$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa File: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (raw, json) Hash identifier: lLCiSab8jZbN3Xi+gQMNI/XGKm9Y5pxqNBC8kOMd90E= Subject key identifier: A6:A2:49:AE:B2:C5:8B:BA:FF:BB:99:36:D0:47:55:6B:57:6E:AE:2B Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 4E893C2F776DB00848C7118AEAAE6DAB7810A632 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa Signing time: Thu 02 Apr 2026 15:00:01 +0000 ROA not before: Thu 02 Apr 2026 14:55:01 +0000 ROA not after: Thu 01 Apr 2027 15:00:01 +0000 asID: 134655 IP address blocks: 103.209.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 11:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:89:3c:2f:77:6d:b0:08:48:c7:11:8a:ea:ae:6d:ab:78:10:a6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Apr 2 14:55:01 2026 GMT Not After : Apr 1 15:00:01 2027 GMT Subject: CN=A6A249AEB2C58BBAFFBB9936D047556B576EAE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:6e:b3:41:44:25:21:d3:5c:e7:a8:38:ad: 0a:69:dd:9e:6f:44:8f:0e:f1:4e:86:b0:fb:2f:c7: ff:07:ef:0d:78:73:e0:51:9d:dd:6a:50:e0:71:2d: dd:b9:eb:5b:2e:3e:43:83:6e:ec:46:89:b9:e4:8c: de:8e:23:07:eb:fd:c2:bc:ca:8f:51:8d:71:b9:a9: f9:9f:47:df:18:d4:78:a5:7b:28:21:de:10:ff:6e: 95:85:5a:21:1f:78:24:44:6b:66:bd:0c:c5:c1:20: 1c:4b:5c:0d:16:88:09:1c:c2:52:95:80:15:a9:23: f2:a6:ac:65:19:76:72:37:35:ce:80:bd:25:d1:26: 44:aa:e6:ce:bd:59:a4:93:35:05:f5:47:9c:dd:fa: 91:66:f5:53:9d:ab:e2:bf:32:82:32:0c:84:43:b3: 0a:35:5a:27:16:0b:3b:f9:f1:43:45:14:0e:86:b7: 7b:c2:8f:e3:2f:90:7c:bd:a1:8b:ea:e2:96:d0:f9: 29:ae:b3:30:16:71:82:4e:c3:eb:64:f1:a8:4c:ce: eb:09:70:5c:c0:be:62:d8:7a:76:bc:97:8d:b3:96: 64:26:d6:81:2e:fd:9c:21:c3:3b:e1:94:af:af:08: 48:87:f4:6a:d9:ce:1d:88:b2:e4:c4:11:f6:48:30: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A2:49:AE:B2:C5:8B:BA:FF:BB:99:36:D0:47:55:6B:57:6E:AE:2B X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.184.0/22 Signature Algorithm: sha256WithRSAEncryption 55:25:7a:9f:d6:b8:37:b2:b1:4a:c1:6c:90:d1:4c:04:e7:b7: a0:e2:6b:7a:fa:f0:5d:76:2e:f0:62:f6:d1:80:3b:a9:9b:b1: c4:87:59:8f:ce:cd:75:13:31:a2:f9:0d:3f:5a:58:ab:df:b8: 98:cc:fa:7e:45:6f:ff:58:92:d0:45:c1:ad:64:f6:e5:53:7d: 04:26:9b:7e:15:4a:c0:a2:82:05:56:76:94:40:1d:3b:9b:7e: b4:96:bd:7e:c7:2a:38:97:cc:72:6b:b0:5a:a0:ce:a4:dd:48: 47:59:65:db:78:28:e4:c5:4c:a1:05:d6:64:67:59:6d:a7:d9: 22:5e:c2:c8:ca:13:06:2e:14:86:f6:28:72:b1:c6:b4:88:6a: d4:86:d0:fb:75:c3:d5:38:a7:66:a3:fb:d9:00:7a:a1:70:98: 5c:16:79:3c:80:3c:c8:cb:ed:6b:a3:5e:99:88:22:06:16:11: c9:81:4b:54:ce:07:be:ba:70:3e:6c:c0:85:95:c0:f4:7a:ab: d8:7b:f7:e2:0b:04:16:26:cd:2e:af:f7:2b:4c:9f:e8:2c:c0: 19:d3:60:48:2b:7d:fe:2d:c1:f0:9a:f5:ea:98:17:85:34:85: f3:17:33:9d:86:8e:38:15:73:79:a4:2d:8e:9c:d8:32:74:8c: e9:32:56:b6 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTok8L3dtsAhIxxGK6q5tq3gQpjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNjA0MDIxNDU1MDFaFw0yNzA0MDExNTAwMDFaMDMxMTAvBgNV BAMTKEE2QTI0OUFFQjJDNThCQkFGRkJCOTkzNkQwNDc1NTZCNTc2RUFFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNW6zQUQlIdNc56g4rQpp3Z5v RI8O8U6GsPsvx/8H7w14c+BRnd1qUOBxLd2561suPkODbuxGibnkjN6OIwfr/cK8 yo9RjXG5qfmfR98Y1Hileygh3hD/bpWFWiEfeCREa2a9DMXBIBxLXA0WiAkcwlKV gBWpI/KmrGUZdnI3Nc6AvSXRJkSq5s69WaSTNQX1R5zd+pFm9VOdq+K/MoIyDIRD swo1WicWCzv58UNFFA6Gt3vCj+MvkHy9oYvq4pbQ+SmuszAWcYJOw+tk8ahMzusJ cFzAvmLYena8l42zlmQm1oEu/ZwhwzvhlK+vCEiH9GrZzh2IsuTEEfZIMNsnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUpqJJrrLFi7r/u5k20EdVa1duriswHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i YTkwLWNlZThkMzk3OWZjZC8wLzMxMzAzMzJlMzIzMDM5MmUzMTM4MzQyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn0bgwDQYJ KoZIhvcNAQELBQADggEBAFUlep/WuDeysUrBbJDRTATnt6Dia3r68F12LvBi9tGA O6mbscSHWY/OzXUTMaL5DT9aWKvfuJjM+n5Fb/9YktBFwa1k9uVTfQQmm34VSsCi ggVWdpRAHTubfrSWvX7HKjiXzHJrsFqgzqTdSEdZZdt4KOTFTKEF1mRnWW2n2SJe wsjKEwYuFIb2KHKxxrSIatSG0Pt1w9U4p2aj+9kAeqFwmFwWeTyAPMjL7WujXpmI IgYWEcmBS1TOB766cD5swIWVwPR6q9h79+ILBBYmzS6v9ytMn+gswBnTYEgrff4t wfCa9eqYF4U0hfMXM52GjjgVc3mkLY6c2DJ0jOkyVrY= -----END CERTIFICATE-----Generated at Fri Apr 17 20:04:23 2026 by rpki-client