$ rpki-client -vvf repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa File: 3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa (raw, json) Hash identifier: NqLs/FneIiTV/W/DgkmvwBtBvCh5S71ZEnAkqfC2LTI= Subject key identifier: 21:C1:39:7C:01:9D:7C:93:A4:8D:D8:D0:4E:61:BD:5F:A5:BD:DE:8F Certificate issuer: /CN=940E05E54E6B685EFBC6114D1E913804318364AB Certificate serial: 02489A5AB22880C80FC4EAD111E564D4541479AF Authority key identifier: 94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa Signing time: Mon 23 Feb 2026 02:22:58 +0000 ROA not before: Mon 23 Feb 2026 02:17:58 +0000 ROA not after: Mon 22 Feb 2027 02:22:58 +0000 asID: 141952 IP address blocks: 103.166.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:48:9a:5a:b2:28:80:c8:0f:c4:ea:d1:11:e5:64:d4:54:14:79:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940E05E54E6B685EFBC6114D1E913804318364AB Validity Not Before: Feb 23 02:17:58 2026 GMT Not After : Feb 22 02:22:58 2027 GMT Subject: CN=21C1397C019D7C93A48DD8D04E61BD5FA5BDDE8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:cc:a1:37:4e:06:5b:a7:1a:0b:61:32:50: 88:8b:21:c8:61:dc:99:f7:67:aa:45:1c:ba:95:73: 46:2d:f7:a0:7f:5c:54:88:1a:d7:b7:56:4c:c3:fe: ce:74:83:99:60:7d:ba:a5:a8:9e:17:71:7f:8a:0f: 09:0f:87:2d:ee:90:31:43:1b:a6:f0:83:65:8e:78: c5:ce:6c:77:2f:14:7f:60:22:a5:ef:77:96:9a:8d: 23:4f:41:b2:f0:99:26:fc:82:34:4d:7e:8a:5e:54: 27:ef:6a:89:e9:5e:69:97:28:a2:08:ee:52:f7:2b: 4e:de:c3:aa:72:cf:cf:7f:e1:06:52:09:64:10:c1: ea:6a:b1:8c:a9:3b:b5:55:2f:a8:95:13:2f:ff:c7: 02:c6:27:69:ca:4f:8b:63:b7:dc:76:d9:81:db:2d: 39:f9:b5:4c:ca:d5:54:a5:6b:91:6a:9b:8f:3d:3b: c2:c5:be:42:54:c7:80:63:ad:52:c5:8a:c0:10:1b: 4e:a3:d1:79:bd:c0:b5:a6:2c:bc:fc:36:37:8b:ba: 6d:dd:74:dc:49:2e:a8:7c:16:bd:b3:24:65:9d:8e: af:bc:88:93:37:80:59:cb:37:6f:c4:83:84:80:8d: c5:b6:02:66:fb:c5:a7:1c:12:38:4e:6e:e3:2c:1d: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C1:39:7C:01:9D:7C:93:A4:8D:D8:D0:4E:61:BD:5F:A5:BD:DE:8F X509v3 Authority Key Identifier: keyid:94:0E:05:E5:4E:6B:68:5E:FB:C6:11:4D:1E:91:38:04:31:83:64:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/940E05E54E6B685EFBC6114D1E913804318364AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/940E05E54E6B685EFBC6114D1E913804318364AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6b2041f1-4ce6-49b4-83a5-315f20e4e2c3/0/3130332e3136362e3136312e302f32342d3234203d3e20313431393532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.161.0/24 Signature Algorithm: