$ rpki-client -vvf repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa File: 3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa (raw, json) Hash identifier: n4N0hFQ/vvqlejLhB9JnzDV0h3HZbODWew6Ob6wqJn4= Subject key identifier: E4:79:92:11:D2:F0:C4:E8:9B:6C:85:45:A1:8F:CC:EB:E7:B9:44:AF Certificate issuer: /CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Certificate serial: 1A7D7C06000EB8B18BEDE5C6C1BB9D37C361CCD7 Authority key identifier: 64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa Signing time: Thu 29 Jan 2026 09:00:00 +0000 ROA not before: Thu 29 Jan 2026 08:55:00 +0000 ROA not after: Thu 28 Jan 2027 09:00:00 +0000 asID: 133361 IP address blocks: 103.37.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7d:7c:06:00:0e:b8:b1:8b:ed:e5:c6:c1:bb:9d:37:c3:61:cc:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64FFF4BF67B5B3EF9DC6545842C118D75F6042D8 Validity Not Before: Jan 29 08:55:00 2026 GMT Not After : Jan 28 09:00:00 2027 GMT Subject: CN=E4799211D2F0C4E89B6C8545A18FCCEBE7B944AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:71:f8:0c:ac:31:d0:1b:25:7e:77:b1:f2:1b: d3:b3:dc:02:ca:1b:dd:bb:d7:99:92:77:72:fd:e7: a9:e6:82:90:3d:92:cb:ad:9a:6a:50:8a:68:f8:e8: ea:b5:d5:d7:f7:ef:9b:a4:05:c9:6b:c3:2a:3a:b8: bd:68:30:f8:92:be:87:d8:43:78:15:ed:05:36:a9: 09:93:87:22:c1:34:c1:c6:6c:c1:bd:8a:b6:34:c9: 20:41:6c:fd:45:78:fd:ab:95:1c:d0:9f:05:c2:3e: da:88:53:21:c1:2b:93:55:03:54:a6:03:53:54:a4: d0:2b:35:17:5a:77:8e:e5:cb:3d:d7:92:d2:3b:21: f0:ae:07:aa:ea:bc:51:7c:98:6b:3b:32:62:53:1b: e0:52:ad:ff:61:a5:fc:10:9b:37:b6:71:c8:25:85: 21:87:e6:14:cd:b8:dc:f8:26:e2:bb:3c:d4:66:47: 72:72:4c:fc:49:14:99:97:0b:a9:b0:e2:4e:91:9b: d7:d9:f7:c6:89:a8:f5:b6:40:0f:e4:c5:95:ad:e2: d1:64:9e:31:ec:bf:bd:cb:a3:c6:c7:0f:ac:de:27: bd:0c:6f:d1:e7:6c:af:d9:77:c4:ae:62:f5:69:a5: 4c:5c:5a:45:12:63:86:06:c4:e0:f0:9a:a7:60:23: b8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:79:92:11:D2:F0:C4:E8:9B:6C:85:45:A1:8F:CC:EB:E7:B9:44:AF X509v3 Authority Key Identifier: keyid:64:FF:F4:BF:67:B5:B3:EF:9D:C6:54:58:42:C1:18:D7:5F:60:42:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64FFF4BF67B5B3EF9DC6545842C118D75F6042D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab313d17-5b9b-4d23-9424-74579508ba54/0/3130332e33372e3232392e302f32342d3234203d3e20313333333631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.229.