$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa File: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (raw, json) Hash identifier: C39+1H0Bi9PjQOJYBQUdIEuPft+etivv7dszlwc93Yw= Subject key identifier: 30:16:C9:15:7A:BF:1E:21:45:60:4C:24:44:4D:08:A2:D1:ED:20:98 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 4F6282FAE97BFF539DD0E6D94E19AE8D174A5F29 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa Signing time: Mon 23 Feb 2026 06:00:00 +0000 ROA not before: Mon 23 Feb 2026 05:55:00 +0000 ROA not after: Mon 22 Feb 2027 06:00:00 +0000 asID: 131728 IP address blocks: 103.12.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:62:82:fa:e9:7b:ff:53:9d:d0:e6:d9:4e:19:ae:8d:17:4a:5f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Feb 23 05:55:00 2026 GMT Not After : Feb 22 06:00:00 2027 GMT Subject: CN=3016C9157ABF1E2145604C24444D08A2D1ED2098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:42:d8:d0:d3:06:4b:4f:bd:3d:1f:30:da: 29:8d:a1:64:ee:66:75:68:dc:04:ef:dd:4b:46:f0: 21:2c:83:f9:a7:53:04:52:d0:5f:89:23:5f:c7:bf: 36:1c:27:65:0a:a8:67:0c:f8:6d:ab:42:f7:f1:d2: 3f:95:19:01:12:f7:ec:e6:4c:df:af:c6:81:69:c0: 8d:af:a9:1c:a8:66:f2:e6:71:4a:62:e3:1e:20:72: ef:ae:00:93:4c:8c:99:6f:ac:e2:31:74:c2:55:4a: aa:5d:08:36:57:14:0b:ea:3f:13:59:2a:c8:92:a1: 3b:33:c7:50:4b:e6:d2:3b:25:fc:fd:b0:50:67:09: 70:34:81:61:70:d3:82:13:4e:a2:8f:cc:8f:2d:98: dc:27:13:f2:9e:d1:35:f9:8b:25:e3:6e:6a:31:b3: 60:53:a1:bc:36:c4:33:f1:6b:65:e3:2e:d7:53:54: 9d:f1:d9:a3:cc:c8:83:0d:10:c9:27:2e:af:e5:eb: 6e:52:5f:ce:36:ea:5e:1e:1d:b8:22:af:97:f2:a5: cc:d2:26:b3:21:ab:9b:81:52:49:da:1f:8d:3d:f0: c5:78:57:1f:f5:f6:c0:38:03:0e:a9:2b:03:35:98: 91:9e:05:55:d6:60:7a:a4:0c:d7:b9:4c:8b:3c:c0: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:16:C9:15:7A:BF:1E:21:45:60:4C:24:44:4D:08:A2:D1:ED:20:98 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.12.112.0/22 Signature Algorithm: sha256WithRSAEncryption 03:4c:a2:46:a7:0e:c1:5d:8c:33:e8:b3:f9:b9:ab:c3:83:67: 3a:9f:db:73:8d:0b:30:6a:24:7c:34:40:a3:76:a6:e3:f8:f0: 46:fb:a2:8c:63:b4:67:8f:10:96:fe:90:77:c8:c0:b1:75:27: 48:fe:54:39:58:bf:7a:52:f7:19:d2:4b:bc:f4:23:9c:df:32: 53:1a:6f:ca:6f:c6:2c:ea:34:28:c0:54:2c:ee:30:1f:83:a9: ac:e6:4a:2c:75:ab:d9:2b:8c:f4:55:f0:88:d6:b7:39:6a:a3: 88:a9:f7:ca:47:97:53:8c:16:4c:d9:ab:9b:02:75:94:48:e9: a6:be:a3:f4:c9:f9:3a:8f:1c:44:f0:c3:46:8b:58:65:f0:73: 5a:98:5b:d7:c0:e1:cf:c8:f2:62:96:fa:60:be:d5:d8:c4:9f: 6a:ce:7e:59:cb:ee:c8:f0:89:8d:7c:28:32:ed:7d:8b:ce:6e: 54:af:11:95:ce:4f:e3:e0:f0:89:df:5a:65:e1:fe:44:43:ee: c6:0b:87:f1:fd:93:bf:57:78:49:be:d0:5f:29:d9:73:72:e6: 7e:dd:1f:d7:65:50:04:a2:97:ee:70:32:21:8a:91:bc:a1:72: d8:f2:1e:88:14:4c:41:57:e0:84:2f:55:3d:99:c0:ba:77:5d: 11:1c:ab:30 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT2KC+ul7/1Od0ObZThmujRdKXykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNjAyMjMwNTU1MDBaFw0yNzAyMjIwNjAwMDBaMDMxMTAvBgNV BAMTKDMwMTZDOTE1N0FCRjFFMjE0NTYwNEMyNDQ0NEQwOEEyRDFFRDIwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb40LY0NMGS0+9PR8w2imNoWTu ZnVo3ATv3UtG8CEsg/mnUwRS0F+JI1/HvzYcJ2UKqGcM+G2rQvfx0j+VGQES9+zm TN+vxoFpwI2vqRyoZvLmcUpi4x4gcu+uAJNMjJlvrOIxdMJVSqpdCDZXFAvqPxNZ KsiSoTszx1BL5tI7Jfz9sFBnCXA0gWFw04ITTqKPzI8tmNwnE/Ke0TX5iyXjbmox s2BTobw2xDPxa2XjLtdTVJ3x2aPMyIMNEMknLq/l625SX8426l4eHbgir5fypczS JrMhq5uBUknaH4098MV4Vx/19sA4Aw6pKwM1mJGeBVXWYHqkDNe5TIs8wAePAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMBbJFXq/HiFFYEwkRE0IotHtIJgwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwMTVhODU1LWIyOWMtNDUwMi1h ZjgxLWNiYjhiNGY3ZjBmNy8wLzMxMzAzMzJlMzEzMjJlMzEzMTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZwxwMA0GCSqG SIb3DQEBCwUAA4IBAQADTKJGpw7BXYwz6LP5uavDg2c6n9tzjQswaiR8NECjdqbj +PBG+6KMY7RnjxCW/pB3yMCxdSdI/lQ5WL96UvcZ0ku89COc3zJTGm/Kb8Ys6jQo wFQs7jAfg6ms5kosdavZK4z0VfCI1rc5aqOIqffKR5dTjBZM2aubAnWUSOmmvqP0 yfk6jxxE8MNGi1hl8HNamFvXwOHPyPJilvpgvtXYxJ9qzn5Zy+7I8ImNfCgy7X2L zm5UrxGVzk/j4PCJ31pl4f5EQ+7GC4fx/ZO/V3hJvtBfKdlzcuZ+3R/XZVAEopfu cDIhipG8oXLY8h6IFExBV+CEL1U9mcC6d10RHKsw -----END CERTIFICATE-----Generated at Mon Mar 2 14:43:33 2026 by rpki-client