$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa File: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (raw, json) Hash identifier: EdTK4FK3eQfvTaQx0/MnvgXrIsoOGYEeaHZVSWQ/4bY= Subject key identifier: 73:25:F7:96:FD:61:A6:48:41:13:7A:0B:A5:DA:98:E9:64:EB:DC:B8 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 3A89F61A29B72A5B775DE3D1A8C0219B0290C7C4 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa Signing time: Wed 18 Feb 2026 11:02:35 +0000 ROA not before: Wed 18 Feb 2026 10:57:35 +0000 ROA not after: Wed 17 Feb 2027 11:02:35 +0000 asID: 138058 IP address blocks: 103.129.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:89:f6:1a:29:b7:2a:5b:77:5d:e3:d1:a8:c0:21:9b:02:90:c7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Feb 18 10:57:35 2026 GMT Not After : Feb 17 11:02:35 2027 GMT Subject: CN=7325F796FD61A64841137A0BA5DA98E964EBDCB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:42:7e:81:42:7f:cc:8f:ec:0a:43:1f:6f: 82:7e:85:95:f2:6c:9b:03:b8:06:1a:e6:fd:84:fb: c1:e1:5c:67:d5:3a:27:79:33:6c:94:2f:eb:93:43: 68:a1:be:a8:70:92:9b:e5:b4:fb:e9:77:8b:c9:5f: 12:bc:c2:7f:4c:6d:bb:40:3d:44:df:81:30:82:66: 2a:46:1c:b0:32:a1:61:1d:0e:97:88:91:80:5c:a5: cb:7a:97:5e:dc:9a:a1:9f:02:66:5c:95:40:c1:be: e5:e4:22:f2:5d:a3:72:96:4a:36:84:6b:3f:ad:31: 3c:23:4a:80:9a:c2:9c:dd:83:fe:4d:9d:d4:df:ab: ed:e9:63:89:90:b7:cb:50:83:ed:ba:c4:d9:bf:ee: b6:ec:e7:08:3e:0b:19:52:1d:d9:bd:1f:93:ca:78: 0c:81:75:b3:04:1a:9e:b2:7a:40:8c:76:ab:18:6e: 5d:8d:90:12:42:1f:b8:d3:bc:99:cc:43:df:4a:95: a4:e9:b5:36:19:00:af:9a:36:0e:01:fe:99:c3:d0: 54:8e:cd:77:37:14:a6:68:b3:cf:2c:14:8e:bc:b0: f9:ab:5f:e3:08:21:7f:8e:7e:4a:30:68:d6:17:87: f0:ab:42:54:82:0a:d9:6e:85:7e:df:05:90:2f:84: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:25:F7:96:FD:61:A6:48:41:13:7A:0B:A5:DA:98:E9:64:EB:DC:B8 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.60.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:5c:3c:01:8a:b4:b1:5c:6c:e9:52:f4:cb:c3:b8:c4:05:c3: cc:fc:cd:c9:3c:c9:93:1c:50:0d:38:a8:5c:c3:00:c8:8f:40: 35:f9:fc:5a:eb:18:db:97:f0:ee:d3:1a:ed:d2:1d:22:0e:34: 08:88:26:21:7a:84:7b:fa:2a:1e:64:b0:dc:e8:56:2a:80:f9: f8:75:f7:ab:7b:31:15:8b:f0:96:b1:f0:a3:df:6c:ef:bf:af: 6d:d5:1b:b2:f6:24:52:88:cf:4c:63:0e:40:f4:dc:d5:c4:18: 9f:b3:ef:a0:e9:6b:cc:5b:a1:f6:63:e6:27:bb:a0:00:7e:07: 46:86:3e:ce:2b:de:5e:de:28:38:1d:9d:3e:e9:0a:86:44:f7: 9a:2c:b6:19:c3:55:b2:9a:17:6e:f2:3a:c4:7f:5e:14:00:dc: 6b:87:c5:3c:bf:e0:af:9c:ba:cf:5b:cd:cd:21:90:21:3a:e3: c1:ef:27:2b:4e:d6:0d:9c:32:66:ee:44:83:fa:cd:36:4b:76: 4c:ee:0b:82:13:c8:3c:93:7b:3b:56:a1:9b:88:c7:63:57:66: 15:07:04:bb:4c:5d:13:e9:19:63:ba:12:c4:d7:79:23:fa:64: 3b:67:f3:24:42:90:69:42:bc:7f:55:32:ad:af:9c:cc:ad:f2: 53:af:f2:5c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOon2Gim3Klt3XePRqMAhmwKQx8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNjAyMTgxMDU3MzVaFw0yNzAyMTcxMTAyMzVaMDMxMTAvBgNV BAMTKDczMjVGNzk2RkQ2MUE2NDg0MTEzN0EwQkE1REE5OEU5NjRFQkRDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIUJ+gUJ/zI/sCkMfb4J+hZXy bJsDuAYa5v2E+8HhXGfVOid5M2yUL+uTQ2ihvqhwkpvltPvpd4vJXxK8wn9MbbtA PUTfgTCCZipGHLAyoWEdDpeIkYBcpct6l17cmqGfAmZclUDBvuXkIvJdo3KWSjaE az+tMTwjSoCawpzdg/5NndTfq+3pY4mQt8tQg+26xNm/7rbs5wg+CxlSHdm9H5PK eAyBdbMEGp6yekCMdqsYbl2NkBJCH7jTvJnMQ99KlaTptTYZAK+aNg4B/pnD0FSO zXc3FKZos88sFI68sPmrX+MIIX+OfkowaNYXh/CrQlSCCtluhX7fBZAvhAUtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcyX3lv1hpkhBE3oLpdqY6WTr3LgwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlNmJiZTRkLTNhMmItNGUxYi1h MWFhLTU5MzYxMGIzZGVjOS8wLzMxMzAzMzJlMzEzMjM5MmUzNjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4E8MA0GCSqG SIb3DQEBCwUAA4IBAQB8XDwBirSxXGzpUvTLw7jEBcPM/M3JPMmTHFANOKhcwwDI j0A1+fxa6xjbl/Du0xrt0h0iDjQIiCYheoR7+ioeZLDc6FYqgPn4dferezEVi/CW sfCj32zvv69t1Ruy9iRSiM9MYw5A9NzVxBifs++g6WvMW6H2Y+Ynu6AAfgdGhj7O K95e3ig4HZ0+6QqGRPeaLLYZw1Wymhdu8jrEf14UANxrh8U8v+CvnLrPW83NIZAh OuPB7ycrTtYNnDJm7kSD+s02S3ZM7guCE8g8k3s7VqGbiMdjV2YVBwS7TF0T6Rlj uhLE13kj+mQ7Z/MkQpBpQrx/VTKtr5zMrfJTr/Jc -----END CERTIFICATE-----Generated at Mon Mar 2 18:07:43 2026 by rpki-client