$ rpki-client -vvf repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa File: 3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa (raw, json) Hash identifier: grqJQep16rE8XIsToPc9eXCDsJaoO9etcdo/ZsDvg7E= Subject key identifier: E2:22:03:D2:4E:E2:08:59:B2:56:BF:39:E6:F4:6B:43:8B:18:85:CA Certificate issuer: /CN=E0D54A271CD04583E0304613C7075C15FA03E497 Certificate serial: 0B0ECEC92E557D3FA4D6C8BF2507474A6807225F Authority key identifier: E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa Signing time: Wed 28 Jan 2026 07:30:00 +0000 ROA not before: Wed 28 Jan 2026 07:25:00 +0000 ROA not after: Wed 27 Jan 2027 07:30:00 +0000 asID: 138843 IP address blocks: 103.138.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:0e:ce:c9:2e:55:7d:3f:a4:d6:c8:bf:25:07:47:4a:68:07:22:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0D54A271CD04583E0304613C7075C15FA03E497 Validity Not Before: Jan 28 07:25:00 2026 GMT Not After : Jan 27 07:30:00 2027 GMT Subject: CN=E22203D24EE20859B256BF39E6F46B438B1885CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:30:0d:4b:db:86:f7:b8:96:02:3b:7d:a8: 2f:85:3f:98:67:28:76:19:68:aa:82:b2:db:97:c5: d2:9d:ef:52:41:f0:46:1f:fa:13:e0:cb:24:38:47: 56:75:7f:0b:7e:e8:33:c6:12:2b:06:37:68:ec:76: 05:52:4e:9c:6c:7d:16:55:6d:c8:54:0d:2f:1a:1b: 5b:3a:4e:f5:91:3e:c6:fa:16:d8:5e:b2:4f:f9:30: ac:17:09:b3:bb:18:7c:7c:60:2f:fe:f6:7f:79:e9: 1e:5b:77:e3:f5:41:b3:41:2b:a2:ec:87:1c:db:b6: 48:40:7e:93:dc:5d:e7:fe:12:dc:18:91:fc:bb:24: 91:c0:0e:28:37:7b:34:36:7c:17:24:6e:9b:0f:eb: b5:34:a8:ca:52:57:81:f2:69:40:e4:20:df:a4:ca: e2:83:3c:e0:b4:8e:e0:02:17:43:e9:26:3d:ea:a7: 84:c6:b8:0f:7e:ca:26:5a:3e:b2:a6:7b:20:cc:10: 8c:cd:4f:e7:c4:f2:53:cb:a3:70:e0:60:10:f7:25: 5a:22:a3:8c:fa:b1:34:03:8d:18:ef:ee:3d:04:d9: 8b:89:45:53:f5:ce:56:6f:2c:64:d5:74:67:6c:55: f1:a8:42:7f:9c:35:b5:d1:ae:f6:ad:00:5f:70:96: 5e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:22:03:D2:4E:E2:08:59:B2:56:BF:39:E6:F4:6B:43:8B:18:85:CA X509v3 Authority Key Identifier: keyid:E0:D5:4A:27:1C:D0:45:83:E0:30:46:13:C7:07:5C:15:FA:03:E4:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/E0D54A271CD04583E0304613C7075C15FA03E497.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0D54A271CD04583E0304613C7075C15FA03E497.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc5867d8-3d6f-4816-b84f-fdd5c502b634/0/3130332e3133382e36332e302f32342d3234203d3e20313338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.63.