$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa File: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (raw, json) Hash identifier: zrUbBEFmPQGioTWu6c1N5fooGXLHFSjFh99V26W88Dg= Subject key identifier: 17:11:19:8B:7E:FC:C1:4A:95:B7:88:1A:3F:97:70:19:EF:5E:E1:B8 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 56BB91D2CA3340026DA52A0112DCC9BE26AA343E Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa Signing time: Fri 17 Apr 2026 10:00:01 +0000 ROA not before: Fri 17 Apr 2026 09:55:01 +0000 ROA not after: Fri 16 Apr 2027 10:00:01 +0000 asID: 17440 IP address blocks: 103.209.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:bb:91:d2:ca:33:40:02:6d:a5:2a:01:12:dc:c9:be:26:aa:34:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Apr 17 09:55:01 2026 GMT Not After : Apr 16 10:00:01 2027 GMT Subject: CN=1711198B7EFCC14A95B7881A3F977019EF5EE1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:c0:b4:e1:fa:0b:01:5d:f8:af:3a:bd:47: 42:69:75:dc:13:0b:ef:b5:ec:59:8a:e5:b9:ee:ed: 91:b1:b4:36:d0:a2:54:97:c3:e6:17:0e:e2:24:fe: 8a:b4:64:77:6b:85:df:7a:d1:ca:10:3e:2d:34:b7: 99:14:90:23:e3:32:1f:f6:1f:ef:5f:00:a0:6c:f3: 60:ce:ee:c5:a1:e6:d0:c1:a5:d7:25:c7:83:73:4d: 8b:c0:02:a4:c4:2e:55:7b:a1:9d:73:ab:e7:8e:54: aa:db:ba:0e:7d:14:3e:6d:eb:89:70:e1:2a:13:74: 89:57:03:2c:f3:12:e4:98:c4:23:63:61:46:d6:de: dd:11:ab:52:85:ff:89:d0:01:a4:21:17:fb:d1:fe: 96:6b:da:42:ea:0a:f4:53:ba:e9:4e:40:c6:95:fd: 67:35:f0:3f:f9:ae:b6:8c:4a:ff:a2:2a:da:e5:97: 75:4f:31:ec:15:9d:ff:14:04:68:9b:53:f8:ac:18: b2:64:71:66:af:2f:0b:14:c8:77:eb:dd:8c:b5:b6: 8f:3d:93:a0:a5:d4:aa:09:c8:8d:64:d6:14:1f:d2: c6:98:45:2f:52:b4:5f:4e:6a:32:5d:4d:b4:95:d6: ab:6a:2d:11:59:a7:e8:22:bf:af:a7:80:e4:cf:40: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:11:19:8B:7E:FC:C1:4A:95:B7:88:1A:3F:97:70:19:EF:5E:E1:B8 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.249.0/24 Signature Algorithm: sha256WithRSAEncryption bb:6a:c2:12:79:df:93:38:82:d5:86:f9:d9:5c:1e:5d:4c:e5: 7b:ed:ae:ff:47:83:fa:59:1f:3e:df:63:2a:2c:37:cd:c3:9b: a8:d3:da:a5:49:3f:7e:17:0c:27:a8:6a:b1:01:6f:40:a6:1c: f2:71:0d:20:a2:27:32:53:35:d4:09:11:0a:a6:10:84:6f:79: d6:74:e2:3e:bd:a7:f4:2e:63:dd:38:f5:3d:3d:34:43:7e:b5: 9d:80:56:f3:0a:73:c0:92:26:ae:51:90:4d:86:4c:9b:01:53: 14:ea:e7:65:b7:ed:b2:93:dd:09:9e:da:e5:21:4a:ed:c4:81: ce:dc:7b:f2:de:4e:dc:4d:67:b1:eb:dc:1b:11:e5:9b:f7:f7: f2:81:fe:f0:b5:93:e1:47:12:f9:d9:d5:9c:09:51:85:89:f3: d5:5f:b6:6f:22:f7:be:78:37:e7:6a:f7:ac:b3:07:50:44:69: c7:10:35:7c:14:3b:37:98:0c:22:2d:9d:9c:ea:f7:86:a9:78: 8e:1c:10:75:02:49:8d:17:8b:5b:42:fa:c2:d6:77:1b:62:83: 0d:37:c1:f8:cc:7e:da:70:6e:50:44:a1:78:71:be:3a:3e:17: df:ef:74:eb:bf:53:d3:f8:33:29:d3:b4:98:97:0a:4d:c0:54: 06:6f:41:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVruR0sozQAJtpSoBEtzJviaqND4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNjA0MTcwOTU1MDFaFw0yNzA0MTYxMDAwMDFaMDMxMTAvBgNV BAMTKDE3MTExOThCN0VGQ0MxNEE5NUI3ODgxQTNGOTc3MDE5RUY1RUUxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19cC04foLAV34rzq9R0JpddwT C++17FmK5bnu7ZGxtDbQolSXw+YXDuIk/oq0ZHdrhd960coQPi00t5kUkCPjMh/2 H+9fAKBs82DO7sWh5tDBpdclx4NzTYvAAqTELlV7oZ1zq+eOVKrbug59FD5t64lw 4SoTdIlXAyzzEuSYxCNjYUbW3t0Rq1KF/4nQAaQhF/vR/pZr2kLqCvRTuulOQMaV /Wc18D/5rraMSv+iKtrll3VPMewVnf8UBGibU/isGLJkcWavLwsUyHfr3Yy1to89 k6Cl1KoJyI1k1hQf0saYRS9StF9OajJdTbSV1qtqLRFZp+giv6+ngOTPQAZ7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFxEZi378wUqVt4gaP5dwGe9e4bgwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9H5MA0GCSqG SIb3DQEBCwUAA4IBAQC7asISed+TOILVhvnZXB5dTOV77a7/R4P6WR8+32MqLDfN w5uo09qlST9+FwwnqGqxAW9AphzycQ0goicyUzXUCREKphCEb3nWdOI+vaf0LmPd OPU9PTRDfrWdgFbzCnPAkiauUZBNhkybAVMU6udlt+2yk90JntrlIUrtxIHO3Hvy 3k7cTWex69wbEeWb9/fygf7wtZPhRxL52dWcCVGFifPVX7ZvIve+eDfnavesswdQ RGnHEDV8FDs3mAwiLZ2c6veGqXiOHBB1AkmNF4tbQvrC1ncbYoMNN8H4zH7acG5Q RKF4cb46Phff73Trv1PT+DMp07SYlwpNwFQGb0GG -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:14 2026 by rpki-client