$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa File: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (raw, json) Hash identifier: QfBANB1HcZ4D5lNo0ikbhdMiTPwgCLxr47KuZgq3ysc= Subject key identifier: A6:5A:28:CC:A9:5B:51:6F:32:27:5E:EE:89:36:C2:A5:5A:27:BF:FA Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 03829021960EF1D829CD94B8CC33D87F1F8A0D Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa Signing time: Wed 15 Apr 2026 09:01:21 +0000 ROA not before: Wed 15 Apr 2026 08:56:21 +0000 ROA not after: Wed 14 Apr 2027 09:01:21 +0000 asID: 4800 IP address blocks: 103.86.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:82:90:21:96:0e:f1:d8:29:cd:94:b8:cc:33:d8:7f:1f:8a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Apr 15 08:56:21 2026 GMT Not After : Apr 14 09:01:21 2027 GMT Subject: CN=A65A28CCA95B516F32275EEE8936C2A55A27BFFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:89:d7:a3:a2:9d:09:38:f7:18:27:11:a4: c5:fa:66:7b:13:67:87:cb:62:c8:0e:9e:ba:b5:2a: bc:a5:7b:32:87:75:31:27:c3:84:13:3d:03:ec:6d: e4:cd:50:c9:ec:7f:b0:55:0f:f2:b8:4a:e7:10:e6: 53:7c:2e:83:32:60:c3:8d:7f:7a:82:ad:cc:1d:f7: ed:58:b9:91:c5:e7:f9:03:50:37:f2:3e:ab:ca:7f: 1d:b2:4d:a3:82:03:ca:e9:d9:d5:07:0d:d8:7a:0d: 44:c0:99:eb:84:2b:46:20:f6:73:e6:81:7a:e0:42: ed:84:e8:61:52:7a:41:55:0c:ab:00:22:f1:dd:3e: a0:96:05:b9:ab:ab:73:92:90:0a:d9:d7:9a:10:0e: 7d:c0:d3:0b:17:d7:1b:e0:fd:fe:0a:86:71:3c:04: bb:f2:99:85:ae:d1:74:34:69:d7:55:07:d6:4c:db: ff:68:fc:89:ea:e3:05:aa:66:62:ea:bc:82:3c:0e: 85:98:2e:14:70:5a:38:f5:08:eb:04:b5:82:8c:08: 22:7d:45:ab:6a:e9:25:b5:10:ff:ca:48:4f:55:a9: f3:5d:1c:6b:07:a0:d2:fd:35:4c:69:db:81:ad:55: cc:62:2f:0f:ce:96:4e:e2:2e:6e:39:96:5b:76:39: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5A:28:CC:A9:5B:51:6F:32:27:5E:EE:89:36:C2:A5:5A:27:BF:FA X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/3130332e38362e3132382e302f32332d3234203d3e2034383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.128.0/23 Signature Algorithm: sha256WithRSAEncryption 50:65:c6:f0:98:b9:ae:aa:98:55:20:fd:03:20:35:cc:43:9d: 60:74:88:09:c7:82:ce:74:63:60:74:b5:56:a0:65:2c:95:46: 75:19:93:5e:45:ea:76:89:8e:26:f9:55:b4:8f:4d:16:40:cc: 8e:e1:d4:e6:11:22:49:60:ad:0c:e3:78:50:ae:39:03:0a:f6: b3:0e:da:a3:f9:d0:f8:5a:b3:e4:50:58:e7:34:86:81:63:68: c3:15:86:af:48:88:9e:65:a9:02:48:45:3c:22:ab:d6:fe:35: 6f:c5:69:61:3a:aa:50:f9:e1:5b:8d:52:38:7c:cb:6c:c1:6a: 1c:bc:7a:33:4a:b9:11:92:70:5f:a4:72:02:ae:82:33:03:a8: 37:4f:50:a3:79:36:f4:4d:3a:77:7d:33:86:90:32:cc:0c:09: 31:e5:8e:cb:89:69:be:9f:b2:b0:b8:1a:e1:9b:34:f3:76:a1: 31:80:19:48:fb:51:19:86:9e:69:87:ae:4f:2f:78:51:ad:2a: 18:ab:ff:77:36:b5:cb:57:61:fc:d8:e2:01:cd:34:b0:d6:de: 31:87:bf:b2:e3:79:d2:14:e2:95:68:31:36:96:f0:87:61:3f: 3f:62:11:e9:94:f7:fc:73:62:ce:a9:50:be:eb:0d:6d:b7:26: f5:48:63:97 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgITA4KQIZYO8dgpzZS4zDPYfx+KDTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg0QkUwRUJBRkVGMUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4 QzAxQjUwMB4XDTI2MDQxNTA4NTYyMVoXDTI3MDQxNDA5MDEyMVowMzExMC8GA1UE AxMoQTY1QTI4Q0NBOTVCNTE2RjMyMjc1RUVFODkzNkMyQTU1QTI3QkZGQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALhpidejop0JOPcYJxGkxfpmexNn h8tiyA6eurUqvKV7Mod1MSfDhBM9A+xt5M1Qyex/sFUP8rhK5xDmU3wugzJgw41/ eoKtzB337Vi5kcXn+QNQN/I+q8p/HbJNo4IDyunZ1QcN2HoNRMCZ64QrRiD2c+aB euBC7YToYVJ6QVUMqwAi8d0+oJYFuaurc5KQCtnXmhAOfcDTCxfXG+D9/gqGcTwE u/KZha7RdDRp11UH1kzb/2j8ierjBapmYuq8gjwOhZguFHBaOPUI6wS1gowIIn1F q2rpJbUQ/8pIT1Wp810caweg0v01TGnbga1VzGIvD86WTuIubjmWW3Y5QAsCAwEA AaOCAjAwggIsMB0GA1UdDgQWBBSmWijMqVtRbzInXu6JNsKlWie/+jAfBgNVHSME GDAWgBRL4Ouv7x4gbK2LTq1tagjTqMAbUDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4 YTdmMzU1LWYyMjUtNDhmMy04N2Y4LTBiZmIwYzhlNThmMC8wLzRCRTBFQkFGRUYx RTIwNkNBRDhCNEVBRDZENkEwOEQzQThDMDFCNTAuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi80QkUwRUJBRkVGMUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAx QjUwLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvMzEzMDMzMmUzODM2MmUzMTMyMzgyZTMwMmYzMjMz MmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdWgDANBgkqhkiG9w0B AQsFAAOCAQEAUGXG8Ji5rqqYVSD9AyA1zEOdYHSICceCznRjYHS1VqBlLJVGdRmT XkXqdomOJvlVtI9NFkDMjuHU5hEiSWCtDON4UK45Awr2sw7ao/nQ+Fqz5FBY5zSG gWNowxWGr0iInmWpAkhFPCKr1v41b8VpYTqqUPnhW41SOHzLbMFqHLx6M0q5EZJw X6RyAq6CMwOoN09Qo3k29E06d30zhpAyzAwJMeWOy4lpvp+ysLga4Zs083ahMYAZ SPtRGYaeaYeuTy94Ua0qGKv/dza1y1dh/NjiAc00sNbeMYe/suN50hTilWgxNpbw h2E/P2IR6ZT3/HNizqlQvusNbbcm9Uhjlw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:51 2026 by rpki-client