$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa File: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (raw, json) Hash identifier: w8ZahT2PJnJ6rNL+88QHOaBbqa5lCIM1wLeMrC+MJ2g= Subject key identifier: 09:D5:74:FF:C4:2C:EA:23:4E:2B:99:D3:98:34:22:22:2D:9B:4B:A8 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 439923DB2DF696F92840DA9C4FAFBD3AF742802B Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa Signing time: Fri 17 Apr 2026 11:01:48 +0000 ROA not before: Fri 17 Apr 2026 10:56:48 +0000 ROA not after: Fri 16 Apr 2027 11:01:48 +0000 asID: 17440 IP address blocks: 103.209.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:99:23:db:2d:f6:96:f9:28:40:da:9c:4f:af:bd:3a:f7:42:80:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Apr 17 10:56:48 2026 GMT Not After : Apr 16 11:01:48 2027 GMT Subject: CN=09D574FFC42CEA234E2B99D3983422222D9B4BA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f6:3f:a9:7d:45:6e:0b:43:60:ca:d2:c8:5a: 23:9d:aa:a5:1d:c0:59:e7:1b:98:90:32:a4:34:0a: a9:b8:b6:bb:c5:65:a8:0a:e6:46:69:9c:eb:df:f1: e3:e6:00:50:6a:b9:08:58:26:1b:cc:e9:1e:4d:21: 42:d7:c6:d3:fc:c2:fd:b5:1b:93:d4:b8:14:09:c0: 0d:61:0e:66:b4:93:31:b4:b4:2e:fb:b8:b6:6a:9e: b1:a2:48:3e:c2:0e:1c:a9:1a:4b:4c:96:7c:51:4f: cf:be:2d:18:5e:9d:4a:04:eb:c1:e1:20:f0:dc:3a: ac:fa:49:05:85:fa:94:eb:43:fb:15:18:a5:62:66: 5e:22:a8:4d:33:3c:da:81:7a:50:05:fb:7d:82:ba: 4f:6f:16:67:6c:60:39:70:02:d5:48:f3:2b:18:4a: 66:f8:d2:d8:b5:52:ae:b7:33:0e:db:07:5a:9c:9a: 3f:48:4b:ee:fa:38:7a:9c:9d:30:f5:30:be:21:4c: 37:5c:54:bb:20:49:fb:f1:14:bf:c5:88:47:c1:dd: ba:5f:a4:26:c5:74:34:2a:d7:ce:d2:8e:c5:50:a0: b9:ad:99:79:b6:4e:c7:4f:07:e5:91:3a:a9:56:3b: 2a:a1:2f:50:1a:47:16:bf:5d:39:70:f9:d1:d1:c1: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D5:74:FF:C4:2C:EA:23:4E:2B:99:D3:98:34:22:22:2D:9B:4B:A8 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.250.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c1:f6:eb:cb:ba:a3:68:50:68:a2:de:f6:65:7c:67:93:a8: b4:5a:88:20:fc:1d:e2:bd:88:6b:e1:cd:eb:18:31:bf:ba:aa: 1f:27:e6:ad:60:fe:08:68:22:65:24:ae:79:60:28:d9:95:42: 62:cb:df:ef:7c:dd:e2:32:eb:ba:54:81:e4:72:35:9e:f9:40: 40:85:1c:f0:42:7b:a2:aa:0d:bf:2b:96:1e:0d:42:29:3a:52: 4b:8d:d9:3f:76:de:a1:ef:d8:21:6d:95:6f:84:54:84:60:88: 9d:97:d6:2c:79:d7:6f:06:f2:6f:9d:c2:97:72:80:3e:ac:f7: 9f:9a:09:a4:70:e4:0a:f1:22:b5:8a:b8:80:0f:d9:d3:e5:7d: 4c:74:6d:1c:18:20:31:ad:ce:19:b1:55:d2:f9:d1:d4:94:c4: f5:cc:2e:35:63:c6:da:ee:d7:c0:6d:77:1e:d1:db:b4:be:90: f0:54:49:71:37:64:d1:18:db:19:40:97:3b:ce:50:62:ff:8e: f7:60:9d:77:aa:43:2d:86:f5:98:62:99:9d:de:50:12:c3:50: 89:73:2b:4b:eb:db:d3:bc:cb:87:c0:fa:59:bc:1f:33:14:54: f2:0d:85:73:1e:b3:36:f4:d9:b3:af:db:1c:3c:63:8b:94:a4: 93:54:8c:9d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQ5kj2y32lvkoQNqcT6+9OvdCgCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNjA0MTcxMDU2NDhaFw0yNzA0MTYxMTAxNDhaMDMxMTAvBgNV BAMTKDA5RDU3NEZGQzQyQ0VBMjM0RTJCOTlEMzk4MzQyMjIyMkQ5QjRCQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59j+pfUVuC0NgytLIWiOdqqUd wFnnG5iQMqQ0Cqm4trvFZagK5kZpnOvf8ePmAFBquQhYJhvM6R5NIULXxtP8wv21 G5PUuBQJwA1hDma0kzG0tC77uLZqnrGiSD7CDhypGktMlnxRT8++LRhenUoE68Hh IPDcOqz6SQWF+pTrQ/sVGKViZl4iqE0zPNqBelAF+32Cuk9vFmdsYDlwAtVI8ysY Smb40ti1Uq63Mw7bB1qcmj9IS+76OHqcnTD1ML4hTDdcVLsgSfvxFL/FiEfB3bpf pCbFdDQq187SjsVQoLmtmXm2TsdPB+WROqlWOyqhL1AaRxa/XTlw+dHRwWLtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUCdV0/8Qs6iNOK5nTmDQiIi2bS6gwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9H6MA0GCSqG SIb3DQEBCwUAA4IBAQBowfbry7qjaFBoot72ZXxnk6i0Wogg/B3ivYhr4c3rGDG/ uqofJ+atYP4IaCJlJK55YCjZlUJiy9/vfN3iMuu6VIHkcjWe+UBAhRzwQnuiqg2/ K5YeDUIpOlJLjdk/dt6h79ghbZVvhFSEYIidl9YseddvBvJvncKXcoA+rPefmgmk cOQK8SK1iriAD9nT5X1MdG0cGCAxrc4ZsVXS+dHUlMT1zC41Y8ba7tfAbXce0du0 vpDwVElxN2TRGNsZQJc7zlBi/473YJ13qkMthvWYYpmd3lASw1CJcytL69vTvMuH wPpZvB8zFFTyDYVzHrM29Nmzr9scPGOLlKSTVIyd -----END CERTIFICATE-----Generated at Sun Apr 19 13:03:26 2026 by rpki-client