$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa File: 3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa (raw, json) Hash identifier: qDp/9A0Y/ulunffQZxElvfIaE/NdFYhZkLbByr51VdA= Subject key identifier: E8:AB:9F:6C:89:4D:32:16:4F:73:6C:6F:29:E6:A1:43:9E:E3:EB:62 Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 516C1E717DF060EB99DBFAA1D315F1CF6DE5C90A Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa Signing time: Sat 18 Apr 2026 13:00:01 +0000 ROA not before: Sat 18 Apr 2026 12:55:01 +0000 ROA not after: Sat 17 Apr 2027 13:00:01 +0000 asID: 136820 IP address blocks: 103.98.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6c:1e:71:7d:f0:60:eb:99:db:fa:a1:d3:15:f1:cf:6d:e5:c9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Apr 18 12:55:01 2026 GMT Not After : Apr 17 13:00:01 2027 GMT Subject: CN=E8AB9F6C894D32164F736C6F29E6A1439EE3EB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:27:93:47:29:6e:6f:5e:92:0d:e0:6b:99:6d: b3:90:00:e5:46:4d:1c:1b:9f:a9:b3:0a:05:3f:a8: f6:e0:63:96:e6:50:20:27:f5:2b:84:81:03:f6:9a: 92:a8:f9:6b:2c:59:b8:71:51:9f:6b:19:cd:74:29: 11:56:2f:01:68:ee:fa:47:9d:ad:ba:1c:51:34:b1: cd:c9:71:3d:4a:68:7d:49:35:84:1f:1c:2b:9a:5d: f4:16:09:23:ed:25:a7:bd:07:b5:f7:e2:fb:74:0b: 8c:6c:48:3d:88:8e:b4:d4:76:6d:0d:9c:1d:a7:5c: 6b:76:82:a2:54:9a:45:d8:a3:ca:4e:50:48:a8:67: f7:08:41:5e:4c:02:3b:e9:24:8b:ea:dd:55:79:24: 7c:a2:e5:07:99:72:80:8a:5c:03:9d:5f:d7:d2:6e: dd:a1:0b:0f:2a:37:b5:7a:99:57:22:ed:66:6d:5b: 51:76:dd:49:9b:f9:6c:85:d8:78:f6:f6:aa:28:b6: 2d:a0:68:d1:79:a3:a2:b9:5d:77:4c:a6:d4:a8:f1: 94:94:75:f4:8a:8f:23:94:52:92:7e:e2:d3:40:5f: 56:0c:44:ff:9e:c3:64:7d:7b:fe:0d:c8:74:1f:ed: c7:20:8c:b1:c3:aa:ff:f2:e5:7d:e2:08:1f:f2:62: 8e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AB:9F:6C:89:4D:32:16:4F:73:6C:6F:29:E6:A1:43:9E:E3:EB:62 X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131362e302f32342d3234203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.116.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:21:08:e8:fb:05:0b:79:a7:0d:63:50:58:3c:75:38:29:a3: 02:39:b7:06:5e:4e:14:19:b4:83:7d:50:a6:74:62:d1:07:71: a8:20:14:55:9f:39:a2:47:9d:75:a8:0c:fa:95:04:22:cf:5a: 31:bb:ca:3c:08:2d:5c:79:63:9f:3e:3b:00:98:47:ae:b5:8e: 71:35:45:2a:35:bf:70:f2:51:71:29:f9:e2:a9:65:18:d3:9f: 5c:de:51:c1:e0:67:da:21:3c:87:88:23:1c:2f:db:2c:3d:e2: 61:c8:38:c4:77:0d:30:e2:86:e8:24:36:cb:94:bc:0b:93:b9: 3a:00:5e:05:e8:a1:23:31:73:85:3f:d6:63:8e:d2:09:d0:63: 5b:89:8a:ee:38:36:a3:b4:c9:86:0b:78:ac:97:f6:3d:e9:46: af:50:b2:08:37:f1:24:a1:13:55:25:c4:29:12:8f:af:e5:54: f4:84:37:00:b8:f7:a8:a6:a8:3a:dd:dd:1f:44:1c:83:e8:30: 16:75:8d:16:9b:a4:e0:ce:6c:2e:29:0a:62:5a:e2:e0:3c:9d: d0:4d:ad:cf:f6:6f:ff:c1:bf:d6:33:dc:ab:88:11:6d:8e:b4: 5e:86:9d:eb:00:63:44:e9:32:ac:6f:7a:71:b3:c0:63:8c:02: 08:47:58:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUWwecX3wYOuZ2/qh0xXxz23lyQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNjA0MTgxMjU1MDFaFw0yNzA0MTcxMzAwMDFaMDMxMTAvBgNV BAMTKEU4QUI5RjZDODk0RDMyMTY0RjczNkM2RjI5RTZBMTQzOUVFM0VCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJ5NHKW5vXpIN4GuZbbOQAOVG TRwbn6mzCgU/qPbgY5bmUCAn9SuEgQP2mpKo+WssWbhxUZ9rGc10KRFWLwFo7vpH na26HFE0sc3JcT1KaH1JNYQfHCuaXfQWCSPtJae9B7X34vt0C4xsSD2IjrTUdm0N nB2nXGt2gqJUmkXYo8pOUEioZ/cIQV5MAjvpJIvq3VV5JHyi5QeZcoCKXAOdX9fS bt2hCw8qN7V6mVci7WZtW1F23Umb+WyF2Hj29qooti2gaNF5o6K5XXdMptSo8ZSU dfSKjyOUUpJ+4tNAX1YMRP+ew2R9e/4NyHQf7ccgjLHDqv/y5X3iCB/yYo4BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6KufbIlNMhZPc2xvKeahQ57j62IwHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZDUzOTQ4LWRkZjMtNDQ5YS1i ZjJiLWNmM2Y3YWUxNzZkMy8wLzMxMzAzMzJlMzkzODJlMzEzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2J0MA0GCSqG SIb3DQEBCwUAA4IBAQB9IQjo+wULeacNY1BYPHU4KaMCObcGXk4UGbSDfVCmdGLR B3GoIBRVnzmiR511qAz6lQQiz1oxu8o8CC1ceWOfPjsAmEeutY5xNUUqNb9w8lFx KfniqWUY059c3lHB4GfaITyHiCMcL9ssPeJhyDjEdw0w4oboJDbLlLwLk7k6AF4F 6KEjMXOFP9ZjjtIJ0GNbiYruODajtMmGC3isl/Y96UavULIIN/EkoRNVJcQpEo+v 5VT0hDcAuPeopqg63d0fRByD6DAWdY0Wm6TgzmwuKQpiWuLgPJ3QTa3P9m//wb/W M9yriBFtjrRehp3rAGNE6TKsb3pxs8BjjAIIR1hV -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:49 2026 by rpki-client