$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa File: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (raw, json) Hash identifier: kxE+YtkjQwMwVt4zg/wVK2OFJkZkHoSNen/DvmhHfJg= Subject key identifier: 21:6F:F5:8E:45:BD:FF:41:F3:A2:FE:C3:AF:13:67:CB:E2:4D:79:07 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 7BF44E6B8F520AA9CFE2A1D4EF306003B7254881 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa Signing time: Sat 04 Apr 2026 03:00:00 +0000 ROA not before: Sat 04 Apr 2026 02:55:00 +0000 ROA not after: Sat 03 Apr 2027 03:00:00 +0000 asID: 142370 IP address blocks: 103.169.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f4:4e:6b:8f:52:0a:a9:cf:e2:a1:d4:ef:30:60:03:b7:25:48:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Apr 4 02:55:00 2026 GMT Not After : Apr 3 03:00:00 2027 GMT Subject: CN=216FF58E45BDFF41F3A2FEC3AF1367CBE24D7907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:7e:71:53:08:13:22:22:83:7c:a5:d5:65: e1:a0:fe:d6:7e:f1:d6:a8:78:f1:a9:2a:97:f7:01: 90:c9:bd:fb:51:38:49:23:ca:20:f0:ca:c8:22:d9: 32:8e:04:c0:61:0a:7d:4a:8c:7c:94:49:d7:dd:ea: ac:d4:d8:8c:d9:5b:bf:7c:4d:70:da:64:c5:3c:f5: a2:51:23:43:e8:e6:9b:7b:0e:00:36:4e:c0:8f:15: b4:41:68:63:3c:98:3b:7e:83:86:94:38:19:48:05: e7:df:10:a3:1b:1d:1b:c6:74:75:0d:2b:43:ef:ae: 68:ca:51:7c:7d:22:83:20:b2:ed:7a:ec:45:68:5a: f6:76:98:d4:d5:27:5f:8a:15:b9:e8:7d:20:47:c8: c5:1b:f2:0b:cb:ed:f8:ff:9a:95:7e:2b:d0:14:f7: e5:13:74:c0:70:4c:1e:a2:c4:02:55:6e:1b:5d:80: d0:e1:4d:14:fb:74:9d:13:57:dc:50:94:8c:4b:10: 92:13:ab:16:f7:07:9d:20:0f:46:47:05:94:ec:81: c2:6e:a0:cd:a6:03:a3:0e:0a:44:44:1d:ff:97:b3: 0b:d0:af:46:81:7d:53:19:ac:f2:f7:4c:13:f8:e3: a2:0c:13:d5:05:41:74:16:37:2e:9a:95:ca:2b:d6: b2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6F:F5:8E:45:BD:FF:41:F3:A2:FE:C3:AF:13:67:CB:E2:4D:79:07 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.255.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a6:dc:cb:72:09:3e:fb:f7:7c:65:66:66:73:81:26:15:19: 5e:76:aa:4b:eb:f2:ca:35:7c:e8:ff:6d:62:15:44:24:7c:a3: 13:08:84:f7:5b:ea:46:88:9a:25:d0:ba:a3:ac:be:53:7a:5f: 81:25:28:d9:40:28:1f:db:ff:f7:aa:41:3e:a9:18:aa:ee:c5: d4:97:cb:e7:d0:f6:57:6a:d5:99:b0:55:85:e2:11:e8:43:cb: 38:dc:66:54:92:79:92:74:72:22:ea:7e:a8:64:ed:5d:77:e7: 90:70:04:19:cc:c0:ae:cb:fd:79:1b:bf:43:2b:7b:d4:63:b9: 03:46:80:e3:4b:83:6f:37:0a:d6:ca:4a:0c:7b:f0:1c:7d:c2: 35:76:19:c5:c2:17:9d:24:27:2f:b3:96:a9:0f:32:85:8e:00: 1e:ac:39:1d:f2:7f:bc:ae:57:20:50:32:47:a5:ee:29:b5:f0: 12:fb:69:3a:45:31:be:6e:73:79:a3:55:19:44:9d:ff:d5:f9: 66:1f:be:8c:d7:4e:14:15:58:db:09:f6:26:60:17:ee:f8:2f: 20:d8:ae:9f:66:18:a5:9f:7d:28:7c:9b:f9:f8:7c:90:1d:58: dd:7c:61:e4:2c:a6:91:02:34:a1:de:06:4b:16:73:a2:5e:0f: 11:1d:9e:16 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUe/ROa49SCqnP4qHU7zBgA7clSIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNjA0MDQwMjU1MDBaFw0yNzA0MDMwMzAwMDBaMDMxMTAvBgNV BAMTKDIxNkZGNThFNDVCREZGNDFGM0EyRkVDM0FGMTM2N0NCRTI0RDc5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDn5xUwgTIiKDfKXVZeGg/tZ+ 8daoePGpKpf3AZDJvftROEkjyiDwysgi2TKOBMBhCn1KjHyUSdfd6qzU2IzZW798 TXDaZMU89aJRI0Po5pt7DgA2TsCPFbRBaGM8mDt+g4aUOBlIBeffEKMbHRvGdHUN K0PvrmjKUXx9IoMgsu167EVoWvZ2mNTVJ1+KFbnofSBHyMUb8gvL7fj/mpV+K9AU 9+UTdMBwTB6ixAJVbhtdgNDhTRT7dJ0TV9xQlIxLEJITqxb3B50gD0ZHBZTsgcJu oM2mA6MOCkREHf+XswvQr0aBfVMZrPL3TBP446IME9UFQXQWNy6alcor1rKtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIW/1jkW9/0Hzov7DrxNny+JNeQcwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY3NTJiM2MyLTNmMzAtNDA0MC04 YjA1LTgzODIxNzc3MDQ4Zi8wLzMxMzAzMzJlMzEzNjM5MmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqf8wDQYJ KoZIhvcNAQELBQADggEBADSm3MtyCT7793xlZmZzgSYVGV52qkvr8so1fOj/bWIV RCR8oxMIhPdb6kaImiXQuqOsvlN6X4ElKNlAKB/b//eqQT6pGKruxdSXy+fQ9ldq 1ZmwVYXiEehDyzjcZlSSeZJ0ciLqfqhk7V1355BwBBnMwK7L/Xkbv0Mre9RjuQNG gONLg283CtbKSgx78Bx9wjV2GcXCF50kJy+zlqkPMoWOAB6sOR3yf7yuVyBQMkel 7im18BL7aTpFMb5uc3mjVRlEnf/V+WYfvozXThQVWNsJ9iZgF+74LyDYrp9mGKWf fSh8m/n4fJAdWN18YeQsppECNKHeBksWc6JeDxEdnhY= -----END CERTIFICATE-----Generated at Sat Apr 18 03:07:08 2026 by rpki-client