$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa File: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (raw, json) Hash identifier: 4C3lNSjc1OP8wE40y1T2v3j6x3XPnMRVmG/J/aIJFiE= Subject key identifier: E4:8E:38:E1:0B:B6:D8:A0:01:EC:C2:39:E2:01:E2:41:3E:F5:FA:84 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 14FDA7E57BF3D02C3FE6FEBED482351190556E1F Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa Signing time: Sat 04 Apr 2026 03:00:00 +0000 ROA not before: Sat 04 Apr 2026 02:55:00 +0000 ROA not after: Sat 03 Apr 2027 03:00:00 +0000 asID: 142370 IP address blocks: 103.169.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:fd:a7:e5:7b:f3:d0:2c:3f:e6:fe:be:d4:82:35:11:90:55:6e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Apr 4 02:55:00 2026 GMT Not After : Apr 3 03:00:00 2027 GMT Subject: CN=E48E38E10BB6D8A001ECC239E201E2413EF5FA84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:90:69:86:a6:fa:c8:9b:3f:44:ee:a3:fe:d8: de:98:69:86:61:0d:ca:e3:fd:3a:77:21:2b:d9:3e: 03:fd:5f:5c:6d:60:a3:d8:bc:21:ea:b4:70:6f:8f: 09:7c:6b:7b:f8:9f:29:ba:fa:80:9d:4f:b8:79:66: f8:48:63:4d:f3:42:30:ca:3c:b6:83:66:5d:94:a8: 20:72:68:47:d4:2c:a7:1a:6a:dc:ac:c3:75:5b:7b: 7d:0a:f8:4e:e7:25:87:23:a3:72:e1:e2:63:c4:01: 8a:68:65:bb:14:89:06:9a:93:77:7b:f4:11:fc:87: b9:aa:1b:ad:96:03:43:d9:9a:f1:ad:48:91:49:7d: 3f:83:31:64:f7:ef:50:10:2d:17:92:8d:0f:7d:e2: 94:e5:9b:1e:f0:7a:f7:af:2e:61:ec:27:82:80:5b: 53:a5:c1:60:2e:09:11:f6:09:dd:6b:4b:0a:bb:d9: d6:26:75:3a:59:85:48:a7:06:ab:d2:9a:3c:a3:f9: 15:75:db:41:19:0f:40:a8:46:09:34:4c:79:d9:f7: 2b:21:71:7b:0f:67:6a:71:d2:c2:7a:7b:38:60:6f: b8:6e:de:a2:56:74:69:9b:62:c5:95:22:db:09:aa: 11:6f:b1:1c:96:0a:e1:bd:f7:d5:f1:02:35:41:d6: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:8E:38:E1:0B:B6:D8:A0:01:EC:C2:39:E2:01:E2:41:3E:F5:FA:84 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.254.0/24 Signature Algorithm: sha256WithRSAEncryption b9:86:a6:c8:c0:b5:90:34:83:78:04:92:e6:e5:2b:84:d3:01: 31:69:c1:2d:d8:03:ae:60:71:9a:29:1b:87:3e:d3:2d:99:00: ff:39:03:39:71:73:94:94:4f:b6:62:cb:ba:f2:46:f1:4e:12: f2:39:11:d9:db:28:40:13:7e:1e:a3:5d:d8:f1:fb:a7:ab:ac: 68:c1:ae:65:e7:6f:32:b5:8c:76:8d:49:8c:32:88:6d:13:cb: 9b:20:1c:24:f2:32:2b:5d:61:32:cf:78:d1:ea:4b:c8:cf:6d: fd:f5:28:0d:24:09:13:d4:1f:d6:5b:05:fd:62:ed:63:89:f7: c9:65:01:a1:1b:e6:d4:63:50:6a:8a:8d:09:81:f0:6f:38:eb: 60:6e:7e:29:a0:e8:fb:4c:35:c2:1a:b8:8e:db:4b:d0:84:98: 9e:68:a5:29:01:da:ea:4e:20:4f:8e:ab:c7:ac:fb:d3:a0:91: 0f:92:5c:39:10:a8:87:e5:d8:40:0c:97:8e:27:b5:38:50:e9: 5a:4a:78:8a:0b:c9:31:9f:bb:02:22:e1:7f:8f:bf:e3:73:3d: b3:07:f9:f0:83:08:e7:1b:3e:ac:1a:ad:ec:13:bc:87:de:24: 86:5d:8d:86:df:02:72:e0:2c:16:1e:e3:bd:b8:a9:12:1f:e3: ec:47:c3:8e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUFP2n5Xvz0Cw/5v6+1II1EZBVbh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNjA0MDQwMjU1MDBaFw0yNzA0MDMwMzAwMDBaMDMxMTAvBgNV BAMTKEU0OEUzOEUxMEJCNkQ4QTAwMUVDQzIzOUUyMDFFMjQxM0VGNUZBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkGmGpvrImz9E7qP+2N6YaYZh Dcrj/Tp3ISvZPgP9X1xtYKPYvCHqtHBvjwl8a3v4nym6+oCdT7h5ZvhIY03zQjDK PLaDZl2UqCByaEfULKcaatysw3Vbe30K+E7nJYcjo3Lh4mPEAYpoZbsUiQaak3d7 9BH8h7mqG62WA0PZmvGtSJFJfT+DMWT371AQLReSjQ994pTlmx7wevevLmHsJ4KA W1OlwWAuCRH2Cd1rSwq72dYmdTpZhUinBqvSmjyj+RV120EZD0CoRgk0THnZ9ysh cXsPZ2px0sJ6ezhgb7hu3qJWdGmbYsWVItsJqhFvsRyWCuG999XxAjVB1tx5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5I444Qu22KAB7MI54gHiQT71+oQwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY3NTJiM2MyLTNmMzAtNDA0MC04 YjA1LTgzODIxNzc3MDQ4Zi8wLzMxMzAzMzJlMzEzNjM5MmUzMjM1MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqf4wDQYJ KoZIhvcNAQELBQADggEBALmGpsjAtZA0g3gEkublK4TTATFpwS3YA65gcZopG4c+ 0y2ZAP85Azlxc5SUT7Ziy7ryRvFOEvI5EdnbKEATfh6jXdjx+6errGjBrmXnbzK1 jHaNSYwyiG0Ty5sgHCTyMitdYTLPeNHqS8jPbf31KA0kCRPUH9ZbBf1i7WOJ98ll AaEb5tRjUGqKjQmB8G8462Bufimg6PtMNcIauI7bS9CEmJ5opSkB2upOIE+Oq8es +9OgkQ+SXDkQqIfl2EAMl44ntThQ6VpKeIoLyTGfuwIi4X+Pv+NzPbMH+fCDCOcb PqwarewTvIfeJIZdjYbfAnLgLBYe4724qRIf4+xHw44= -----END CERTIFICATE-----Generated at Sat Apr 18 03:07:07 2026 by rpki-client