$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa File: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (raw, json) Hash identifier: 4KcX41CtOJMt4t76xcKkYT/+3plTpXoSzJ461Xo8YIo= Subject key identifier: BB:F5:2A:28:9D:72:8B:89:5F:8B:6D:5A:CC:5D:2C:E1:E1:0E:C4:F2 Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 7C521F7AC9DACD7E0C24FF1C9DCC66364AE21E08 Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa Signing time: Fri 03 Apr 2026 01:00:02 +0000 ROA not before: Fri 03 Apr 2026 00:55:02 +0000 ROA not after: Fri 02 Apr 2027 01:00:02 +0000 asID: 45305 IP address blocks: 103.190.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:52:1f:7a:c9:da:cd:7e:0c:24:ff:1c:9d:cc:66:36:4a:e2:1e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: Apr 3 00:55:02 2026 GMT Not After : Apr 2 01:00:02 2027 GMT Subject: CN=BBF52A289D728B895F8B6D5ACC5D2CE1E10EC4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:58:31:ac:a1:20:29:8a:77:3e:d2:75:e3: 5f:fb:be:f0:0d:43:08:30:58:87:6d:46:68:34:bc: e9:e9:59:d1:4c:aa:07:3a:d4:51:a4:2e:8e:a1:50: 75:fc:13:f1:30:8a:e4:eb:c3:57:45:17:4e:36:fa: d0:09:56:0c:c7:43:90:a6:98:d8:e7:df:8c:3e:72: 23:f1:42:f1:ee:e2:a8:1b:a9:83:71:ce:e2:b9:74: bb:ce:e2:8a:66:09:78:5b:75:1e:af:3b:39:c2:fb: 08:22:70:ea:ff:c8:53:c4:80:02:e1:a5:7a:90:cd: 94:80:ba:fb:fb:0d:cf:f7:df:76:29:ed:a5:42:30: 50:e7:54:bf:fb:bd:a4:2b:ab:99:ec:c4:82:9a:bb: 6b:24:b4:fe:e8:46:f1:c1:49:33:7c:b0:38:1e:9c: d9:ad:f8:f2:6c:32:3a:40:43:35:1e:1a:66:d5:06: 97:4a:de:2f:81:48:91:21:44:a3:80:97:c0:49:cb: 06:18:c1:f9:65:33:2e:ce:d2:71:83:b2:53:ba:f3: 32:a4:58:82:c1:92:0c:a5:c0:cc:52:b6:f9:48:75: a7:a8:8e:18:a7:d3:a6:d6:88:0b:2e:ae:9e:02:97: b9:98:1b:40:a4:68:fc:db:25:44:01:1f:d4:42:30: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F5:2A:28:9D:72:8B:89:5F:8B:6D:5A:CC:5D:2C:E1:E1:0E:C4:F2 X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.115.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:79:1e:fb:95:68:2e:56:0d:bd:84:d1:16:bf:19:41:19:70: f1:3a:be:49:59:0f:b8:f9:6d:3c:95:f8:e4:0e:f6:01:6f:e7: a9:28:4e:58:16:5f:7c:9e:95:18:4a:6a:60:28:b2:21:93:44: a4:67:31:f7:61:91:27:69:09:19:f1:74:16:f1:98:b0:ed:fb: 75:6c:87:32:3d:9d:e9:c0:30:35:d7:78:46:2e:7a:94:e5:89: b2:6e:bd:28:cc:f6:3e:72:75:d9:39:ef:16:fd:7c:b2:ec:c1: be:da:4b:8c:9f:f1:e0:f1:fc:5e:7d:d1:69:f1:04:fd:51:aa: a2:cc:db:08:71:af:c4:02:3a:ee:8e:c9:cb:2b:f7:5d:79:60: bf:b3:7d:3b:f7:cf:1d:be:9e:71:de:20:8b:9a:70:eb:3d:cb: 51:60:44:42:12:dd:23:a3:4c:10:3d:3e:13:2a:22:27:df:d4: a6:66:5d:b4:b2:f3:5f:ad:4a:16:03:f1:6d:cc:03:72:83:f5: ef:68:6e:02:0c:da:58:af:04:95:7d:b9:1a:e2:e1:38:5d:2a: 5a:00:37:e9:fb:95:28:6c:ba:6a:f1:0e:e5:4b:69:17:b7:b8: af:51:7c:45:46:c6:9c:93:78:0b:47:54:f9:f3:d0:c9:ca:61: 8b:fc:87:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfFIfesnazX4MJP8cncxmNkriHggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNjA0MDMwMDU1MDJaFw0yNzA0MDIwMTAwMDJaMDMxMTAvBgNV BAMTKEJCRjUyQTI4OUQ3MjhCODk1RjhCNkQ1QUNDNUQyQ0UxRTEwRUM0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyp1gxrKEgKYp3PtJ141/7vvAN QwgwWIdtRmg0vOnpWdFMqgc61FGkLo6hUHX8E/EwiuTrw1dFF042+tAJVgzHQ5Cm mNjn34w+ciPxQvHu4qgbqYNxzuK5dLvO4opmCXhbdR6vOznC+wgicOr/yFPEgALh pXqQzZSAuvv7Dc/333Yp7aVCMFDnVL/7vaQrq5nsxIKau2sktP7oRvHBSTN8sDge nNmt+PJsMjpAQzUeGmbVBpdK3i+BSJEhRKOAl8BJywYYwfllMy7O0nGDslO68zKk WILBkgylwMxStvlIdaeojhin06bWiAsurp4Cl7mYG0CkaPzbJUQBH9RCMA87AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUu/UqKJ1yi4lfi21azF0s4eEOxPIwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyYjBiZGQ1LTZlMzAtNGExMC1i OTkzLTc3ZDQ4MjUxZjNhMS8wLzMxMzAzMzJlMzEzOTMwMmUzMTMxMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ75zMA0GCSqG SIb3DQEBCwUAA4IBAQBceR77lWguVg29hNEWvxlBGXDxOr5JWQ+4+W08lfjkDvYB b+epKE5YFl98npUYSmpgKLIhk0SkZzH3YZEnaQkZ8XQW8Ziw7ft1bIcyPZ3pwDA1 13hGLnqU5Ymybr0ozPY+cnXZOe8W/Xyy7MG+2kuMn/Hg8fxefdFp8QT9UaqizNsI ca/EAjrujsnLK/ddeWC/s307988dvp5x3iCLmnDrPctRYERCEt0jo0wQPT4TKiIn 39SmZl20svNfrUoWA/FtzANyg/XvaG4CDNpYrwSVfbka4uE4XSpaADfp+5UobLpq 8Q7lS2kXt7ivUXxFRsack3gLR1T589DJymGL/Iel -----END CERTIFICATE-----Generated at Fri Apr 17 18:46:25 2026 by rpki-client