$ rpki-client -vvf repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa File: 3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa (raw, json) Hash identifier: mD/ESrmQwCfNKshLq+hS3tmoAGFbY96sDj1FQWwEJBI= Subject key identifier: AD:EB:2E:2E:89:25:3F:7B:30:8D:DE:F9:20:BA:44:14:2D:35:F5:E3 Certificate issuer: /CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Certificate serial: 72305A31308AB0AA9071940EF959A9B22153C8E9 Authority key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa Signing time: Mon 13 Apr 2026 05:00:01 +0000 ROA not before: Mon 13 Apr 2026 04:55:01 +0000 ROA not after: Mon 12 Apr 2027 05:00:01 +0000 asID: 149945 IP address blocks: 103.14.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:30:5a:31:30:8a:b0:aa:90:71:94:0e:f9:59:a9:b2:21:53:c8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Validity Not Before: Apr 13 04:55:01 2026 GMT Not After : Apr 12 05:00:01 2027 GMT Subject: CN=ADEB2E2E89253F7B308DDEF920BA44142D35F5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:30:b1:a0:e0:a1:0b:cb:dd:50:01:9c:a4:13: df:6b:d7:7c:b1:cd:65:93:fb:95:4e:1e:36:be:ef: e8:c8:56:40:85:f3:03:88:3d:a7:32:dc:52:db:b4: e8:bd:91:82:a9:52:84:80:2e:cc:72:98:fb:e4:63: 93:8c:1c:d1:68:46:9a:49:97:bd:e3:06:07:9a:5f: 4f:5d:99:dd:ae:b6:35:15:dd:72:ba:c3:ec:63:47: 7d:92:39:bc:51:34:53:18:b0:3a:9b:c0:1e:04:e2: 15:fa:e0:da:32:8e:96:a9:35:0f:71:a8:ac:c3:1a: d8:76:02:cf:2f:3c:52:be:8e:6f:03:2b:57:cb:5f: 33:8e:64:38:08:17:27:17:30:be:1f:f1:1a:b0:56: f7:ba:24:8b:14:9a:99:55:eb:02:03:d4:64:83:11: fe:32:16:c7:c9:99:31:2b:ad:37:88:e7:b3:34:62: 40:d2:85:2b:e9:15:08:ba:f3:11:f6:da:f3:d8:a4: af:58:20:7c:ca:37:72:d9:39:7b:cf:9f:15:53:17: f4:03:7c:a8:88:68:b4:08:73:60:ea:63:48:7b:3e: 26:5a:e7:5a:a1:c3:49:c2:68:cc:dc:b1:c5:2c:41: 86:58:b4:e8:ce:d8:a5:27:e9:3b:fd:06:3b:c5:29: f9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EB:2E:2E:89:25:3F:7B:30:8D:DE:F9:20:BA:44:14:2D:35:F5:E3 X509v3 Authority Key Identifier: keyid:40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/3130332e31342e3233312e302f32342d3234203d3e20313439393435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.231.0/24 Signature Algorithm: sha256WithRSAEncryption 93:fe:8b:a0:6c:52:c6:0d:54:8e:f1:33:67:0c:c6:0b:85:09: 14:17:f7:0c:fc:53:03:b1:6b:2d:4a:f2:b8:64:28:ef:28:50: 68:b8:20:88:94:5e:0c:79:74:41:98:a9:4a:c9:67:d2:b2:d3: b5:43:a3:76:2e:7c:e5:37:18:61:18:56:6e:ad:41:7c:42:33: 7c:bb:ae:71:42:b6:33:26:c9:72:29:f6:6c:3d:31:0b:aa:3b: e7:d8:d3:c2:0b:51:c8:76:53:b3:b6:ae:25:3c:90:ff:0b:e2: a1:34:29:86:08:c2:1b:1b:bd:cd:a8:64:71:4a:f4:9b:09:cf: 92:c6:b4:9d:63:ba:79:b4:16:36:f2:af:16:12:11:7b:f8:b5: 10:6f:40:c5:72:73:1d:96:a6:6c:56:1a:99:22:80:c5:f0:6e: 64:a4:c8:00:53:f2:23:5a:41:0c:36:e9:7f:98:f7:2b:4d:83: 4f:3a:dd:30:92:44:85:b4:f6:06:99:05:2e:3f:01:ef:0b:3f: 62:e8:61:18:9f:32:ed:bb:13:92:57:0a:fc:f5:99:6b:fe:da: 0b:78:33:b7:b7:dc:39:29:1a:6b:70:7d:de:66:31:f2:d9:96: b0:b6:7b:5b:e0:2b:db:cf:ac:5a:f6:63:fc:02:14:e1:35:50: 00:ec:07:f6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcjBaMTCKsKqQcZQO+VmpsiFTyOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5 MTVBQzc2RDAeFw0yNjA0MTMwNDU1MDFaFw0yNzA0MTIwNTAwMDFaMDMxMTAvBgNV BAMTKEFERUIyRTJFODkyNTNGN0IzMDhEREVGOTIwQkE0NDE0MkQzNUY1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqMLGg4KELy91QAZykE99r13yx zWWT+5VOHja+7+jIVkCF8wOIPacy3FLbtOi9kYKpUoSALsxymPvkY5OMHNFoRppJ l73jBgeaX09dmd2utjUV3XK6w+xjR32SObxRNFMYsDqbwB4E4hX64NoyjpapNQ9x qKzDGth2As8vPFK+jm8DK1fLXzOOZDgIFycXML4f8RqwVve6JIsUmplV6wID1GSD Ef4yFsfJmTErrTeI57M0YkDShSvpFQi68xH22vPYpK9YIHzKN3LZOXvPnxVTF/QD fKiIaLQIc2DqY0h7PiZa51qhw0nCaMzcscUsQYZYtOjO2KUn6Tv9BjvFKfkBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUresuLoklP3swjd75ILpEFC019eMwHwYDVR0j BBgwFoAUQHBqXM+olsjuDB+aW23NoZFax20wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMC80MDcwNkE1Q0NG QTg5NkM4RUUwQzFGOUE1QjZEQ0RBMTkxNUFDNzZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3MDZBNUNDRkE4OTZDOEVFMEMxRjlBNUI2RENEQTE5MTVB Qzc2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkZjQyOTZmLTFjYTktNDVmYy1i YjA4LTg0MTM1ZWIwMGZhNy8wLzMxMzAzMzJlMzEzNDJlMzIzMzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw7nMA0GCSqG SIb3DQEBCwUAA4IBAQCT/ougbFLGDVSO8TNnDMYLhQkUF/cM/FMDsWstSvK4ZCjv KFBouCCIlF4MeXRBmKlKyWfSstO1Q6N2LnzlNxhhGFZurUF8QjN8u65xQrYzJsly KfZsPTELqjvn2NPCC1HIdlOztq4lPJD/C+KhNCmGCMIbG73NqGRxSvSbCc+SxrSd Y7p5tBY28q8WEhF7+LUQb0DFcnMdlqZsVhqZIoDF8G5kpMgAU/IjWkEMNul/mPcr TYNPOt0wkkSFtPYGmQUuPwHvCz9i6GEYnzLtuxOSVwr89Zlr/toLeDO3t9w5KRpr cH3eZjHy2Zawtntb4Cvbz6xa9mP8AhThNVAA7Af2 -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:35 2026 by rpki-client