$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa File: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (raw, json) Hash identifier: xJL107kexxT2+8OzNGjRTsSdMpYwaRIrunj6huUjUeQ= Subject key identifier: 22:48:8C:4C:58:03:65:0A:AE:2E:39:0A:C9:11:54:D1:46:A5:51:68 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 792392D02F1A3B5C4892838C1A25FB8751F3930E Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa Signing time: Thu 16 Apr 2026 17:00:00 +0000 ROA not before: Thu 16 Apr 2026 16:55:00 +0000 ROA not after: Thu 15 Apr 2027 17:00:00 +0000 asID: 150284 IP address blocks: 103.43.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:23:92:d0:2f:1a:3b:5c:48:92:83:8c:1a:25:fb:87:51:f3:93:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Apr 16 16:55:00 2026 GMT Not After : Apr 15 17:00:00 2027 GMT Subject: CN=22488C4C5803650AAE2E390AC91154D146A55168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:c5:5f:cf:71:78:86:3a:2b:02:a0:53:63: 09:69:f8:bc:9e:58:00:63:37:ee:23:c7:7c:ac:d6: c4:80:b4:ee:32:5f:f7:71:1c:5e:65:49:c4:9c:6d: 14:2f:cf:5d:e9:0a:c8:f7:e4:88:b4:ed:37:ab:b6: 93:ef:d7:83:2a:84:fd:cc:b5:68:f8:91:1f:40:85: cf:ec:0a:56:43:62:39:95:35:07:a0:77:6d:3d:f1: 16:e5:5f:60:4a:12:ab:ad:19:85:df:31:5c:a3:ae: 02:56:81:33:d7:94:1c:73:26:0c:1e:b6:7f:e1:d1: 13:a5:68:25:3a:fe:f4:dd:6a:5b:3f:58:c5:06:e6: a0:91:e8:57:99:9d:8e:a7:b6:39:54:99:dc:9a:af: c3:fe:42:90:4a:65:2a:70:25:77:fd:44:24:d8:80: 0a:40:01:1c:3d:e0:55:6c:75:cb:f9:8c:c4:8f:60: 27:bf:17:b2:5b:56:2f:db:58:4c:2b:4e:18:95:0c: 45:c4:76:e7:25:5f:65:da:60:e8:92:68:eb:7a:bd: e2:69:c5:6d:12:13:cb:37:30:f1:68:60:c2:ec:b9: e9:53:b8:3d:14:d8:a4:0b:8d:e1:53:eb:35:7c:48: b7:23:97:91:9a:26:6a:49:c7:3e:7c:0c:36:74:69: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:48:8C:4C:58:03:65:0A:AE:2E:39:0A:C9:11:54:D1:46:A5:51:68 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.164.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:38:08:c2:8c:a4:67:71:82:75:d7:aa:06:c4:c3:2c:be:38: 7f:a0:ac:2e:34:9d:4a:f9:f7:81:e2:5d:30:57:c5:25:8b:d7: e2:36:81:0a:99:a5:b3:aa:e9:69:b4:66:b8:23:5b:78:b3:2f: bb:ff:b7:a1:9b:9e:41:71:77:4a:5e:20:14:f8:1f:4a:f2:de: 8b:e2:9f:f1:dc:86:c5:ee:f8:36:9a:a5:8e:da:b6:31:a0:8e: 60:9f:4c:bf:4a:0f:c1:a4:08:3c:69:41:61:12:42:e8:e9:bc: 02:a9:2d:ad:17:27:69:6d:dd:67:7c:a9:36:61:56:b3:83:b6: 2d:a2:0c:81:6e:f9:10:04:5e:5d:30:e1:22:ee:21:ca:a9:88: 96:85:d3:4f:29:69:67:72:1e:59:06:cb:bb:37:d6:ed:23:a9: ca:83:f7:3f:2f:c2:c2:8c:7c:6f:01:fe:50:f0:8d:33:a4:72: bc:b2:0c:2c:da:7b:6e:27:b1:b8:f9:e9:e7:08:8e:f8:59:8c: 0e:14:d5:e8:83:de:d2:6c:0b:38:81:69:3a:9e:b2:45:96:5a: 39:10:34:84:e9:9c:56:01:e3:44:58:e5:23:93:e3:b3:a6:a4: 1c:cd:1a:8c:2d:89:11:86:28:51:13:bd:ed:80:62:b9:19:c5: 0c:38:0e:30 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeSOS0C8aO1xIkoOMGiX7h1Hzkw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNjA0MTYxNjU1MDBaFw0yNzA0MTUxNzAwMDBaMDMxMTAvBgNV BAMTKDIyNDg4QzRDNTgwMzY1MEFBRTJFMzkwQUM5MTE1NEQxNDZBNTUxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9DMVfz3F4hjorAqBTYwlp+Lye WABjN+4jx3ys1sSAtO4yX/dxHF5lScScbRQvz13pCsj35Ii07TertpPv14MqhP3M tWj4kR9Ahc/sClZDYjmVNQegd2098RblX2BKEqutGYXfMVyjrgJWgTPXlBxzJgwe tn/h0ROlaCU6/vTdals/WMUG5qCR6FeZnY6ntjlUmdyar8P+QpBKZSpwJXf9RCTY gApAARw94FVsdcv5jMSPYCe/F7JbVi/bWEwrThiVDEXEduclX2XaYOiSaOt6veJp xW0SE8s3MPFoYMLsuelTuD0U2KQLjeFT6zV8SLcjl5GaJmpJxz58DDZ0afndAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIkiMTFgDZQquLjkKyRFU0UalUWgwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2MmJhY2M5LWQyNWQtNDYxMC1h ZWU0LTY1NWExNGVhMmZkNi8wLzMxMzAzMzJlMzQzMzJlMzEzNjM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZyukMA0GCSqG SIb3DQEBCwUAA4IBAQCeOAjCjKRncYJ116oGxMMsvjh/oKwuNJ1K+feB4l0wV8Ul i9fiNoEKmaWzqulptGa4I1t4sy+7/7ehm55BcXdKXiAU+B9K8t6L4p/x3IbF7vg2 mqWO2rYxoI5gn0y/Sg/BpAg8aUFhEkLo6bwCqS2tFydpbd1nfKk2YVazg7YtogyB bvkQBF5dMOEi7iHKqYiWhdNPKWlnch5ZBsu7N9btI6nKg/c/L8LCjHxvAf5Q8I0z pHK8sgws2ntuJ7G4+ennCI74WYwOFNXog97SbAs4gWk6nrJFllo5EDSE6ZxWAeNE WOUjk+OzpqQczRqMLYkRhihRE73tgGK5GcUMOA4w -----END CERTIFICATE-----Generated at Fri Apr 17 18:45:41 2026 by rpki-client