$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa File: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (raw, json) Hash identifier: wYNa6rd/dtO703cZD6u8xpc4ciKefYn3NvgU9j9tLAY= Subject key identifier: 8A:EF:2D:8D:C9:74:4D:9A:A3:7F:92:FE:27:A1:4D:45:08:39:97:0D Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 11A4A8B153188592A0322B9D781C5222167C494D Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa Signing time: Sun 05 Apr 2026 04:02:42 +0000 ROA not before: Sun 05 Apr 2026 03:57:42 +0000 ROA not after: Sun 04 Apr 2027 04:02:42 +0000 asID: 142322 IP address blocks: 103.168.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a4:a8:b1:53:18:85:92:a0:32:2b:9d:78:1c:52:22:16:7c:49:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Apr 5 03:57:42 2026 GMT Not After : Apr 4 04:02:42 2027 GMT Subject: CN=8AEF2D8DC9744D9AA37F92FE27A14D450839970D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:03:30:85:6f:af:b5:51:e8:1b:f5:e8:b8: 00:fc:7d:d6:c7:5e:ff:2b:5b:0d:07:6b:19:3f:ca: 59:9c:47:15:fe:14:db:fd:2c:38:4e:0d:8f:4b:d8: 8c:c7:70:33:a1:2c:9e:d5:3a:66:ac:6f:de:16:3b: 77:3f:2d:22:77:81:2d:c0:61:6f:24:93:d3:5f:87: 00:c1:37:eb:f6:58:5f:78:80:0b:0b:20:10:9d:41: 05:3f:9f:99:a7:c1:cf:69:0f:3e:b0:7a:38:67:ea: 46:b6:92:d2:fe:8c:4a:03:66:2b:a0:91:23:85:28: df:3c:39:b0:91:25:0b:32:31:87:ef:3d:30:b3:d2: 56:c6:d8:30:5b:91:25:11:f6:a7:c8:9d:65:6d:74: 14:c3:5d:c2:b3:92:02:2e:59:48:5d:c0:32:c0:0d: 2d:98:a8:85:3c:cb:07:f8:62:b9:0f:c4:b3:46:80: 7c:68:b8:5e:33:ad:92:91:c2:99:85:86:42:e5:2e: e5:77:6c:f7:28:e0:73:b8:bc:dd:84:6a:1d:54:a4: 4a:f2:0a:12:77:69:72:ab:7a:cb:fd:f2:aa:01:9e: 9d:21:43:16:52:04:df:4d:56:98:98:3e:19:18:13: cb:be:73:1e:db:fd:aa:2d:ba:d7:95:fb:04:a3:7c: cf:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EF:2D:8D:C9:74:4D:9A:A3:7F:92:FE:27:A1:4D:45:08:39:97:0D X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.186.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:58:d3:d4:98:3e:b3:5f:d3:2d:e0:66:aa:49:17:dd:a2:5b: 6d:2b:18:5d:cc:89:9a:4b:b9:55:18:a5:7b:cd:1f:e0:2c:b7: a7:a1:45:4d:03:ea:35:94:4f:28:98:21:9c:32:d6:fd:14:ee: b0:05:b5:4b:bb:4b:49:d7:bf:a0:46:94:8b:65:bc:c9:83:51: 33:2b:4b:8b:45:f6:06:c2:82:18:9b:e4:81:a1:fe:90:1d:52: b5:d8:ed:ce:50:a1:b1:4e:81:ed:24:01:e5:bb:24:ff:56:60: 25:df:6a:eb:b7:da:2c:26:0b:eb:cb:f1:bb:0e:f4:6a:fb:29: 6d:de:d1:35:4a:b2:7b:ea:6d:5a:cc:a8:6f:51:1a:d5:92:db: 47:05:0f:bd:57:fd:e1:d3:c0:2b:b6:0e:7d:e3:bf:17:1b:02: 1e:35:80:02:71:b4:b1:70:da:48:6b:e5:62:1d:8b:0e:a3:82: 40:aa:a2:2d:b5:03:3b:fc:d6:01:d9:92:e5:9d:f5:c1:0c:22: 99:e3:23:27:8b:39:a3:c7:eb:62:10:cb:1d:61:06:99:51:64: ec:70:9e:6c:33:ce:b1:f0:54:c6:26:e5:14:f1:de:2a:6d:75: b0:6d:39:25:12:54:8a:85:74:ef:74:3d:5b:37:ee:3a:e9:5e: 93:05:18:9e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEaSosVMYhZKgMiudeBxSIhZ8SU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNjA0MDUwMzU3NDJaFw0yNzA0MDQwNDAyNDJaMDMxMTAvBgNV BAMTKDhBRUYyRDhEQzk3NDREOUFBMzdGOTJGRTI3QTE0RDQ1MDgzOTk3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/QMwhW+vtVHoG/XouAD8fdbH Xv8rWw0Haxk/ylmcRxX+FNv9LDhODY9L2IzHcDOhLJ7VOmasb94WO3c/LSJ3gS3A YW8kk9NfhwDBN+v2WF94gAsLIBCdQQU/n5mnwc9pDz6wejhn6ka2ktL+jEoDZiug kSOFKN88ObCRJQsyMYfvPTCz0lbG2DBbkSUR9qfInWVtdBTDXcKzkgIuWUhdwDLA DS2YqIU8ywf4YrkPxLNGgHxouF4zrZKRwpmFhkLlLuV3bPco4HO4vN2Eah1UpEry ChJ3aXKresv98qoBnp0hQxZSBN9NVpiYPhkYE8u+cx7b/aotuteV+wSjfM/fAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiu8tjcl0TZqjf5L+J6FNRQg5lw0wHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZjAwMzFlLTJhOWUtNDdjYS05 MjgzLTQwZTkyN2UzNTk5My8wLzMxMzAzMzJlMzEzNjM4MmUzMTM4MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqLowDQYJ KoZIhvcNAQELBQADggEBAG5Y09SYPrNf0y3gZqpJF92iW20rGF3MiZpLuVUYpXvN H+Ast6ehRU0D6jWUTyiYIZwy1v0U7rAFtUu7S0nXv6BGlItlvMmDUTMrS4tF9gbC ghib5IGh/pAdUrXY7c5QobFOge0kAeW7JP9WYCXfauu32iwmC+vL8bsO9Gr7KW3e 0TVKsnvqbVrMqG9RGtWS20cFD71X/eHTwCu2Dn3jvxcbAh41gAJxtLFw2khr5WId iw6jgkCqoi21Azv81gHZkuWd9cEMIpnjIyeLOaPH62IQyx1hBplRZOxwnmwzzrHw VMYm5RTx3iptdbBtOSUSVIqFdO90PVs37jrpXpMFGJ4= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:44 2026 by rpki-client