzMjgyMjAwMDNaMDMxMTAvBgNV BAMTKDVGRjkxODVGMTg4MjdCMjFBRkM4RTRFQTJDODcxNkRBMTk0NTY4NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsx1Ys4zK1+Uw6CM9H2TZ3DQbb hqGVLxvfw+NfMwskcz4kkzNcqQOlWkqprM+HdRY+wlMSG33KI/HmhFNhk2+/C+SV YXBOShjO0sYvwBLLo3G577DtyuLydOMDg28NRL4SJ8bp+Abj9sg5jxWZ05a9odod hvyYpMEq9aEMCZZwBjPqx/tueEHeJApa8EL9clPKHWkCBspy2QSNQsAYMTG0NAyN Zh18jHxo7+tSpjESEreStRkcI8uCwuc1VEKRrofAPDiyz2gdVsV/PVZS/s4f3jAh v72fzXJghoMGfNS7Mnc15f2w1XplUASjNEoPTKqyz9t8By4Ml5+FPzHCbXSRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUX/kYXxiCeyGvyOTqLIcW2hlFaFAwHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlNmZmMzhkLWU1NDctNGY3My1i YjMwLTJiMTRjMDhjODlmYi8wLzMxMzAzMzJlMzEzNTMyMmUzMTM0MzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM4MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmIwwDQYJ KoZIhvcNAQELBQADggEBAJXsCowIVhAWfrL9yc20zxOd4gwJVHsgNCAFv0aTGeOq J9n4/FNBleP8bHKjJrjbcNU3haZvgZf1uLYJutBwPZunTchSni00T8UviMI/sods o/4YUXxqZ+m57zBqO9z82J6E23KaMnAfUDYrtUogLzIfxJnp89Ek9M1qsMz2T1Sj U1M423PRFIKcGQQqAa3vJkskOrUjNVBWRMIlfjOdbLT8GNdTO3RgsDF45CHzWFhA 5cRlg1F7eE4+0QMvVvHZQTUdcHYrLHguvJ3QOmTPnS7SuCX6pnqJQ2ErrLEPNsJG oh+LvGj742f/Cjku9X6dJOqODJUg7dDeOCpVvpcKVz4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:43:14 2026 by rpki-client