$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa File: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: XFEPxT5rgKneUguYZI7iHSi0r6woQzAHzM7M2WIoeNI= Subject key identifier: BA:DC:B8:11:32:29:EA:90:0A:7F:F5:97:DD:23:81:4D:59:A5:99:35 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 0B012036EBE076B0CB65D15C3CCDEA7102CB7342 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa Signing time: Mon 26 Jan 2026 15:00:00 +0000 ROA not before: Mon 26 Jan 2026 14:55:00 +0000 ROA not after: Mon 25 Jan 2027 15:00:00 +0000 asID: 138089 IP address blocks: 103.124.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:01:20:36:eb:e0:76:b0:cb:65:d1:5c:3c:cd:ea:71:02:cb:73:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Jan 26 14:55:00 2026 GMT Not After : Jan 25 15:00:00 2027 GMT Subject: CN=BADCB8113229EA900A7FF597DD23814D59A59935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:d0:74:24:95:5b:8c:ff:02:6a:ac:fb:c2: a3:ef:d6:7a:a5:44:d5:c1:2e:db:a5:20:9b:c7:2a: 30:33:e4:c0:10:ed:a0:f1:bb:ce:df:df:97:c5:33: 4e:08:ee:6c:2b:2b:3c:48:de:35:af:c6:64:80:78: 0d:92:14:2f:77:ac:7d:84:7e:01:9b:38:ad:8b:5f: ac:53:cd:ab:fc:1c:98:b1:58:2a:a1:ad:4b:d0:d8: de:63:66:6c:75:85:ac:b6:f0:ba:ac:ed:45:17:3d: 7c:0b:7b:df:14:d6:ba:3f:7c:b4:a3:b3:4a:06:df: 77:ae:f5:66:bc:c3:6c:96:9d:e6:30:9c:0b:67:79: a0:d5:02:9d:ac:85:8b:fa:84:98:6c:c1:eb:14:86: 50:15:b6:ea:db:87:ce:36:97:9c:46:7e:c8:c9:87: 5c:41:50:71:f3:88:94:73:a2:3c:6f:88:56:b8:09: cb:eb:a7:ef:25:e3:11:37:7b:64:c4:32:5a:dd:52: a2:d9:3e:ba:3e:07:6b:66:66:4b:86:33:81:34:ab: 94:18:3f:41:54:09:fc:07:ad:12:cf:1b:97:d5:23: ce:75:de:46:3a:fd:0a:d4:7f:86:1e:1c:2f:59:3a: 84:58:bf:64:52:97:70:d4:7e:f4:22:5c:64:f6:c5: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DC:B8:11:32:29:EA:90:0A:7F:F5:97:DD:23:81:4D:59:A5:99:35 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.137.0/24 Signature Algorithm: sha256WithRSAEncryption 75:40:5b:79:93:f6:ea:71:2c:22:ae:01:08:52:7b:6f:a5:11: 34:8d:d4:04:3b:1f:bb:46:f5:18:c0:47:6b:b1:5d:c0:ec:fe: 19:2a:7b:6f:ce:a6:d8:78:e8:d2:c4:c0:96:5e:2e:fc:fa:6a: d0:c3:68:21:93:1a:9f:5d:dc:7d:d6:44:81:34:57:aa:e5:2d: 69:03:4e:f8:90:7f:0f:89:3a:bb:22:54:44:e9:c4:01:8a:63: 1a:bd:38:70:3c:67:41:5b:5a:37:25:bc:16:d3:36:4b:56:fc: 0a:6d:fc:3a:b5:33:33:b8:6c:d5:db:80:c1:f3:09:3f:eb:3e: 61:a8:a5:5a:7c:c4:c8:52:6a:e1:8c:0c:ac:e8:25:fb:79:14: 98:1a:25:a9:9f:e4:67:52:3f:a8:4c:d5:ac:dc:ab:f9:3b:4c: e3:86:31:f4:56:38:a8:c9:75:d0:36:78:16:63:40:8d:4c:83: fb:c9:4e:a6:f9:1f:b0:f2:72:68:f4:49:12:55:d3:db:a0:47: 34:e6:29:c8:f0:f7:18:db:ab:ce:cb:fc:39:70:f7:40:fb:54: 64:e9:a4:49:36:f1:e3:d6:9a:42:b5:e8:d9:56:90:e5:2e:c6: 11:68:4a:34:5e:3a:c2:df:c8:95:8d:0e:b4:5c:05:f4:e0:59: 0a:d4:fa:70 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCwEgNuvgdrDLZdFcPM3qcQLLc0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNjAxMjYxNDU1MDBaFw0yNzAxMjUxNTAwMDBaMDMxMTAvBgNV BAMTKEJBRENCODExMzIyOUVBOTAwQTdGRjU5N0REMjM4MTRENTlBNTk5MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMvNB0JJVbjP8Caqz7wqPv1nql RNXBLtulIJvHKjAz5MAQ7aDxu87f35fFM04I7mwrKzxI3jWvxmSAeA2SFC93rH2E fgGbOK2LX6xTzav8HJixWCqhrUvQ2N5jZmx1hay28Lqs7UUXPXwLe98U1ro/fLSj s0oG33eu9Wa8w2yWneYwnAtneaDVAp2shYv6hJhswesUhlAVturbh842l5xGfsjJ h1xBUHHziJRzojxviFa4Ccvrp+8l4xE3e2TEMlrdUqLZPro+B2tmZkuGM4E0q5QY P0FUCfwHrRLPG5fVI8513kY6/QrUf4YeHC9ZOoRYv2RSl3DUfvQiXGT2xf/1AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUuty4ETIp6pAKf/WX3SOBTVmlmTUwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfIkwDQYJ KoZIhvcNAQELBQADggEBAHVAW3mT9upxLCKuAQhSe2+lETSN1AQ7H7tG9RjAR2ux XcDs/hkqe2/Opth46NLEwJZeLvz6atDDaCGTGp9d3H3WRIE0V6rlLWkDTviQfw+J OrsiVETpxAGKYxq9OHA8Z0FbWjclvBbTNktW/Apt/Dq1MzO4bNXbgMHzCT/rPmGo pVp8xMhSauGMDKzoJft5FJgaJamf5GdSP6hM1azcq/k7TOOGMfRWOKjJddA2eBZj QI1Mg/vJTqb5H7Dycmj0SRJV09ugRzTmKcjw9xjbq87L/Dlw90D7VGTppEk28ePW mkK16NlWkOUuxhFoSjReOsLfyJWNDrRcBfTgWQrU+nA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:28:03 2026 by rpki-client