$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa File: 3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (raw, json) Hash identifier: PR6tCmOpsN34UaTOcKKylyBUbEJHRGhqi70NsXysHs0= Subject key identifier: 86:28:FA:91:E2:E1:03:41:DC:41:50:44:7B:16:EF:BC:ED:3F:B3:46 Certificate issuer: /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Certificate serial: 17734BC1B8896F26D86E75708D6766D77F35989E Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa Signing time: Tue 03 Feb 2026 05:03:08 +0000 ROA not before: Tue 03 Feb 2026 04:58:08 +0000 ROA not after: Tue 02 Feb 2027 05:03:08 +0000 asID: 139989 IP address blocks: 103.148.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:73:4b:c1:b8:89:6f:26:d8:6e:75:70:8d:67:66:d7:7f:35:98:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0 Validity Not Before: Feb 3 04:58:08 2026 GMT Not After : Feb 2 05:03:08 2027 GMT Subject: CN=8628FA91E2E10341DC4150447B16EFBCED3FB346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:41:92:4f:a2:c5:78:95:44:79:71:35:d4:5a: c6:2d:90:67:23:08:b7:ba:4f:8c:23:4a:96:30:19: 45:d5:7e:42:3c:19:e4:79:84:4b:98:a5:63:ca:52: f4:08:58:b0:f9:bc:0b:2a:5c:74:e8:c2:42:f9:7a: b7:fc:bd:51:f6:d9:03:b1:b3:9f:12:e3:0a:e6:d4: ab:15:46:70:09:1a:93:fa:37:a3:e7:6b:39:46:96: b7:24:1a:c8:1f:8e:e1:de:6e:96:28:c5:ba:4b:f3: 8d:41:47:55:2e:bc:86:3f:42:9b:d8:4f:47:e1:1b: 0b:d7:eb:59:98:9b:ae:e7:89:fa:43:57:a8:53:6c: 74:15:39:a7:9b:e0:ac:ed:a0:d9:10:4a:b9:e4:7c: 1b:13:42:6b:16:de:01:cb:49:2e:50:68:80:a1:28: 7c:13:10:25:8d:10:3f:4a:2b:bb:2d:6f:f4:64:24: 44:48:98:69:89:8c:b2:84:d3:22:60:ac:16:61:ea: 8e:60:d8:89:d6:c2:48:0a:ae:e7:4b:28:9c:98:2b: 07:0a:89:29:a1:09:3d:c9:3a:5b:67:a7:3c:bf:e9: 2d:70:07:0e:93:16:30:f7:a2:14:89:73:8a:bf:7f: 7c:67:af:54:a0:23:ca:e8:f3:33:23:bc:06:fe:e2: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:28:FA:91:E2:E1:03:41:DC:41:50:44:7B:16:EF:BC:ED:3F:B3:46 X509v3 Authority Key Identifier: keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.76.0/23 Signature Algorithm: sha256WithRSAEncryption 23:72:1d:73:06:28:0b:6b:34:2b:a1:04:27:20:bb:c0:57:24: 3b:e7:05:04:ce:d2:d0:e7:b3:e9:0e:a1:bf:0d:17:78:27:d8: 60:4b:85:cc:cb:0f:d4:5a:70:c8:d7:2e:26:6a:0a:f5:33:c6: f8:7f:41:49:4c:3b:31:eb:a0:50:ab:e0:8c:bd:30:53:a0:89: fe:65:1d:06:da:4a:6d:95:cd:6a:59:75:fa:1b:c1:ab:e3:74: 32:1f:53:14:c3:e7:8e:f2:40:70:b7:67:35:a4:f7:6c:fa:18: 1d:fc:3b:b8:fb:c7:5a:61:08:bf:d5:1a:93:5f:c6:90:c5:8a: 5f:6f:87:6c:d8:69:e2:de:3b:66:81:a6:47:96:72:99:35:20: 36:00:3b:f1:36:8f:20:a5:d0:bf:27:66:45:33:08:e5:f2:70: ac:3c:29:b7:a4:64:34:4d:03:9d:4c:5e:31:cd:54:4f:21:77: ed:18:a5:4b:68:46:ba:37:7a:db:25:50:10:6c:d4:24:d9:4c: ec:78:b4:22:3d:08:ce:31:e7:bb:47:e6:30:04:d2:7d:d1:7c: ca:af:da:d1:04:14:ac:ed:59:45:13:93:7f:e0:25:ce:e4:e3: 97:95:9f:d6:89:2d:9b:eb:6c:96:ea:62:d9:05:92:72:fd:3c: f7:4e:9f:46 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF3NLwbiJbybYbnVwjWdm1381mJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0 MkQ4MzVEMDAeFw0yNjAyMDMwNDU4MDhaFw0yNzAyMDIwNTAzMDhaMDMxMTAvBgNV BAMTKDg2MjhGQTkxRTJFMTAzNDFEQzQxNTA0NDdCMTZFRkJDRUQzRkIzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QZJPosV4lUR5cTXUWsYtkGcj CLe6T4wjSpYwGUXVfkI8GeR5hEuYpWPKUvQIWLD5vAsqXHTowkL5erf8vVH22QOx s58S4wrm1KsVRnAJGpP6N6PnazlGlrckGsgfjuHebpYoxbpL841BR1UuvIY/QpvY T0fhGwvX61mYm67nifpDV6hTbHQVOaeb4KztoNkQSrnkfBsTQmsW3gHLSS5QaICh KHwTECWNED9KK7stb/RkJERImGmJjLKE0yJgrBZh6o5g2InWwkgKrudLKJyYKwcK iSmhCT3JOltnpzy/6S1wBw6TFjD3ohSJc4q/f3xnr1SgI8ro8zMjvAb+4r63AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhij6keLhA0HcQVBEexbvvO0/s0YwHwYDVR0j BBgwFoAUWgy+Lbz5iDVp+MJL+55ZVELYNdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDMxNzQ2ZS1iMGY2LTQ4MjctOGM0ZS1iODE5MmRlY2MzOWEvMC81QTBDQkUyREJD Rjk4ODM1NjlGOEMyNEJGQjlFNTk1NDQyRDgzNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEwQ0JFMkRCQ0Y5ODgzNTY5RjhDMjRCRkI5RTU5NTQ0MkQ4 MzVEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMzE3NDZlLWIwZjYtNDgyNy04 YzRlLWI4MTkyZGVjYzM5YS8wLzMxMzAzMzJlMzEzNDM4MmUzNzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5RMMA0GCSqG SIb3DQEBCwUAA4IBAQAjch1zBigLazQroQQnILvAVyQ75wUEztLQ57PpDqG/DRd4 J9hgS4XMyw/UWnDI1y4magr1M8b4f0FJTDsx66BQq+CMvTBToIn+ZR0G2kptlc1q WXX6G8Gr43QyH1MUw+eO8kBwt2c1pPds+hgd/Du4+8daYQi/1RqTX8aQxYpfb4ds 2Gni3jtmgaZHlnKZNSA2ADvxNo8gpdC/J2ZFMwjl8nCsPCm3pGQ0TQOdTF4xzVRP IXftGKVLaEa6N3rbJVAQbNQk2UzseLQiPQjOMee7R+YwBNJ90XzKr9rRBBSs7VlF E5N/4CXO5OOXlZ/WiS2b62yW6mLZBZJy/Tz3Tp9G -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:14 2026 by rpki-client