$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa File: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (raw, json) Hash identifier: VZcBC6gX2myg5xy6lQMHKM6VO0IIX4K317HI8NlLsos= Subject key identifier: 72:C2:3B:3B:8D:05:79:71:7C:43:02:34:50:4B:99:03:4B:53:8D:C0 Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 20AFDC88F032B81CF2881E1FCE0822EC3635C7E1 Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa Signing time: Thu 02 Apr 2026 06:00:00 +0000 ROA not before: Thu 02 Apr 2026 05:55:00 +0000 ROA not after: Thu 01 Apr 2027 06:00:00 +0000 asID: 149897 IP address blocks: 103.187.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:af:dc:88:f0:32:b8:1c:f2:88:1e:1f:ce:08:22:ec:36:35:c7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Apr 2 05:55:00 2026 GMT Not After : Apr 1 06:00:00 2027 GMT Subject: CN=72C23B3B8D0579717C430234504B99034B538DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:46:92:7c:8c:3b:cc:6c:64:68:0b:8e:c6: 8d:fb:d6:ee:6e:62:cb:41:ad:08:90:27:f1:5b:54: 56:70:73:de:80:75:db:90:15:18:db:05:a5:8c:e7: 51:07:e3:e9:ac:ac:c2:82:58:44:a0:bf:84:c7:38: 66:39:91:44:34:89:9d:16:87:eb:8f:fd:c4:a9:87: f4:d5:22:b5:51:06:60:e3:c0:f6:f2:38:0a:84:5b: a7:39:e4:eb:74:5f:77:32:f8:33:e3:d6:d4:06:f2: 87:66:c8:0f:24:39:28:03:e3:33:76:e6:9a:73:29: 74:f5:56:87:36:2f:af:5a:ea:a6:9e:7d:41:04:4d: 36:7d:5c:f2:bc:26:4d:62:81:fc:e3:7c:db:60:95: dc:b5:a7:f1:82:74:7a:18:e3:74:04:07:12:69:91: 29:61:74:25:6d:fb:f3:1d:ff:b3:2c:05:fe:fb:77: 70:be:1f:95:40:f4:74:b3:3c:95:08:b7:57:4b:f5: 1b:d0:b3:60:21:cc:c9:e0:ac:a4:c1:76:0f:43:1f: 75:9d:7a:91:7b:d2:4e:5f:6a:6a:0d:ab:f8:5f:79: ce:c6:c9:17:e8:c8:5c:cc:7e:61:4e:59:e4:d9:59: ae:35:34:8f:e3:b4:ab:50:4a:11:5e:14:2e:73:21: 7b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C2:3B:3B:8D:05:79:71:7C:43:02:34:50:4B:99:03:4B:53:8D:C0 X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.165.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:d0:f3:c8:86:fc:aa:80:c9:66:2d:03:6e:f4:0c:98:cd:48: 58:e9:a5:55:03:48:b5:3c:7a:e2:6f:a6:9c:ac:da:8e:ae:99: 24:4d:18:0a:93:af:45:c2:00:2f:10:61:53:73:3a:35:d1:81: 89:ec:cb:d9:b2:2a:f0:2f:ac:f5:d4:a7:d0:67:f8:46:b0:81: 60:9d:3d:93:05:01:6e:9f:3c:4d:ce:90:73:92:a3:1a:c8:85: 9f:9e:ba:a8:86:0e:48:17:34:ed:bf:f9:c0:a1:f1:99:31:18: f9:5f:c4:f6:85:73:63:3e:d3:f2:db:35:10:b2:e1:ea:92:d7: e1:a9:1f:12:06:8e:49:d8:98:14:c7:f2:8b:e3:00:be:68:ab: 98:a4:ec:86:d0:9f:24:5e:58:8b:1c:75:89:d5:15:e0:91:3e: 58:4e:5c:36:64:3d:1e:11:f9:f7:4f:41:4b:c8:31:bf:5c:d8: 24:ee:87:e0:49:44:a9:90:43:1f:54:a3:50:d5:89:d7:80:17: 65:05:1a:46:bf:08:b5:6c:b8:e8:e0:96:4d:99:11:26:ab:c6: 91:df:40:24:66:04:36:de:44:35:1d:d4:e1:6a:33:64:f5:65: 3d:7b:ee:c9:b2:f0:b7:7b:6c:6f:d3:c5:12:7d:3c:c4:d3:7b: c9:0c:e8:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIK/ciPAyuBzyiB4fzggi7DY1x+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNjA0MDIwNTU1MDBaFw0yNzA0MDEwNjAwMDBaMDMxMTAvBgNV BAMTKDcyQzIzQjNCOEQwNTc5NzE3QzQzMDIzNDUwNEI5OTAzNEI1MzhEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbkaSfIw7zGxkaAuOxo371u5u YstBrQiQJ/FbVFZwc96AdduQFRjbBaWM51EH4+msrMKCWESgv4THOGY5kUQ0iZ0W h+uP/cSph/TVIrVRBmDjwPbyOAqEW6c55Ot0X3cy+DPj1tQG8odmyA8kOSgD4zN2 5ppzKXT1Voc2L69a6qaefUEETTZ9XPK8Jk1igfzjfNtgldy1p/GCdHoY43QEBxJp kSlhdCVt+/Md/7MsBf77d3C+H5VA9HSzPJUIt1dL9RvQs2AhzMngrKTBdg9DH3Wd epF70k5famoNq/hfec7GyRfoyFzMfmFOWeTZWa41NI/jtKtQShFeFC5zIXsPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUcsI7O40FeXF8QwI0UEuZA0tTjcAwHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxNGJiNGM4LTZmY2YtNGZmZi1i ZGNjLWZlMWZjY2VlMTA0NS8wLzMxMzAzMzJlMzEzODM3MmUzMTM2MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM5Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnu6UwDQYJ KoZIhvcNAQELBQADggEBAE3Q88iG/KqAyWYtA270DJjNSFjppVUDSLU8euJvppys 2o6umSRNGAqTr0XCAC8QYVNzOjXRgYnsy9myKvAvrPXUp9Bn+EawgWCdPZMFAW6f PE3OkHOSoxrIhZ+euqiGDkgXNO2/+cCh8ZkxGPlfxPaFc2M+0/LbNRCy4eqS1+Gp HxIGjknYmBTH8ovjAL5oq5ik7IbQnyReWIscdYnVFeCRPlhOXDZkPR4R+fdPQUvI Mb9c2CTuh+BJRKmQQx9Uo1DVideAF2UFGka/CLVsuOjglk2ZESarxpHfQCRmBDbe RDUd1OFqM2T1ZT177smy8Ld7bG/TxRJ9PMTTe8kM6BA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:13 2026 by rpki-client