$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa File: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (raw, json) Hash identifier: 3zQk9upVSJWkItBhOHjhF9LmJ3TZRFQ3YyxRO9QMpwQ= Subject key identifier: B9:80:56:FC:5E:B4:FF:BD:46:A0:71:37:90:2E:20:EC:2E:25:77:1E Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 2F6A492E4BB9417A5DFA6FA24B9FE73ABD3542DB Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa Signing time: Fri 17 Apr 2026 04:01:49 +0000 ROA not before: Fri 17 Apr 2026 03:56:49 +0000 ROA not after: Fri 16 Apr 2027 04:01:49 +0000 asID: 142370 IP address blocks: 103.227.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6a:49:2e:4b:b9:41:7a:5d:fa:6f:a2:4b:9f:e7:3a:bd:35:42:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Apr 17 03:56:49 2026 GMT Not After : Apr 16 04:01:49 2027 GMT Subject: CN=B98056FC5EB4FFBD46A07137902E20EC2E25771E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:62:ef:7b:e8:29:5a:49:f2:f2:7b:d3:10: dc:1a:bb:2b:44:33:2b:79:c6:68:63:bb:69:2e:c2: 16:ee:04:54:df:bb:72:4b:fa:bb:0c:dd:e6:10:ef: 96:3b:10:9f:5d:bd:f2:a7:e7:f8:ad:99:c6:5d:65: 8e:be:25:86:be:ea:de:40:5d:45:44:cb:90:c5:7a: f7:12:0e:b6:3c:ff:7b:a8:50:7d:a8:f3:27:47:09: aa:dc:67:3c:37:6a:9d:a3:93:9d:f9:e4:5e:8f:f5: c1:78:03:c8:a4:f7:59:fd:d1:2a:9d:d1:7a:c9:a3: 26:12:f8:1c:13:d5:4c:cc:71:25:2b:0f:17:10:c9: 13:14:53:13:00:e2:9a:e0:9c:fa:e5:9b:99:35:90: d3:11:ed:dc:d3:9b:54:75:59:9f:5a:e0:69:51:40: fa:d5:47:6c:81:50:34:21:a2:3c:79:1d:60:d6:95: d4:69:61:da:aa:d5:55:0e:9b:ca:51:3d:1f:f6:8e: 9e:cf:b0:dc:e9:e1:34:58:19:af:2c:6d:8f:35:b3: c7:b3:28:dd:2c:9f:ac:ca:f1:11:95:96:b2:47:a7: 93:bf:23:fd:a5:99:56:c5:d7:d3:56:28:be:12:41: 90:27:c6:ed:46:fc:12:27:6c:96:95:64:73:3d:7b: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:80:56:FC:5E:B4:FF:BD:46:A0:71:37:90:2E:20:EC:2E:25:77:1E X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.186.0/23 Signature Algorithm: sha256WithRSAEncryption d9:96:7c:a7:9c:f1:69:87:41:6c:de:f3:c0:7e:99:d5:c3:f5: 84:61:cd:16:e6:08:8d:e6:0e:8b:1d:3a:df:c0:dc:41:9d:5e: 41:ab:00:41:39:bc:80:4d:15:99:d4:41:2a:f8:76:36:88:c2: 1d:3a:85:6b:9e:79:ec:93:2e:86:b7:7c:d8:b3:5c:c9:ac:16: 61:07:17:c1:bf:df:77:df:78:b3:b6:66:2a:e1:a1:13:96:08: 4b:db:02:13:12:9a:e3:f8:cc:f4:7c:fe:f8:da:8d:19:d5:9d: 53:48:5c:18:b3:ab:b9:00:d7:da:d0:91:eb:9a:e6:70:2d:5c: 24:f7:a7:c2:45:b9:d7:17:4c:fa:7b:14:51:3d:d4:8c:b9:64: 31:14:97:e6:63:72:b6:89:d6:43:b9:cb:55:b6:a1:ce:bb:85: 63:ed:f1:65:66:17:f2:20:0f:03:5d:56:f4:1a:61:cc:44:fa: d7:0b:fc:25:e3:c1:2f:b0:65:90:ba:d9:1f:79:d4:56:35:61: b8:ed:9e:86:f9:5b:7f:ed:48:ca:f5:78:ee:49:4d:3a:02:6b: 3a:f1:3b:5a:38:61:bd:6d:75:60:2c:02:45:ee:7a:8c:92:0a: d7:de:9e:49:45:00:ee:0c:c3:b4:c8:14:fa:b3:a0:3c:e2:35: bc:87:31:5c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUL2pJLku5QXpd+m+iS5/nOr01QtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNjA0MTcwMzU2NDlaFw0yNzA0MTYwNDAxNDlaMDMxMTAvBgNV BAMTKEI5ODA1NkZDNUVCNEZGQkQ0NkEwNzEzNzkwMkUyMEVDMkUyNTc3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkWLve+gpWkny8nvTENwauytE Myt5xmhju2kuwhbuBFTfu3JL+rsM3eYQ75Y7EJ9dvfKn5/itmcZdZY6+JYa+6t5A XUVEy5DFevcSDrY8/3uoUH2o8ydHCarcZzw3ap2jk5355F6P9cF4A8ik91n90Sqd 0XrJoyYS+BwT1UzMcSUrDxcQyRMUUxMA4prgnPrlm5k1kNMR7dzTm1R1WZ9a4GlR QPrVR2yBUDQhojx5HWDWldRpYdqq1VUOm8pRPR/2jp7PsNzp4TRYGa8sbY81s8ez KN0sn6zK8RGVlrJHp5O/I/2lmVbF19NWKL4SQZAnxu1G/BInbJaVZHM9e2/7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUuYBW/F60/71GoHE3kC4g7C4ldx4wHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiMzg4ZjZlLTk5NzQtNDQ1Ny1h ZjRiLTVjOWM4MmY1MGU5Ny8wLzMxMzAzMzJlMzIzMjM3MmUzMTM4MzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn47owDQYJ KoZIhvcNAQELBQADggEBANmWfKec8WmHQWze88B+mdXD9YRhzRbmCI3mDosdOt/A 3EGdXkGrAEE5vIBNFZnUQSr4djaIwh06hWueeeyTLoa3fNizXMmsFmEHF8G/33ff eLO2ZirhoROWCEvbAhMSmuP4zPR8/vjajRnVnVNIXBizq7kA19rQkeua5nAtXCT3 p8JFudcXTPp7FFE91Iy5ZDEUl+ZjcraJ1kO5y1W2oc67hWPt8WVmF/IgDwNdVvQa YcxE+tcL/CXjwS+wZZC62R951FY1Ybjtnob5W3/tSMr1eO5JTToCazrxO1o4Yb1t dWAsAkXueoySCtfenklFAO4Mw7TIFPqzoDziNbyHMVw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:38:57 2026 by rpki-client