$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa File: 3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa (raw, json) Hash identifier: 5QgQ/Pf1xOEet8T+2BskZlCrBhLXuW97rQzGZlwZmfw= Subject key identifier: D7:9D:76:1E:8C:3A:9E:20:54:AF:1C:C5:7E:EC:86:8C:2F:E5:B2:60 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 0275DFF09C5216119A5E57712C770B4BFBD58E71 Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa Signing time: Sat 28 Feb 2026 10:00:01 +0000 ROA not before: Sat 28 Feb 2026 09:55:01 +0000 ROA not after: Sat 27 Feb 2027 10:00:01 +0000 asID: 138881 IP address blocks: 103.169.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:75:df:f0:9c:52:16:11:9a:5e:57:71:2c:77:0b:4b:fb:d5:8e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Feb 28 09:55:01 2026 GMT Not After : Feb 27 10:00:01 2027 GMT Subject: CN=D79D761E8C3A9E2054AF1CC57EEC868C2FE5B260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:5f:fe:e5:95:30:d6:23:4f:79:e9:55:7d: ce:6e:db:b4:c0:2e:93:e3:b3:62:4c:1f:22:4f:18: 63:e2:9c:d9:c7:d2:fa:51:17:48:ac:0a:01:32:78: ac:b0:d3:ba:fc:ac:84:b0:67:3e:f1:b9:a6:f4:bf: 66:dd:5b:af:ac:b8:8f:27:a7:ac:16:c0:9b:75:5b: 3a:8e:81:17:3e:09:be:20:ff:f6:8f:1b:64:a2:63: 87:36:32:a7:6e:87:83:53:ac:2b:6b:4b:0a:c4:6c: 85:61:00:be:00:6d:14:8f:d5:65:ea:92:8c:f3:05: fa:82:ec:54:51:2b:fa:37:f8:c0:78:82:f2:1a:5b: db:24:2f:f9:ed:d1:59:96:46:24:99:cf:5c:9c:ea: cb:34:76:22:5e:55:88:67:9a:b6:8e:34:1a:91:d1: d7:95:9d:c3:9d:cb:70:1d:33:44:fa:4a:fc:92:83: 06:5e:c8:1f:3c:d1:82:a8:14:1a:cd:9a:7f:39:ad: 1d:63:d2:b2:a1:bc:59:50:2e:bf:49:30:c6:aa:cb: ce:08:5f:28:8e:3d:3c:c7:eb:c8:26:8b:01:ca:7f: 52:0b:4a:6a:f8:dc:d5:29:e1:a4:06:fc:82:bf:bd: 4a:eb:89:50:2b:f4:af:1a:b6:9f:3f:60:32:17:ea: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9D:76:1E:8C:3A:9E:20:54:AF:1C:C5:7E:EC:86:8C:2F:E5:B2:60 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233392e302f32342d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.239.0/24 Signature Algorithm: sha256WithRSAEncryption b4:f0:b8:83:26:fa:d1:9a:55:94:24:b4:b1:f3:9e:02:5e:40: 17:c1:2d:55:50:c3:6f:8b:9e:f9:de:38:24:d7:d5:e8:22:20: 96:d8:e3:6d:cd:e8:b9:7f:47:be:b9:fe:cc:e9:f8:31:62:bc: 83:e5:5a:89:72:ab:29:58:1f:90:66:d6:cf:ca:67:0c:85:79: cf:e5:5e:72:b3:d3:71:c1:f4:2e:93:31:f8:73:aa:4c:cb:ca: 1d:2e:56:d0:eb:f6:85:f9:90:86:db:f2:9d:26:a0:1c:85:4d: 93:0b:d2:cd:de:98:6a:4f:10:b2:9b:65:21:46:46:d4:5e:4e: 0d:59:15:c6:18:e2:ba:79:63:b6:9f:bc:58:ba:52:0a:60:0f: 61:85:8d:ec:23:5a:89:72:0a:90:59:d7:af:32:1e:64:28:24: c6:57:0c:d7:8f:af:c8:ed:8a:19:0a:b9:f1:07:34:0d:dd:20: 51:fd:69:3f:41:78:c0:03:77:21:ff:10:92:df:4f:0c:b4:36: b5:c6:bc:80:6d:93:dd:d2:3e:76:02:99:ea:7f:27:23:a9:18: e7:c2:2c:a8:e2:42:3c:82:f3:9c:19:aa:97:07:7f:f0:b3:79: 78:3e:9f:f1:e0:ef:60:fe:4a:c6:72:c7:61:b1:e3:68:11:a2: 84:05:80:e9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUAnXf8JxSFhGaXldxLHcLS/vVjnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNjAyMjgwOTU1MDFaFw0yNzAyMjcxMDAwMDFaMDMxMTAvBgNV BAMTKEQ3OUQ3NjFFOEMzQTlFMjA1NEFGMUNDNTdFRUM4NjhDMkZFNUIyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaql/+5ZUw1iNPeelVfc5u27TA LpPjs2JMHyJPGGPinNnH0vpRF0isCgEyeKyw07r8rISwZz7xuab0v2bdW6+suI8n p6wWwJt1WzqOgRc+Cb4g//aPG2SiY4c2Mqduh4NTrCtrSwrEbIVhAL4AbRSP1WXq kozzBfqC7FRRK/o3+MB4gvIaW9skL/nt0VmWRiSZz1yc6ss0diJeVYhnmraONBqR 0deVncOdy3AdM0T6SvySgwZeyB880YKoFBrNmn85rR1j0rKhvFlQLr9JMMaqy84I XyiOPTzH68gmiwHKf1ILSmr43NUp4aQG/IK/vUrriVAr9K8atp8/YDIX6t+hAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1512How6niBUrxzFfuyGjC/lsmAwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMWNhNjIwLWRhY2UtNGE5Zi1i OGU4LWEzYTJlNTgxNTAwZS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqe8wDQYJ KoZIhvcNAQELBQADggEBALTwuIMm+tGaVZQktLHzngJeQBfBLVVQw2+LnvneOCTX 1egiIJbY423N6Ll/R765/szp+DFivIPlWolyqylYH5Bm1s/KZwyFec/lXnKz03HB 9C6TMfhzqkzLyh0uVtDr9oX5kIbb8p0moByFTZML0s3emGpPELKbZSFGRtReTg1Z FcYY4rp5Y7afvFi6UgpgD2GFjewjWolyCpBZ168yHmQoJMZXDNePr8jtihkKufEH NA3dIFH9aT9BeMADdyH/EJLfTwy0NrXGvIBtk93SPnYCmep/JyOpGOfCLKjiQjyC 85wZqpcHf/CzeXg+n/Hg72D+SsZyx2Gx42gRooQFgOk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:46:18 2026 by rpki-client