$ rpki-client -vvf repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa File: 3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa (raw, json) Hash identifier: wlFQ0Mhp/1XnwwUvAj+JZIZYp8c/czLKraMQXNmD1R0= Subject key identifier: 3F:20:FF:FA:4B:1A:6E:35:38:02:75:BA:9C:07:04:AE:90:EB:C7:14 Certificate issuer: /CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Certificate serial: 76FFBB3AF69C67981449E8C1F9D4CF2EAF1FF8BE Authority key identifier: 96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa Signing time: Wed 11 Feb 2026 09:00:01 +0000 ROA not before: Wed 11 Feb 2026 08:55:01 +0000 ROA not after: Wed 10 Feb 2027 09:00:01 +0000 asID: 138854 IP address blocks: 103.138.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ff:bb:3a:f6:9c:67:98:14:49:e8:c1:f9:d4:cf:2e:af:1f:f8:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96C41CFE277F686E3476A533FDAE5A0F411173D9 Validity Not Before: Feb 11 08:55:01 2026 GMT Not After : Feb 10 09:00:01 2027 GMT Subject: CN=3F20FFFA4B1A6E35380275BA9C0704AE90EBC714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:f8:ed:aa:0f:35:4c:34:84:e7:0c:65:63: eb:a5:60:e1:69:bf:49:49:f7:d2:21:6f:f0:04:5f: b3:af:94:35:fc:c4:a6:13:d7:a3:0c:64:5c:42:74: f1:47:b9:d6:5c:a9:50:f7:52:d4:3f:52:f2:36:32: 97:74:36:6c:ae:82:58:c1:17:05:ab:09:cb:48:7b: 6f:73:54:75:60:d8:f3:92:90:77:54:df:28:16:01: 83:72:41:53:01:41:b8:1b:73:4d:17:14:35:5a:09: dd:5a:82:4b:c8:57:22:47:ff:0e:a7:58:52:a4:32: 7b:14:b1:3f:55:b6:36:86:31:d9:b0:8e:61:3f:74: 51:ce:1f:25:0b:20:6a:25:91:32:bc:d0:60:b8:a5: 3d:62:e4:26:cd:59:3a:c7:39:ff:89:94:c3:9f:d8: 7a:6a:9b:b8:25:cf:09:1f:0f:ae:a7:a4:29:ec:2d: b4:98:38:a1:ed:7c:38:7e:68:e6:88:3d:0b:f2:3b: f4:8f:a7:6b:ad:b3:4a:16:c6:37:2f:b1:84:de:32: 71:79:7e:91:e7:7a:f4:67:3b:7b:cd:92:d9:1f:ef: af:cc:f9:4b:a9:36:47:d6:ea:4d:ec:ad:85:b5:58: f1:36:51:76:bb:08:8a:f1:6d:fe:c1:db:9a:22:c9: 16:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:20:FF:FA:4B:1A:6E:35:38:02:75:BA:9C:07:04:AE:90:EB:C7:14 X509v3 Authority Key Identifier: keyid:96:C4:1C:FE:27:7F:68:6E:34:76:A5:33:FD:AE:5A:0F:41:11:73:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/96C41CFE277F686E3476A533FDAE5A0F411173D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/96C41CFE277F686E3476A533FDAE5A0F411173D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2502205-5c54-47db-ae6f-9d48e183241c/0/3130332e3133382e3231382e302f32332d3234203d3e20313338383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.218.0/23 Signature Algorithm: