$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa File: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (raw, json) Hash identifier: FQr3dnu6W2wmRC6QsO/LIhkDuERPgR93ow/4oU8iN0Q= Subject key identifier: 9F:DB:FF:EE:28:72:52:FF:E1:00:AE:56:CC:AE:C0:79:1B:60:7F:89 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 4EE8E1A67EB15636502B4D79E945A006686C1358 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa Signing time: Thu 09 Apr 2026 04:01:22 +0000 ROA not before: Thu 09 Apr 2026 03:56:22 +0000 ROA not after: Thu 08 Apr 2027 04:01:22 +0000 asID: 149712 IP address blocks: 103.186.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e8:e1:a6:7e:b1:56:36:50:2b:4d:79:e9:45:a0:06:68:6c:13:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Apr 9 03:56:22 2026 GMT Not After : Apr 8 04:01:22 2027 GMT Subject: CN=9FDBFFEE287252FFE100AE56CCAEC0791B607F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:6f:20:e4:0b:78:76:98:98:f8:ff:ef:10: 9c:8b:b9:0d:d4:5d:99:0c:c2:47:ec:8c:72:23:eb: 42:2d:bf:b3:67:cf:21:e4:49:c0:70:b8:c3:b9:fb: 9c:5b:77:2c:2c:63:00:31:c4:d3:b8:14:88:2c:4a: b7:1f:14:16:4c:7f:c6:68:b1:41:37:d7:6c:cf:68: 66:bf:f9:ad:af:99:04:43:36:ef:88:1d:30:62:05: 8a:58:78:a3:4d:02:6c:d4:70:18:78:12:40:5c:f8: 05:93:04:fa:66:67:26:12:3c:60:c2:6d:eb:dc:27: c6:90:88:a6:c4:f9:79:ea:d3:11:86:99:82:bd:5f: 8b:00:03:04:ad:a0:4c:f6:a3:f4:50:17:51:97:53: 16:8f:d9:f3:5e:26:2d:75:78:42:52:07:9d:3f:a7: 8d:73:16:dc:8c:cd:41:ac:1c:de:22:cb:6e:a6:6d: d4:d1:f3:6c:a0:d5:2e:14:75:fc:93:25:32:97:35: ad:e4:ad:3e:8b:06:51:74:1f:b4:df:22:3f:89:b5: 1e:3c:51:fe:f4:65:75:93:ba:b3:b3:b9:4d:9e:e5: 65:0f:f1:7b:15:45:77:b7:7c:8b:61:08:fc:8f:6e: 9e:ab:7a:d6:48:09:12:49:02:d1:ad:fd:83:2b:85: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DB:FF:EE:28:72:52:FF:E1:00:AE:56:CC:AE:C0:79:1B:60:7F:89 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.194.0/23 Signature Algorithm: sha256WithRSAEncryption 01:28:ea:3c:7e:5b:c6:5a:27:62:8c:af:db:83:ee:90:4e:2c: e4:e5:14:41:22:38:9f:a7:5a:95:a5:7f:97:81:cf:83:23:e4: 3d:1f:10:20:f2:a9:9f:05:92:6f:bc:6f:fb:3a:b8:5d:ed:67: 3e:6d:e5:83:e0:f4:04:d7:80:17:70:c7:f6:53:0d:12:45:79: d5:04:b8:12:cf:df:8f:a7:6e:1d:01:0f:56:58:27:6a:fd:60: 0d:77:05:f6:57:43:25:31:c6:4c:e8:33:53:8f:61:c1:57:9b: 51:2d:3e:06:46:3e:1c:3f:53:c2:50:f3:89:84:95:91:c4:d0: af:79:92:31:c8:1b:4e:67:80:4c:64:d5:57:ac:15:6b:30:72: be:77:0b:cf:b0:68:76:52:61:8a:7e:ba:01:ee:ac:05:41:54: ac:f7:d1:2b:90:64:b1:b2:a0:0f:a2:f0:f3:9c:62:36:3f:3a: 65:52:f7:75:88:2f:9f:0b:2f:4c:4f:67:ad:13:59:2b:7c:cc: f7:5e:c9:53:20:16:f1:a0:cd:0b:3c:1f:28:dc:c9:b9:97:8b: 52:16:7a:8a:f1:43:8c:31:97:48:b8:9e:83:5b:0e:d2:91:4d: 79:a4:ff:c2:5b:4f:40:34:39:70:e8:01:7a:b0:ad:5d:03:1e: 10:96:83:57 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTujhpn6xVjZQK0156UWgBmhsE1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNjA0MDkwMzU2MjJaFw0yNzA0MDgwNDAxMjJaMDMxMTAvBgNV BAMTKDlGREJGRkVFMjg3MjUyRkZFMTAwQUU1NkNDQUVDMDc5MUI2MDdGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHim8g5At4dpiY+P/vEJyLuQ3U XZkMwkfsjHIj60Itv7NnzyHkScBwuMO5+5xbdywsYwAxxNO4FIgsSrcfFBZMf8Zo sUE312zPaGa/+a2vmQRDNu+IHTBiBYpYeKNNAmzUcBh4EkBc+AWTBPpmZyYSPGDC bevcJ8aQiKbE+Xnq0xGGmYK9X4sAAwStoEz2o/RQF1GXUxaP2fNeJi11eEJSB50/ p41zFtyMzUGsHN4iy26mbdTR82yg1S4UdfyTJTKXNa3krT6LBlF0H7TfIj+JtR48 Uf70ZXWTurOzuU2e5WUP8XsVRXe3fIthCPyPbp6retZICRJJAtGt/YMrhTyzAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUn9v/7ihyUv/hAK5WzK7AeRtgf4kwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyNTJlYWQzLWRjOGYtNGQ4Ni1h ZmNmLWExNDBlNWI4NzUzMi8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzNzMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnusIwDQYJ KoZIhvcNAQELBQADggEBAAEo6jx+W8ZaJ2KMr9uD7pBOLOTlFEEiOJ+nWpWlf5eB z4Mj5D0fECDyqZ8Fkm+8b/s6uF3tZz5t5YPg9ATXgBdwx/ZTDRJFedUEuBLP34+n bh0BD1ZYJ2r9YA13BfZXQyUxxkzoM1OPYcFXm1EtPgZGPhw/U8JQ84mElZHE0K95 kjHIG05ngExk1VesFWswcr53C8+waHZSYYp+ugHurAVBVKz30SuQZLGyoA+i8POc YjY/OmVS93WIL58LL0xPZ60TWSt8zPdeyVMgFvGgzQs8HyjcybmXi1IWeorxQ4wx l0i4noNbDtKRTXmk/8JbT0A0OXDoAXqwrV0DHhCWg1c= -----END CERTIFICATE-----Generated at Sat Apr 18 01:44:23 2026 by rpki-client