$ rpki-client -vvf repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa File: 3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa (raw, json) Hash identifier: Qc4wC9c1VF6ZCMRJHqkviS3MBMwKB4Kp1K227yZ2fXs= Subject key identifier: 95:1F:DA:76:4F:8D:9D:C8:C5:17:D0:52:C4:15:A4:46:98:28:94:EF Certificate issuer: /CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Certificate serial: 522F217EF5C42AE3DEF0E72FDFF0E6954FC0B918 Authority key identifier: DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa Signing time: Tue 07 Apr 2026 19:00:00 +0000 ROA not before: Tue 07 Apr 2026 18:55:00 +0000 ROA not after: Tue 06 Apr 2027 19:00:00 +0000 asID: 139949 IP address blocks: 103.147.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2f:21:7e:f5:c4:2a:e3:de:f0:e7:2f:df:f0:e6:95:4f:c0:b9:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8766A90851AE44D76B8563D83586F0164FE5CF Validity Not Before: Apr 7 18:55:00 2026 GMT Not After : Apr 6 19:00:00 2027 GMT Subject: CN=951FDA764F8D9DC8C517D052C415A446982894EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:2c:e8:41:89:f4:f6:9e:95:5c:ef:e4:82: 06:04:bf:90:11:b4:6b:09:4b:00:35:9b:eb:4e:c7: 02:71:2c:5c:7e:0d:bb:4c:fd:f9:c5:00:0b:4b:cd: 3b:ba:f5:29:b6:46:ee:a3:f2:5a:e4:48:4d:ff:00: 5f:30:c3:1f:fb:16:f1:16:37:da:61:45:fe:77:13: b2:a3:e5:d9:11:57:ee:48:aa:60:64:d1:c8:41:8a: de:18:b3:d5:7d:f7:17:6f:05:ef:55:5a:e7:1f:7e: 02:44:e2:a9:98:b5:1e:12:0a:df:fd:e1:47:25:01: fd:45:6e:8e:5f:62:2d:df:1f:ce:47:fa:91:7a:f0: af:78:3a:09:37:7f:d5:f5:1d:01:0e:0c:09:ba:c2: 3f:b3:68:62:a6:df:dc:86:7f:26:a7:30:74:e4:1f: e4:88:40:02:19:7b:a2:66:07:92:80:20:6f:33:4d: bc:89:4b:a0:38:46:e3:e8:55:82:2c:d1:73:e2:60: 74:0c:81:f4:70:35:ee:26:75:af:ac:c4:08:5b:ae: 18:24:09:83:56:0d:5a:f4:fc:31:28:09:d4:76:68: ab:ce:c4:7c:c4:dd:24:fd:e3:50:eb:d6:ee:b2:bb: 7e:58:91:f1:31:de:f9:47:2b:22:b9:3a:52:7b:cf: eb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1F:DA:76:4F:8D:9D:C8:C5:17:D0:52:C4:15:A4:46:98:28:94:EF X509v3 Authority Key Identifier: keyid:DA:87:66:A9:08:51:AE:44:D7:6B:85:63:D8:35:86:F0:16:4F:E5:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/DA8766A90851AE44D76B8563D83586F0164FE5CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8766A90851AE44D76B8563D83586F0164FE5CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3dedc033-cd4d-4620-9372-e6e039fc06b9/0/3130332e3134372e35332e302f32342d3234203d3e20313339393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.53.0/24 Signature Algorithm: