$ rpki-client -vvf repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa File: 3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa (raw, json) Hash identifier: HCZDMslN7mBAgetuHUOgHIgZeV6y2oJ9w11PSmDri94= Subject key identifier: 14:8C:A4:51:D7:C1:6B:89:7D:CF:8D:7D:12:EF:E9:BC:79:A7:BC:A3 Certificate issuer: /CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Certificate serial: 1AC33BE872361D22DDAA37D4D8023D18A844ECD9 Authority key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa Signing time: Wed 08 Apr 2026 12:02:50 +0000 ROA not before: Wed 08 Apr 2026 11:57:50 +0000 ROA not after: Wed 07 Apr 2027 12:02:50 +0000 asID: 141071 IP address blocks: 103.97.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c3:3b:e8:72:36:1d:22:dd:aa:37:d4:d8:02:3d:18:a8:44:ec:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Validity Not Before: Apr 8 11:57:50 2026 GMT Not After : Apr 7 12:02:50 2027 GMT Subject: CN=148CA451D7C16B897DCF8D7D12EFE9BC79A7BCA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:ad:fd:c5:ea:11:b5:46:45:ae:ed:c8:52: 57:9f:3e:27:15:65:f9:d7:f8:85:d9:96:bf:cb:35: ac:58:4c:08:1e:d5:52:f8:db:39:9f:0e:4e:92:75: af:c9:44:1c:74:58:62:94:ba:b1:15:cf:a1:e9:10: 96:82:e9:01:30:11:c9:2e:57:a9:f1:c6:cb:72:39: c4:e7:56:ed:fb:a7:4e:3c:79:1c:a4:92:8f:4a:8e: 0f:7a:cd:ad:ef:5e:eb:17:5f:30:65:de:78:ad:77: e6:87:d6:ff:6d:89:61:3a:bf:43:db:9a:11:73:87: fb:b0:2e:f0:4b:0e:11:35:ee:34:7d:ce:73:ce:1e: 89:38:9d:c1:54:81:f6:e3:10:31:41:6a:86:da:a2: b0:bf:6b:66:a7:e8:72:f2:49:b1:05:9a:94:ac:6a: 2b:78:ef:28:56:ed:73:0f:65:66:fa:75:4b:7d:54: 50:29:d7:ee:5f:0f:b0:41:64:8f:2d:e5:2d:d0:ac: 18:ad:b8:30:c0:44:8c:64:07:ba:37:49:88:ec:1b: fd:f2:9b:a3:19:ef:ca:3f:eb:a2:5a:77:0b:3f:10: a2:61:60:2b:39:10:30:17:13:7a:69:07:ae:ce:02: 15:ad:bc:04:9c:b7:b2:23:b6:6a:d4:09:45:58:67: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8C:A4:51:D7:C1:6B:89:7D:CF:8D:7D:12:EF:E9:BC:79:A7:BC:A3 X509v3 Authority Key Identifier: keyid:F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/3130332e39372e3134312e302f32342d3234203d3e20313431303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.141.0/24 Signature Algorithm: sha256WithRSAEncryption 81:c8:00:23:50:9d:f3:5d:6a:2a:e6:bf:96:9d:04:d9:04:dc: 9e:72:02:7c:87:70:63:d6:f5:ea:ce:e2:f7:a3:8c:a3:9a:8f: 5e:c9:fd:0c:34:7f:8d:2d:62:c5:e4:17:d6:6b:da:5c:9f:a2: 04:0b:f3:94:30:16:a2:2a:0e:35:e2:7d:ca:9e:f8:b6:fa:a5: 9b:00:3d:93:60:d2:54:b4:5c:7d:a0:1c:ed:00:6d:0f:fb:b3: b0:ec:cd:35:a4:44:3d:80:19:d0:66:60:34:97:9b:21:03:a3: 28:64:58:4d:47:1d:ab:d5:14:d5:0c:00:29:bc:e4:5b:76:f5: ee:e9:1a:68:25:5c:da:72:47:3d:05:c1:66:5d:d7:f1:40:16: 26:1f:15:54:4b:37:e9:c6:fa:7b:1e:63:dd:2f:f9:6b:3a:ea: 40:c4:0e:67:52:2a:d2:c0:cc:97:6a:b3:c0:0b:fa:e5:23:40: 1b:f2:39:e7:3c:b4:2d:16:10:4b:d4:ca:f3:6d:71:e3:40:db: a2:4c:63:f6:d0:02:4a:67:fe:f1:45:93:a9:1f:bc:0a:42:15: 15:92:c8:6e:46:57:71:01:e0:c6:fa:83:d3:b1:28:33:a7:f2: 14:d4:c5:98:02:b0:a8:35:7d:2a:cd:94:3a:86:8a:10:33:82: a0:3f:8f:61 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGsM76HI2HSLdqjfU2AI9GKhE7NkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3 N0JFMTNDMTAeFw0yNjA0MDgxMTU3NTBaFw0yNzA0MDcxMjAyNTBaMDMxMTAvBgNV BAMTKDE0OENBNDUxRDdDMTZCODk3RENGOEQ3RDEyRUZFOUJDNzlBN0JDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj8q39xeoRtUZFru3IUlefPicV ZfnX+IXZlr/LNaxYTAge1VL42zmfDk6Sda/JRBx0WGKUurEVz6HpEJaC6QEwEcku V6nxxstyOcTnVu37p048eRykko9Kjg96za3vXusXXzBl3nitd+aH1v9tiWE6v0Pb mhFzh/uwLvBLDhE17jR9znPOHok4ncFUgfbjEDFBaobaorC/a2an6HLySbEFmpSs ait47yhW7XMPZWb6dUt9VFAp1+5fD7BBZI8t5S3QrBituDDARIxkB7o3SYjsG/3y m6MZ78o/66Jadws/EKJhYCs5EDAXE3ppB67OAhWtvASct7IjtmrUCUVYZ/xpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFIykUdfBa4l9z419Eu/pvHmnvKMwHwYDVR0j BBgwFoAU8xjRXWjmPOvkv6AmpSafOHe+E8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMC9GMzE4RDE1RDY4 RTYzQ0VCRTRCRkEwMjZBNTI2OUYzODc3QkUxM0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjMxOEQxNUQ2OEU2M0NFQkU0QkZBMDI2QTUyNjlGMzg3N0JF MTNDMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZiLTAyNjctNDY2Yi1h MzQwLWUyODhkMmU5MzRhOC8wLzMxMzAzMzJlMzkzNzJlMzEzNDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2GNMA0GCSqG SIb3DQEBCwUAA4IBAQCByAAjUJ3zXWoq5r+WnQTZBNyecgJ8h3Bj1vXqzuL3o4yj mo9eyf0MNH+NLWLF5BfWa9pcn6IEC/OUMBaiKg414n3Knvi2+qWbAD2TYNJUtFx9 oBztAG0P+7Ow7M01pEQ9gBnQZmA0l5shA6MoZFhNRx2r1RTVDAApvORbdvXu6Rpo JVzackc9BcFmXdfxQBYmHxVUSzfpxvp7HmPdL/lrOupAxA5nUirSwMyXarPAC/rl I0Ab8jnnPLQtFhBL1MrzbXHjQNuiTGP20AJKZ/7xRZOpH7wKQhUVkshuRldxAeDG +oPTsSgzp/IU1MWYArCoNX0qzZQ6hooQM4KgP49h -----END CERTIFICATE-----Generated at Fri Apr 17 19:13:54 2026 by rpki-client