$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa File: 3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa (raw, json) Hash identifier: gW58Bt6Gz49TMr81C5jMAuCRmOf4ew6UR7uHG5yi3xs= Subject key identifier: 47:B6:B2:0B:5A:3C:67:3C:0C:98:95:BA:34:12:8A:22:96:34:56:2B Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 314F6494E9CB354FE120251789AB500E56453B39 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa Signing time: Tue 24 Feb 2026 09:38:47 +0000 ROA not before: Tue 24 Feb 2026 09:33:47 +0000 ROA not after: Tue 23 Feb 2027 09:38:47 +0000 asID: 138891 IP address blocks: 103.140.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:4f:64:94:e9:cb:35:4f:e1:20:25:17:89:ab:50:0e:56:45:3b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Feb 24 09:33:47 2026 GMT Not After : Feb 23 09:38:47 2027 GMT Subject: CN=47B6B20B5A3C673C0C9895BA34128A229634562B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6b:ed:f5:6a:0f:fe:1e:f9:34:93:0c:56:df: 63:0e:44:bc:0b:d9:2a:f7:56:06:40:aa:83:d6:5a: 87:0e:a8:9c:14:0b:13:f1:1e:cf:a0:14:94:6d:22: be:1e:a1:73:cc:3f:21:8f:04:f2:cd:1c:5b:96:5e: bb:a2:9f:24:ff:0b:ae:63:ef:ae:80:e7:87:7d:90: 19:49:3b:f7:60:64:f7:26:60:c0:71:b1:ac:ac:fc: 52:9b:63:44:75:b0:25:9e:91:94:e1:69:97:5a:9c: 76:80:f8:d8:76:35:7a:be:70:e1:4e:3d:a6:4e:09: 8e:f6:4a:a0:0c:61:cb:50:e7:53:50:0b:ce:1e:85: 1d:85:dc:5c:b6:5f:89:9a:28:87:0e:63:d2:64:3e: ad:9a:3c:2d:98:3f:06:21:c5:39:06:69:70:6f:3d: a1:5c:6a:37:8c:fb:ad:17:66:f2:f9:4e:de:9b:4c: 70:d6:bf:49:38:11:31:8f:1a:ba:7e:db:35:8c:92: dc:72:b5:72:66:29:a8:ea:04:88:7b:68:45:db:67: a7:24:93:97:2c:6b:9e:f3:c7:f5:3c:33:75:b2:74: 17:cc:33:4b:8e:ca:00:59:81:26:8d:a5:25:a1:f9: 61:1b:d5:f2:f7:c7:13:c0:e4:8a:1b:ae:ad:5d:2e: 23:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B6:B2:0B:5A:3C:67:3C:0C:98:95:BA:34:12:8A:22:96:34:56:2B X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/3130332e3134302e37342e302f32342d3234203d3e20313338383931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.74.0/24 Signature Algorithm: sha256WithRSAEncryption b8:bb:ae:32:ca:64:2c:35:ae:78:d2:c9:50:97:69:40:cf:a7: 98:5b:9e:ed:02:32:68:74:7f:73:fe:59:8f:43:98:b2:a1:e8: 30:03:d9:9b:08:9a:a6:84:e7:85:f9:8d:bf:4f:27:fd:26:2f: d3:e8:d8:a0:e3:e3:60:d5:14:50:b7:0b:d1:c6:f2:55:54:d9: 4f:e0:da:e5:a6:d2:e4:7f:ff:0c:ab:af:c0:6d:4f:16:7e:27: 0f:cf:74:c0:c8:23:b5:ff:74:bd:0c:04:a3:21:7e:a7:2c:c8: ad:21:dc:d2:b1:43:74:5d:8d:4b:03:47:30:29:a4:5d:3c:8b: a9:9d:4a:3e:1b:ab:e9:3a:93:66:a0:09:83:28:0e:f5:d2:4d: 5a:2f:62:7e:3b:5d:e2:01:6b:f5:ae:75:e3:0a:17:2c:0e:97: 47:c0:73:be:b5:dc:d1:23:9d:5e:a6:af:f4:0d:3d:9a:cd:59: bb:c7:9a:8f:d6:6d:12:59:50:24:9a:7e:60:60:19:f5:fe:c1: 31:63:2c:c7:eb:33:66:d1:0d:db:b4:cc:3d:38:50:80:b2:80: 17:4c:87:c0:9f:2e:aa:cb:06:85:e3:32:c7:40:4b:eb:4d:b1: 76:bd:ca:ba:4a:06:27:e0:83:e6:5c:e9:7a:8e:2a:17:07:9f: fd:d4:80:d7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMU9klOnLNU/hICUXiatQDlZFOzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNjAyMjQwOTMzNDdaFw0yNzAyMjMwOTM4NDdaMDMxMTAvBgNV BAMTKDQ3QjZCMjBCNUEzQzY3M0MwQzk4OTVCQTM0MTI4QTIyOTYzNDU2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwa+31ag/+Hvk0kwxW32MORLwL 2Sr3VgZAqoPWWocOqJwUCxPxHs+gFJRtIr4eoXPMPyGPBPLNHFuWXruinyT/C65j 766A54d9kBlJO/dgZPcmYMBxsays/FKbY0R1sCWekZThaZdanHaA+Nh2NXq+cOFO PaZOCY72SqAMYctQ51NQC84ehR2F3Fy2X4maKIcOY9JkPq2aPC2YPwYhxTkGaXBv PaFcajeM+60XZvL5Tt6bTHDWv0k4ETGPGrp+2zWMktxytXJmKajqBIh7aEXbZ6ck k5csa57zx/U8M3WydBfMM0uOygBZgSaNpSWh+WEb1fL3xxPA5Iobrq1dLiOnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUR7ayC1o8ZzwMmJW6NBKKIpY0ViswHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzODdlODVkLWIxODUtNDMzNC04 MDFiLTQ5YzhjOGI5MTg0NC8wLzMxMzAzMzJlMzEzNDMwMmUzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4xKMA0GCSqG SIb3DQEBCwUAA4IBAQC4u64yymQsNa540slQl2lAz6eYW57tAjJodH9z/lmPQ5iy oegwA9mbCJqmhOeF+Y2/Tyf9Ji/T6Nig4+Ng1RRQtwvRxvJVVNlP4NrlptLkf/8M q6/AbU8WficPz3TAyCO1/3S9DASjIX6nLMitIdzSsUN0XY1LA0cwKaRdPIupnUo+ G6vpOpNmoAmDKA710k1aL2J+O13iAWv1rnXjChcsDpdHwHO+tdzRI51epq/0DT2a zVm7x5qP1m0SWVAkmn5gYBn1/sExYyzH6zNm0Q3btMw9OFCAsoAXTIfAny6qywaF 4zLHQEvrTbF2vcq6SgYn4IPmXOl6jioXB5/91IDX -----END CERTIFICATE-----Generated at Mon Mar 2 19:03:45 2026 by rpki-client