$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32322d3232203d3e20313335343838.roa File: 3130332e39352e382e302f32322d3232203d3e20313335343838.roa (raw, json) Hash identifier: AtVHs5kAJBkQyj2u1rc3FvQOLg6GUIRmBQO2EJLX0+Y= Subject key identifier: D4:0F:F1:17:49:B7:E4:E2:B1:4C:F7:9A:3B:45:97:3F:A1:63:5F:64 Certificate issuer: /CN=415543D423E0BD035D612DEA9BF060290E5552D2 Certificate serial: 67FA82407414000E661568FA51CF321C06589D1F Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32322d3232203d3e20313335343838.roa Signing time: Mon 26 Jan 2026 04:03:09 +0000 ROA not before: Mon 26 Jan 2026 03:58:09 +0000 ROA not after: Mon 25 Jan 2027 04:03:09 +0000 asID: 135488 IP address blocks: 103.95.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:44:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fa:82:40:74:14:00:0e:66:15:68:fa:51:cf:32:1c:06:58:9d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2 Validity Not Before: Jan 26 03:58:09 2026 GMT Not After : Jan 25 04:03:09 2027 GMT Subject: CN=D40FF11749B7E4E2B14CF79A3B45973FA1635F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:97:eb:bd:52:5c:5a:e7:71:ec:12:d2:be: c4:50:21:9a:ee:ad:80:70:48:9c:9c:9e:60:ee:04: b9:5b:36:d1:93:28:1f:e9:1b:8a:3d:0a:8e:56:25: 07:e0:c5:16:72:c8:3d:0d:e9:29:54:81:8b:1f:4c: 00:cc:e0:59:93:6b:ae:62:36:bc:8b:7e:2a:25:e6: 54:ae:9b:1b:a8:6a:93:b4:5a:99:5d:29:6b:47:a8: f0:7e:33:a9:1a:84:53:83:6e:66:98:d5:e8:52:ef: 48:f1:b2:e7:af:1c:e5:66:da:04:1b:c8:1e:d3:c9: 0e:17:72:b3:d6:5e:3a:5f:1a:2d:26:a9:1c:7b:67: a4:b5:dc:9e:ec:4e:a8:ce:8d:d5:28:91:90:80:04: 90:35:a3:2a:40:99:f2:f3:6c:6c:aa:db:85:ff:a8: 2a:57:6b:0b:89:f3:d3:b7:e5:5c:d7:28:00:96:6e: 2f:8e:d4:8b:17:9e:5e:4e:c0:c1:84:fb:15:56:f5: b9:5d:27:b0:ca:51:f0:45:8e:1b:24:59:53:96:8b: b0:d2:99:45:50:9f:1e:0e:f6:f1:1e:fc:18:5a:5f: 40:7f:a0:73:29:ae:2d:f9:9d:84:e1:33:7b:1e:29: a6:89:fe:1b:18:02:94:82:ff:0e:99:09:50:a2:e9: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:F1:17:49:B7:E4:E2:B1:4C:F7:9A:3B:45:97:3F:A1:63:5F:64 X509v3 Authority Key Identifier: keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32322d3232203d3e20313335343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.8.0/22 Signature Algorithm: sha256WithRSAEncryption 03:3c:23:16:35:f3:82:57:5b:92:20:fd:ff:26:95:f2:f5:3c: 83:21:7b:60:1e:6e:a4:e9:f5:29:6a:c7:ab:19:54:62:54:39: 99:f5:6d:ac:50:65:1e:08:77:2d:77:b4:cc:a4:f6:36:ec:f1: 