$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa File: 3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa (raw, json) Hash identifier: 0+nhoma588cZTYGkSlFGKnVxA81jzyEd2jcJVdxsfWE= Subject key identifier: 98:BC:9A:92:10:5D:69:2C:CD:01:1A:92:90:53:8C:87:EA:6D:81:61 Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 125263C9CEFB93001B708ECF35A75EFCC970B63F Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa Signing time: Wed 28 Jan 2026 07:29:48 +0000 ROA not before: Wed 28 Jan 2026 07:24:48 +0000 ROA not after: Wed 27 Jan 2027 07:29:48 +0000 asID: 138843 IP address blocks: 103.138.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:63:c9:ce:fb:93:00:1b:70:8e:cf:35:a7:5e:fc:c9:70:b6:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Jan 28 07:24:48 2026 GMT Not After : Jan 27 07:29:48 2027 GMT Subject: CN=98BC9A92105D692CCD011A9290538C87EA6D8161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fb:10:ba:f6:93:9d:a6:28:bd:57:45:51:db: c6:aa:c5:85:e8:51:dc:ca:b1:e2:8e:0e:c5:af:4e: 27:bc:28:29:67:cc:87:10:e7:35:0b:76:4d:88:73: 64:de:b8:12:2a:b9:86:97:78:f5:76:5a:99:ae:9b: 30:8a:cf:31:28:f3:b5:93:d2:de:09:21:ff:08:e1: 1d:52:12:24:5f:9f:ce:de:b2:a2:35:ff:3c:88:ac: e9:7e:63:24:78:8f:63:96:db:97:9b:16:ac:e2:a3: 15:72:a1:8d:d5:0b:09:9d:5a:9c:cd:5f:d5:1c:74: 22:f5:54:e5:d1:40:32:6c:bc:0a:bd:42:50:6c:20: 45:76:a4:96:e4:70:06:ef:fa:45:77:12:44:8e:6a: 56:d0:51:6a:50:93:7e:b7:a4:ea:f3:52:ab:7b:4e: 35:a1:9a:25:07:73:4c:e9:89:df:14:82:fa:de:8e: 1b:7a:d4:a5:c3:60:f6:e7:01:20:a3:f7:92:7b:71: 01:e8:d6:08:a1:7a:17:81:40:c6:10:af:56:16:24: e9:69:bf:1c:45:29:49:67:82:1c:ee:6b:9a:1b:38: f3:f5:9c:ec:55:78:40:f9:48:cf:39:48:d9:62:99: 4f:d3:d7:03:d0:86:10:83:d3:71:2a:db:d3:ba:ba: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BC:9A:92:10:5D:69:2C:CD:01:1A:92:90:53:8C:87:EA:6D:81:61 X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36322e302f32342d3234203d3e20313338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.62.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:b6:73:c6:b3:6b:f0:d4:d2:43:f5:a7:f7:83:ff:7d:ed:3a: 12:43:50:29:84:12:51:79:d5:3b:80:b9:ef:35:0e:83:2c:1e: 66:73:27:cb:6e:58:ad:c6:e1:54:cd:b1:31:7d:a5:0f:db:4d: 0a:05:b2:e0:bd:06:33:f8:16:bc:56:d0:2b:8c:6b:38:3a:40: 28:99:ea:c2:a1:77:b2:c3:d9:0d:51:d7:d2:da:3d:23:b8:eb: 2e:52:72:1b:db:24:3d:59:5f:89:c4:4e:af:b9:a9:49:9a:78: 5b:44:35:64:47:d6:65:9f:9c:89:96:67:48:10:41:a8:4a:eb: 8a:46:ef:6b:5b:70:d9:eb:f2:99:2b:75:0c:6f:c6:c4:a8:be: 5e:0b:ef:84:23:4d:45:8a:a3:a7:d1:33:3c:78:65:02:e3:41: 92:dc:16:6e:cc:08:9d:0e:6f:94:ae:a9:0b:30:06:a3:b3:a7: 49:8d:bc:6a:00:bd:b0:02:7a:87:7d:21:52:00:d1:06:b7:a1: 72:70:8b:a9:cc:4a:f4:3c:8f:2b:85:65:14:ea:51:f5:1b:b0: e7:66:37:80:a5:b3:d5:e8:78:4c:38:d4:99:0a:4b:67:c8:89: b3:81:9d:a9:78:c4:68:73:0e:83:43:24:59:80:62:29:55:03: 9b:aa:6e:d3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUElJjyc77kwAbcI7PNade/Mlwtj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNjAxMjgwNzI0NDhaFw0yNzAxMjcwNzI5NDhaMDMxMTAvBgNV BAMTKDk4QkM5QTkyMTA1RDY5MkNDRDAxMUE5MjkwNTM4Qzg3RUE2RDgxNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+xC69pOdpii9V0VR28aqxYXo UdzKseKODsWvTie8KClnzIcQ5zULdk2Ic2TeuBIquYaXePV2WpmumzCKzzEo87WT 0t4JIf8I4R1SEiRfn87esqI1/zyIrOl+YyR4j2OW25ebFqzioxVyoY3VCwmdWpzN X9UcdCL1VOXRQDJsvAq9QlBsIEV2pJbkcAbv+kV3EkSOalbQUWpQk363pOrzUqt7 TjWhmiUHc0zpid8Ugvrejht61KXDYPbnASCj95J7cQHo1giheheBQMYQr1YWJOlp vxxFKUlnghzua5obOPP1nOxVeED5SM85SNlimU/T1wPQhhCD03Eq29O6uh/XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmLyakhBdaSzNARqSkFOMh+ptgWEwHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjNTg2N2Q4LTNkNmYtNDgxNi1i ODRmLWZkZDVjNTAyYjYzNC8wLzMxMzAzMzJlMzEzMzM4MmUzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4o+MA0GCSqG SIb3DQEBCwUAA4IBAQALtnPGs2vw1NJD9af3g/997ToSQ1AphBJRedU7gLnvNQ6D LB5mcyfLblitxuFUzbExfaUP200KBbLgvQYz+Ba8VtArjGs4OkAomerCoXeyw9kN UdfS2j0juOsuUnIb2yQ9WV+JxE6vualJmnhbRDVkR9Zln5yJlmdIEEGoSuuKRu9r W3DZ6/KZK3UMb8bEqL5eC++EI01FiqOn0TM8eGUC40GS3BZuzAidDm+UrqkLMAaj s6dJjbxqAL2wAnqHfSFSANEGt6FycIupzEr0PI8rhWUU6lH1G7DnZjeApbPV6HhM ONSZCktnyImzgZ2peMRocw6DQyRZgGIpVQObqm7T -----END CERTIFICATE-----Generated at Mon Mar 2 20:33:44 2026 by rpki-client