$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa File: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (raw, json) Hash identifier: GtFfESPappRg+X8S0LovuRWAeH8VG2BvnwblqFGFSN0= Subject key identifier: 7E:05:9D:BA:65:5B:44:7F:F7:49:D4:88:9E:0A:20:06:BE:D8:7B:7A Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 5CD72168E8B95F2B21112713EF501D5E6EF2A48B Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa Signing time: Sun 29 Mar 2026 03:00:01 +0000 ROA not before: Sun 29 Mar 2026 02:55:01 +0000 ROA not after: Sun 28 Mar 2027 03:00:01 +0000 asID: 149721 IP address blocks: 103.186.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d7:21:68:e8:b9:5f:2b:21:11:27:13:ef:50:1d:5e:6e:f2:a4:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Mar 29 02:55:01 2026 GMT Not After : Mar 28 03:00:01 2027 GMT Subject: CN=7E059DBA655B447FF749D4889E0A2006BED87B7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:ad:61:db:4c:bb:8a:d9:e2:e3:28:49:6b: dd:1f:0d:15:c2:e1:90:ea:db:4f:84:06:31:b4:50: e9:a0:17:97:ee:de:f3:ac:f9:e8:85:92:7b:2b:7a: d4:ec:5d:47:ee:dd:0f:19:04:7f:a0:9a:38:a4:1b: e4:53:fe:70:8b:7a:5c:e8:f2:ff:1d:81:03:74:13: db:c6:2c:d9:f5:b5:57:74:f5:c8:5a:c8:bb:59:5b: 50:cd:2e:e8:bf:f6:4b:d7:70:b7:0f:20:cc:fb:45: 2d:65:b1:0c:3c:36:69:2e:a7:46:45:80:da:0a:25: 4e:21:21:b1:9e:5e:b4:13:b1:61:80:e0:d1:fe:83: 72:fe:b9:60:e4:1a:8d:9d:04:e5:2d:8f:4a:c8:c7: ff:4f:88:fb:e3:ca:ed:6f:e1:d7:02:3d:0e:01:95: 1e:8f:a4:23:a6:3c:26:ed:38:3b:51:3c:18:19:b6: ab:26:bb:11:15:75:e1:4b:c2:99:26:44:42:07:78: 80:41:2e:71:d7:07:db:d1:4b:83:d9:39:33:21:89: 06:6d:67:3f:d2:04:e5:00:41:f5:98:a6:ed:44:a6: 88:13:cf:a5:50:ca:a4:44:65:b2:6e:63:28:28:08: ed:c6:16:88:9c:42:55:3f:43:7f:43:a5:fd:8a:8e: 9f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:9D:BA:65:5B:44:7F:F7:49:D4:88:9E:0A:20:06:BE:D8:7B:7A X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.200.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:26:63:fb:d1:fa:4f:f7:5f:d0:13:42:13:bb:5b:c5:a1:c0: cd:f1:64:3d:ad:17:fd:c5:f2:bc:8c:85:91:b3:50:21:d8:9c: 55:e2:d7:a0:2c:7a:81:d1:c4:59:c6:fd:3f:47:fb:38:4f:98: 41:de:a5:93:bd:15:1d:e5:d0:dd:b9:5f:0a:0e:c1:a5:2a:ab: 57:ac:36:eb:d8:29:88:d4:da:6e:b4:61:57:6d:3d:df:3d:df: d2:bc:d6:40:e0:fd:34:74:f7:4c:49:98:67:a7:37:c7:72:86: 87:55:9f:96:fd:da:39:fb:fc:4a:e9:0b:ab:93:40:e7:22:1a: 7e:d0:05:16:e1:07:4f:73:9b:fe:c5:6c:f5:3f:99:b2:2e:ba: 79:bf:c2:78:99:b0:ac:68:71:f9:3b:b3:8e:a5:be:e7:7e:67: 54:7b:3b:4a:ac:31:05:29:84:4e:38:5c:68:05:f7:79:8e:13: 4d:f9:73:7c:bf:4d:80:b9:a6:f4:df:7b:04:fd:82:a2:80:3a: ab:a6:11:91:b5:ae:5d:27:69:7f:c2:63:fe:b1:af:6e:a5:bd: a5:f0:ff:c9:9c:b7:c6:3b:53:f8:33:6c:a0:ed:ba:33:cb:52: fa:47:3d:52:e4:c9:56:1e:ac:2a:f9:ab:fd:9b:95:78:d9:8e: fd:de:d5:d5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXNchaOi5XyshEScT71AdXm7ypIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNjAzMjkwMjU1MDFaFw0yNzAzMjgwMzAwMDFaMDMxMTAvBgNV BAMTKDdFMDU5REJBNjU1QjQ0N0ZGNzQ5RDQ4ODlFMEEyMDA2QkVEODdCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7961h20y7itni4yhJa90fDRXC 4ZDq20+EBjG0UOmgF5fu3vOs+eiFknsretTsXUfu3Q8ZBH+gmjikG+RT/nCLelzo 8v8dgQN0E9vGLNn1tVd09chayLtZW1DNLui/9kvXcLcPIMz7RS1lsQw8Nmkup0ZF gNoKJU4hIbGeXrQTsWGA4NH+g3L+uWDkGo2dBOUtj0rIx/9PiPvjyu1v4dcCPQ4B lR6PpCOmPCbtODtRPBgZtqsmuxEVdeFLwpkmREIHeIBBLnHXB9vRS4PZOTMhiQZt Zz/SBOUAQfWYpu1EpogTz6VQyqREZbJuYygoCO3GFoicQlU/Q39Dpf2Kjp//AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUfgWdumVbRH/3SdSIngogBr7Ye3owHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NTc3YzNjLTY2Y2QtNDBhNC1h ZmM1LTZjNmY4YjY2NGE1MS8wLzMxMzAzMzJlMzEzODM2MmUzMjMwMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzNzMyMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnusgwDQYJ KoZIhvcNAQELBQADggEBABsmY/vR+k/3X9ATQhO7W8WhwM3xZD2tF/3F8ryMhZGz UCHYnFXi16AseoHRxFnG/T9H+zhPmEHepZO9FR3l0N25XwoOwaUqq1esNuvYKYjU 2m60YVdtPd8939K81kDg/TR090xJmGenN8dyhodVn5b92jn7/ErpC6uTQOciGn7Q BRbhB09zm/7FbPU/mbIuunm/wniZsKxocfk7s46lvud+Z1R7O0qsMQUphE44XGgF 93mOE035c3y/TYC5pvTfewT9gqKAOqumEZG1rl0naX/CY/6xr26lvaXw/8mct8Y7 U/gzbKDtujPLUvpHPVLkyVYerCr5q/2blXjZjv3e1dU= -----END CERTIFICATE-----Generated at Sat Apr 18 01:09:55 2026 by rpki-client