sha256WithRSAEncryption ee:11:02:65:34:ba:fb:da:b8:27:4c:b4:5d:be:e5:68:8d:9a: 92:8c:2f:77:a1:e5:43:74:a0:78:b7:22:69:3e:5b:0f:7e:a1: b2:b7:26:ea:7a:58:bf:23:b3:5d:e1:4c:36:4e:23:11:63:dd: 7d:3e:1f:d7:bd:42:50:82:9a:83:0f:e7:c6:92:c0:32:c6:24: 38:42:eb:2c:d3:41:be:1b:ff:d4:97:c8:51:e0:0f:31:58:12: a4:ce:00:c6:94:26:a2:52:d6:23:a4:f8:fd:68:2d:48:4c:53: 11:16:4a:15:4e:fc:7b:32:26:1c:3f:95:ef:a0:17:dc:de:d7: eb:45:4a:95:20:e6:66:15:4b:34:17:5e:18:44:5e:d2:6b:13: 75:4a:01:95:fe:de:67:5f:5e:7d:38:2d:6f:e3:8d:c6:4e:e5: 72:5c:e2:3a:c1:f3:bd:ed:38:4f:7b:df:fc:ce:8a:fc:15:fa: 14:3b:fb:2d:3c:77:a9:05:8d:e1:65:e4:3e:d8:27:b0:ca:a5: 2a:65:1c:55:b9:a6:ee:ee:f6:43:a9:ea:b9:6e:f0:06:0e:99: 2b:30:69:a4:f0:ea:92:8e:fe:18:21:08:54:12:84:af:62:8b: 29:3f:10:75:db:4e:e8:11:d1:54:af:74:3d:52:e4:c8:47:04: e6:13:32:24 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUi8hfvXEKuPe8Ocv3/DmlU/AuRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAx NjRGRTVDRjAeFw0yNjA0MDcxODU1MDBaFw0yNzA0MDYxOTAwMDBaMDMxMTAvBgNV BAMTKDk1MUZEQTc2NEY4RDlEQzhDNTE3RDA1MkM0MTVBNDQ2OTgyODk0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWSzoQYn09p6VXO/kggYEv5AR tGsJSwA1m+tOxwJxLFx+DbtM/fnFAAtLzTu69Sm2Ru6j8lrkSE3/AF8wwx/7FvEW N9phRf53E7Kj5dkRV+5IqmBk0chBit4Ys9V99xdvBe9VWucffgJE4qmYtR4SCt/9 4UclAf1Fbo5fYi3fH85H+pF68K94Ogk3f9X1HQEODAm6wj+zaGKm39yGfyanMHTk H+SIQAIZe6JmB5KAIG8zTbyJS6A4RuPoVYIs0XPiYHQMgfRwNe4mda+sxAhbrhgk CYNWDVr0/DEoCdR2aKvOxHzE3ST941Dr1u6yu35YkfEx3vlHKyK5OlJ7z+s5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlR/adk+NncjFF9BSxBWkRpgolO8wHwYDVR0j BBgwFoAU2odmqQhRrkTXa4Vj2DWG8BZP5c8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGVkYzAzMy1jZDRkLTQ2MjAtOTM3Mi1lNmUwMzlmYzA2YjkvMC9EQTg3NjZBOTA4 NTFBRTQ0RDc2Qjg1NjNEODM1ODZGMDE2NEZFNUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4NzY2QTkwODUxQUU0NEQ3NkI4NTYzRDgzNTg2RjAxNjRG RTVDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZWRjMDMzLWNkNGQtNDYyMC05 MzcyLWU2ZTAzOWZjMDZiOS8wLzMxMzAzMzJlMzEzNDM3MmUzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5M1MA0GCSqG SIb3DQEBCwUAA4IBAQDuEQJlNLr72rgnTLRdvuVojZqSjC93oeVDdKB4tyJpPlsP fqGytybqeli/I7Nd4Uw2TiMRY919Ph/XvUJQgpqDD+fGksAyxiQ4Quss00G+G//U l8hR4A8xWBKkzgDGlCaiUtYjpPj9aC1ITFMRFkoVTvx7MiYcP5XvoBfc3tfrRUqV IOZmFUs0F14YRF7SaxN1SgGV/t5nX159OC1v443GTuVyXOI6wfO97ThPe9/8zor8 FfoUO/stPHepBY3hZeQ+2CewyqUqZRxVuabu7vZDqeq5bvAGDpkrMGmk8OqSjv4Y IQhUEoSvYospPxB1207oEdFUr3Q9UuTIRwTmEzIk -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:56 2026 by rpki-client