$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa File: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (raw, json) Hash identifier: pmqu9FSI2K1ALI7S9dBx1ylMVeauzECsUcLoXx/WXf4= Subject key identifier: 61:C6:80:60:E4:20:73:79:07:05:0B:DB:8F:D3:01:59:05:E0:57:C4 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 5653E06AF5DE34D50878A38929D6A71BD9D949C9 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa Signing time: Fri 17 Apr 2026 12:00:01 +0000 ROA not before: Fri 17 Apr 2026 11:55:01 +0000 ROA not after: Fri 16 Apr 2027 12:00:01 +0000 asID: 17440 IP address blocks: 103.209.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:53:e0:6a:f5:de:34:d5:08:78:a3:89:29:d6:a7:1b:d9:d9:49:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Apr 17 11:55:01 2026 GMT Not After : Apr 16 12:00:01 2027 GMT Subject: CN=61C68060E420737907050BDB8FD3015905E057C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:6e:f5:da:97:73:72:f8:42:06:7b:0e:c1: 68:77:06:c0:06:89:c5:bf:3d:5c:49:f4:94:d3:3e: e0:67:e8:f9:9a:52:09:c9:d2:3e:bc:62:ec:e7:68: d3:ee:ed:c9:32:23:36:5d:a9:71:a8:76:7e:44:5c: 10:66:6d:97:74:3c:9b:e1:01:17:7d:07:a0:a5:3f: 53:68:c3:67:54:c2:9c:0f:7a:27:07:26:f0:60:3b: 2b:fd:aa:b0:91:08:f6:90:71:b1:13:b6:69:ff:51: bf:ec:17:19:ec:8f:83:05:1b:1e:79:8d:5a:bd:e6: ea:ff:78:ac:7b:9f:97:02:a4:2b:8f:aa:cb:ec:d1: 4c:18:78:c5:b7:ab:bc:6d:03:47:a4:92:31:03:72: f0:c9:ee:bd:98:79:e5:5b:79:d6:02:f0:e4:5b:1f: b4:7a:18:65:94:e4:99:a4:29:69:5d:83:e4:80:4e: 67:96:53:41:d3:33:0a:e9:6f:34:be:47:52:ab:4c: d0:ab:38:92:f0:ac:a3:63:fd:70:fc:d2:84:d1:ea: 7f:48:a6:b7:d2:ea:da:9b:fe:7f:84:a9:14:64:ec: 8c:5e:83:25:74:f2:b2:82:44:c4:b0:25:6c:a7:64: c8:2c:1c:ae:02:f7:fd:f2:ad:62:98:6e:fa:48:12: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C6:80:60:E4:20:73:79:07:05:0B:DB:8F:D3:01:59:05:E0:57:C4 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.250.0/23 Signature Algorithm: sha256WithRSAEncryption 09:62:62:f7:13:39:b2:f9:1a:1f:88:06:6d:14:7e:76:cb:2a: 64:53:3f:bf:89:7a:82:c4:9d:cf:49:c1:ad:fc:b0:c1:ab:80: ad:9d:2d:48:4a:6d:2b:44:b8:91:35:bb:d1:f3:a8:b3:84:ee: 12:83:c3:21:fa:77:be:d8:32:64:98:dd:31:fa:82:df:28:fe: 32:e9:37:42:0f:d4:0b:6c:d2:a5:60:d3:b2:da:43:85:13:db: 9d:82:7d:0d:8e:f3:cb:8d:9e:23:26:55:fb:b1:bc:66:10:04: 97:7b:aa:90:ba:3a:d9:3f:aa:54:63:f6:78:7d:a0:f3:40:4d: 18:0d:63:e7:2b:8e:bf:c0:b9:cc:a9:9e:3a:74:27:9e:7c:d6: 72:de:55:8f:81:d7:fe:ae:14:d0:52:95:6a:05:d6:c7:68:9f: 36:ab:ff:d8:b8:39:9e:fa:54:7c:48:c9:f2:2c:39:67:46:f8: 57:7a:23:ca:65:b4:d1:05:5e:dc:8e:2c:0b:d1:08:40:2a:50: 6a:1e:c6:d9:78:0c:5a:cc:c4:ea:ed:6d:bc:6d:a2:85:c4:43: c6:77:cf:34:56:d7:a8:0c:66:0d:06:4c:85:3f:12:c5:1d:04: ce:d0:5b:dc:06:61:b2:b1:4a:60:41:56:8a:82:34:da:58:bd: 93:76:77:1b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVlPgavXeNNUIeKOJKdanG9nZSckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNjA0MTcxMTU1MDFaFw0yNzA0MTYxMjAwMDFaMDMxMTAvBgNV BAMTKDYxQzY4MDYwRTQyMDczNzkwNzA1MEJEQjhGRDMwMTU5MDVFMDU3QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCra2712pdzcvhCBnsOwWh3BsAG icW/PVxJ9JTTPuBn6PmaUgnJ0j68YuznaNPu7ckyIzZdqXGodn5EXBBmbZd0PJvh ARd9B6ClP1Now2dUwpwPeicHJvBgOyv9qrCRCPaQcbETtmn/Ub/sFxnsj4MFGx55 jVq95ur/eKx7n5cCpCuPqsvs0UwYeMW3q7xtA0ekkjEDcvDJ7r2YeeVbedYC8ORb H7R6GGWU5JmkKWldg+SATmeWU0HTMwrpbzS+R1KrTNCrOJLwrKNj/XD80oTR6n9I prfS6tqb/n+EqRRk7IxegyV08rKCRMSwJWynZMgsHK4C9/3yrWKYbvpIEmf5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYcaAYOQgc3kHBQvbj9MBWQXgV8QwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM1MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ9H6MA0GCSqG SIb3DQEBCwUAA4IBAQAJYmL3Ezmy+RofiAZtFH52yypkUz+/iXqCxJ3PScGt/LDB q4CtnS1ISm0rRLiRNbvR86izhO4Sg8Mh+ne+2DJkmN0x+oLfKP4y6TdCD9QLbNKl YNOy2kOFE9udgn0NjvPLjZ4jJlX7sbxmEASXe6qQujrZP6pUY/Z4faDzQE0YDWPn K46/wLnMqZ46dCeefNZy3lWPgdf+rhTQUpVqBdbHaJ82q//YuDme+lR8SMnyLDln RvhXeiPKZbTRBV7cjiwL0QhAKlBqHsbZeAxazMTq7W28baKFxEPGd880VteoDGYN BkyFPxLFHQTO0FvcBmGysUpgQVaKgjTaWL2Tdncb -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:37 2026 by rpki-client