$ rpki-client -vvf repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa File: 3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa (raw, json) Hash identifier: PKnb33wVx3T5EIj08qJEeewWsRoc+8E1r+XSvHkuzAU= Subject key identifier: 62:C8:40:AF:74:C0:8A:54:3D:4A:27:F1:85:E7:82:A0:24:E8:5F:36 Certificate issuer: /CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Certificate serial: 4E5D2FBD436D3A3862EBEEA47586B7CA2B28FFB2 Authority key identifier: 47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa Signing time: Mon 06 Apr 2026 09:00:00 +0000 ROA not before: Mon 06 Apr 2026 08:55:00 +0000 ROA not after: Mon 05 Apr 2027 09:00:00 +0000 asID: 140467 IP address blocks: 103.235.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5d:2f:bd:43:6d:3a:38:62:eb:ee:a4:75:86:b7:ca:2b:28:ff:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47CBAD1A648715C5E867F1A2ED3558688608EE19 Validity Not Before: Apr 6 08:55:00 2026 GMT Not After : Apr 5 09:00:00 2027 GMT Subject: CN=62C840AF74C08A543D4A27F185E782A024E85F36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:0e:8b:d7:f5:d9:b8:64:67:d0:13:75:3a: cd:19:ae:9d:6d:86:2a:c8:3c:85:9c:eb:f4:9f:19: 1d:f9:68:6c:f9:ec:21:4e:3d:d4:b6:53:7d:83:34: dc:94:d0:31:a7:45:e6:33:3c:37:7a:35:e2:bd:cb: c2:c8:03:6c:1f:4c:12:fe:1d:53:d2:7b:c4:c3:9b: 3a:6e:7a:38:8c:98:d1:59:93:6c:d0:9f:4f:18:55: e4:94:df:3b:3f:2b:29:f1:50:6d:f5:d2:cf:f0:e3: 09:3b:28:49:95:56:f0:1c:73:9b:b9:68:f0:4b:bf: 3e:35:95:d0:f7:ab:15:22:dd:2d:b3:ce:a5:d7:d3: 03:74:a9:a3:4f:cb:bd:a2:2a:a5:6d:58:63:3b:2b: e0:e2:27:72:5a:e0:da:1c:dc:2a:5f:9c:77:18:2a: da:d0:fc:7e:4d:83:6c:9e:6e:41:50:b0:0f:45:3b: a4:9b:7d:6f:8e:f2:dc:71:1c:87:82:ee:5a:f0:a4: 73:64:19:e8:2b:8f:c6:39:be:74:65:9d:31:9a:4a: fd:5a:e8:6b:a7:c7:82:73:a7:37:72:14:60:aa:51: 60:66:f8:7a:39:c9:eb:f5:7a:d7:33:9b:88:e1:fd: d0:b2:f6:46:98:d4:09:a7:b7:a9:d6:b7:9c:c6:d6: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:C8:40:AF:74:C0:8A:54:3D:4A:27:F1:85:E7:82:A0:24:E8:5F:36 X509v3 Authority Key Identifier: keyid:47:CB:AD:1A:64:87:15:C5:E8:67:F1:A2:ED:35:58:68:86:08:EE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/47CBAD1A648715C5E867F1A2ED3558688608EE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47CBAD1A648715C5E867F1A2ED3558688608EE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4956505-d6b3-43dc-9070-d4dbdb7cf963/0/3130332e3233352e36352e302f32342d3234203d3e20313430343637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.65.