$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa File: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (raw, json) Hash identifier: XPXeqyo3uAeNk8HBLerrx/vohDE1OzqrjTB8SXVyR1c= Subject key identifier: C8:FB:02:0C:DA:A8:36:3C:7E:9F:7D:5C:49:0A:E2:50:DC:AE:2B:45 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 25E0CE3E86D0FD1AFE978E92094B8B831C0F5D2C Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa Signing time: Sat 28 Feb 2026 01:03:53 +0000 ROA not before: Sat 28 Feb 2026 00:58:53 +0000 ROA not after: Sat 27 Feb 2027 01:03:53 +0000 asID: 147076 IP address blocks: 103.189.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e0:ce:3e:86:d0:fd:1a:fe:97:8e:92:09:4b:8b:83:1c:0f:5d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Feb 28 00:58:53 2026 GMT Not After : Feb 27 01:03:53 2027 GMT Subject: CN=C8FB020CDAA8363C7E9F7D5C490AE250DCAE2B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:fa:7e:b9:5e:51:4f:f0:b6:1c:35:13:83: b3:ff:32:b8:47:5b:31:fd:81:8b:d1:f4:d2:94:22: 4e:e3:47:a3:31:dc:db:d2:3c:31:25:a9:d6:b8:0e: 80:86:22:c8:1b:1d:21:90:7d:7b:ed:9f:32:c2:dd: 4d:b4:23:4e:ec:c5:29:f9:8e:bb:b2:05:69:aa:e9: c5:3a:45:bb:32:82:33:d7:4a:6a:ea:d4:73:02:1e: 45:75:e0:ee:0b:db:31:91:21:da:16:76:28:6d:cd: e7:5a:37:0a:60:8f:70:bf:e4:ac:ed:55:70:48:61: 97:09:26:46:66:ab:d8:db:d9:da:fc:c9:97:be:5c: ab:e0:00:ec:9d:17:68:27:ac:33:6e:a1:d0:d9:8e: 20:60:33:45:05:d2:0f:4c:8b:cc:b8:b7:6f:fd:b2: 42:16:f1:51:43:4f:86:c0:51:4c:a1:cb:0a:b3:8c: 92:31:2e:78:81:fe:0b:10:d1:d3:d7:e3:e0:33:38: d1:db:c4:3b:c1:9d:87:9b:4b:e3:fc:00:aa:dd:71: e8:b1:cf:91:ef:d9:8b:7d:9c:5b:87:5b:ab:00:82: 7f:d6:2e:9d:23:a9:b5:ae:9a:35:7b:e3:a3:88:53: 85:22:ef:ea:88:ff:54:72:9f:4e:06:17:5c:33:cd: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:02:0C:DA:A8:36:3C:7E:9F:7D:5C:49:0A:E2:50:DC:AE:2B:45 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.229.0/24 Signature Algorithm: sha256WithRSAEncryption 09:93:0a:81:54:84:f7:54:cb:2b:49:12:71:38:54:f1:9e:46: 93:de:22:d8:1e:89:3a:e7:df:1a:d1:57:7c:42:37:ad:a3:18: c0:5b:ab:b2:71:da:fd:06:67:a9:85:ec:ac:35:56:00:aa:b9: c4:ea:14:1c:3f:d4:b0:9e:55:09:cc:2e:ab:32:68:93:d0:90: e2:50:ac:54:65:b7:7f:58:4f:d2:6a:2f:3f:cf:7d:ba:74:e8: df:bf:df:e4:66:41:b8:33:a8:d8:c0:2e:fd:71:d3:b7:22:a6: 32:88:9f:9b:0d:31:56:8a:4b:48:6e:e7:92:23:a9:3a:6a:03: 89:49:36:c8:f6:23:ec:72:0c:48:f5:27:68:cb:08:43:21:62: dd:7c:43:76:15:f3:31:37:67:0c:23:0f:2e:0d:be:4d:d4:95: 04:10:a4:ce:46:d0:d2:e0:41:41:62:a6:a5:fb:86:86:23:60: 79:d0:6a:27:7b:e6:f7:16:b9:1e:7b:eb:27:54:d1:a3:33:5c: f0:8a:8c:66:11:c4:7f:7a:79:2f:cf:28:c8:9c:bd:7f:93:43: 42:20:c2:31:3c:ff:29:bd:36:60:b2:be:6e:07:27:64:60:5f: 3b:f2:c4:81:0b:f5:99:0c:e1:68:e9:a6:fb:8b:b6:66:1c:b6: 7e:16:c1:96 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJeDOPobQ/Rr+l46SCUuLgxwPXSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNjAyMjgwMDU4NTNaFw0yNzAyMjcwMTAzNTNaMDMxMTAvBgNV BAMTKEM4RkIwMjBDREFBODM2M0M3RTlGN0Q1QzQ5MEFFMjUwRENBRTJCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqPp+uV5RT/C2HDUTg7P/MrhH WzH9gYvR9NKUIk7jR6Mx3NvSPDElqda4DoCGIsgbHSGQfXvtnzLC3U20I07sxSn5 jruyBWmq6cU6RbsygjPXSmrq1HMCHkV14O4L2zGRIdoWdihtzedaNwpgj3C/5Kzt VXBIYZcJJkZmq9jb2dr8yZe+XKvgAOydF2gnrDNuodDZjiBgM0UF0g9Mi8y4t2/9 skIW8VFDT4bAUUyhywqzjJIxLniB/gsQ0dPX4+AzONHbxDvBnYebS+P8AKrdceix z5Hv2Yt9nFuHW6sAgn/WLp0jqbWumjV746OIU4Ui7+qI/1Ryn04GF1wzzRTpAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUyPsCDNqoNjx+n31cSQriUNyuK0UwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM5OGVlYjM4LTc3NDYtNDg5OS05 YTEwLTc5ODBmOGI5MDUzMi8wLzMxMzAzMzJlMzEzODM5MmUzMjMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM3MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnveUwDQYJ KoZIhvcNAQELBQADggEBAAmTCoFUhPdUyytJEnE4VPGeRpPeItgeiTrn3xrRV3xC N62jGMBbq7Jx2v0GZ6mF7Kw1VgCqucTqFBw/1LCeVQnMLqsyaJPQkOJQrFRlt39Y T9JqLz/Pfbp06N+/3+RmQbgzqNjALv1x07cipjKIn5sNMVaKS0hu55IjqTpqA4lJ Nsj2I+xyDEj1J2jLCEMhYt18Q3YV8zE3ZwwjDy4Nvk3UlQQQpM5G0NLgQUFipqX7 hoYjYHnQaid75vcWuR576ydU0aMzXPCKjGYRxH96eS/PKMicvX+TQ0IgwjE8/ym9 NmCyvm4HJ2RgXzvyxIEL9ZkM4WjppvuLtmYctn4WwZY= -----END CERTIFICATE-----Generated at Mon Mar 2 21:29:03 2026 by rpki-client