$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa File: 3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa (raw, json) Hash identifier: a+85n+xY/d/Kktuppb1aZPF1dbd9aMn1df7PH5efD38= Subject key identifier: 05:98:41:F0:06:F6:68:99:23:53:25:6D:53:0C:97:07:4F:69:A1:11 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 206836BCE6E6B4EAC8CF68E4F1A8534743241392 Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa Signing time: Fri 20 Feb 2026 08:01:14 +0000 ROA not before: Fri 20 Feb 2026 07:56:14 +0000 ROA not after: Fri 19 Feb 2027 08:01:14 +0000 asID: 139423 IP address blocks: 103.144.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:68:36:bc:e6:e6:b4:ea:c8:cf:68:e4:f1:a8:53:47:43:24:13:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Feb 20 07:56:14 2026 GMT Not After : Feb 19 08:01:14 2027 GMT Subject: CN=059841F006F668992353256D530C97074F69A111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a7:be:e0:48:31:5c:4d:eb:95:0d:4a:95:51: 5c:6c:de:d8:89:13:6d:75:9c:18:d7:6e:37:31:f7: 97:a6:3c:63:c1:e2:ad:92:fd:1a:88:a4:82:a4:8f: 92:a1:ec:16:b2:46:8b:58:45:b6:39:61:25:15:1d: 1d:c4:a7:7a:30:08:00:df:b5:83:ee:1b:6c:c7:fc: 93:69:b1:7a:26:ee:a1:04:79:66:bb:d0:89:02:78: 85:9f:95:ed:36:9e:05:26:03:35:ca:f1:81:ab:ea: 2d:f0:3b:8d:20:88:97:b5:64:4b:87:54:6d:2d:c0: 52:df:65:f2:fe:59:42:dd:97:49:0b:e9:05:d1:7b: 37:21:f0:b6:52:b4:8e:44:a8:6c:1d:da:33:8f:78: 25:38:2d:19:db:74:78:66:6c:26:a8:d2:46:72:40: 68:bf:6e:ff:bd:2e:8c:6b:26:a0:aa:10:f0:0d:2d: ab:20:be:70:33:78:78:a7:38:59:83:bd:b1:a3:56: de:97:20:6e:86:10:8b:22:ab:49:42:15:15:02:70: 2b:0b:70:1e:aa:5a:c6:0b:57:91:e1:5c:ce:5c:61: d4:05:75:2d:e0:da:9c:5d:d3:8e:72:0b:55:9d:0e: 89:c7:99:cc:ae:57:24:4e:98:74:37:d5:d5:65:25: bb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:98:41:F0:06:F6:68:99:23:53:25:6D:53:0C:97:07:4F:69:A1:11 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32332d3234203d3e20313339343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.20.0/23 Signature Algorithm: sha256WithRSAEncryption c9:81:2a:8f:9a:39:34:2f:43:c8:52:92:c7:ef:dd:69:62:be: db:61:a7:41:8f:3c:af:e3:26:54:a3:6a:94:da:8b:94:6c:f1: 4c:9d:86:42:34:c7:c9:29:b8:9e:a4:c2:5d:f5:2b:b1:2e:34: be:6d:c5:9e:71:1f:05:f9:3c:d5:9e:70:2f:7d:ad:3f:6f:e9: 39:a6:bd:9c:3f:51:93:b6:86:7d:df:43:b7:e0:01:5c:cc:61: f6:b3:50:f8:70:75:21:10:b9:57:9c:a0:79:03:5d:c9:69:81: d0:78:c7:f5:26:83:c6:65:3f:08:c9:0e:03:29:f7:ef:0a:33: c6:1c:bc:5e:6a:44:bf:05:db:eb:65:0b:cd:93:2a:0c:2a:c1: c0:fe:cb:33:a9:28:e2:15:c6:bf:1a:57:bf:65:f3:0e:6f:b5: db:38:38:e4:d7:e4:be:e8:a3:dc:70:d2:13:dd:a6:d2:6b:06: 20:64:5f:ca:1b:d4:24:6a:41:a3:86:eb:9c:4a:f3:f2:e3:ee: 2d:aa:11:cd:84:fa:7f:0a:26:c8:fa:4a:97:9f:91:a8:3d:bc: 65:b1:16:1a:ec:15:c6:5f:73:0f:cf:a8:79:21:f2:f4:67:93: 7d:58:0d:9e:ba:fc:98:c6:bf:17:a9:7f:8c:6b:15:e3:ff:c2: cf:be:cd:73 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIGg2vObmtOrIz2jk8ahTR0MkE5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNjAyMjAwNzU2MTRaFw0yNzAyMTkwODAxMTRaMDMxMTAvBgNV BAMTKDA1OTg0MUYwMDZGNjY4OTkyMzUzMjU2RDUzMEM5NzA3NEY2OUExMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWp77gSDFcTeuVDUqVUVxs3tiJ E211nBjXbjcx95emPGPB4q2S/RqIpIKkj5Kh7BayRotYRbY5YSUVHR3Ep3owCADf tYPuG2zH/JNpsXom7qEEeWa70IkCeIWfle02ngUmAzXK8YGr6i3wO40giJe1ZEuH VG0twFLfZfL+WULdl0kL6QXRezch8LZStI5EqGwd2jOPeCU4LRnbdHhmbCao0kZy QGi/bv+9LoxrJqCqEPANLasgvnAzeHinOFmDvbGjVt6XIG6GEIsiq0lCFRUCcCsL cB6qWsYLV5HhXM5cYdQFdS3g2pxd045yC1WdDonHmcyuVyROmHQ31dVlJbt7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBZhB8Ab2aJkjUyVtUwyXB09poREwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0MWZmM2UyLTc2YjYtNDgzMy04 NmI1LTgyZjNmYTRlYmNiNy8wLzMxMzAzMzJlMzEzNDM0MmUzMjMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5AUMA0GCSqG SIb3DQEBCwUAA4IBAQDJgSqPmjk0L0PIUpLH791pYr7bYadBjzyv4yZUo2qU2ouU bPFMnYZCNMfJKbiepMJd9SuxLjS+bcWecR8F+TzVnnAvfa0/b+k5pr2cP1GTtoZ9 30O34AFczGH2s1D4cHUhELlXnKB5A13JaYHQeMf1JoPGZT8IyQ4DKffvCjPGHLxe akS/BdvrZQvNkyoMKsHA/sszqSjiFca/Gle/ZfMOb7XbODjk1+S+6KPccNIT3abS awYgZF/KG9QkakGjhuucSvPy4+4tqhHNhPp/CibI+kqXn5GoPbxlsRYa7BXGX3MP z6h5IfL0Z5N9WA2euvyYxr8XqX+MaxXj/8LPvs1z -----END CERTIFICATE-----Generated at Mon Mar 2 08:05:58 2026 by rpki-client