sha256WithRSAEncryption 56:48:22:bd:7e:08:e6:d7:e7:ba:e7:3e:07:48:d3:9f:9c:55: 19:b8:4b:86:21:fa:83:ad:b8:21:1e:91:52:7b:5a:0a:be:b9: e9:c2:3a:8e:f3:0a:15:53:33:72:0a:b9:82:ea:49:2d:d5:cc: a5:52:5e:6b:93:76:61:78:8c:c9:1c:43:74:3b:97:1f:70:f4: bd:6c:ca:3c:c1:84:ac:75:06:60:9b:e2:c7:77:e5:dd:63:32: da:da:64:24:45:a6:22:02:9b:8d:fc:96:de:54:7a:5b:33:f7: df:fe:c8:92:b8:b5:39:c2:71:17:d6:f3:db:ba:83:e3:8d:0e: 34:e9:1b:4a:08:f8:fa:8d:2e:a0:8d:7c:c4:e9:a3:51:a4:01: 7f:d2:99:58:ae:6d:e3:dd:77:66:fb:49:26:c8:ea:4a:05:b9: 7a:e9:9f:ec:a4:47:b1:36:d0:15:50:c4:c8:cd:6f:3f:ea:70: 8a:42:b9:9d:c7:23:11:3c:11:01:be:39:76:13:d7:29:2c:34: 18:cf:3e:96:24:bf:79:20:21:7f:27:47:a5:bf:c9:d2:88:d9: 56:06:a8:33:7c:19:69:bb:67:f1:20:bb:92:67:cf:59:c2:b9: e1:43:ae:8d:51:b3:18:36:b7:c4:18:df:c8:66:48:b6:d3:a4: bf:6d:a6:99 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAkiaWrIogMgPxOrREeVk1FQUea8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQz MTgzNjRBQjAeFw0yNjAyMjMwMjE3NThaFw0yNzAyMjIwMjIyNThaMDMxMTAvBgNV BAMTKDIxQzEzOTdDMDE5RDdDOTNBNDhERDhEMDRFNjFCRDVGQTVCRERFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKccyhN04GW6caC2EyUIiLIchh 3Jn3Z6pFHLqVc0Yt96B/XFSIGte3VkzD/s50g5lgfbqlqJ4XcX+KDwkPhy3ukDFD G6bwg2WOeMXObHcvFH9gIqXvd5aajSNPQbLwmSb8gjRNfopeVCfvaonpXmmXKKII 7lL3K07ew6pyz89/4QZSCWQQwepqsYypO7VVL6iVEy//xwLGJ2nKT4tjt9x22YHb LTn5tUzK1VSla5Fqm489O8LFvkJUx4BjrVLFisAQG06j0Xm9wLWmLLz8NjeLum3d dNxJLqh8Fr2zJGWdjq+8iJM3gFnLN2/Eg4SAjcW2Amb7xaccEjhObuMsHaKhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUIcE5fAGdfJOkjdjQTmG9X6W93o8wHwYDVR0j BBgwFoAUlA4F5U5raF77xhFNHpE4BDGDZKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YjIwNDFmMS00Y2U2LTQ5YjQtODNhNS0zMTVmMjBlNGUyYzMvMC85NDBFMDVFNTRF NkI2ODVFRkJDNjExNEQxRTkxMzgwNDMxODM2NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQwRTA1RTU0RTZCNjg1RUZCQzYxMTREMUU5MTM4MDQzMTgz NjRBQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiMjA0MWYxLTRjZTYtNDliNC04 M2E1LTMxNWYyMGU0ZTJjMy8wLzMxMzAzMzJlMzEzNjM2MmUzMTM2MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpqEwDQYJ KoZIhvcNAQELBQADggEBAFZIIr1+CObX57rnPgdI05+cVRm4S4Yh+oOtuCEekVJ7 Wgq+uenCOo7zChVTM3IKuYLqSS3VzKVSXmuTdmF4jMkcQ3Q7lx9w9L1syjzBhKx1 BmCb4sd35d1jMtraZCRFpiICm438lt5Uelsz99/+yJK4tTnCcRfW89u6g+ONDjTp G0oI+PqNLqCNfMTpo1GkAX/SmViubePdd2b7SSbI6koFuXrpn+ykR7E20BVQxMjN bz/qcIpCuZ3HIxE8EQG+OXYT1yksNBjPPpYkv3kgIX8nR6W/ydKI2VYGqDN8GWm7 Z/Egu5Jnz1nCueFDro1Rsxg2t8QY38hmSLbTpL9tppk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:46 2026 by rpki-client