$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa File: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (raw, json) Hash identifier: itrcHe3qx7ogs61DE3/P3ZuuNKltdZ7fAYSLqG5ktLc= Subject key identifier: C7:2B:E6:84:00:B7:20:05:DD:65:E2:2E:94:7D:59:86:4E:FA:62:35 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 61FAB28C23FCD1860B7E831298B5F83EA778EF6E Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa Signing time: Thu 12 Feb 2026 06:00:02 +0000 ROA not before: Thu 12 Feb 2026 05:55:02 +0000 ROA not after: Thu 11 Feb 2027 06:00:02 +0000 asID: 141129 IP address blocks: 103.158.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fa:b2:8c:23:fc:d1:86:0b:7e:83:12:98:b5:f8:3e:a7:78:ef:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Feb 12 05:55:02 2026 GMT Not After : Feb 11 06:00:02 2027 GMT Subject: CN=C72BE68400B72005DD65E22E947D59864EFA6235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:b0:b6:8f:5a:cf:79:82:49:30:d7:ef:b9: 7d:73:1e:d7:67:23:19:fe:85:c4:82:3e:54:0f:04: d5:ff:e2:c4:d0:08:b0:52:c3:e7:7a:31:68:c0:b2: c4:29:47:0e:e2:20:e8:ff:e3:68:24:8f:f3:3e:29: 69:17:c0:d3:56:5d:56:9a:9b:f1:42:01:38:ea:50: 40:20:d6:ee:b2:ee:4e:d3:32:60:72:8a:f4:27:62: c5:98:34:49:4a:d4:0d:4b:b4:53:b7:1e:0c:b4:3c: 73:4b:6d:8f:41:e6:e2:df:2a:90:47:8f:30:a0:60: 5e:36:e8:35:a0:1e:b9:92:5d:f6:18:82:c0:08:da: 32:fa:f4:6d:11:5c:ec:6a:ee:81:0d:04:b2:bc:d8: ae:0f:ce:b7:9c:eb:d0:3c:8b:6f:89:01:6b:ec:69: 20:8d:5c:8f:3a:83:da:c2:3b:ab:2e:65:9c:9e:f9: 14:30:10:b7:df:97:25:cc:6c:a3:52:35:34:a8:68: 26:9c:c9:02:0f:63:d8:1b:91:f0:5e:31:c6:2c:d1: 14:73:18:c8:27:0f:fa:7d:fe:cb:57:81:63:1c:30: f7:d7:97:58:fa:95:ac:38:1b:a9:42:e2:29:4e:7f: d8:16:2a:2e:d1:83:d9:d0:d7:73:eb:e3:69:03:b6: cd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2B:E6:84:00:B7:20:05:DD:65:E2:2E:94:7D:59:86:4E:FA:62:35 X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.102.0/24 Signature Algorithm: sha256WithRSAEncryption 76:8b:47:87:3c:30:3e:0e:0f:2a:c4:90:0c:1a:e8:f7:14:14: 94:e6:6f:c0:97:39:74:d7:1f:84:4e:35:39:c4:dd:47:04:45: c1:a9:91:c7:1e:47:89:d2:22:ba:36:65:4a:b7:6e:80:5a:2a: eb:11:78:c3:31:ec:79:35:a0:29:47:1a:a5:40:0f:36:2a:2b: 70:66:4d:b1:04:34:6e:35:24:ff:33:64:56:72:ee:a8:d9:6f: 40:0d:73:0d:e1:43:0d:73:11:f8:fc:2a:ce:85:fa:2a:9d:2b: e2:b8:16:6e:c5:b9:ca:49:ce:14:6e:cb:59:89:0f:d0:4c:86: c7:53:be:82:40:5a:93:ab:b8:da:26:d3:87:08:03:0a:d1:97: ef:e0:88:17:ac:76:48:1a:65:c5:de:ab:99:8f:65:61:89:6c: cb:d9:c6:97:3b:b0:a6:1f:00:a4:65:72:9c:5c:b6:e5:54:fc: c4:16:60:7a:c7:9a:aa:49:84:3b:76:1c:1f:45:94:23:ea:64: d9:c0:71:13:56:59:4f:e3:5a:db:70:fa:f4:63:6e:ab:fd:67: bb:cb:02:29:9b:73:cc:08:19:0b:58:d0:76:09:be:fc:f4:19: 51:57:58:56:0c:32:4d:c1:e4:b6:83:17:d3:a2:c2:4e:6c:42: fe:3b:64:0a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYfqyjCP80YYLfoMSmLX4Pqd4724wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNjAyMTIwNTU1MDJaFw0yNzAyMTEwNjAwMDJaMDMxMTAvBgNV BAMTKEM3MkJFNjg0MDBCNzIwMDVERDY1RTIyRTk0N0Q1OTg2NEVGQTYyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnurC2j1rPeYJJMNfvuX1zHtdn Ixn+hcSCPlQPBNX/4sTQCLBSw+d6MWjAssQpRw7iIOj/42gkj/M+KWkXwNNWXVaa m/FCATjqUEAg1u6y7k7TMmByivQnYsWYNElK1A1LtFO3Hgy0PHNLbY9B5uLfKpBH jzCgYF426DWgHrmSXfYYgsAI2jL69G0RXOxq7oENBLK82K4Pzrec69A8i2+JAWvs aSCNXI86g9rCO6suZZye+RQwELfflyXMbKNSNTSoaCacyQIPY9gbkfBeMcYs0RRz GMgnD/p9/stXgWMcMPfXl1j6law4G6lC4ilOf9gWKi7Rg9nQ13Pr42kDts0dAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxyvmhAC3IAXdZeIulH1Zhk76YjUwHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3MjRlNDViLTI1NGItNGZlYi1i ZjhlLTdiZjEyMDkxMmFmNy8wLzMxMzAzMzJlMzEzNTM4MmUzMTMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnmYwDQYJ KoZIhvcNAQELBQADggEBAHaLR4c8MD4ODyrEkAwa6PcUFJTmb8CXOXTXH4RONTnE 3UcERcGpkcceR4nSIro2ZUq3boBaKusReMMx7Hk1oClHGqVADzYqK3BmTbEENG41 JP8zZFZy7qjZb0ANcw3hQw1zEfj8Ks6F+iqdK+K4Fm7FucpJzhRuy1mJD9BMhsdT voJAWpOruNom04cIAwrRl+/giBesdkgaZcXeq5mPZWGJbMvZxpc7sKYfAKRlcpxc tuVU/MQWYHrHmqpJhDt2HB9FlCPqZNnAcRNWWU/jWttw+vRjbqv9Z7vLAimbc8wI GQtY0HYJvvz0GVFXWFYMMk3B5LaDF9Oiwk5sQv47ZAo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:15:42 2026 by rpki-client