$ rpki-client -vvf repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa File: 3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (raw, json) Hash identifier: nlnGPxCuH+cOfFfVViDDGUvqLoe9398fU4PoM9EiIUw= Subject key identifier: 59:5E:79:56:E0:CD:4C:A6:70:C1:0F:71:CF:0C:BE:FB:4F:F4:11:42 Certificate issuer: /CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Certificate serial: 4E634A7B44CB55F0452A4457111FF12B744CFC78 Authority key identifier: A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa Signing time: Fri 10 Apr 2026 09:01:14 +0000 ROA not before: Fri 10 Apr 2026 08:56:14 +0000 ROA not after: Fri 09 Apr 2027 09:01:14 +0000 asID: 142389 IP address blocks: 103.178.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:63:4a:7b:44:cb:55:f0:45:2a:44:57:11:1f:f1:2b:74:4c:fc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC Validity Not Before: Apr 10 08:56:14 2026 GMT Not After : Apr 9 09:01:14 2027 GMT Subject: CN=595E7956E0CD4CA670C10F71CF0CBEFB4FF41142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9b:21:25:ff:35:e2:0c:f4:16:15:89:6f:d9: 98:71:bd:fd:a1:5b:d4:2e:0c:a9:61:de:68:b4:99: e9:7f:6b:6b:56:b0:fc:08:93:89:ef:17:fb:a8:79: 1e:b6:64:c5:2d:42:21:88:c2:3f:da:40:88:4f:4c: 7c:93:ce:88:ac:e7:5a:e4:1a:b8:6f:a9:8b:da:6e: da:b0:d5:4c:d6:87:be:7c:da:70:4e:40:3e:f8:76: ed:38:54:c7:ea:fe:a9:b2:ce:41:df:8e:80:d9:2d: 1a:68:cf:00:4d:b3:c0:10:09:ca:4d:68:e3:c6:83: c8:bc:54:a7:18:d0:4c:8f:44:e1:9c:88:81:17:41: f0:15:2e:e0:6c:1f:db:87:2d:c2:52:40:04:c2:0c: 89:e0:d6:74:7c:e3:d1:e7:70:b9:b1:e6:6d:57:42: 4d:9d:99:6c:af:6b:62:65:97:c1:27:ca:91:4d:55: ee:d0:7b:10:08:44:d1:2a:f5:d6:c6:8e:75:b4:d4: 89:a2:f1:ae:3c:9e:81:ec:b4:a3:b5:95:17:f3:47: bd:f2:a0:25:4a:58:c5:a2:14:87:39:7d:95:f8:69: 1e:6f:0d:28:22:20:dc:c5:9c:c2:4c:be:db:b3:9f: 83:48:fb:03:88:00:69:3b:1c:e3:61:24:70:03:2a: 34:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5E:79:56:E0:CD:4C:A6:70:C1:0F:71:CF:0C:BE:FB:4F:F4:11:42 X509v3 Authority Key Identifier: keyid:A9:CC:42:A0:5B:0D:6C:A3:79:60:F7:C2:AB:E4:B4:64:DB:56:AC:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9CC42A05B0D6CA37960F7C2ABE4B464DB56ACAC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d79e7a7-1aae-4e52-bac3-8f7c67ae0a04/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.125.