$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3230392e312e302f32342d3234203d3e20313334363530.roa File: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (raw, json) Hash identifier: xRwGFhgxeu1CAV1+gFeCQMhm4YDhoZJE8bg+uNmVg2o= Subject key identifier: FF:16:BA:25:1B:D0:77:BF:6B:7A:08:5A:11:D4:04:7C:9A:C1:7A:4A Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 5F07F5ABB2DFA03368E7AD15A2315516AC97ECB2 Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3230392e312e302f32342d3234203d3e20313334363530.roa Signing time: Tue 24 Feb 2026 06:02:17 +0000 ROA not before: Tue 24 Feb 2026 05:57:17 +0000 ROA not after: Tue 23 Feb 2027 06:02:17 +0000 asID: 134650 IP address blocks: 103.209.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:07:f5:ab:b2:df:a0:33:68:e7:ad:15:a2:31:55:16:ac:97:ec:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Feb 24 05:57:17 2026 GMT Not After : Feb 23 06:02:17 2027 GMT Subject: CN=FF16BA251BD077BF6B7A085A11D4047C9AC17A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:39:d0:e6:dc:a2:96:89:a3:25:eb:dc:8f: a5:b9:56:3b:cb:5f:66:a4:34:75:0c:c0:f2:ac:48: 56:18:01:6f:e3:22:2f:17:74:a3:7a:bb:bc:68:19: f6:60:af:c8:fc:f0:2c:9c:06:65:25:d6:8d:df:94: b3:4d:21:82:e7:8a:32:6e:96:84:2d:54:a9:c2:58: 23:a7:7c:76:89:f3:3a:62:22:ab:dd:c1:f5:54:53: b6:c0:41:12:3a:af:06:55:b7:3f:54:b2:67:f6:34: 76:8e:9d:9a:52:56:28:57:56:19:74:4d:e1:54:31: 71:ff:f6:28:5a:af:a4:99:bd:ab:42:4e:6d:37:a0: 27:61:31:76:19:b0:c0:ec:43:89:54:ae:c6:94:9e: 37:52:bf:2b:89:1c:fc:45:8c:dc:38:e7:15:5c:c5: 83:71:78:8a:b1:a6:98:bf:ed:ac:d7:fc:fd:79:04: 34:f1:c8:25:41:11:91:3e:85:b4:a7:a8:74:b3:ad: c5:a4:f8:cc:2c:8f:39:1c:b4:7c:02:b8:61:78:ba: 0b:63:39:53:6f:7a:21:40:2d:11:d1:8a:7a:62:c1: 61:c3:73:33:88:1f:82:92:c1:c8:c6:59:39:6e:4e: ac:71:ea:9f:f9:55:e0:58:62:66:6d:b4:eb:66:ff: a8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:16:BA:25:1B:D0:77:BF:6B:7A:08:5A:11:D4:04:7C:9A:C1:7A:4A X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/3130332e3230392e312e302f32342d3234203d3e20313334363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.1.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ab:f4:ef:d3:43:59:69:89:a8:d2:7a:f6:fb:6c:ac:61:14: 74:3b:ed:bd:18:7a:5a:94:2d:f0:51:f4:70:94:44:fb:32:df: d3:2f:cf:c5:af:52:6f:f1:84:92:27:a1:11:3e:2d:63:17:4f: cd:97:04:ab:f6:96:e3:3b:a5:3d:a9:16:f0:e1:38:ad:7c:38: bf:5d:20:1e:c8:f2:e6:1c:52:e3:b2:1a:c3:dc:53:51:b2:54: bd:b8:e2:21:41:48:55:17:ba:e8:34:d3:ae:aa:40:cd:f6:82: d5:20:64:52:d8:a9:eb:53:03:09:2f:fb:87:c2:ba:86:48:51: 02:27:9f:69:7f:70:ee:f8:f7:4d:f6:a3:c2:b3:b7:68:f4:c0: 1c:81:fa:56:e5:0d:f2:e4:63:28:a3:42:5b:04:62:d4:03:24: 9c:ef:a2:c9:9a:ec:7c:a5:57:b0:c3:28:1a:60:70:4c:08:c7: 15:e9:89:84:09:46:12:5a:de:61:8c:66:ee:dc:82:af:e5:7c: 76:69:1d:f8:fe:16:46:98:00:34:5d:5e:0a:5f:81:ad:eb:1a: 22:e6:bc:91:59:05:2c:6e:9b:48:c1:9f:6e:a1:f5:f0:27:23: d7:17:66:3e:a3:25:cc:5a:85:2d:94:7d:fb:c6:27:34:2d:a7: 63:1a:0d:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXwf1q7LfoDNo560VojFVFqyX7LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNjAyMjQwNTU3MTdaFw0yNzAyMjMwNjAyMTdaMDMxMTAvBgNV BAMTKEZGMTZCQTI1MUJEMDc3QkY2QjdBMDg1QTExRDQwNDdDOUFDMTdBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aznQ5tyilomjJevcj6W5VjvL X2akNHUMwPKsSFYYAW/jIi8XdKN6u7xoGfZgr8j88CycBmUl1o3flLNNIYLnijJu loQtVKnCWCOnfHaJ8zpiIqvdwfVUU7bAQRI6rwZVtz9Usmf2NHaOnZpSVihXVhl0 TeFUMXH/9ihar6SZvatCTm03oCdhMXYZsMDsQ4lUrsaUnjdSvyuJHPxFjNw45xVc xYNxeIqxppi/7azX/P15BDTxyCVBEZE+hbSnqHSzrcWk+MwsjzkctHwCuGF4ugtj OVNveiFALRHRinpiwWHDczOIH4KSwcjGWTluTqxx6p/5VeBYYmZttOtm/6jhAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU/xa6JRvQd79reghaEdQEfJrBekowHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY3ZGIyM2I3LTkxNTktNDZjNy04 ODUzLTA2NjU0YWU0N2FlZC8wLzMxMzAzMzJlMzIzMDM5MmUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNDM2MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfRATANBgkqhkiG 9w0BAQsFAAOCAQEAcKv079NDWWmJqNJ69vtsrGEUdDvtvRh6WpQt8FH0cJRE+zLf 0y/Pxa9Sb/GEkiehET4tYxdPzZcEq/aW4zulPakW8OE4rXw4v10gHsjy5hxS47Ia w9xTUbJUvbjiIUFIVRe66DTTrqpAzfaC1SBkUtip61MDCS/7h8K6hkhRAiefaX9w 7vj3TfajwrO3aPTAHIH6VuUN8uRjKKNCWwRi1AMknO+iyZrsfKVXsMMoGmBwTAjH FemJhAlGElreYYxm7tyCr+V8dmkd+P4WRpgANF1eCl+BresaIua8kVkFLG6bSMGf bqH18Ccj1xdmPqMlzFqFLZR9+8YnNC2nYxoN/w== -----END CERTIFICATE-----Generated at Mon Mar 2 14:10:44 2026 by rpki-client