$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa File: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (raw, json) Hash identifier: BxXiGZiZ0RhEjv39QYMG93IThYVCN/N1iK7U2fft/Rc= Subject key identifier: 2E:90:C3:26:AD:6D:C7:11:83:82:EB:46:E6:68:A3:26:16:E5:25:9B Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 207534C9FB55CF5E5C28C78072A4BEA3CF0A55C2 Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa Signing time: Sat 21 Feb 2026 09:00:01 +0000 ROA not before: Sat 21 Feb 2026 08:55:01 +0000 ROA not after: Sat 20 Feb 2027 09:00:01 +0000 asID: 45718 IP address blocks: 103.31.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:75:34:c9:fb:55:cf:5e:5c:28:c7:80:72:a4:be:a3:cf:0a:55:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Feb 21 08:55:01 2026 GMT Not After : Feb 20 09:00:01 2027 GMT Subject: CN=2E90C326AD6DC7118382EB46E668A32616E5259B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:e1:5f:f9:2c:48:46:d3:f3:fa:aa:c6:a7: 81:93:fc:8a:a8:23:29:0f:f1:da:c5:f9:ee:48:23: 22:5c:6b:e9:05:89:77:17:7c:68:66:8d:ec:a1:15: 4e:7d:37:e9:fc:00:54:b5:56:64:e2:36:26:19:61: 3a:46:d7:d7:19:4c:4c:f0:ef:fb:1e:6d:52:0f:da: 78:58:b5:e0:45:af:f8:9e:17:8b:38:ea:e1:47:15: ab:47:01:5d:dc:92:64:c0:1b:be:c6:e9:dc:7b:fa: 18:a7:8e:a3:60:c8:60:54:ff:6b:99:1f:b5:cd:95: 41:ee:1f:73:24:93:33:9a:01:81:11:07:bf:9f:68: c0:fa:c2:ee:c3:85:e6:a4:4f:c2:f0:17:72:fc:b3: e3:24:ad:3a:d3:b7:6c:0e:19:aa:05:73:84:22:16: c2:1c:46:9b:cf:be:14:6e:96:97:20:b1:9e:f8:dd: 48:f4:13:6b:f2:54:ab:bb:70:94:9b:fa:f5:59:10: f0:cf:0b:64:20:18:00:38:a1:44:d5:09:2a:1d:76: ca:30:f0:b7:8a:4c:36:ca:d0:34:8c:72:17:b9:ef: 0e:5a:bd:79:03:7b:56:8f:3f:0a:24:1e:9c:86:9c: 1c:fe:d4:c7:c2:75:f6:e0:71:41:23:0a:44:24:b8: 2a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:90:C3:26:AD:6D:C7:11:83:82:EB:46:E6:68:A3:26:16:E5:25:9B X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.204.0/23 Signature Algorithm: sha256WithRSAEncryption ab:dd:cf:d4:e1:69:03:e2:26:e2:65:c1:48:13:dc:f7:16:d1: 41:74:57:24:7b:65:bf:8f:20:c2:66:07:6f:bd:36:09:d7:fe: 44:51:62:b7:05:58:5e:48:65:54:82:55:0c:bf:31:63:49:ba: 1a:15:8d:3e:19:a3:ea:d9:73:3f:3e:19:b3:be:5a:70:62:3a: 6b:00:c2:82:57:cb:94:3e:7a:52:07:61:41:b5:48:a2:ca:7d: 06:04:6f:9d:4b:53:00:15:a2:ca:2e:c8:5c:ca:2d:ef:d1:c0: be:12:7d:a9:46:36:b5:41:9c:42:41:c1:b7:81:1a:9c:cf:ed: 4f:91:93:17:58:03:78:4b:21:a2:dc:c4:94:f3:9a:78:bb:3a: 45:1b:2c:d8:99:93:da:81:d8:a8:2a:a2:12:48:53:ae:74:d9: 3f:da:9b:6f:8d:68:53:60:fa:3f:12:59:65:7e:c0:28:05:61: 48:dc:fe:bd:bd:8b:95:92:15:00:18:1b:d4:d3:5a:43:05:87: d9:83:5e:7c:c3:d5:ae:d1:28:24:a6:6c:02:1d:a8:1f:96:e7: fb:5f:0c:e5:f7:44:5c:18:ea:d7:5d:ff:21:23:f1:d5:7f:f3: 9f:76:af:e8:ad:f4:d0:f7:c8:86:f8:75:1b:15:49:79:3f:b7: 5d:e2:d0:cd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIHU0yftVz15cKMeAcqS+o88KVcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNjAyMjEwODU1MDFaFw0yNzAyMjAwOTAwMDFaMDMxMTAvBgNV BAMTKDJFOTBDMzI2QUQ2REM3MTE4MzgyRUI0NkU2NjhBMzI2MTZFNTI1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tuFf+SxIRtPz+qrGp4GT/Iqo IykP8drF+e5IIyJca+kFiXcXfGhmjeyhFU59N+n8AFS1VmTiNiYZYTpG19cZTEzw 7/sebVIP2nhYteBFr/ieF4s46uFHFatHAV3ckmTAG77G6dx7+hinjqNgyGBU/2uZ H7XNlUHuH3MkkzOaAYERB7+faMD6wu7DheakT8LwF3L8s+MkrTrTt2wOGaoFc4Qi FsIcRpvPvhRulpcgsZ743Uj0E2vyVKu7cJSb+vVZEPDPC2QgGAA4oUTVCSoddsow 8LeKTDbK0DSMche57w5avXkDe1aPPwokHpyGnBz+1MfCdfbgcUEjCkQkuCrnAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULpDDJq1txxGDgutG5mijJhblJZswHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h N2NhLTBiNWViODZiMDFjNi8wLzMxMzAzMzJlMzMzMTJlMzIzMDM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNTM3MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcfzDANBgkqhkiG 9w0BAQsFAAOCAQEAq93P1OFpA+Im4mXBSBPc9xbRQXRXJHtlv48gwmYHb702Cdf+ RFFitwVYXkhlVIJVDL8xY0m6GhWNPhmj6tlzPz4Zs75acGI6awDCglfLlD56Ugdh QbVIosp9BgRvnUtTABWiyi7IXMot79HAvhJ9qUY2tUGcQkHBt4EanM/tT5GTF1gD eEshotzElPOaeLs6RRss2JmT2oHYqCqiEkhTrnTZP9qbb41oU2D6PxJZZX7AKAVh SNz+vb2LlZIVABgb1NNaQwWH2YNefMPVrtEoJKZsAh2oH5bn+18M5fdEXBjq113/ ISPx1X/zn3av6K300PfIhvh1GxVJeT+3XeLQzQ== -----END CERTIFICATE-----Generated at Mon Mar 2 21:44:55 2026 by rpki-client