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:48:16:12:46:05:de:54:61:19:64:0f:a3:c0:56:f1:9d:2a: 88:fe:71:48:e9:06:07:aa:55:35:fa:ac:8e:28:74:10:9b:61: 8e:3f:7e:c5:a8:05:2a:5d:e1:62:b6:9d:d7:3e:f7:81:cc:58: 01:73:53:be:7d:74:35:23:1e:78:99:46:b6:51:9f:29:2c:4f: c5:63:d2:76:79:03:a9:01:3a:98:a2:f0:65:5c:72:33:fc:a1: cd:a2:4f:85:d3:c6:53:4a:92:0f:03:32:95:c9:ad:d8:52:5b: 9b:4c:3a:ca:45:37:8b:7f:19:15:d9:5a:ee:1e:40:2c:d2:cd: 91:0a:72:96:e1:e9:78:8a:73:27:65:6a:b7:f2:51:9d:14:7d: 60:33:4e:b0:8e:2b:73:92:45:9b:b2:14:d9:41:3b:ac:39:53: a9:e1:54:b8:df:8d:a3:e6:28:cd:19:b5:59:a1:19:a7:47:12: 2d:ee:d0:4e:2d:20:79:d5:60:18:31:f4:f9:cf:ce:bf:7d:a0: 08:b6:41:f4:e7:86:b4:bb:89:74:1a:97:7a:70:cd:8b:38:9a: c0:37:a7:f2:f4:e7:17:4b:a3:2d:6d:69:90:93:4f:87:06:0f: 27:9a:8c:4d:31:d4:62:5b:e4:0b:66:80:65:c1:2d:52:ed:4f: 4a:44:b1:5c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTl0vvUNtOjhi6+6kdYa3yiso/7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4 NjA4RUUxOTAeFw0yNjA0MDYwODU1MDBaFw0yNzA0MDUwOTAwMDBaMDMxMTAvBgNV BAMTKDYyQzg0MEFGNzRDMDhBNTQzRDRBMjdGMTg1RTc4MkEwMjRFODVGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZng6L1/XZuGRn0BN1Os0Zrp1t hirIPIWc6/SfGR35aGz57CFOPdS2U32DNNyU0DGnReYzPDd6NeK9y8LIA2wfTBL+ HVPSe8TDmzpuejiMmNFZk2zQn08YVeSU3zs/KynxUG310s/w4wk7KEmVVvAcc5u5 aPBLvz41ldD3qxUi3S2zzqXX0wN0qaNPy72iKqVtWGM7K+DiJ3Ja4Noc3CpfnHcY KtrQ/H5Ng2yebkFQsA9FO6SbfW+O8txxHIeC7lrwpHNkGegrj8Y5vnRlnTGaSv1a 6Gunx4JzpzdyFGCqUWBm+Ho5yev1etczm4jh/dCy9kaY1Amnt6nWt5zG1rtfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYshAr3TAilQ9SifxheeCoCToXzYwHwYDVR0j BBgwFoAUR8utGmSHFcXoZ/Gi7TVYaIYI7hkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDk1NjUwNS1kNmIzLTQzZGMtOTA3MC1kNGRiZGI3Y2Y5NjMvMC80N0NCQUQxQTY0 ODcxNUM1RTg2N0YxQTJFRDM1NTg2ODg2MDhFRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDdDQkFEMUE2NDg3MTVDNUU4NjdGMUEyRUQzNTU4Njg4NjA4 RUUxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0OTU2NTA1LWQ2YjMtNDNkYy05 MDcwLWQ0ZGJkYjdjZjk2My8wLzMxMzAzMzJlMzIzMzM1MmUzNjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+tBMA0GCSqG SIb3DQEBCwUAA4IBAQCOSBYSRgXeVGEZZA+jwFbxnSqI/nFI6QYHqlU1+qyOKHQQ m2GOP37FqAUqXeFitp3XPveBzFgBc1O+fXQ1Ix54mUa2UZ8pLE/FY9J2eQOpATqY ovBlXHIz/KHNok+F08ZTSpIPAzKVya3YUlubTDrKRTeLfxkV2VruHkAs0s2RCnKW 4el4inMnZWq38lGdFH1gM06wjitzkkWbshTZQTusOVOp4VS4342j5ijNGbVZoRmn RxIt7tBOLSB51WAYMfT5z86/faAItkH054a0u4l0Gpd6cM2LOJrAN6fy9OcXS6Mt bWmQk0+HBg8nmoxNMdRiW+QLZoBlwS1S7U9KRLFc -----END CERTIFICATE-----Generated at Fri Apr 17 17:22:56 2026 by rpki-client