$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa File: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (raw, json) Hash identifier: SXu6y5hAHpLUxTpHQELosLw/ezbeelmjazY+x7480hw= Subject key identifier: 75:A3:E7:EF:B5:AB:66:86:47:D6:73:1A:61:D3:F9:FB:56:CA:52:40 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 56632A50FB89DFC3AB95770ACDD08DA1F90033D7 Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa Signing time: Thu 12 Feb 2026 12:00:00 +0000 ROA not before: Thu 12 Feb 2026 11:55:00 +0000 ROA not after: Thu 11 Feb 2027 12:00:00 +0000 asID: 149744 IP address blocks: 103.187.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:63:2a:50:fb:89:df:c3:ab:95:77:0a:cd:d0:8d:a1:f9:00:33:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Feb 12 11:55:00 2026 GMT Not After : Feb 11 12:00:00 2027 GMT Subject: CN=75A3E7EFB5AB668647D6731A61D3F9FB56CA5240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:20:61:8e:23:f5:1c:c5:f2:48:27:98:32:c5: c6:b6:ff:58:88:a2:ef:85:c3:ee:53:06:f9:21:41: bc:fd:07:c1:1e:24:f4:3c:07:bb:07:51:87:d4:06: ff:f3:ca:4e:bf:40:c2:74:1e:50:cf:af:10:29:de: 3b:98:e8:37:f4:ff:7c:51:87:d3:c2:68:7a:fc:c9: 26:75:f3:42:a5:32:ad:ca:dd:9f:ce:ab:bc:8b:d3: a8:69:09:01:38:3a:14:09:b4:42:47:bf:0b:ab:c0: 35:3a:11:b0:0b:08:cd:5c:25:ab:ea:13:5a:93:b5: f6:1e:df:f3:48:51:1e:ba:ba:84:ee:44:c4:21:c9: 84:28:fd:b2:6c:1c:e3:aa:c6:6b:ba:70:32:0b:d3: ac:a3:1a:09:7b:41:9a:b8:e7:28:f7:d3:b8:f4:78: 28:64:08:92:49:d1:ec:68:a6:dc:0f:00:dd:11:56: 22:36:02:90:bf:59:29:67:29:1c:53:38:e8:50:fa: d5:13:a2:90:9a:9d:48:db:3a:d6:8f:8c:ad:cc:42: 2b:f1:89:c9:ee:33:da:97:50:5d:df:76:db:e8:e5: 15:6c:fc:65:bf:bd:aa:20:b3:e8:8c:99:6c:33:f0: 0c:80:6f:f7:41:5d:71:1c:db:9d:35:91:e6:a1:c7: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A3:E7:EF:B5:AB:66:86:47:D6:73:1A:61:D3:F9:FB:56:CA:52:40 X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.187.162.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:aa:4a:4b:9b:c5:8b:ae:3d:92:e7:b7:5d:2c:73:2c:13:42: 3a:5a:a0:b2:3f:91:2a:cd:a7:2d:eb:d0:79:d3:1f:92:5f:0b: 58:46:73:87:85:36:33:f2:6a:be:4a:e2:c0:f3:52:5a:a3:c0: 58:d0:f3:42:19:0c:b1:87:94:1f:9e:0f:2b:85:fe:7a:24:60: 39:9c:41:20:d0:00:be:7d:3c:86:11:7c:3f:01:40:f6:5b:06: 01:98:fc:c3:96:ba:99:e9:3b:e9:2a:10:4c:cd:4b:55:30:73: bc:81:10:15:57:5e:45:10:1a:93:b1:ab:84:d0:e8:8f:75:8e: e4:fd:8d:12:7d:08:78:94:0f:3e:f8:cf:41:2e:31:d0:4e:33: aa:0c:48:82:53:21:8d:96:28:9f:fb:a9:9a:1a:cc:9e:5a:87: 35:a4:95:2f:08:06:85:e5:98:12:95:bc:2d:66:b6:15:00:80: 2e:eb:b1:cd:73:f7:d4:a8:aa:cf:b4:09:c6:f7:ab:b0:09:40: bf:0d:16:64:88:77:e1:ad:43:62:2a:59:f5:f1:b9:f4:7c:a2: c9:f4:d8:d3:f2:d2:ee:d0:a7:b9:a4:e8:62:d8:bf:44:2a:5c: d4:bd:73:75:b9:3e:1d:44:4a:21:6b:7b:bc:f8:d9:4e:b1:4d: 17:ef:11:b4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVmMqUPuJ38OrlXcKzdCNofkAM9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNjAyMTIxMTU1MDBaFw0yNzAyMTExMjAwMDBaMDMxMTAvBgNV BAMTKDc1QTNFN0VGQjVBQjY2ODY0N0Q2NzMxQTYxRDNGOUZCNTZDQTUyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIGGOI/UcxfJIJ5gyxca2/1iI ou+Fw+5TBvkhQbz9B8EeJPQ8B7sHUYfUBv/zyk6/QMJ0HlDPrxAp3juY6Df0/3xR h9PCaHr8ySZ180KlMq3K3Z/Oq7yL06hpCQE4OhQJtEJHvwurwDU6EbALCM1cJavq E1qTtfYe3/NIUR66uoTuRMQhyYQo/bJsHOOqxmu6cDIL06yjGgl7QZq45yj307j0 eChkCJJJ0exoptwPAN0RViI2ApC/WSlnKRxTOOhQ+tUTopCanUjbOtaPjK3MQivx icnuM9qXUF3fdtvo5RVs/GW/vaogs+iMmWwz8AyAb/dBXXEc2501keahx88hAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdaPn77WrZoZH1nMaYdP5+1bKUkAwHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyNWM3ZTFkLTgyZTgtNDEwMC1i NDM1LTk5NTQyNzJmYjdhOC8wLzMxMzAzMzJlMzEzODM3MmUzMTM2MzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzNzM0MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnu6IwDQYJ KoZIhvcNAQELBQADggEBACyqSkubxYuuPZLnt10scywTQjpaoLI/kSrNpy3r0HnT H5JfC1hGc4eFNjPyar5K4sDzUlqjwFjQ80IZDLGHlB+eDyuF/nokYDmcQSDQAL59 PIYRfD8BQPZbBgGY/MOWupnpO+kqEEzNS1Uwc7yBEBVXXkUQGpOxq4TQ6I91juT9 jRJ9CHiUDz74z0EuMdBOM6oMSIJTIY2WKJ/7qZoazJ5ahzWklS8IBoXlmBKVvC1m thUAgC7rsc1z99Soqs+0Ccb3q7AJQL8NFmSId+GtQ2IqWfXxufR8osn02NPy0u7Q p7mk6GLYv0QqXNS9c3W5Ph1ESiFre7z42U6xTRfvEbQ= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:02 2026 by rpki-client