$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa File: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: 8QP0ny1BafhP87cEV2vXvc0K+sJXt7/6akwyG6gtnuc= Subject key identifier: D5:F2:6D:C9:7F:C4:B1:75:F4:AF:98:3C:A4:DE:78:D4:68:9F:91:A5 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 09FDC3C663CD086085C92BA9849CC6F04FEB7135 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa Signing time: Fri 27 Feb 2026 10:02:37 +0000 ROA not before: Fri 27 Feb 2026 09:57:37 +0000 ROA not after: Fri 26 Feb 2027 10:02:37 +0000 asID: 24534 IP address blocks: 103.149.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fd:c3:c6:63:cd:08:60:85:c9:2b:a9:84:9c:c6:f0:4f:eb:71:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Feb 27 09:57:37 2026 GMT Not After : Feb 26 10:02:37 2027 GMT Subject: CN=D5F26DC97FC4B175F4AF983CA4DE78D4689F91A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:cd:93:b7:1b:26:f6:7e:0b:69:f1:15:9b: 08:b4:42:85:1e:a2:8e:9a:f4:21:a7:28:c9:01:2b: e3:52:a2:9d:22:ae:66:9b:04:c3:91:8d:a7:19:76: b7:bd:49:24:7e:28:ff:c3:3e:98:9b:01:ae:7b:f6: 69:8d:6a:8a:8d:a9:4b:19:3e:59:1a:e8:47:86:4e: 4a:8e:6c:f9:3e:8f:91:d9:a4:a1:4d:b3:6e:f2:a8: 23:b2:f6:36:84:62:d8:b4:13:bf:cc:6f:13:b5:c5: 37:81:89:9f:ed:60:d9:ff:08:31:91:60:4f:3d:f0: 17:c5:74:92:f4:73:41:89:6d:00:4e:82:0d:1d:3b: ff:2a:bc:1c:41:d0:5f:82:d2:dc:65:91:50:2f:77: 2b:0d:dc:2a:54:ee:12:c6:5f:9d:84:44:c3:fb:d4: de:ed:33:8e:7c:a0:c2:a7:67:4c:90:c7:61:49:4b: ab:fd:7b:5e:92:3c:55:9b:06:6f:62:e4:6b:4a:b7: 99:cc:c4:9e:16:8f:01:e2:e2:d2:e2:b1:fa:2a:42: 44:ed:9b:95:51:22:56:86:05:e1:5c:92:c1:dd:ef: 48:4a:f2:4d:b6:a8:2f:42:a5:ef:3e:67:e8:4c:c6: c9:0e:7b:cd:df:1d:b0:25:78:d9:6f:42:5f:8e:a8: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:6D:C9:7F:C4:B1:75:F4:AF:98:3C:A4:DE:78:D4:68:9F:91:A5 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/3130332e3134392e33342e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.34.0/24 Signature Algorithm: sha256WithRSAEncryption 10:f1:66:85:53:9a:e8:84:05:d8:7a:1d:be:53:ff:78:97:0b: aa:0c:e6:38:64:72:4d:13:48:35:ec:56:44:e4:98:ac:82:32: 3a:c7:36:32:cb:14:5a:89:92:5f:b5:16:e4:ba:c7:80:c2:5c: be:40:6e:96:de:c8:93:95:74:23:38:50:cd:4b:95:f4:4b:38: 30:80:e4:6a:bf:8a:16:d6:15:87:71:75:bf:1e:ae:ef:12:82: 4d:cf:5c:a7:a1:f6:42:d9:86:57:15:ed:96:87:a1:ef:54:c4: 55:b1:4a:4c:09:27:04:ed:94:64:50:85:e6:a5:34:39:67:c2: f7:ce:e3:44:8a:50:2b:a0:36:a0:4e:5c:32:48:c2:fc:af:65: 2c:c9:60:af:6b:be:bc:91:8d:b6:e8:5d:e7:e0:98:cc:f9:11: af:b5:44:13:94:7e:c7:ea:d5:64:91:38:23:cd:44:51:ba:f3: 70:32:be:25:9d:fd:0b:e9:c1:53:eb:c2:77:be:b4:6c:1e:3d: e8:91:27:73:6c:3d:9f:04:10:ea:fb:61:5b:b3:de:a9:da:5d: b0:e2:f1:59:4a:0c:5e:57:d5:ed:a6:06:db:99:07:8a:a5:90: e8:52:ad:83:6c:9b:ab:73:4b:b6:4b:7f:ef:04:28:8c:bf:35: e2:d8:31:41 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCf3DxmPNCGCFySuphJzG8E/rcTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNjAyMjcwOTU3MzdaFw0yNzAyMjYxMDAyMzdaMDMxMTAvBgNV BAMTKEQ1RjI2REM5N0ZDNEIxNzVGNEFGOTgzQ0E0REU3OEQ0Njg5RjkxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhc2Ttxsm9n4LafEVmwi0QoUe oo6a9CGnKMkBK+NSop0irmabBMORjacZdre9SSR+KP/DPpibAa579mmNaoqNqUsZ Plka6EeGTkqObPk+j5HZpKFNs27yqCOy9jaEYti0E7/MbxO1xTeBiZ/tYNn/CDGR YE898BfFdJL0c0GJbQBOgg0dO/8qvBxB0F+C0txlkVAvdysN3CpU7hLGX52ERMP7 1N7tM458oMKnZ0yQx2FJS6v9e16SPFWbBm9i5GtKt5nMxJ4WjwHi4tLisfoqQkTt m5VRIlaGBeFcksHd70hK8k22qC9Cpe8+Z+hMxskOe83fHbAleNlvQl+OqCFfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1fJtyX/EsXX0r5g8pN541GifkaUwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYzNjM1ZTI1LTg1OTktNDhhZS1i ZGNiLWUzMjNkZmM4OTZlYy8wLzMxMzAzMzJlMzEzNDM5MmUzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeVIjANBgkqhkiG 9w0BAQsFAAOCAQEAEPFmhVOa6IQF2HodvlP/eJcLqgzmOGRyTRNINexWROSYrIIy Osc2MssUWomSX7UW5LrHgMJcvkBult7Ik5V0IzhQzUuV9Es4MIDkar+KFtYVh3F1 vx6u7xKCTc9cp6H2QtmGVxXtloeh71TEVbFKTAknBO2UZFCF5qU0OWfC987jRIpQ K6A2oE5cMkjC/K9lLMlgr2u+vJGNtuhd5+CYzPkRr7VEE5R+x+rVZJE4I81EUbrz cDK+JZ39C+nBU+vCd760bB496JEnc2w9nwQQ6vthW7PeqdpdsOLxWUoMXlfV7aYG 25kHiqWQ6FKtg2ybq3NLtkt/7wQojL814tgxQQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:36:56 2026 by rpki-client