$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa File: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (raw, json) Hash identifier: Ln71RPP7llFU+OlGN86Ee5xV7nvZwzcjYpvm2f0lcIQ= Subject key identifier: 83:FB:B2:EE:E0:76:5F:18:75:99:D5:F0:8E:0B:D1:93:87:82:2E:1F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 3F372D44FAD6FA308D1094BFFC443B006AA6A629 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa Signing time: Thu 05 Feb 2026 09:02:04 +0000 ROA not before: Thu 05 Feb 2026 08:57:04 +0000 ROA not after: Thu 04 Feb 2027 09:02:04 +0000 asID: 131773 IP address blocks: 103.134.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:37:2d:44:fa:d6:fa:30:8d:10:94:bf:fc:44:3b:00:6a:a6:a6:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Feb 5 08:57:04 2026 GMT Not After : Feb 4 09:02:04 2027 GMT Subject: CN=83FBB2EEE0765F187599D5F08E0BD19387822E1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:49:9c:6e:07:80:8d:15:11:22:3b:05:0a: d2:01:2f:cb:54:2c:95:85:d4:d9:80:bf:3b:d9:2c: 1f:b8:11:a6:56:4b:22:6e:7d:fa:9a:92:05:14:bd: bb:dc:ce:ee:2f:12:67:25:01:2a:7b:3f:12:c3:03: 58:b3:d7:20:78:ad:17:9a:4a:1e:f7:65:1a:a3:17: 77:ab:da:26:0f:5e:98:99:e7:f4:94:e9:68:4a:55: aa:c7:18:d9:5c:43:3c:3e:29:b5:b1:6c:88:04:a1: e9:ed:fb:8e:82:17:36:a1:6e:22:3f:f1:c2:21:c4: 80:96:01:34:cf:13:96:c2:9c:65:16:e4:d4:75:8f: 6d:0f:07:d5:04:5a:15:9d:2d:24:97:87:68:79:1f: 74:01:29:aa:99:72:f7:95:38:92:41:66:f1:dc:c1: 23:77:fd:50:5b:0a:74:c7:88:58:ef:73:9a:f7:f3: 9e:84:55:c1:d9:12:e7:39:bf:22:b9:9a:ba:88:6e: 20:49:f3:14:27:ab:70:24:81:90:5d:6a:0c:7d:62: bc:40:0f:bc:43:ca:cb:19:d5:10:fa:30:f8:a5:af: c8:f5:13:ac:ba:9c:0a:15:bb:e3:7a:31:16:7d:e4: 2a:72:ca:0b:18:13:e9:98:f2:37:29:fa:ce:0a:98: 4f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FB:B2:EE:E0:76:5F:18:75:99:D5:F0:8E:0B:D1:93:87:82:2E:1F X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.245.0/24 Signature Algorithm: sha256WithRSAEncryption d8:69:b4:13:cb:57:52:ba:cc:1f:b6:33:ff:b2:f3:4f:cc:c2: 30:ed:80:e2:c7:98:35:10:0b:fd:3a:69:1a:a7:d9:95:fb:c0: 3f:ef:43:32:33:c4:75:f0:7b:e6:97:80:d6:29:d3:b4:1a:45: fc:36:1a:74:83:9c:e1:6d:94:60:1e:91:24:55:64:c7:59:13: 53:fc:25:70:e2:49:7c:4a:28:ab:72:5e:2c:4f:57:91:d0:9b: 61:4d:6b:ae:46:ad:2a:bf:e3:22:6f:8e:0d:b1:38:af:25:36: 30:5e:2f:d5:cd:1c:a1:fe:f5:af:c8:9f:d0:aa:ce:40:f3:fc: 14:1a:f9:ec:9b:71:c5:ac:f4:12:d7:76:8a:cd:d0:e4:9d:04: 71:ec:3a:b5:ca:1d:66:af:2d:54:1c:3d:b3:5b:65:79:77:05: 03:94:a0:1c:de:46:9d:fe:ec:43:eb:30:98:c6:dc:36:1d:ac: c9:7f:7f:84:ca:d4:c9:f3:97:38:c0:cb:f4:33:57:82:c2:89: ad:26:70:07:7b:d3:33:bf:3a:64:e1:6f:b2:e0:eb:2e:76:72: a3:07:1b:5c:bb:ae:cc:9b:bd:89:e9:d2:ef:5c:c6:bc:06:fb: 2d:c0:fa:25:76:c3:70:68:c5:15:e4:d5:bc:b0:cd:b4:90:86: 3d:7b:b0:00 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPzctRPrW+jCNEJS//EQ7AGqmpikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNjAyMDUwODU3MDRaFw0yNzAyMDQwOTAyMDRaMDMxMTAvBgNV BAMTKDgzRkJCMkVFRTA3NjVGMTg3NTk5RDVGMDhFMEJEMTkzODc4MjJFMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjUmcbgeAjRURIjsFCtIBL8tU LJWF1NmAvzvZLB+4EaZWSyJuffqakgUUvbvczu4vEmclASp7PxLDA1iz1yB4rRea Sh73ZRqjF3er2iYPXpiZ5/SU6WhKVarHGNlcQzw+KbWxbIgEoent+46CFzahbiI/ 8cIhxICWATTPE5bCnGUW5NR1j20PB9UEWhWdLSSXh2h5H3QBKaqZcveVOJJBZvHc wSN3/VBbCnTHiFjvc5r3856EVcHZEuc5vyK5mrqIbiBJ8xQnq3AkgZBdagx9YrxA D7xDyssZ1RD6MPilr8j1E6y6nAoVu+N6MRZ95CpyygsYE+mY8jcp+s4KmE//AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUg/uy7uB2Xxh1mdXwjgvRk4eCLh8wHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyN2RlMDcxLTNhYWEtNGUyZS05 NzRlLWE3OGM4MTcyOWYwNi8wLzMxMzAzMzJlMzEzMzM0MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhvUwDQYJ KoZIhvcNAQELBQADggEBANhptBPLV1K6zB+2M/+y80/MwjDtgOLHmDUQC/06aRqn 2ZX7wD/vQzIzxHXwe+aXgNYp07QaRfw2GnSDnOFtlGAekSRVZMdZE1P8JXDiSXxK KKtyXixPV5HQm2FNa65GrSq/4yJvjg2xOK8lNjBeL9XNHKH+9a/In9CqzkDz/BQa +eybccWs9BLXdorN0OSdBHHsOrXKHWavLVQcPbNbZXl3BQOUoBzeRp3+7EPrMJjG 3DYdrMl/f4TK1MnzlzjAy/QzV4LCia0mcAd70zO/OmThb7Lg6y52cqMHG1y7rsyb vYnp0u9cxrwG+y3A+iV2w3BoxRXk1bywzbSQhj17sAA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:56:05 2026 by rpki-client