$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa File: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (raw, json) Hash identifier: BQ0H7gi4SJV0y+7S/QlaiH+pulhKQ9utlluA/Qrt3EM= Subject key identifier: F0:EA:E5:E5:AF:EE:DB:FD:98:3F:61:0E:15:1E:F0:80:F4:A5:8D:1C Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 4ACD1C5EFF4BCFA0282B848F3C3E482EB81F09C3 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa Signing time: Mon 09 Feb 2026 16:01:50 +0000 ROA not before: Mon 09 Feb 2026 15:56:50 +0000 ROA not after: Mon 08 Feb 2027 16:01:50 +0000 asID: 151994 IP address blocks: 103.255.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cd:1c:5e:ff:4b:cf:a0:28:2b:84:8f:3c:3e:48:2e:b8:1f:09:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Feb 9 15:56:50 2026 GMT Not After : Feb 8 16:01:50 2027 GMT Subject: CN=F0EAE5E5AFEEDBFD983F610E151EF080F4A58D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:e8:62:d6:8d:e0:7a:aa:96:bf:7f:71:2b: db:38:b8:60:b0:75:a9:75:b1:e7:70:f7:6b:76:7b: 7c:e4:c5:45:ec:b4:b2:b8:f9:33:13:2a:5d:0f:17: ef:fd:4c:68:09:c5:80:47:fa:6b:42:32:55:10:ce: b5:62:d3:0e:ee:6c:44:7a:38:17:80:53:ce:66:6e: fa:7a:c5:24:5d:6e:03:d7:69:ef:b9:c8:c1:f0:fc: d7:83:bc:69:82:54:80:7b:e7:0c:c1:d5:29:99:63: e2:a1:3f:d2:29:c0:cd:95:9f:cb:5c:9f:0b:c4:9b: 22:de:f0:c2:75:05:82:42:eb:4a:e6:60:59:ba:71: 18:72:24:43:a9:85:8e:1a:2a:39:14:7e:38:c9:3c: e2:f4:47:30:20:db:3b:29:c6:43:e8:3e:13:46:3e: d8:54:d3:d1:92:a8:ad:4f:40:80:f4:62:b1:0d:5b: 98:c0:52:2c:79:f8:1f:96:7d:a8:6e:6b:8d:0c:d5: 01:9b:48:8b:4e:34:83:e1:21:ec:d2:54:92:32:c8: b6:4e:fb:5c:b3:10:be:bc:a0:cb:be:b9:fa:55:35: 59:b8:88:fe:dd:a8:f1:92:2f:ee:e1:76:6f:52:09: 3c:6a:a7:ed:6f:a3:d7:a2:e0:08:0b:d0:b4:c6:f3: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EA:E5:E5:AF:EE:DB:FD:98:3F:61:0E:15:1E:F0:80:F4:A5:8D:1C X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.165.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:50:21:43:18:86:a5:03:35:68:70:1e:30:a6:be:71:b6:25: e7:3b:2b:04:ac:d4:5f:ae:8b:67:5c:dd:76:0b:11:50:49:10: 71:ed:db:ed:8c:a4:40:06:50:92:b5:0c:53:db:5f:ac:aa:46: 74:23:df:6a:a9:7c:e6:ee:94:35:ac:d6:59:80:d9:eb:fe:be: 3c:37:a0:58:73:58:f1:b9:26:16:65:2b:18:ff:ef:11:89:f9: 18:c9:42:eb:e4:24:ac:26:fb:c9:a5:2d:04:cc:49:c1:43:56: f9:d6:2f:6c:49:78:f4:38:5d:a0:78:ed:ab:30:db:9d:e6:e5: 2f:67:73:8d:83:00:0b:fb:31:31:56:b1:ef:5a:e0:79:cf:cd: 5c:1f:9a:ec:6c:4f:cb:4e:00:89:7e:ed:18:ca:3a:1f:c0:d1: f5:61:eb:2e:48:46:21:b3:76:14:e1:3b:a4:61:db:ba:e1:58: 55:d8:db:ce:58:f8:57:7e:36:62:8d:cf:ad:f0:07:e5:5a:e9: e8:b7:bc:0f:01:62:39:3a:c1:cf:ff:ee:1d:ea:d2:99:ea:0f: 77:06:40:18:30:18:91:64:ec:e8:ce:4b:a2:3b:a8:cd:4d:7e: 2b:59:bf:46:40:3c:ad:9a:49:dd:f8:01:d3:5d:04:e5:09:10: 16:27:ea:16 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSs0cXv9Lz6AoK4SPPD5ILrgfCcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNjAyMDkxNTU2NTBaFw0yNzAyMDgxNjAxNTBaMDMxMTAvBgNV BAMTKEYwRUFFNUU1QUZFRURCRkQ5ODNGNjEwRTE1MUVGMDgwRjRBNThEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWehi1o3geqqWv39xK9s4uGCw dal1sedw92t2e3zkxUXstLK4+TMTKl0PF+/9TGgJxYBH+mtCMlUQzrVi0w7ubER6 OBeAU85mbvp6xSRdbgPXae+5yMHw/NeDvGmCVIB75wzB1SmZY+KhP9IpwM2Vn8tc nwvEmyLe8MJ1BYJC60rmYFm6cRhyJEOphY4aKjkUfjjJPOL0RzAg2zspxkPoPhNG PthU09GSqK1PQID0YrENW5jAUix5+B+Wfahua40M1QGbSItONIPhIezSVJIyyLZO +1yzEL68oMu+ufpVNVm4iP7dqPGSL+7hdm9SCTxqp+1vo9ei4AgL0LTG848bAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8Orl5a/u2/2YP2EOFR7wgPSljRwwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjNDdlZjVjLTViYmEtNGNkMS04 ZGM5LTE3M2UyNzUxZjRmNC8wLzMxMzAzMzJlMzIzNTM1MmUzMTM2MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzOTM5MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/6UwDQYJ KoZIhvcNAQELBQADggEBABxQIUMYhqUDNWhwHjCmvnG2Jec7KwSs1F+ui2dc3XYL EVBJEHHt2+2MpEAGUJK1DFPbX6yqRnQj32qpfObulDWs1lmA2ev+vjw3oFhzWPG5 JhZlKxj/7xGJ+RjJQuvkJKwm+8mlLQTMScFDVvnWL2xJePQ4XaB47asw253m5S9n c42DAAv7MTFWse9a4HnPzVwfmuxsT8tOAIl+7RjKOh/A0fVh6y5IRiGzdhThO6Rh 27rhWFXY285Y+Fd+NmKNz63wB+Va6ei3vA8BYjk6wc//7h3q0pnqD3cGQBgwGJFk 7OjOS6I7qM1NfitZv0ZAPK2aSd34AdNdBOUJEBYn6hY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:32 2026 by rpki-client