sha256WithRSAEncryption a0:4e:76:96:18:b1:b1:bd:0b:a9:3d:70:88:7b:ea:d9:ae:15: 6a:00:19:d0:80:36:0d:cf:e2:15:4c:b7:fa:90:db:a3:f2:bd: 81:77:4c:f4:32:9d:a5:88:1b:1a:94:c1:3e:29:db:ec:40:fd: 12:71:18:b0:68:df:87:f2:b9:95:8d:a6:db:19:7f:da:a0:e1: 3c:d9:d7:56:b3:f8:8a:13:72:51:6c:02:c9:6e:b4:7b:4a:49: db:48:ed:24:a8:b1:e4:98:a3:e0:22:be:ee:8e:23:46:83:33: 86:99:c1:9b:94:c5:d1:e5:9b:78:4d:e5:49:9b:87:92:2e:91: 78:0f:8a:6e:a8:de:24:d9:48:d2:b3:32:84:c0:c9:94:58:ab: e7:b7:4e:8e:e6:c4:a0:a0:6f:37:f3:e2:3c:7d:c1:2d:7f:5a: 7e:eb:3b:ef:33:98:27:db:f4:48:5c:19:97:df:b5:a4:f9:8c: 11:78:41:28:84:55:65:9f:2e:0d:88:c9:5d:91:b3:fa:9f:bc: 72:20:69:d8:4a:3b:b7:65:02:3c:a6:59:65:47:43:1a:48:5f: d9:c5:90:97:a3:eb:29:d1:14:97:84:e5:ad:c1:41:0b:9f:ac: 33:f0:bb:f2:f2:5d:13:aa:7c:4f:33:4e:42:ce:2b:44:6a:56: 8a:33:fc:64 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdv+7OvacZ5gUSejB+dTPLq8f+L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0 MTExNzNEOTAeFw0yNjAyMTEwODU1MDFaFw0yNzAyMTAwOTAwMDFaMDMxMTAvBgNV BAMTKDNGMjBGRkZBNEIxQTZFMzUzODAyNzVCQTlDMDcwNEFFOTBFQkM3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrfjtqg81TDSE5wxlY+ulYOFp v0lJ99Ihb/AEX7OvlDX8xKYT16MMZFxCdPFHudZcqVD3UtQ/UvI2Mpd0NmyugljB FwWrCctIe29zVHVg2POSkHdU3ygWAYNyQVMBQbgbc00XFDVaCd1agkvIVyJH/w6n WFKkMnsUsT9VtjaGMdmwjmE/dFHOHyULIGolkTK80GC4pT1i5CbNWTrHOf+JlMOf 2Hpqm7glzwkfD66npCnsLbSYOKHtfDh+aOaIPQvyO/SPp2uts0oWxjcvsYTeMnF5 fpHnevRnO3vNktkf76/M+UupNkfW6k3srYW1WPE2UXa7CIrxbf7B25oiyRYJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPyD/+ksabjU4AnW6nAcErpDrxxQwHwYDVR0j BBgwFoAUlsQc/id/aG40dqUz/a5aD0ERc9kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjUwMjIwNS01YzU0LTQ3ZGItYWU2Zi05ZDQ4ZTE4MzI0MWMvMC85NkM0MUNGRTI3 N0Y2ODZFMzQ3NkE1MzNGREFFNUEwRjQxMTE3M0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTZDNDFDRkUyNzdGNjg2RTM0NzZBNTMzRkRBRTVBMEY0MTEx NzNEOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyNTAyMjA1LTVjNTQtNDdkYi1h ZTZmLTlkNDhlMTgzMjQxYy8wLzMxMzAzMzJlMzEzMzM4MmUzMjMxMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnitowDQYJ KoZIhvcNAQELBQADggEBAKBOdpYYsbG9C6k9cIh76tmuFWoAGdCANg3P4hVMt/qQ 26PyvYF3TPQynaWIGxqUwT4p2+xA/RJxGLBo34fyuZWNptsZf9qg4TzZ11az+IoT clFsAslutHtKSdtI7SSoseSYo+Aivu6OI0aDM4aZwZuUxdHlm3hN5Umbh5IukXgP im6o3iTZSNKzMoTAyZRYq+e3To7mxKCgbzfz4jx9wS1/Wn7rO+8zmCfb9EhcGZff taT5jBF4QSiEVWWfLg2IyV2Rs/qfvHIgadhKO7dlAjymWWVHQxpIX9nFkJej6ynR FJeE5a3BQQufrDPwu/LyXROqfE8zTkLOK0RqVooz/GQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:17:42 2026 by rpki-client