$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa File: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (raw, json) Hash identifier: VidmqV5KOOIREROYSPySP7eHkVc3r+Gz/C3O6lmsJ00= Subject key identifier: 21:94:5E:D7:01:E4:CD:BD:44:94:54:A6:B5:BC:44:06:FF:DE:12:9D Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 6DD83257C52D6F4298625F3AAD130F0FBEB3044C Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa Signing time: Thu 26 Feb 2026 17:00:56 +0000 ROA not before: Thu 26 Feb 2026 16:55:56 +0000 ROA not after: Thu 25 Feb 2027 17:00:56 +0000 asID: 131781 IP address blocks: 103.17.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d8:32:57:c5:2d:6f:42:98:62:5f:3a:ad:13:0f:0f:be:b3:04:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Feb 26 16:55:56 2026 GMT Not After : Feb 25 17:00:56 2027 GMT Subject: CN=21945ED701E4CDBD449454A6B5BC4406FFDE129D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:ea:07:f8:6b:4f:e2:25:95:66:77:13:fc: c0:75:43:cd:33:7f:a4:5b:f7:6b:0d:41:c2:fd:6c: c8:8a:37:ad:d1:d3:b5:83:b9:ca:29:04:7e:87:c8: b3:22:9b:ba:18:b7:89:65:12:27:74:31:06:e3:5f: c5:34:1b:cc:ae:5f:0c:61:62:0f:bf:32:2d:e8:b7: cf:be:1d:6a:89:44:ab:db:1e:73:df:a7:4d:f6:45: 48:be:34:5f:1c:f2:be:72:b9:18:5e:6a:f4:00:f1: e5:54:3e:ea:4a:cc:b2:b6:80:66:39:f7:6f:2b:da: 8e:ac:de:cc:6b:c4:b4:84:8c:2e:cf:d3:09:f5:4a: 59:5c:48:71:24:25:cb:e8:5b:05:5a:61:ed:d9:c1: 07:77:a1:86:70:ca:6e:4b:86:26:a2:89:83:e8:08: 5b:ec:12:e0:21:1d:c7:68:da:56:91:59:04:1c:3d: a9:6a:64:62:d4:4d:c3:02:cc:ad:48:1b:08:d1:a8: e6:95:38:d6:78:46:f0:c7:3a:f6:7f:cc:5b:e4:ac: ef:49:a8:20:37:e0:76:18:7f:5a:9f:45:a9:11:4b: c1:2d:fb:45:12:3c:f8:25:37:a2:92:f1:68:7a:ff: c9:eb:d9:c0:cc:c8:6a:4d:26:cf:96:90:98:00:7d: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:94:5E:D7:01:E4:CD:BD:44:94:54:A6:B5:BC:44:06:FF:DE:12:9D X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/3130332e31372e37362e302f32332d3233203d3e20313331373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.76.0/23 Signature Algorithm: sha256WithRSAEncryption 38:d2:68:01:28:8d:d8:bd:4b:93:0d:c7:cb:18:c9:ec:29:fa: 2f:17:6c:dc:6d:68:58:b6:24:ff:21:b0:ff:98:b5:1d:0d:a1: 64:de:57:5c:96:d0:b4:7a:cd:5c:16:79:dc:50:a8:3c:05:e2: 3c:36:8d:ed:85:e2:9f:32:44:13:ef:5e:c3:8a:8d:2f:8d:39: 14:53:42:c0:12:81:9c:44:da:af:a2:19:86:28:d3:12:ea:ff: 4f:be:72:f8:34:db:fe:66:e4:95:0f:60:cf:33:d8:c7:3e:3d: 61:cf:f5:8a:93:0c:3d:c1:f6:2f:9b:6f:a3:93:03:16:14:52: 4c:82:01:e1:e9:ad:01:45:b3:d9:e1:46:b9:8b:4c:f6:14:65: 90:1f:dc:68:e2:d0:a5:8f:ec:45:51:08:d7:d5:b7:49:c1:a4: f0:b1:8e:44:2f:c7:d6:5d:76:4a:84:73:ce:9f:76:81:62:39: 9b:31:6c:ef:a7:db:70:d8:ce:bd:35:ed:52:22:49:5f:3d:b8: 81:f4:f5:60:c8:2d:b5:7a:41:63:d6:26:2a:f8:6f:e6:49:90: 44:61:14:0c:3d:0c:b1:71:a8:a3:0f:32:a9:26:44:14:09:44: ee:52:ca:ca:77:e2:34:7e:bf:79:f6:e8:c0:5e:12:22:fb:18: 13:2a:86:bd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbdgyV8Utb0KYYl86rRMPD76zBEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNjAyMjYxNjU1NTZaFw0yNzAyMjUxNzAwNTZaMDMxMTAvBgNV BAMTKDIxOTQ1RUQ3MDFFNENEQkQ0NDk0NTRBNkI1QkM0NDA2RkZERTEyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvsOoH+GtP4iWVZncT/MB1Q80z f6Rb92sNQcL9bMiKN63R07WDucopBH6HyLMim7oYt4llEid0MQbjX8U0G8yuXwxh Yg+/Mi3ot8++HWqJRKvbHnPfp032RUi+NF8c8r5yuRheavQA8eVUPupKzLK2gGY5 928r2o6s3sxrxLSEjC7P0wn1SllcSHEkJcvoWwVaYe3ZwQd3oYZwym5LhiaiiYPo CFvsEuAhHcdo2laRWQQcPalqZGLUTcMCzK1IGwjRqOaVONZ4RvDHOvZ/zFvkrO9J qCA34HYYf1qfRakRS8Et+0USPPglN6KS8Wh6/8nr2cDMyGpNJs+WkJgAfUXJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIZRe1wHkzb1ElFSmtbxEBv/eEp0wHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNjIxMTFkLTBhMTMtNDQwNy1h ZjMzLTM0YzIyYTlkN2FlYy8wLzMxMzAzMzJlMzEzNzJlMzczNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzMzMTM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcRTDANBgkqhkiG 9w0BAQsFAAOCAQEAONJoASiN2L1Lkw3HyxjJ7Cn6Lxds3G1oWLYk/yGw/5i1HQ2h ZN5XXJbQtHrNXBZ53FCoPAXiPDaN7YXinzJEE+9ew4qNL405FFNCwBKBnETar6IZ hijTEur/T75y+DTb/mbklQ9gzzPYxz49Yc/1ipMMPcH2L5tvo5MDFhRSTIIB4emt AUWz2eFGuYtM9hRlkB/caOLQpY/sRVEI19W3ScGk8LGORC/H1l12SoRzzp92gWI5 mzFs76fbcNjOvTXtUiJJXz24gfT1YMgttXpBY9YmKvhv5kmQRGEUDD0MsXGoow8y qSZEFAlE7lLKynfiNH6/efbowF4SIvsYEyqGvQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:28:38 2026 by rpki-client