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:4d:61:d2:74:8a:b8:65:06:dd:08:2e:ee:72:18:e9:ff:a6: 18:7c:22:47:1b:16:13:b4:8c:f9:5d:d2:60:ec:57:e4:67:3d: 04:74:80:62:b2:0f:62:bd:4f:b1:e1:b7:6a:13:65:74:ed:a9: dc:ac:90:02:45:b4:ab:77:33:5f:9e:5b:9c:0a:df:82:06:c6: ff:7b:c1:b8:05:ca:a3:4e:c3:af:b5:3b:78:a2:5f:b4:8a:01: 3e:53:38:c2:83:9e:ed:57:42:d2:8f:47:d3:df:04:bb:10:c9: c8:45:ea:8a:d2:d1:bd:6b:bc:19:00:5b:3e:2a:db:0d:8a:ce: 2b:86:c1:3d:ec:d8:3d:79:5c:fd:d7:eb:84:0d:b5:d7:82:a8: f5:ae:38:12:8b:c6:ea:1d:46:c5:8e:f1:e8:16:60:da:99:20: ac:d9:6d:15:ce:5b:4a:02:10:9d:12:5c:65:05:9c:59:b7:d2: cd:42:1e:58:6a:ac:1a:7b:21:81:24:d2:8e:93:49:31:7d:7f: 07:83:c7:c1:b3:cd:f0:0c:5f:5f:e5:50:c7:b2:a9:54:f3:c9: f3:87:c6:3a:4b:f9:b9:88:ca:22:51:c1:73:e7:a1:ef:a4:ac: df:26:fe:3f:d2:f1:25:10:c7:81:a8:1b:2c:cd:e4:65:7d:0d: b9:7c:01:b5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGn18BgAOuLGL7eXGwbudN8NhzNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1 RjYwNDJEODAeFw0yNjAxMjkwODU1MDBaFw0yNzAxMjgwOTAwMDBaMDMxMTAvBgNV BAMTKEU0Nzk5MjExRDJGMEM0RTg5QjZDODU0NUExOEZDQ0VCRTdCOTQ0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbcfgMrDHQGyV+d7HyG9Oz3ALK G92715mSd3L956nmgpA9ksutmmpQimj46Oq11df375ukBclrwyo6uL1oMPiSvofY Q3gV7QU2qQmThyLBNMHGbMG9irY0ySBBbP1FeP2rlRzQnwXCPtqIUyHBK5NVA1Sm A1NUpNArNRdad47lyz3XktI7IfCuB6rqvFF8mGs7MmJTG+BSrf9hpfwQmze2ccgl hSGH5hTNuNz4JuK7PNRmR3JyTPxJFJmXC6mw4k6Rm9fZ98aJqPW2QA/kxZWt4tFk njHsv73Lo8bHD6zeJ70Mb9HnbK/Zd8SuYvVppUxcWkUSY4YGxODwmqdgI7ilAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5HmSEdLwxOibbIVFoY/M6+e5RK8wHwYDVR0j BBgwFoAUZP/0v2e1s++dxlRYQsEY119gQtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YjMxM2QxNy01YjliLTRkMjMtOTQyNC03NDU3OTUwOGJhNTQvMC82NEZGRjRCRjY3 QjVCM0VGOURDNjU0NTg0MkMxMThENzVGNjA0MkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjRGRkY0QkY2N0I1QjNFRjlEQzY1NDU4NDJDMTE4RDc1RjYw NDJEOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiMzEzZDE3LTViOWItNGQyMy05 NDI0LTc0NTc5NTA4YmE1NC8wLzMxMzAzMzJlMzMzNzJlMzIzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzMzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyXlMA0GCSqG SIb3DQEBCwUAA4IBAQBeTWHSdIq4ZQbdCC7uchjp/6YYfCJHGxYTtIz5XdJg7Ffk Zz0EdIBisg9ivU+x4bdqE2V07ancrJACRbSrdzNfnlucCt+CBsb/e8G4BcqjTsOv tTt4ol+0igE+UzjCg57tV0LSj0fT3wS7EMnIReqK0tG9a7wZAFs+KtsNis4rhsE9 7Ng9eVz91+uEDbXXgqj1rjgSi8bqHUbFjvHoFmDamSCs2W0VzltKAhCdElxlBZxZ t9LNQh5YaqwaeyGBJNKOk0kxfX8Hg8fBs83wDF9f5VDHsqlU88nzh8Y6S/m5iMoi UcFz56HvpKzfJv4/0vElEMeBqBsszeRlfQ25fAG1 -----END CERTIFICATE-----Generated at Mon Mar 2 20:21:45 2026 by rpki-client