$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa File: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (raw, json) Hash identifier: Bs6OPjrTJocOhFg/COU3X0I8PvkCyHL1sg/9M5e7sSs= Subject key identifier: CE:DE:70:BE:21:6D:58:27:B3:F6:30:AE:A9:64:A7:A3:92:53:D8:21 Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 3418A5A9A151C06B712C8DB5C7B208CE6DE4F494 Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa Signing time: Thu 16 Apr 2026 14:00:00 +0000 ROA not before: Thu 16 Apr 2026 13:55:00 +0000 ROA not after: Thu 15 Apr 2027 14:00:00 +0000 asID: 138072 IP address blocks: 103.123.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:18:a5:a9:a1:51:c0:6b:71:2c:8d:b5:c7:b2:08:ce:6d:e4:f4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Apr 16 13:55:00 2026 GMT Not After : Apr 15 14:00:00 2027 GMT Subject: CN=CEDE70BE216D5827B3F630AEA964A7A39253D821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b9:c8:6f:42:8f:69:b3:ff:c4:e8:ad:55:de: 62:c5:43:38:23:82:3a:9f:22:a6:33:71:9f:a9:80: ec:4f:fb:c7:ba:ff:1a:8b:be:b0:7e:4d:e8:62:b0: b1:ac:e9:f2:91:81:4a:1d:3c:3a:b8:79:2f:cd:24: 02:1f:de:3b:e8:28:cf:6b:74:eb:70:d8:fd:6f:ac: 32:9c:24:04:13:1e:d8:63:d4:1f:23:ac:ea:da:76: ba:c8:5c:5e:fd:f8:81:bc:41:d0:f2:92:34:e0:b8: e4:68:4c:1f:fa:68:a9:49:f2:34:01:0d:cc:79:06: 12:26:a6:09:09:be:09:1a:1e:d9:4c:d7:c2:e0:d5: 0a:2d:be:d3:33:95:1f:86:41:da:90:03:ce:33:d5: 6f:07:d5:7a:f4:33:1b:c9:92:53:01:77:66:6f:df: b3:b9:e5:f3:4b:72:57:a0:dc:21:41:8f:fe:67:ca: 24:f0:5b:73:05:6b:be:9b:21:2a:8a:61:a3:3e:12: 8c:ea:ee:a0:e5:83:34:61:82:39:fc:0e:17:a6:65: 51:de:75:2b:69:da:dd:68:ee:b3:da:23:49:c2:7c: 0f:8f:d1:f0:67:d1:f6:42:94:24:1e:0b:4a:a6:e7: 79:85:b5:80:ff:60:be:05:cf:ab:30:c0:f6:45:63: 74:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DE:70:BE:21:6D:58:27:B3:F6:30:AE:A9:64:A7:A3:92:53:D8:21 X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.120.0/24 Signature Algorithm: sha256WithRSAEncryption 40:35:c6:79:e8:37:b5:ed:d2:ac:18:66:f1:ea:27:df:2b:3e: d1:41:d8:d6:4c:b7:85:fc:f9:07:a0:ab:df:d4:43:e7:34:70: 5c:55:54:d7:16:09:1c:6e:ba:f2:9d:bf:17:46:b2:33:d1:08: 46:c9:85:f9:a8:c1:85:8d:b7:45:7a:9f:9f:f4:bc:e0:f5:b2: 04:6c:ca:e1:72:cb:94:a8:6c:71:42:cb:f0:3d:70:21:ec:28: 73:49:3b:57:80:2b:1d:df:00:eb:de:ae:59:6f:60:fa:18:88: 6f:28:15:b0:0e:3f:a4:77:02:90:b4:38:5f:fe:d3:7d:40:5d: c6:56:fb:04:df:ba:23:2a:34:c6:8f:2e:c6:22:7d:8e:ef:60: 28:e4:6a:c1:d7:91:30:5e:e6:d2:e3:b5:05:41:08:d2:98:ff: 55:0e:74:b4:72:f4:dc:3c:33:f6:05:a6:92:33:9e:5f:23:9d: e7:a6:4b:11:25:86:68:5b:6a:cf:07:de:45:9b:f0:c4:b1:45: a8:ae:70:c6:66:46:3a:22:17:7a:7e:f7:a4:b7:ad:82:84:58: c6:12:b6:79:dd:a2:1d:95:ec:d6:2c:0d:d3:91:a8:01:c8:0d: 65:38:7f:5d:2d:16:b5:92:66:fe:10:53:e2:11:91:c5:14:10: 71:80:bd:c2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNBilqaFRwGtxLI21x7IIzm3k9JQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNjA0MTYxMzU1MDBaFw0yNzA0MTUxNDAwMDBaMDMxMTAvBgNV BAMTKENFREU3MEJFMjE2RDU4MjdCM0Y2MzBBRUE5NjRBN0EzOTI1M0Q4MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChuchvQo9ps//E6K1V3mLFQzgj gjqfIqYzcZ+pgOxP+8e6/xqLvrB+TehisLGs6fKRgUodPDq4eS/NJAIf3jvoKM9r dOtw2P1vrDKcJAQTHthj1B8jrOradrrIXF79+IG8QdDykjTguORoTB/6aKlJ8jQB Dcx5BhImpgkJvgkaHtlM18Lg1QotvtMzlR+GQdqQA84z1W8H1Xr0MxvJklMBd2Zv 37O55fNLcleg3CFBj/5nyiTwW3MFa76bISqKYaM+Eozq7qDlgzRhgjn8DhemZVHe dStp2t1o7rPaI0nCfA+P0fBn0fZClCQeC0qm53mFtYD/YL4Fz6swwPZFY3R/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUzt5wviFtWCez9jCuqWSno5JT2CEwHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2MjY2MzlhLTlhMWMtNGMwZS1i YTE3LWY2NzlmMDUwNmNiYy8wLzMxMzAzMzJlMzEzMjMzMmUzMTMyMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABne3gwDQYJ KoZIhvcNAQELBQADggEBAEA1xnnoN7Xt0qwYZvHqJ98rPtFB2NZMt4X8+Qegq9/U Q+c0cFxVVNcWCRxuuvKdvxdGsjPRCEbJhfmowYWNt0V6n5/0vOD1sgRsyuFyy5So bHFCy/A9cCHsKHNJO1eAKx3fAOverllvYPoYiG8oFbAOP6R3ApC0OF/+031AXcZW +wTfuiMqNMaPLsYifY7vYCjkasHXkTBe5tLjtQVBCNKY/1UOdLRy9Nw8M/YFppIz nl8jneemSxElhmhbas8H3kWb8MSxRaiucMZmRjoiF3p+96S3rYKEWMYStnndoh2V 7NYsDdORqAHIDWU4f10tFrWSZv4QU+IRkcUUEHGAvcI= -----END CERTIFICATE-----Generated at Sun Apr 19 11:46:27 2026 by rpki-client