$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa File: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (raw, json) Hash identifier: XdQf63cdrdXWBGc6MKoetBKqasSfuuo/VmeblT/8ibk= Subject key identifier: 0F:D7:59:E9:6E:1C:DA:D2:10:65:7C:E9:D8:72:6F:44:18:32:91:DD Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 0F60FA91881ED39090F4DB70039A252FE2291C01 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa Signing time: Tue 03 Feb 2026 16:41:52 +0000 ROA not before: Tue 03 Feb 2026 16:36:52 +0000 ROA not after: Tue 02 Feb 2027 16:41:52 +0000 asID: 137334 IP address blocks: 103.112.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:60:fa:91:88:1e:d3:90:90:f4:db:70:03:9a:25:2f:e2:29:1c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Feb 3 16:36:52 2026 GMT Not After : Feb 2 16:41:52 2027 GMT Subject: CN=0FD759E96E1CDAD210657CE9D8726F44183291DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:80:69:06:de:0a:97:93:2f:77:42:15:71:e0: 63:ec:1f:57:97:54:f2:b7:82:18:60:38:ae:21:88: f7:5f:34:08:cc:ae:58:be:bc:1f:0e:2a:9f:b9:fb: e3:0f:eb:b4:78:85:43:fb:36:59:84:2b:d7:22:d8: 0f:27:5c:23:73:b0:4a:68:39:be:12:ef:15:27:48: f0:ed:44:50:c9:d6:26:69:8c:7f:6f:be:1f:2e:56: 80:54:84:60:62:7f:96:98:2b:c5:77:0f:15:9a:28: 76:58:d7:fe:3d:19:13:85:de:3e:d3:70:58:7e:76: 61:9e:3d:65:9c:86:44:5f:1f:bc:7d:29:fc:55:2d: 10:be:89:c5:ae:54:39:28:86:64:33:0b:87:ca:0f: c1:f3:75:b3:e1:43:eb:2e:4a:8a:a8:89:10:fb:b5: 78:17:23:3c:82:52:fb:95:1f:69:96:5f:bf:8e:63: 47:df:1a:72:af:59:70:40:22:ed:78:b5:92:7b:31: f7:fa:4d:92:98:fc:29:26:4a:4f:b2:89:d5:88:de: 24:dd:5c:43:6a:14:b5:61:74:17:cd:48:f9:d7:c0: 2d:36:5e:3c:97:14:6a:53:13:1d:0f:d2:75:87:13: 9a:3b:a8:64:6a:5e:d2:d1:ce:15:84:e3:ca:a5:ea: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D7:59:E9:6E:1C:DA:D2:10:65:7C:E9:D8:72:6F:44:18:32:91:DD X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.145.0/24 Signature Algorithm: sha256WithRSAEncryption 83:5d:cd:4e:7e:99:9b:01:d0:66:ea:a8:62:03:a0:a9:0f:b0: ca:ba:8a:c4:a0:d6:60:62:22:8a:b8:8a:4c:69:89:b8:f7:b2: a7:8a:87:d8:04:22:d4:7f:5d:26:ae:9b:e3:18:83:c7:44:6a: 76:65:fe:32:04:45:ec:10:b5:db:ba:17:74:ed:6b:f8:86:af: d0:f7:4b:9c:ae:f1:6f:1f:fc:0b:4a:46:52:97:0b:db:d4:4c: 7f:0e:9b:84:eb:b4:a6:5a:b1:66:f1:c0:fb:ef:5b:17:7c:8d: e3:42:a8:2b:c2:10:ed:df:21:9d:bc:56:63:1c:ac:7b:bf:a0: 52:52:2d:c6:18:10:4f:d0:49:15:f0:6f:f0:8a:cf:1e:7c:e9: e2:99:8a:29:fd:78:fa:a8:11:fe:53:29:c8:a4:b1:04:2c:27: ea:86:4d:91:d2:4b:1a:5e:3b:4b:43:f5:16:9a:9a:35:fb:19: 6f:52:54:7f:a5:c0:aa:d3:bb:e4:73:bf:89:bf:e7:f4:cc:de: 00:d8:2a:d2:0f:b8:ee:e4:8d:b1:9b:d9:89:3c:fb:b9:78:48: dc:d7:23:83:af:da:64:c0:3c:4f:d0:b2:c5:a7:a5:64:ce:e8: 81:af:55:93:85:66:0e:80:5a:4b:df:6c:c8:8d:c9:e5:2a:d4: df:0a:5b:15 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUD2D6kYge05CQ9NtwA5olL+IpHAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNjAyMDMxNjM2NTJaFw0yNzAyMDIxNjQxNTJaMDMxMTAvBgNV BAMTKDBGRDc1OUU5NkUxQ0RBRDIxMDY1N0NFOUQ4NzI2RjQ0MTgzMjkxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugGkG3gqXky93QhVx4GPsH1eX VPK3ghhgOK4hiPdfNAjMrli+vB8OKp+5++MP67R4hUP7NlmEK9ci2A8nXCNzsEpo Ob4S7xUnSPDtRFDJ1iZpjH9vvh8uVoBUhGBif5aYK8V3DxWaKHZY1/49GROF3j7T cFh+dmGePWWchkRfH7x9KfxVLRC+icWuVDkohmQzC4fKD8HzdbPhQ+suSoqoiRD7 tXgXIzyCUvuVH2mWX7+OY0ffGnKvWXBAIu14tZJ7Mff6TZKY/CkmSk+yidWI3iTd XENqFLVhdBfNSPnXwC02XjyXFGpTEx0P0nWHE5o7qGRqXtLRzhWE48ql6oflAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUD9dZ6W4c2tIQZXzp2HJvRBgykd0wHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIzLTkzN2QtNDMwNC05 MTY3LTQ2M2Q3YzU4ZDVlNC8wLzMxMzAzMzJlMzEzMTMyMmUzMTM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncJEwDQYJ KoZIhvcNAQELBQADggEBAINdzU5+mZsB0GbqqGIDoKkPsMq6isSg1mBiIoq4ikxp ibj3sqeKh9gEItR/XSaum+MYg8dEanZl/jIERewQtdu6F3Tta/iGr9D3S5yu8W8f /AtKRlKXC9vUTH8Om4TrtKZasWbxwPvvWxd8jeNCqCvCEO3fIZ28VmMcrHu/oFJS LcYYEE/QSRXwb/CKzx586eKZiin9ePqoEf5TKciksQQsJ+qGTZHSSxpeO0tD9Raa mjX7GW9SVH+lwKrTu+Rzv4m/5/TM3gDYKtIPuO7kjbGb2Yk8+7l4SNzXI4Ov2mTA PE/QssWnpWTO6IGvVZOFZg6AWkvfbMiNyeUq1N8KWxU= -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:03 2026 by rpki-client