$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa File: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (raw, json) Hash identifier: IgizShDVF3XIdFoYQysMBd+RMZoTyStrHHHFv+jVVho= Subject key identifier: 60:0E:65:E1:B4:64:9C:38:86:B2:A1:C8:46:2C:D7:38:9A:B0:EE:19 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 562035C07502CC4ACFF7D72FF3D76A96EF7680A7 Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa Signing time: Fri 20 Feb 2026 03:00:00 +0000 ROA not before: Fri 20 Feb 2026 02:55:00 +0000 ROA not after: Fri 19 Feb 2027 03:00:00 +0000 asID: 38320 IP address blocks: 103.158.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:20:35:c0:75:02:cc:4a:cf:f7:d7:2f:f3:d7:6a:96:ef:76:80:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Feb 20 02:55:00 2026 GMT Not After : Feb 19 03:00:00 2027 GMT Subject: CN=600E65E1B4649C3886B2A1C8462CD7389AB0EE19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:c2:61:53:bf:c4:59:af:f6:7d:88:a9:b9: e1:8f:11:c9:58:80:b5:37:d9:e7:76:7a:80:18:3c: 69:37:35:82:a6:e4:0f:4a:97:42:3e:5c:71:e8:60: 98:20:df:e1:23:7d:2d:4d:0a:1c:42:64:d8:bd:1f: fb:d8:ae:bb:49:be:d3:28:a7:7c:40:84:b7:4a:a4: b1:7c:4b:ff:11:9f:f4:d5:24:86:e2:2d:6e:e1:fa: d2:1c:c9:45:f2:a1:70:d1:9f:a2:e6:54:7e:b3:28: 33:0c:03:c2:29:a7:80:62:52:e8:64:82:b0:43:fd: c7:ae:fe:04:40:2b:09:1d:ab:76:7f:16:07:71:65: 5a:6f:0a:3e:4b:ea:35:f4:94:09:09:ca:43:30:33: 1f:5d:1d:3c:e3:45:24:22:4e:6d:29:cb:d4:d2:41: 51:8e:fd:21:86:4e:55:d1:84:4c:4d:91:d1:6a:e1: 99:57:39:76:43:56:64:33:83:04:f2:ac:cf:d4:e7: e2:42:54:15:ca:ce:d9:0a:25:62:d7:f0:db:32:86: a8:1b:02:c8:6b:ab:37:34:ad:49:7a:29:85:0d:f9: 45:4d:0f:da:c5:55:9e:0f:39:8e:17:c6:a5:0b:a3: d2:ef:b5:71:d9:7b:43:7f:61:28:f0:49:0b:8d:96: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:0E:65:E1:B4:64:9C:38:86:B2:A1:C8:46:2C:D7:38:9A:B0:EE:19 X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.126.0/23 Signature Algorithm: sha256WithRSAEncryption 71:af:e2:05:a7:bb:f5:68:52:3a:26:1e:db:74:5b:7a:95:39: 89:06:e5:89:4d:ef:4d:36:95:cf:50:3d:60:9c:b7:91:3d:88: 11:1c:4b:f2:2c:22:32:8f:07:8f:8a:c9:ef:77:f2:d0:21:91: 44:bc:90:97:6d:0c:a6:9e:c2:23:ba:c7:8f:b7:e6:d3:57:84: 71:1c:ea:df:4e:bf:26:79:17:be:29:1f:94:d8:d4:16:d6:7c: 99:8a:6e:18:06:2f:f5:66:9c:5e:8c:55:06:8f:6e:22:de:39: 1f:fc:6a:5e:95:81:db:aa:22:c4:4e:91:38:cd:1d:e7:56:99: f6:c1:fc:af:87:42:14:d8:59:9d:9e:5b:52:d8:1d:54:a6:9a: 93:84:c9:66:5e:a0:d3:45:12:67:77:61:a9:00:7b:57:d8:f1: 1e:bd:e5:9e:7d:97:15:ce:a9:e2:30:aa:16:4a:ee:2b:a8:af: d5:ed:fa:d1:17:ca:a4:96:2e:93:cb:99:7f:77:bb:f6:39:d4: d5:1c:0e:48:8d:38:03:f3:38:93:96:b5:fb:e7:84:49:bb:d3: 02:0a:80:e6:fe:fb:7a:ea:95:5d:7c:a8:bc:ec:59:85:e0:84: 68:41:7e:f0:88:60:97:f3:74:74:0d:61:fd:d8:7a:68:5d:a2: 8a:80:46:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUViA1wHUCzErP99cv89dqlu92gKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNjAyMjAwMjU1MDBaFw0yNzAyMTkwMzAwMDBaMDMxMTAvBgNV BAMTKDYwMEU2NUUxQjQ2NDlDMzg4NkIyQTFDODQ2MkNENzM4OUFCMEVFMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoMJhU7/EWa/2fYipueGPEclY gLU32ed2eoAYPGk3NYKm5A9Kl0I+XHHoYJgg3+EjfS1NChxCZNi9H/vYrrtJvtMo p3xAhLdKpLF8S/8Rn/TVJIbiLW7h+tIcyUXyoXDRn6LmVH6zKDMMA8Ipp4BiUuhk grBD/ceu/gRAKwkdq3Z/FgdxZVpvCj5L6jX0lAkJykMwMx9dHTzjRSQiTm0py9TS QVGO/SGGTlXRhExNkdFq4ZlXOXZDVmQzgwTyrM/U5+JCVBXKztkKJWLX8Nsyhqgb Ashrqzc0rUl6KYUN+UVND9rFVZ4POY4XxqULo9LvtXHZe0N/YSjwSQuNlmlTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYA5l4bRknDiGsqHIRizXOJqw7hkwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0NGRmYjVhLTZlMjQtNGE0ZC04 OTY5LWViM2NiZTM0ZTQ3ZS8wLzMxMzAzMzJlMzEzNTM4MmUzMTMyMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ55+MA0GCSqG SIb3DQEBCwUAA4IBAQBxr+IFp7v1aFI6Jh7bdFt6lTmJBuWJTe9NNpXPUD1gnLeR PYgRHEvyLCIyjwePisnvd/LQIZFEvJCXbQymnsIjusePt+bTV4RxHOrfTr8meRe+ KR+U2NQW1nyZim4YBi/1ZpxejFUGj24i3jkf/GpelYHbqiLETpE4zR3nVpn2wfyv h0IU2FmdnltS2B1UppqThMlmXqDTRRJnd2GpAHtX2PEeveWefZcVzqniMKoWSu4r qK/V7frRF8qkli6Ty5l/d7v2OdTVHA5IjTgD8ziTlrX754RJu9MCCoDm/vt66pVd fKi87FmF4IRoQX7wiGCX83R0DWH92HpoXaKKgEZD -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:57 2026 by rpki-client