$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa File: 3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (raw, json) Hash identifier: AOegtarleN5JrGQec3Av8CYsA1gHmcuPkILhiNucRMk= Subject key identifier: A9:75:78:17:8A:35:76:65:4A:74:45:47:DC:F9:8C:83:C3:C6:F6:44 Certificate issuer: /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Certificate serial: 429C99606FD6E23BF881F7EE7B45EB7152480114 Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa Signing time: Fri 27 Mar 2026 08:00:03 +0000 ROA not before: Fri 27 Mar 2026 07:55:03 +0000 ROA not after: Fri 26 Mar 2027 08:00:03 +0000 asID: 150218 IP address blocks: 103.20.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9c:99:60:6f:d6:e2:3b:f8:81:f7:ee:7b:45:eb:71:52:48:01:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4 Validity Not Before: Mar 27 07:55:03 2026 GMT Not After : Mar 26 08:00:03 2027 GMT Subject: CN=A97578178A3576654A744547DCF98C83C3C6F644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:af:96:49:ad:f2:d2:d8:b0:ae:b9:02:68: 7d:3b:f7:00:7a:62:64:bf:55:f5:8e:70:0b:92:86: 96:a5:78:4f:aa:8c:02:79:e2:c3:9c:e3:93:dc:49: 7c:48:c3:b4:3c:5e:e4:ae:d1:a2:6e:50:29:1f:90: ff:7b:4b:4b:74:0a:74:7a:ad:28:e3:c3:e8:1d:71: 1b:09:b0:1f:52:25:ce:16:78:e6:0f:5f:a6:67:57: 95:6f:3d:2d:2d:d7:be:c8:23:7e:d9:92:47:b2:ba: ea:1a:93:3b:3e:fe:f9:a3:32:ad:3f:4d:0f:0e:4d: 76:0c:ef:f5:a7:5b:e6:6f:c4:ac:1d:b0:a8:74:59: 74:e9:e1:3b:ff:b3:bd:d6:77:ac:72:85:37:cd:72: 32:14:53:4f:86:95:0a:4b:58:fa:eb:2a:69:6e:cb: 66:4e:d6:4b:7b:43:4c:8f:08:b5:97:3f:d7:db:ff: 5a:0b:b8:fd:1f:c5:39:08:22:7e:95:22:05:f2:37: 78:ca:39:f2:da:7c:9b:28:fd:4a:5d:22:0c:67:db: 36:0c:af:60:12:e3:78:6b:d6:b6:ed:e0:f2:fb:46: 19:83:08:c2:f7:15:b9:3c:3e:2f:be:5f:fa:98:91: 57:92:ef:71:2e:3a:34:e5:58:28:99:3b:ff:50:9b: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:75:78:17:8A:35:76:65:4A:74:45:47:DC:F9:8C:83:C3:C6:F6:44 X509v3 Authority Key Identifier: keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.50.0/24 Signature Algorithm: sha256WithRSAEncryption 38:2e:42:78:9a:c7:e8:e6:bd:ea:f0:01:f7:bb:89:2c:28:cf: d8:a5:19:d9:70:c0:d1:02:cc:75:59:82:7f:3f:10:5b:f2:d7: ad:b4:14:00:bb:40:94:ac:7b:b2:ed:0d:2e:e9:2c:7b:09:19: 07:d6:5f:a7:0b:1a:04:87:82:f0:45:3b:cf:f3:44:72:50:2d: 80:a7:a6:f1:bc:a4:60:be:43:41:ea:2c:e9:e3:f4:83:26:08: 67:c7:6c:ee:cb:35:5c:f2:2f:fa:4b:a2:a5:b4:cb:df:35:1a: d9:06:30:86:75:00:b1:8b:b2:57:e8:05:42:ab:67:4a:99:d9: 9c:42:54:2b:95:70:32:e5:86:7a:40:b1:14:1c:5c:c0:9b:14: 11:e2:2d:ec:41:2d:b2:38:fc:71:c4:20:e3:a8:07:57:e7:78: a1:14:8b:b8:ea:73:4b:92:91:1c:76:97:74:cb:75:9d:f0:53: e3:0d:38:3c:9c:dc:c6:c1:a8:f3:92:c8:7c:de:ea:74:c9:07: 8d:c7:ad:b3:48:55:ef:a8:e6:24:8c:ec:91:45:10:ac:cf:68: 79:e1:76:ab:68:e6:05:20:95:fe:fc:26:1b:f4:9d:b1:19:04: 4c:40:7e:6a:3d:81:5f:d0:17:b0:5f:a6:54:0c:25:f9:96:ea: 89:08:4f:e0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQpyZYG/W4jv4gffue0XrcVJIARQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0Uy Q0VCQjZGNDAeFw0yNjAzMjcwNzU1MDNaFw0yNzAzMjYwODAwMDNaMDMxMTAvBgNV BAMTKEE5NzU3ODE3OEEzNTc2NjU0QTc0NDU0N0RDRjk4QzgzQzNDNkY2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbfq+WSa3y0tiwrrkCaH079wB6 YmS/VfWOcAuShpaleE+qjAJ54sOc45PcSXxIw7Q8XuSu0aJuUCkfkP97S0t0CnR6 rSjjw+gdcRsJsB9SJc4WeOYPX6ZnV5VvPS0t177II37Zkkeyuuoakzs+/vmjMq0/ TQ8OTXYM7/WnW+ZvxKwdsKh0WXTp4Tv/s73Wd6xyhTfNcjIUU0+GlQpLWPrrKmlu y2ZO1kt7Q0yPCLWXP9fb/1oLuP0fxTkIIn6VIgXyN3jKOfLafJso/UpdIgxn2zYM r2AS43hr1rbt4PL7RhmDCML3Fbk8Pi++X/qYkVeS73EuOjTlWCiZO/9Qm3hvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqXV4F4o1dmVKdEVH3PmMg8PG9kQwHwYDVR0j BBgwFoAUA4/I259POB1hTDzalE7bzizrtvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzQwZGYxMy1jNGU5LTQyMTgtYjExNC1kZWFkMTY0ODI4NWMvMC8wMzhGQzhEQjlG NEYzODFENjE0QzNDREE5NDRFREJDRTJDRUJCNkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4RkM4REI5RjRGMzgxRDYxNEMzQ0RBOTQ0RURCQ0UyQ0VC QjZGNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzNDBkZjEzLWM0ZTktNDIxOC1i MTE0LWRlYWQxNjQ4Mjg1Yy8wLzMxMzAzMzJlMzIzMDJlMzUzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcUMjANBgkqhkiG 9w0BAQsFAAOCAQEAOC5CeJrH6Oa96vAB97uJLCjP2KUZ2XDA0QLMdVmCfz8QW/LX rbQUALtAlKx7su0NLuksewkZB9ZfpwsaBIeC8EU7z/NEclAtgKem8bykYL5DQeos 6eP0gyYIZ8ds7ss1XPIv+kuipbTL3zUa2QYwhnUAsYuyV+gFQqtnSpnZnEJUK5Vw MuWGekCxFBxcwJsUEeIt7EEtsjj8ccQg46gHV+d4oRSLuOpzS5KRHHaXdMt1nfBT 4w04PJzcxsGo85LIfN7qdMkHjcets0hV76jmJIzskUUQrM9oeeF2q2jmBSCV/vwm G/SdsRkETEB+aj2BX9AXsF+mVAwl+ZbqiQhP4A== -----END CERTIFICATE-----Generated at Fri Apr 17 21:31:03 2026 by rpki-client