$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa File: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: aI1tvHYppd3YXyR/O37hfeObUgos+GLtu2SX+nqPoQU= Subject key identifier: 2A:00:E4:CE:3E:42:E8:10:F2:3D:6D:F8:00:C6:E5:5D:B8:7A:79:E4 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 43CC53209533E7CB8A5D3F0E89A0284EDFFFB52E Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa Signing time: Mon 26 Jan 2026 14:00:00 +0000 ROA not before: Mon 26 Jan 2026 13:55:00 +0000 ROA not after: Mon 25 Jan 2027 14:00:00 +0000 asID: 138089 IP address blocks: 103.124.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cc:53:20:95:33:e7:cb:8a:5d:3f:0e:89:a0:28:4e:df:ff:b5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Jan 26 13:55:00 2026 GMT Not After : Jan 25 14:00:00 2027 GMT Subject: CN=2A00E4CE3E42E810F23D6DF800C6E55DB87A79E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:54:79:25:32:2a:55:e9:63:8c:6a:82:79:93: d6:c7:4d:45:b6:82:80:27:a0:de:37:dc:2c:d3:32: 11:dd:ef:05:c4:f4:5c:1e:4c:16:bb:53:dd:b5:4b: 73:12:7e:00:64:c1:63:e7:1f:07:d5:d3:dd:a2:ca: 14:db:85:ac:a0:0c:1f:55:40:4a:53:b9:eb:b1:b1: 40:83:22:6c:e9:70:11:32:bf:1d:e5:3f:c6:06:7f: e3:0f:4a:8d:96:c3:72:30:e6:ca:b0:74:aa:07:29: b1:20:0a:33:35:65:34:32:6a:f6:72:7d:ef:de:4a: 1e:c2:95:c0:00:f7:72:c9:85:a4:8d:dc:87:8d:8b: 73:48:95:ba:58:56:2a:d6:ba:0c:29:e5:d2:19:a2: f4:c6:53:72:5c:19:dc:e0:c2:1e:5a:4c:a0:ac:a2: 3c:66:24:e1:79:94:54:4c:86:02:b0:6c:a0:d7:d6: 46:f7:5c:45:89:09:df:9b:ec:e4:3a:cd:9d:47:d0: 9a:5f:6b:d9:ea:7c:21:f0:46:b1:80:cf:ae:ea:1c: 8c:99:c0:35:36:01:42:6d:f3:8f:92:5b:d3:c9:fc: c8:93:18:00:43:95:12:2e:f0:53:10:d5:88:56:18: c3:77:c3:86:1c:ee:95:f6:71:5b:fa:e0:1d:69:d4: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:E4:CE:3E:42:E8:10:F2:3D:6D:F8:00:C6:E5:5D:B8:7A:79:E4 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.138.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:07:55:f8:6b:82:e8:18:87:8b:29:1b:27:77:52:64:fc:9e: 30:5e:b8:80:76:e3:15:3d:6e:12:a1:38:a6:f2:bf:1f:e1:50: e1:f4:86:f4:c6:ee:fb:bd:65:0c:ba:1d:3d:a7:56:ed:b8:ae: 20:58:76:5f:94:4c:95:fd:d1:b6:37:82:ce:1a:3d:5c:55:c9: d5:40:77:1d:2e:2f:cb:19:d4:8c:36:23:74:02:42:b7:6f:9d: 18:2a:06:5b:a3:f9:a1:25:18:82:c9:16:bd:9b:52:9b:f5:8b: 4e:b3:ef:e8:41:ad:8e:5b:33:9e:5a:d0:77:15:31:c2:11:bb: 0e:35:34:f9:3c:d7:2b:7c:71:dd:90:d3:5d:6a:1e:b2:f2:cf: 89:1c:b7:c5:6b:85:d2:40:15:f7:86:cb:18:01:95:7f:08:53: 90:c2:da:0c:d7:1a:0b:04:b5:23:15:38:ed:f0:4a:2c:4a:fb: a7:ee:5f:f4:a1:81:c8:c8:bf:a2:2b:7e:cb:82:29:fe:3f:77: e3:17:cc:b5:29:e4:68:d0:a1:3d:db:af:61:55:db:34:bd:10: 23:5d:e5:ad:c1:66:27:33:7b:05:08:43:ff:94:33:af:2b:4e: 01:47:08:12:58:e5:81:42:30:49:4c:3f:4b:f0:0a:0c:9c:e5: a7:73:e1:59 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQ8xTIJUz58uKXT8OiaAoTt//tS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNjAxMjYxMzU1MDBaFw0yNzAxMjUxNDAwMDBaMDMxMTAvBgNV BAMTKDJBMDBFNENFM0U0MkU4MTBGMjNENkRGODAwQzZFNTVEQjg3QTc5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzVHklMipV6WOMaoJ5k9bHTUW2 goAnoN433CzTMhHd7wXE9FweTBa7U921S3MSfgBkwWPnHwfV092iyhTbhaygDB9V QEpTueuxsUCDImzpcBEyvx3lP8YGf+MPSo2Ww3Iw5sqwdKoHKbEgCjM1ZTQyavZy fe/eSh7ClcAA93LJhaSN3IeNi3NIlbpYVirWugwp5dIZovTGU3JcGdzgwh5aTKCs ojxmJOF5lFRMhgKwbKDX1kb3XEWJCd+b7OQ6zZ1H0Jpfa9nqfCHwRrGAz67qHIyZ wDU2AUJt84+SW9PJ/MiTGABDlRIu8FMQ1YhWGMN3w4Yc7pX2cVv64B1p1MMnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUKgDkzj5C6BDyPW34AMblXbh6eeQwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhYmE0ZTU5LWZiMzEtNDFiNS04 OGU3LTBiMmNlZDFmMjAxYy8wLzMxMzAzMzJlMzEzMjM0MmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfIowDQYJ KoZIhvcNAQELBQADggEBAB0HVfhrgugYh4spGyd3UmT8njBeuIB24xU9bhKhOKby vx/hUOH0hvTG7vu9ZQy6HT2nVu24riBYdl+UTJX90bY3gs4aPVxVydVAdx0uL8sZ 1Iw2I3QCQrdvnRgqBluj+aElGILJFr2bUpv1i06z7+hBrY5bM55a0HcVMcIRuw41 NPk81yt8cd2Q011qHrLyz4kct8VrhdJAFfeGyxgBlX8IU5DC2gzXGgsEtSMVOO3w SixK+6fuX/ShgcjIv6IrfsuCKf4/d+MXzLUp5GjQoT3br2FV2zS9ECNd5a3BZicz ewUIQ/+UM68rTgFHCBJY5YFCMElMP0vwCgyc5adz4Vk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:25:38 2026 by rpki-client