$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa File: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (raw, json) Hash identifier: XXX3H+Kx4KtZFlR+1yxyZNf6/aQm/kvRNmPkGrt0bBU= Subject key identifier: CB:2C:15:AD:7A:32:36:08:C9:85:DD:C4:DB:E1:86:13:68:0D:3A:0F Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 7C675703F8121844A6BDFDC96EDBD9EDFEF56C82 Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa Signing time: Thu 05 Feb 2026 10:00:01 +0000 ROA not before: Thu 05 Feb 2026 09:55:01 +0000 ROA not after: Thu 04 Feb 2027 10:00:01 +0000 asID: 149697 IP address blocks: 103.186.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:67:57:03:f8:12:18:44:a6:bd:fd:c9:6e:db:d9:ed:fe:f5:6c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Feb 5 09:55:01 2026 GMT Not After : Feb 4 10:00:01 2027 GMT Subject: CN=CB2C15AD7A323608C985DDC4DBE18613680D3A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:6a:e2:ba:95:4d:18:3b:0e:53:3c:f4:54: 3a:da:1d:4b:b8:11:c3:d8:d2:ba:86:ca:0b:a3:a3: 08:f3:29:42:f2:aa:1d:72:c6:88:69:38:6a:24:03: e1:af:b4:69:a1:9b:4c:e7:94:0a:90:42:9f:97:69: 37:80:1e:2b:4e:2b:b2:f2:6b:9a:9a:d7:3d:ac:eb: a7:2a:f7:7f:7b:21:0d:d7:05:7f:dd:51:a4:0b:c0: 41:f7:4c:1a:e9:ca:f4:7d:1e:fd:81:fe:ba:c9:30: 99:39:75:92:0b:60:80:82:62:56:31:da:67:63:98: 12:20:a2:8d:d5:46:93:19:2d:73:0a:0a:9c:ea:ec: a2:6e:c3:2d:d8:50:62:19:79:77:df:d5:df:14:75: 1d:2c:07:8e:29:bd:3f:65:44:bf:a9:b9:33:66:cf: 51:d8:9a:83:df:01:b3:eb:d1:9a:dd:99:2d:56:d0: 8d:fb:cb:ea:60:f5:da:a1:4a:9e:9a:3b:42:61:3c: f9:a9:a6:82:dc:e6:93:8e:b6:29:0e:e6:8f:54:3f: 4f:6b:01:61:64:52:84:bf:75:74:6b:9c:78:c6:0a: f5:e9:8d:b0:55:78:90:8d:4b:87:17:24:15:57:71: 42:02:35:08:e5:88:3f:53:32:10:f0:c8:f6:27:e4: 0f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2C:15:AD:7A:32:36:08:C9:85:DD:C4:DB:E1:86:13:68:0D:3A:0F X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.93.0/24 Signature Algorithm: sha256WithRSAEncryption 41:dc:30:1d:b8:13:9f:b3:4e:5e:36:56:52:49:5c:29:6e:a2: 0d:c5:ab:7b:df:1b:70:9a:9f:fc:21:b0:03:a4:54:58:a9:b5: 32:3d:5c:13:fa:15:dd:5c:13:5b:f9:9e:69:95:90:19:9b:9e: 7b:6a:c1:1b:e0:b1:2a:f3:19:c0:03:25:6f:a4:40:ea:6e:a1: 92:21:22:1c:1c:dc:d6:c6:bc:b9:c6:c3:6f:74:0b:1e:83:79: fb:a7:83:fe:91:75:d1:c7:81:b4:58:cc:8a:18:d7:61:75:98: 8d:8a:ea:33:68:55:b6:54:99:08:78:4b:3e:cb:80:67:2b:2f: 31:79:b3:92:88:33:24:6b:fe:6e:d7:dd:35:94:15:86:29:23: 73:87:b8:88:be:db:31:11:d1:eb:c9:11:b4:60:45:2b:ce:32: e0:d9:2c:df:9f:cf:b4:93:9f:57:59:55:e5:fc:33:ad:40:9b: af:5d:bc:29:c2:0d:2c:3e:b4:bb:a8:16:f5:f0:d9:a6:27:07: 1c:2a:c2:7a:4b:bb:77:9c:82:2b:cb:d7:f3:39:66:78:32:bc: 3e:00:d3:bd:cc:4a:d9:e0:c9:49:21:d8:ee:ff:7f:5b:b7:78: e9:ec:53:b7:a9:eb:af:81:b1:d4:9a:3f:ad:72:45:92:fa:8c: 24:0f:9f:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfGdXA/gSGESmvf3JbtvZ7f71bIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNjAyMDUwOTU1MDFaFw0yNzAyMDQxMDAwMDFaMDMxMTAvBgNV BAMTKENCMkMxNUFEN0EzMjM2MDhDOTg1RERDNERCRTE4NjEzNjgwRDNBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PmriupVNGDsOUzz0VDraHUu4 EcPY0rqGygujowjzKULyqh1yxohpOGokA+GvtGmhm0znlAqQQp+XaTeAHitOK7Ly a5qa1z2s66cq9397IQ3XBX/dUaQLwEH3TBrpyvR9Hv2B/rrJMJk5dZILYICCYlYx 2mdjmBIgoo3VRpMZLXMKCpzq7KJuwy3YUGIZeXff1d8UdR0sB44pvT9lRL+puTNm z1HYmoPfAbPr0ZrdmS1W0I37y+pg9dqhSp6aO0JhPPmppoLc5pOOtikO5o9UP09r AWFkUoS/dXRrnHjGCvXpjbBVeJCNS4cXJBVXcUICNQjliD9TMhDwyPYn5A/BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyywVrXoyNgjJhd3E2+GGE2gNOg8wHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0ZTFhYzdjLTkwNGQtNDkzZi1i YTVlLTVlMDgzN2RjYmQyOS8wLzMxMzAzMzJlMzEzODM2MmUzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pdMA0GCSqG SIb3DQEBCwUAA4IBAQBB3DAduBOfs05eNlZSSVwpbqINxat73xtwmp/8IbADpFRY qbUyPVwT+hXdXBNb+Z5plZAZm557asEb4LEq8xnAAyVvpEDqbqGSISIcHNzWxry5 xsNvdAseg3n7p4P+kXXRx4G0WMyKGNdhdZiNiuozaFW2VJkIeEs+y4BnKy8xebOS iDMka/5u1901lBWGKSNzh7iIvtsxEdHryRG0YEUrzjLg2Szfn8+0k59XWVXl/DOt QJuvXbwpwg0sPrS7qBb18NmmJwccKsJ6S7t3nIIry9fzOWZ4Mrw+ANO9zErZ4MlJ Idju/39bt3jp7FO3qeuvgbHUmj+tckWS+owkD5/A -----END CERTIFICATE-----Generated at Mon Mar 2 11:47:34 2026 by rpki-client