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c0:00:03:e4:bc:43:c1:ab:79:0a:b2:fe:11:26:0a:2c:6a: fc:cb:1d:b1:0e:a6:91:b7:ce:8a:2d:04:91:0d:03:83:00:7d: 49:54:ad:25:13:b4:26:66:69:c7:99:25:20:a7:47:f3:7e:53: 18:39:ec:04:2c:41:49:10:74:2e:af:12:f2:a2:e3:3e:8b:29: 8c:41:2a:7d:35:46:95:80:c3:72:ed:09:12:16:9e:9b:36:b0: 06:07:de:17:01:ac:3b:e9:6d:4c:d3:e8:d5:22:cd:f7:2a:fe: ef:06:ca:4c:e5:d5:de:69:37:63:4c:2e:b2:6d:83:59:e5:10: 12:b1:50:d2:b6:21:b2:ea:05:53:58:bb:b9:d3:b0:7d:d8:f4: a3:7d:de:c1:48:f7:60:e1:da:ef:12:3e:16:6d:6f:46:80:31: d2:be:31:73:ca:bc:0d:43:8e:c8:74:7a:48:ad:06:59:64:4d: 30:7b:bc:3d:29:05:96:3c:27:91:38:bc:98:a0:be:5f:e6:9a: 03:e3:a1:23:2f:4c:06:50:ce:94:db:62:40:d8:39:45:08:54: 8a:17:c7:ac:ca:1c:08:b3:b2:80:7d:5d:12:53:59:5c:54:85: fc:5d:76:9c:b9:f1:2b:ea:fa:f8:6a:b1:07:44:54:e7:9e:8e: f5:57:05:f9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCw7OyS5VfT+k1si/JQdHSmgHIl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVG QTAzRTQ5NzAeFw0yNjAxMjgwNzI1MDBaFw0yNzAxMjcwNzMwMDBaMDMxMTAvBgNV BAMTKEUyMjIwM0QyNEVFMjA4NTlCMjU2QkYzOUU2RjQ2QjQzOEIxODg1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZDANS9uG97iWAjt9qC+FP5hn KHYZaKqCstuXxdKd71JB8EYf+hPgyyQ4R1Z1fwt+6DPGEisGN2jsdgVSTpxsfRZV bchUDS8aG1s6TvWRPsb6Fthesk/5MKwXCbO7GHx8YC/+9n956R5bd+P1QbNBK6Ls hxzbtkhAfpPcXef+EtwYkfy7JJHADig3ezQ2fBckbpsP67U0qMpSV4HyaUDkIN+k yuKDPOC0juACF0PpJj3qp4TGuA9+yiZaPrKmeyDMEIzNT+fE8lPLo3DgYBD3JVoi o4z6sTQDjRjv7j0E2YuJRVP1zlZvLGTVdGdsVfGoQn+cNbXRrvatAF9wll5JAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4iID0k7iCFmyVr855vRrQ4sYhcowHwYDVR0j BBgwFoAU4NVKJxzQRYPgMEYTxwdcFfoD5JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzU4NjdkOC0zZDZmLTQ4MTYtYjg0Zi1mZGQ1YzUwMmI2MzQvMC9FMEQ1NEEyNzFD RDA0NTgzRTAzMDQ2MTNDNzA3NUMxNUZBMDNFNDk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTBENTRBMjcxQ0QwNDU4M0UwMzA0NjEzQzcwNzVDMTVGQTAz RTQ5Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjNTg2N2Q4LTNkNmYtNDgxNi1i ODRmLWZkZDVjNTAyYjYzNC8wLzMxMzAzMzJlMzEzMzM4MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4o/MA0GCSqG SIb3DQEBCwUAA4IBAQBBwAAD5LxDwat5CrL+ESYKLGr8yx2xDqaRt86KLQSRDQOD AH1JVK0lE7QmZmnHmSUgp0fzflMYOewELEFJEHQurxLyouM+iymMQSp9NUaVgMNy 7QkSFp6bNrAGB94XAaw76W1M0+jVIs33Kv7vBspM5dXeaTdjTC6ybYNZ5RASsVDS tiGy6gVTWLu507B92PSjfd7BSPdg4drvEj4WbW9GgDHSvjFzyrwNQ47IdHpIrQZZ ZE0we7w9KQWWPCeROLyYoL5f5poD46EjL0wGUM6U22JA2DlFCFSKF8esyhwIs7KA fV0SU1lcVIX8XXacufEr6vr4arEHRFTnno71VwX5 -----END CERTIFICATE-----Generated at Mon Mar 2 20:33:37 2026 by rpki-client