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:22:d4:76:f7:63:71:7e:70:1e:f0:f4:29:56:5c:f3:f5:8b: 0f:10:30:b4:26:aa:95:09:2a:de:e3:25:6b:55:a0:04:74:b8: 1c:58:8c:83:01:c7:51:36:f0:5c:4e:e4:22:d5:1e:82:21:f0: e5:65:7e:6f:20:bf:52:02:62:6e:2d:98:c6:b8:81:16:76:0e: 4e:31:c2:7a:b0:a6:b9:53:50:92:56:f9:6d:a6:28:ae:34:5d: db:7c:48:9e:39:cc:a8:e3:c0:97:2f:19:b1:01:91:37:46:71: 41:32:6e:f7:d1:3f:b1:d5:cc:0d:78:a0:3d:82:d2:df:10:9f: f7:eb:d3:e2:be:19:9a:d7:28:35:80:46:ab:3e:27:16:18:3d: 80:8b:2b:51:c3:14:05:35:e5:f4:f4:39:1c:6f:3c:c0:59:9c: 63:d7:ba:72:26:72:ac:0f:f7:b8:36:5b:0e:6e:92:8d:d9:85: 8d:d8:ce:f7:f5:62:58:91:b5:a6:67:63:38:00:0f:dd:dd:45: 1e:5d:46:07:54:2c:61:a1:64:4c:31:93:19:53:79:22:c0:34: fa:22:b1:42:63:08:98:28:1f:0d:a9:91:ff:9d:03:7c:61:c0: f7:2a:9d:58:49:ca:d4:70:29:44:89:f5:12:1e:34:79:55:ab: 7b:4f:d8:cc -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTmNKe0TLVfBFKkRXER/xK3RM/HgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjRE QjU2QUNBQzAeFw0yNjA0MTAwODU2MTRaFw0yNzA0MDkwOTAxMTRaMDMxMTAvBgNV BAMTKDU5NUU3OTU2RTBDRDRDQTY3MEMxMEY3MUNGMENCRUZCNEZGNDExNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcmyEl/zXiDPQWFYlv2Zhxvf2h W9QuDKlh3mi0mel/a2tWsPwIk4nvF/uoeR62ZMUtQiGIwj/aQIhPTHyTzois51rk GrhvqYvabtqw1UzWh7582nBOQD74du04VMfq/qmyzkHfjoDZLRpozwBNs8AQCcpN aOPGg8i8VKcY0EyPROGciIEXQfAVLuBsH9uHLcJSQATCDIng1nR849HncLmx5m1X Qk2dmWyva2Jll8EnypFNVe7QexAIRNEq9dbGjnW01Imi8a48noHstKO1lRfzR73y oCVKWMWiFIc5fZX4aR5vDSgiINzFnMJMvtuzn4NI+wOIAGk7HONhJHADKjThAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUWV55VuDNTKZwwQ9xzwy++0/0EUIwHwYDVR0j BBgwFoAUqcxCoFsNbKN5YPfCq+S0ZNtWrKwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDc5ZTdhNy0xYWFlLTRlNTItYmFjMy04ZjdjNjdhZTBhMDQvMC9BOUNDNDJBMDVC MEQ2Q0EzNzk2MEY3QzJBQkU0QjQ2NERCNTZBQ0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlDQzQyQTA1QjBENkNBMzc5NjBGN0MyQUJFNEI0NjREQjU2 QUNBQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkNzllN2E3LTFhYWUtNGU1Mi1i YWMzLThmN2M2N2FlMGEwNC8wLzMxMzAzMzJlMzEzNzM4MmUzMTMyMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsn0wDQYJ KoZIhvcNAQELBQADggEBABoi1Hb3Y3F+cB7w9ClWXPP1iw8QMLQmqpUJKt7jJWtV oAR0uBxYjIMBx1E28FxO5CLVHoIh8OVlfm8gv1ICYm4tmMa4gRZ2Dk4xwnqwprlT UJJW+W2mKK40Xdt8SJ45zKjjwJcvGbEBkTdGcUEybvfRP7HVzA14oD2C0t8Qn/fr 0+K+GZrXKDWARqs+JxYYPYCLK1HDFAU15fT0ORxvPMBZnGPXunImcqwP97g2Ww5u ko3ZhY3Yzvf1YliRtaZnYzgAD93dRR5dRgdULGGhZEwxkxlTeSLANPoisUJjCJgo Hw2pkf+dA3xhwPcqnVhJytRwKUSJ9RIeNHlVq3tP2Mw= -----END CERTIFICATE-----Generated at Fri Apr 17 17:17:44 2026 by rpki-client