$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33362e36382e302f32342d3234203d3e20313333333631.roa File: 3130332e33362e36382e302f32342d3234203d3e20313333333631.roa (raw, json) Hash identifier: FWPlMPHrqFoNNWPYTYDkvwMT0nqxPyPjTzrKzL7O4m4= Subject key identifier: 1F:20:38:ED:D2:3B:4F:80:62:E1:E1:E5:42:72:58:EF:25:0A:C0:DB Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 1978EF87C1B267D0C8B27315EB0D09D3A6E3572E Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33362e36382e302f32342d3234203d3e20313333333631.roa Signing time: Thu 29 Jan 2026 08:00:00 +0000 ROA not before: Thu 29 Jan 2026 07:55:00 +0000 ROA not after: Thu 28 Jan 2027 08:00:00 +0000 asID: 133361 IP address blocks: 103.36.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:78:ef:87:c1:b2:67:d0:c8:b2:73:15:eb:0d:09:d3:a6:e3:57:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jan 29 07:55:00 2026 GMT Not After : Jan 28 08:00:00 2027 GMT Subject: CN=1F2038EDD23B4F8062E1E1E5427258EF250AC0DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:6f:eb:53:98:3a:6d:0b:a3:73:97:8b:d5: 58:21:49:8d:1a:11:ca:9c:1e:6e:31:fb:af:f8:64: 27:c0:d3:4d:fc:01:8f:72:01:e0:33:84:29:d1:1c: d5:22:37:50:ff:5f:1a:1f:61:40:9b:b6:0d:39:fe: 4a:66:93:85:1c:92:18:e1:91:6d:e8:0b:e9:88:03: d0:d8:e3:3e:cd:f6:7e:b6:e1:43:00:bd:6f:5d:a6: 77:c5:0f:75:34:ed:3a:89:7e:04:24:83:9f:5a:ef: 1e:50:46:70:f9:db:ea:b6:15:80:d5:f8:98:44:73: 0e:87:b0:c7:58:dc:d2:89:c2:fc:ed:ef:57:c0:2c: 87:b6:00:57:15:7a:68:7a:98:c8:1d:70:8d:c4:93: 63:58:09:73:5b:bb:ce:0b:d8:98:4b:1b:0e:6e:df: a3:11:cd:7c:c6:c2:04:57:ea:ce:1f:da:78:a5:19: 33:b4:ee:61:cc:55:e0:ab:9e:ae:4d:9f:1b:93:ef: 03:1d:d0:1d:56:40:a7:65:3b:74:74:4c:05:61:ce: e5:85:11:fb:1f:7d:f2:90:23:d8:a8:47:cd:2e:23: 88:bd:d5:05:b3:29:0b:18:cc:2f:78:d2:c5:85:50: 05:6e:3a:d0:c9:20:6a:2a:0f:ce:8d:71:02:ee:1a: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:20:38:ED:D2:3B:4F:80:62:E1:E1:E5:42:72:58:EF:25:0A:C0:DB X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33362e36382e302f32342d3234203d3e20313333333631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.68.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:13:fd:13:0a:3a:95:b5:6a:a2:6e:a9:76:ea:b3:55:6e:1f: da:4a:10:c3:e6:2a:f9:0e:01:96:ac:79:97:2d:23:43:aa:af: 1f:70:d0:5e:aa:3e:fb:ea:fd:27:ca:05:72:8b:23:79:6b:13: 87:7a:bc:d3:6a:ca:b8:d5:68:72:46:6d:89:92:8a:31:a5:15: 2a:d0:8d:fd:f2:a9:a7:c1:3a:6b:1c:9c:ad:af:d1:37:f5:cc: 73:fd:7f:3c:46:39:79:88:4d:1c:73:82:d3:cf:b1:34:9d:8e: 55:63:08:b7:2f:00:c9:e1:9b:8b:8a:56:d8:37:b7:90:d5:1c: 81:bd:06:8f:c7:03:88:df:89:00:91:06:a2:4c:c4:f5:a1:b4: 06:90:44:9f:15:67:c5:57:33:9b:c2:23:0b:ea:97:07:18:c7: 38:41:e2:60:19:14:ea:f1:bb:4e:10:c0:30:58:06:b4:e5:09: b0:24:26:f5:ac:f4:69:1c:f0:88:29:ba:51:9b:9e:e2:1a:0a: 20:d2:6c:b4:3f:f7:68:cc:19:05:88:a1:5b:06:80:dc:b0:d5: 83:6f:e2:46:04:e8:cb:bd:47:3b:ce:44:e7:c7:ab:96:0b:4e: 95:89:4f:b0:a1:84:18:24:8f:ed:9b:92:21:30:1f:0c:1b:9a: 1b:2c:ab:50 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGXjvh8GyZ9DIsnMV6w0J06bjVy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNjAxMjkwNzU1MDBaFw0yNzAxMjgwODAwMDBaMDMxMTAvBgNV BAMTKDFGMjAzOEVERDIzQjRGODA2MkUxRTFFNTQyNzI1OEVGMjUwQUMwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUW/rU5g6bQujc5eL1VghSY0a EcqcHm4x+6/4ZCfA0038AY9yAeAzhCnRHNUiN1D/XxofYUCbtg05/kpmk4Uckhjh kW3oC+mIA9DY4z7N9n624UMAvW9dpnfFD3U07TqJfgQkg59a7x5QRnD52+q2FYDV +JhEcw6HsMdY3NKJwvzt71fALIe2AFcVemh6mMgdcI3Ek2NYCXNbu84L2JhLGw5u 36MRzXzGwgRX6s4f2nilGTO07mHMVeCrnq5NnxuT7wMd0B1WQKdlO3R0TAVhzuWF EfsfffKQI9ioR80uI4i91QWzKQsYzC940sWFUAVuOtDJIGoqD86NcQLuGjnZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUHyA47dI7T4Bi4eHlQnJY7yUKwNswHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiMzEzZDE3LTViOWItNGQyMy05 NDI0LTc0NTc5NTA4YmE1NC8wLzMxMzAzMzJlMzMzNjJlMzYzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMzMzMzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGckRDANBgkqhkiG 9w0BAQsFAAOCAQEAmhP9Ewo6lbVqom6pduqzVW4f2koQw+Yq+Q4Blqx5ly0jQ6qv H3DQXqo+++r9J8oFcosjeWsTh3q802rKuNVockZtiZKKMaUVKtCN/fKpp8E6axyc ra/RN/XMc/1/PEY5eYhNHHOC08+xNJ2OVWMIty8AyeGbi4pW2De3kNUcgb0Gj8cD iN+JAJEGokzE9aG0BpBEnxVnxVczm8IjC+qXBxjHOEHiYBkU6vG7ThDAMFgGtOUJ sCQm9az0aRzwiCm6UZue4hoKINJstD/3aMwZBYihWwaA3LDVg2/iRgToy71HO85E 58erlgtOlYlPsKGEGCSP7ZuSITAfDBuaGyyrUA== -----END CERTIFICATE-----Generated at Mon Mar 2 23:42:02 2026 by rpki-client