21:5b:26:97:04:86:2d:78:4c:2b:dd:15:db:93:0f:d7:5e:be: f3:18:50:f7:ac:c7:83:02:28:5c:c8:34:9a:f3:a0:be:9d:f7: 7d:a9:6d:b8:d6:54:fa:b6:90:98:e1:ad:00:61:47:3d:ff:54: 96:32:6c:ab:b8:2d:d3:af:59:12:28:4f:56:47:91:7b:80:0d: 06:17:2e:08:29:a3:c0:0a:e8:c3:86:cc:e3:7d:1b:c6:a0:32: d2:37:90:71:98:e0:6b:55:94:79:72:97:a2:18:24:0d:79:80: 80:39:c0:c7:2e:7b:8f:a4:ce:a5:fe:55:e5:7c:fb:5f:fd:be: c0:b0:3a:90:ba:fc:34:ef:58:b8:bc:94:f6:ef:70:e5:2f:d8: 77:b7:bc:6d:bb:0e:a3:c9:8c:17:01:cb:e5:d2:cc:ef:74:9e: 6c:2a:29:70:01:c1:c4:eb:28:ff:59:da:c4:10:d3:11:e9:33: 8e:2b:80:db:80:c9:13:9b:fc:82:93:e7:9e:9e:a0:e7:60:aa: f9:4d:7f:b4 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZ/qCQHQUAA5mFWj6Uc8yHAZYnR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkw RTU1NTJEMjAeFw0yNjAxMjYwMzU4MDlaFw0yNzAxMjUwNDAzMDlaMDMxMTAvBgNV BAMTKEQ0MEZGMTE3NDlCN0U0RTJCMTRDRjc5QTNCNDU5NzNGQTE2MzVGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIdZfrvVJcWudx7BLSvsRQIZru rYBwSJycnmDuBLlbNtGTKB/pG4o9Co5WJQfgxRZyyD0N6SlUgYsfTADM4FmTa65i NryLfiol5lSumxuoapO0WpldKWtHqPB+M6kahFODbmaY1ehS70jxsuevHOVm2gQb yB7TyQ4XcrPWXjpfGi0mqRx7Z6S13J7sTqjOjdUokZCABJA1oypAmfLzbGyq24X/ qCpXawuJ89O35VzXKACWbi+O1IsXnl5OwMGE+xVW9bldJ7DKUfBFjhskWVOWi7DS mUVQnx4O9vEe/BhaX0B/oHMpri35nYThM3seKaaJ/hsYApSC/w6ZCVCi6S+7AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU1A/xF0m35OKxTPeaO0WXP6FjX2QwHwYDVR0j BBgwFoAUQVVD1CPgvQNdYS3qm/BgKQ5VUtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzY0NjVlYy05MTYwLTQ1OWItOGQxMS05NDhmYzI2ZGExYzAvMC80MTU1NDNENDIz RTBCRDAzNUQ2MTJERUE5QkYwNjAyOTBFNTU1MkQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE1NTQzRDQyM0UwQkQwMzVENjEyREVBOUJGMDYwMjkwRTU1 NTJEMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNjQ2NWVjLTkxNjAtNDU5Yi04 ZDExLTk0OGZjMjZkYTFjMC8wLzMxMzAzMzJlMzkzNTJlMzgyZTMwMmYzMjMyMmQz MjMyMjAzZDNlMjAzMTMzMzUzNDM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnXwgwDQYJKoZIhvcN AQELBQADggEBAAM8IxY184JXW5Ig/f8mlfL1PIMhe2AebqTp9Slqx6sZVGJUOZn1 baxQZR4Idy13tMyk9jbs8SFbJpcEhi14TCvdFduTD9devvMYUPesx4MCKFzINJrz oL6d932pbbjWVPq2kJjhrQBhRz3/VJYybKu4LdOvWRIoT1ZHkXuADQYXLggpo8AK 6MOGzON9G8agMtI3kHGY4GtVlHlyl6IYJA15gIA5wMcue4+kzqX+VeV8+1/9vsCw OpC6/DTvWLi8lPbvcOUv2He3vG27DqPJjBcBy+XSzO90nmwqKXABwcTrKP9Z2sQQ 0xHpM44rgNuAyROb/IKT556eoOdgqvlNf7Q= -----END CERTIFICATE-----Generated at Tue Mar 3 06:56:19 2026 by rpki-client