$ rpki-client -vvf repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa File: 3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa (raw, json) Hash identifier: d1fVTMXux6rsxs5u7mFPK2SAxfogfDLQrrOtADDQDa8= Subject key identifier: AC:90:54:AF:A2:BC:C8:DB:49:94:10:55:34:3F:73:32:8C:41:6F:C3 Certificate issuer: /CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Certificate serial: 6C91F2FB746FEF25D21B821AA9E5ED4863DE28EF Authority key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa Signing time: Wed 28 Jan 2026 07:00:00 +0000 ROA not before: Wed 28 Jan 2026 06:55:00 +0000 ROA not after: Wed 27 Jan 2027 07:00:00 +0000 asID: 152373 IP address blocks: 103.176.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:91:f2:fb:74:6f:ef:25:d2:1b:82:1a:a9:e5:ed:48:63:de:28:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Validity Not Before: Jan 28 06:55:00 2026 GMT Not After : Jan 27 07:00:00 2027 GMT Subject: CN=AC9054AFA2BCC8DB49941055343F73328C416FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:c6:a7:f7:d5:06:cc:06:b7:bd:96:fb:21: 7b:98:08:a4:bd:52:e4:92:d1:ef:8f:29:e8:58:03: 53:dc:5e:bc:45:f9:67:1d:da:0d:1b:38:f4:a3:78: 72:c0:c3:40:7c:93:79:69:ea:64:08:dd:fd:68:81: 3c:0e:ca:42:e0:94:0d:2c:de:5d:fa:7f:54:e9:09: bf:d3:01:f5:cc:fb:34:90:fe:d8:ca:10:7e:bd:77: ce:6e:e7:c7:b7:3b:4f:6f:79:06:6e:53:d8:3a:80: 51:5c:6a:91:b8:1a:a9:a2:21:93:40:7b:40:66:f0: 32:88:81:c1:81:ef:30:01:ce:fa:bc:c6:02:2c:41: f7:75:9e:00:89:2a:17:d3:96:c1:99:8a:19:4b:7e: cb:e7:97:27:10:61:3f:99:ee:ae:ae:ff:08:5f:09: e4:a8:3f:a1:f4:57:20:73:65:03:f7:76:a3:ac:42: 4a:5c:cf:83:b4:8d:b9:c2:d0:95:62:5e:24:dd:ac: 15:4e:a6:a5:d9:7b:aa:ad:62:09:b5:ea:e2:8c:e2: c7:24:b3:43:b1:dd:08:64:c0:40:aa:1a:b5:8a:f4: e0:fc:ca:d4:fb:99:6c:68:97:45:fd:1c:f1:9d:63: 35:8c:01:27:61:15:21:6f:bc:9a:cb:ab:5b:40:2d: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:90:54:AF:A2:BC:C8:DB:49:94:10:55:34:3F:73:32:8C:41:6F:C3 X509v3 Authority Key Identifier: keyid:D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/3130332e3137362e3230312e302f32342d3234203d3e20313532333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.201.0/24 Signature Algorithm: sha256WithRSAEncryption af:bb:e9:b3:06:88:07:04:49:72:6e:87:83:94:94:71:f4:f1: de:f8:97:ce:cb:e8:e7:57:fc:86:93:ad:1a:ed:2d:e9:b3:73: d8:5c:f2:be:95:a3:f0:1b:be:82:26:0b:f7:4e:d4:4d:b5:6c: 72:3d:64:b5:0b:ef:7a:12:2e:79:ee:22:00:ad:3e:ce:67:09: ec:8f:d0:55:fd:bb:c1:38:ac:72:84:02:69:b7:70:3f:d7:a1: 00:28:bf:64:28:4f:d0:9e:9c:ff:3b:22:8d:b0:ce:58:30:d4: 66:6a:80:88:db:cb:94:3e:40:ab:4e:dc:64:74:90:94:20:73: 27:71:41:9a:0f:5c:0c:48:41:e8:a2:89:c9:06:d8:47:4c:e4: 51:c8:34:33:09:66:f0:3f:18:57:2f:b8:2a:52:d3:51:75:fc: 29:ae:5c:79:fd:6a:a2:bd:39:cb:5c:be:64:74:e6:df:d5:ae: 07:44:85:51:eb:ee:aa:42:cd:30:c3:29:f5:22:66:38:87:08: dd:ea:b8:9b:de:7c:bc:56:a3:3f:00:80:f9:79:6e:0c:4b:ea: 40:3c:66:af:36:92:d3:05:63:c3:33:b1:28:bc:9d:05:4a:45: 8f:ca:23:38:ff:d3:08:55:a6:0c:28:b8:92:f9:91:48:1d:a8: 86:0d:41:9a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUbJHy+3Rv7yXSG4IaqeXtSGPeKO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVB M0ZDRUI2NjAeFw0yNjAxMjgwNjU1MDBaFw0yNzAxMjcwNzAwMDBaMDMxMTAvBgNV BAMTKEFDOTA1NEFGQTJCQ0M4REI0OTk0MTA1NTM0M0Y3MzMyOEM0MTZGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbtcan99UGzAa3vZb7IXuYCKS9 UuSS0e+PKehYA1PcXrxF+Wcd2g0bOPSjeHLAw0B8k3lp6mQI3f1ogTwOykLglA0s 3l36f1TpCb/TAfXM+zSQ/tjKEH69d85u58e3O09veQZuU9g6gFFcapG4GqmiIZNA e0Bm8DKIgcGB7zABzvq8xgIsQfd1ngCJKhfTlsGZihlLfsvnlycQYT+Z7q6u/whf CeSoP6H0VyBzZQP3dqOsQkpcz4O0jbnC0JViXiTdrBVOpqXZe6qtYgm16uKM4sck s0Ox3QhkwECqGrWK9OD8ytT7mWxol0X9HPGdYzWMASdhFSFvvJrLq1tALcTrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrJBUr6K8yNtJlBBVND9zMoxBb8MwHwYDVR0j BBgwFoAU1sHxPGfNAlRd66qEbrKPbqP862YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMC9ENkMxRjEzQzY3 Q0QwMjU0NURFQkFBODQ2RUIyOEY2RUEzRkNFQjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZDMUYxM0M2N0NEMDI1NDVERUJBQTg0NkVCMjhGNkVBM0ZD RUI2Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYTJlMGRiLWUyOTMtNDFjNS04 NTgzLTM4MDE1NzU4NDIxYy8wLzMxMzAzMzJlMzEzNzM2MmUzMjMwMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzIzMzM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsMkwDQYJ KoZIhvcNAQELBQADggEBAK+76bMGiAcESXJuh4OUlHH08d74l87L6OdX/IaTrRrt Lemzc9hc8r6Vo/AbvoImC/dO1E21bHI9ZLUL73oSLnnuIgCtPs5nCeyP0FX9u8E4 rHKEAmm3cD/XoQAov2QoT9CenP87Io2wzlgw1GZqgIjby5Q+QKtO3GR0kJQgcydx QZoPXAxIQeiiickG2EdM5FHINDMJZvA/GFcvuCpS01F1/CmuXHn9aqK9OctcvmR0 5t/VrgdEhVHr7qpCzTDDKfUiZjiHCN3quJvefLxWoz8AgPl5bgxL6kA8Zq82ktMF Y8MzsSi8nQVKRY/KIzj/0whVpgwouJL5kUgdqIYNQZo= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:55 2026 by rpki-client