$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa File: 3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (raw, json) Hash identifier: PTzTUTP+tcbec6oQ8XF9BBUTPEmaQDT9+JJ/xv7s79o= Subject key identifier: E1:24:E5:00:23:4B:36:76:3B:9B:E7:5D:F3:0D:90:A1:9B:85:49:4A Certificate issuer: /CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Certificate serial: 178A4850CC85E93D9261D1461ACBD114595B1896 Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa Signing time: Fri 27 Feb 2026 11:00:00 +0000 ROA not before: Fri 27 Feb 2026 10:55:00 +0000 ROA not after: Fri 26 Feb 2027 11:00:00 +0000 asID: 147087 IP address blocks: 103.69.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8a:48:50:cc:85:e9:3d:92:61:d1:46:1a:cb:d1:14:59:5b:18:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7 Validity Not Before: Feb 27 10:55:00 2026 GMT Not After : Feb 26 11:00:00 2027 GMT Subject: CN=E124E500234B36763B9BE75DF30D90A19B85494A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:f8:2f:75:9b:92:22:0a:92:f3:00:7a:fd: a8:2b:c1:08:b2:c3:09:ef:9d:62:1b:c9:c0:4f:ce: a1:ec:9c:1d:03:58:63:51:c4:cf:72:72:30:eb:8d: 92:99:79:f7:2d:54:df:2b:ef:11:fe:d2:9d:43:3a: 85:d8:2c:20:e7:09:fe:4c:2b:21:a6:17:1e:69:2d: 34:d5:01:42:8e:96:ad:dd:19:9d:72:c4:b4:fb:83: 14:5f:b9:bf:30:53:69:09:ad:a2:9f:8f:ad:6b:ba: e5:7b:c0:c7:9f:fc:2d:32:94:d2:e5:fe:5f:2c:ba: cc:53:17:bb:f1:e0:72:80:9a:0f:7c:64:96:2e:d4: 86:d3:ea:cf:18:ce:43:c7:ed:51:dd:67:d5:24:fa: 6d:ec:33:5e:cd:e4:f2:77:2a:f8:87:b5:fb:be:97: 61:70:36:e9:06:ed:df:b7:e1:cf:84:32:34:61:2d: d5:99:3f:e0:f8:f8:5a:c1:da:d1:2b:51:bd:8b:15: cf:8a:a6:cf:1d:e5:3a:f1:e2:11:85:6c:1d:aa:d8: 87:b2:0e:b0:fa:07:43:01:16:9f:e1:83:2e:df:9a: 36:d4:99:81:c1:87:5b:7f:b6:06:d3:59:15:92:73: d7:3c:46:77:82:bf:d0:b9:40:06:5e:8c:8b:54:23: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:24:E5:00:23:4B:36:76:3B:9B:E7:5D:F3:0D:90:A1:9B:85:49:4A X509v3 Authority Key Identifier: keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.69.106.0/23 Signature Algorithm: sha256WithRSAEncryption 70:b2:51:91:db:24:55:45:f9:3e:73:f6:e6:76:ac:c5:82:57: d6:20:8f:54:bd:91:9b:bc:5e:c6:61:82:db:03:a8:65:55:da: 8d:d4:f1:6c:7b:0d:b0:1b:84:bd:62:8a:54:de:48:98:8f:8c: 83:ad:61:68:ba:81:ae:eb:a3:6f:34:be:53:49:6c:8d:0d:e2: 27:c8:00:bf:dd:f1:b1:ca:23:2b:a5:cf:c8:6c:e2:81:30:75: df:6f:18:ef:64:25:b7:ad:44:a6:03:cb:f7:1f:c5:b7:ee:6d: f9:b9:f4:35:d0:02:c7:11:7e:f2:61:52:64:bd:e2:01:e7:ce: 9c:b2:78:3c:72:40:34:93:9f:34:18:fb:73:a5:2e:27:59:cd: 4c:df:77:39:cb:50:ea:da:1e:3f:d7:d3:8b:7b:51:de:9e:dc: 6f:f1:eb:af:2f:dd:07:0b:53:87:09:89:f9:b6:0d:71:ba:d6: f5:a7:6c:c2:c2:ab:88:e6:3d:70:01:16:79:5c:40:7b:a6:a5: f4:ab:27:e1:ed:72:17:8f:d9:46:3e:5b:71:eb:0b:bc:46:fa: 72:a0:d6:d9:8b:5e:b8:69:56:d7:9d:3e:ee:da:c2:7e:e6:2a: 04:94:3c:08:52:d8:6b:97:f2:1d:22:9b:71:bc:54:c3:ed:21: a9:0b:13:8d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF4pIUMyF6T2SYdFGGsvRFFlbGJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1 RkM4RTBDNzAeFw0yNjAyMjcxMDU1MDBaFw0yNzAyMjYxMTAwMDBaMDMxMTAvBgNV BAMTKEUxMjRFNTAwMjM0QjM2NzYzQjlCRTc1REYzMEQ5MEExOUI4NTQ5NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMPgvdZuSIgqS8wB6/agrwQiy wwnvnWIbycBPzqHsnB0DWGNRxM9ycjDrjZKZefctVN8r7xH+0p1DOoXYLCDnCf5M KyGmFx5pLTTVAUKOlq3dGZ1yxLT7gxRfub8wU2kJraKfj61ruuV7wMef/C0ylNLl /l8susxTF7vx4HKAmg98ZJYu1IbT6s8YzkPH7VHdZ9Uk+m3sM17N5PJ3KviHtfu+ l2FwNukG7d+34c+EMjRhLdWZP+D4+FrB2tErUb2LFc+Kps8d5Trx4hGFbB2q2Iey DrD6B0MBFp/hgy7fmjbUmYHBh1t/tgbTWRWSc9c8RneCv9C5QAZejItUI+n3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4STlACNLNnY7m+dd8w2QoZuFSUowHwYDVR0j BBgwFoAUNbWJIk1kFWLQz+IBn3M6ll/I4McwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWUyZWJkZS02MzExLTQ4OGEtODJiNy05ZDRjMDU1MzA5ODcvMC8zNUI1ODkyMjRE NjQxNTYyRDBDRkUyMDE5RjczM0E5NjVGQzhFMEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzVCNTg5MjI0RDY0MTU2MkQwQ0ZFMjAxOUY3MzNBOTY1RkM4 RTBDNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhZTJlYmRlLTYzMTEtNDg4YS04 MmI3LTlkNGMwNTUzMDk4Ny8wLzMxMzAzMzJlMzYzOTJlMzEzMDM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM3MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0VqMA0GCSqG SIb3DQEBCwUAA4IBAQBwslGR2yRVRfk+c/bmdqzFglfWII9UvZGbvF7GYYLbA6hl VdqN1PFsew2wG4S9YopU3kiYj4yDrWFouoGu66NvNL5TSWyNDeInyAC/3fGxyiMr pc/IbOKBMHXfbxjvZCW3rUSmA8v3H8W37m35ufQ10ALHEX7yYVJkveIB586csng8 ckA0k580GPtzpS4nWc1M33c5y1Dq2h4/19OLe1Hentxv8euvL90HC1OHCYn5tg1x utb1p2zCwquI5j1wARZ5XEB7pqX0qyfh7XIXj9lGPltx6wu8RvpyoNbZi164aVbX nT7u2sJ+5ioElDwIUthrl/IdIptxvFTD7SGpCxON -----END CERTIFICATE-----Generated at Mon Mar 2 22:35:55 2026 by rpki-client