$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa File: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (raw, json) Hash identifier: L8aLRD8MqNnwy6amY9WuFOXX9HpXdpUvSsxC7oIswc4= Subject key identifier: 49:47:7D:49:42:67:9C:74:8E:9C:FF:F4:CE:4D:78:DE:47:3E:64:27 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 26E4520A794B3BBDCBC4A7D638921FF634F66269 Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa Signing time: Fri 17 Apr 2026 04:01:49 +0000 ROA not before: Fri 17 Apr 2026 03:56:49 +0000 ROA not after: Fri 16 Apr 2027 04:01:49 +0000 asID: 142370 IP address blocks: 103.227.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e4:52:0a:79:4b:3b:bd:cb:c4:a7:d6:38:92:1f:f6:34:f6:62:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Apr 17 03:56:49 2026 GMT Not After : Apr 16 04:01:49 2027 GMT Subject: CN=49477D4942679C748E9CFFF4CE4D78DE473E6427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:b8:54:6a:d6:c8:68:a7:e1:15:90:88:c6: 2a:28:14:8c:58:51:8e:8d:4e:91:b6:69:23:9d:ec: 4a:71:ad:9b:cf:31:f0:ed:73:89:09:67:54:55:38: 02:c2:e5:d5:e6:d7:13:7d:fc:e7:23:50:31:cc:51: 69:1e:22:a3:95:52:f4:19:94:56:4f:16:ec:28:21: e4:27:35:32:5e:f5:f5:d1:59:04:ee:b9:66:27:4b: 65:c7:83:d3:59:2c:c5:c0:59:3e:cc:f9:5d:65:ce: 34:ca:18:56:20:4b:2e:17:55:e9:2e:3c:16:ac:65: 3c:6b:77:ec:e8:e9:ea:c3:ca:f5:0e:ce:7b:22:35: 52:56:3f:57:91:4b:0e:4e:67:0f:53:e0:26:cb:69: e3:8b:93:77:f4:b7:74:7b:52:c4:a0:54:05:4d:b5: 25:40:b2:71:9c:1d:97:05:03:3f:e0:ff:43:5f:44: 9e:98:bf:5c:e0:41:62:db:0e:a1:86:37:ad:49:fb: d3:0a:50:c6:f7:43:5e:32:16:37:b5:c3:ce:29:11: 0e:95:59:94:80:c7:bd:8e:88:9e:ef:17:20:0f:d8: d5:19:f9:10:d6:ba:73:19:fb:26:cb:3a:14:76:a7: b9:2c:f0:a7:f1:e8:9e:d4:2e:aa:63:fd:cb:64:cf: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:7D:49:42:67:9C:74:8E:9C:FF:F4:CE:4D:78:DE:47:3E:64:27 X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.186.0/24 Signature Algorithm: sha256WithRSAEncryption 90:f4:aa:40:12:6a:c3:ac:9e:ca:da:26:c2:7f:ae:67:06:24: 29:bd:30:ee:33:8f:ab:b6:cc:37:2b:65:87:af:49:fb:d0:c5: fe:ab:c2:6a:2c:67:6a:78:84:b7:61:e4:99:85:bb:02:f1:0d: a9:7b:a2:89:32:03:35:a7:f0:b2:69:d0:75:15:9e:9b:73:fc: 59:d7:a6:60:c7:12:39:d1:d3:39:b9:35:07:01:6c:36:44:2a: 80:ba:28:ad:04:91:24:41:70:6a:c2:3c:b6:3d:36:8f:c9:a0: 8c:93:1b:b2:4d:b7:34:c2:0e:f0:a8:33:1d:8c:62:71:6e:38: 20:3c:69:8b:f9:66:3a:e6:ea:25:32:a1:9e:83:40:b8:c4:da: ca:64:a8:b5:b7:6a:19:67:74:7b:6a:83:03:7c:fc:d5:4d:ed: 6d:77:ea:4b:04:a0:e5:63:e6:bc:c1:33:f9:d0:c6:73:6c:93: 81:a1:83:8c:9b:90:a5:16:61:e3:4c:67:dc:2e:d1:55:17:3a: fd:2d:fb:4c:e2:e5:4d:d7:78:e5:50:64:cd:eb:7e:af:35:47: 75:f9:27:15:c2:53:13:f2:a7:4a:24:0d:ae:33:d8:c2:36:d8: 38:03:17:a0:5d:2f:dc:02:51:60:bc:4b:d9:52:a0:0d:f8:26: 73:c3:11:a4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJuRSCnlLO73LxKfWOJIf9jT2YmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNjA0MTcwMzU2NDlaFw0yNzA0MTYwNDAxNDlaMDMxMTAvBgNV BAMTKDQ5NDc3RDQ5NDI2NzlDNzQ4RTlDRkZGNENFNEQ3OERFNDczRTY0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8C7hUatbIaKfhFZCIxiooFIxY UY6NTpG2aSOd7EpxrZvPMfDtc4kJZ1RVOALC5dXm1xN9/OcjUDHMUWkeIqOVUvQZ lFZPFuwoIeQnNTJe9fXRWQTuuWYnS2XHg9NZLMXAWT7M+V1lzjTKGFYgSy4XVeku PBasZTxrd+zo6erDyvUOznsiNVJWP1eRSw5OZw9T4CbLaeOLk3f0t3R7UsSgVAVN tSVAsnGcHZcFAz/g/0NfRJ6Yv1zgQWLbDqGGN61J+9MKUMb3Q14yFje1w84pEQ6V WZSAx72OiJ7vFyAP2NUZ+RDWunMZ+ybLOhR2p7ks8Kfx6J7ULqpj/ctkzxpnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSUd9SUJnnHSOnP/0zk143kc+ZCcwHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiMzg4ZjZlLTk5NzQtNDQ1Ny1h ZjRiLTVjOWM4MmY1MGU5Ny8wLzMxMzAzMzJlMzIzMjM3MmUzMTM4MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn47owDQYJ KoZIhvcNAQELBQADggEBAJD0qkASasOsnsraJsJ/rmcGJCm9MO4zj6u2zDcrZYev SfvQxf6rwmosZ2p4hLdh5JmFuwLxDal7ookyAzWn8LJp0HUVnptz/FnXpmDHEjnR 0zm5NQcBbDZEKoC6KK0EkSRBcGrCPLY9No/JoIyTG7JNtzTCDvCoMx2MYnFuOCA8 aYv5Zjrm6iUyoZ6DQLjE2spkqLW3ahlndHtqgwN8/NVN7W136ksEoOVj5rzBM/nQ xnNsk4Ghg4ybkKUWYeNMZ9wu0VUXOv0t+0zi5U3XeOVQZM3rfq81R3X5JxXCUxPy p0okDa4z2MI22DgDF6BdL9wCUWC8S9lSoA34JnPDEaQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:41:14 2026 by rpki-client