$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa File: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (raw, json) Hash identifier: 8Ege+nP0UOE+7Zo7IFwWTyzPW1ylNStb0XlDl5DtQnM= Subject key identifier: E0:C6:BC:72:57:60:81:AE:82:F2:03:EF:04:FD:4B:6B:51:21:50:DE Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 576AE42C12A57392EA242D2A07E8240BF2B47B68 Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa Signing time: Thu 05 Feb 2026 07:00:01 +0000 ROA not before: Thu 05 Feb 2026 06:55:01 +0000 ROA not after: Thu 04 Feb 2027 07:00:01 +0000 asID: 141624 IP address blocks: 103.160.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:6a:e4:2c:12:a5:73:92:ea:24:2d:2a:07:e8:24:0b:f2:b4:7b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Feb 5 06:55:01 2026 GMT Not After : Feb 4 07:00:01 2027 GMT Subject: CN=E0C6BC72576081AE82F203EF04FD4B6B512150DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:a7:4a:a3:fd:62:0c:4e:5d:65:9a:55:64: 72:8c:ee:9c:53:2e:e8:ea:d3:c6:0b:c4:a0:59:72: ed:79:c2:e6:01:1a:b9:35:a9:f0:2a:df:61:ee:55: 38:e5:d4:22:f5:66:9a:b0:a2:9b:20:ba:3b:e0:a8: 41:ff:e9:bf:e6:9a:79:72:65:59:e7:fd:8e:d5:4d: a7:36:d0:0e:4d:e3:83:02:ce:99:01:2f:27:4d:fa: b7:af:87:b6:46:09:bf:01:7c:37:55:d0:81:d9:b1: 6e:e3:13:3d:78:76:3d:c2:7f:15:07:89:06:df:e3: f0:20:0a:01:55:1f:33:8b:f5:6e:c4:4d:79:3d:11: 84:27:cb:4c:af:c4:47:ab:46:28:b9:e8:d6:b6:87: e9:07:b6:0b:b5:ce:92:ae:8b:d7:81:d4:c3:17:70: 8d:0b:5a:8f:97:83:50:a7:4e:61:a9:d6:94:09:c3: 86:8c:ea:f9:83:56:81:e9:38:ff:b9:51:2f:a2:90: a6:d5:e1:de:03:d8:a4:72:fc:2f:22:cf:59:33:c4: 0a:0f:cd:97:56:9e:7d:41:02:38:37:ad:da:bc:96: 54:02:ac:62:d9:49:6d:ec:f6:10:0f:48:40:e6:04: f1:d1:54:1c:63:8a:a0:3c:00:ba:07:bf:25:3c:3f: 59:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C6:BC:72:57:60:81:AE:82:F2:03:EF:04:FD:4B:6B:51:21:50:DE X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.18.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:32:8d:a1:cb:ef:ca:9d:e5:16:b0:63:86:aa:97:f6:af:b1: 5e:5d:8d:96:cc:85:dd:26:0a:e3:7a:e4:fd:da:6c:23:25:f2: a3:27:5f:f7:d1:a1:69:21:b7:cf:c6:89:c3:ba:2d:d7:1c:c6: e8:34:50:7e:38:23:73:cc:d8:c1:03:7e:88:55:b4:e7:9b:64: 0d:f2:66:76:ac:fa:fb:99:78:be:ff:35:3e:42:57:42:57:86: 1f:db:43:08:5b:e1:a1:73:42:0f:cf:2c:c2:8d:fc:08:af:e7: f7:49:24:9e:6f:82:2c:da:05:d2:d1:cb:c7:d8:36:76:00:a8: a9:a2:67:1f:e5:96:4d:e7:29:d5:72:2c:ad:52:1f:a4:51:a2: e0:54:37:cd:b1:e1:e1:cd:93:dc:ed:44:27:0b:91:28:2d:3a: 5a:a3:66:4e:24:9e:79:5f:7d:1d:69:b5:f6:6e:b7:8e:de:1d: ce:02:78:a0:13:29:e7:d5:e7:8a:19:e6:0a:80:5b:21:f8:ff: 3a:2b:09:47:d1:98:68:4f:d6:24:3b:3a:8d:a5:d7:b8:f2:a3: 18:8c:01:4b:9a:b8:f4:3c:e1:ca:66:ca:03:b4:03:d4:34:4e: 75:77:dc:de:0e:f5:e8:c4:05:ba:5d:5b:7e:4a:8c:9e:45:31: 58:f7:db:9d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUV2rkLBKlc5LqJC0qB+gkC/K0e2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNjAyMDUwNjU1MDFaFw0yNzAyMDQwNzAwMDFaMDMxMTAvBgNV BAMTKEUwQzZCQzcyNTc2MDgxQUU4MkYyMDNFRjA0RkQ0QjZCNTEyMTUwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJKdKo/1iDE5dZZpVZHKM7pxT Lujq08YLxKBZcu15wuYBGrk1qfAq32HuVTjl1CL1ZpqwopsgujvgqEH/6b/mmnly ZVnn/Y7VTac20A5N44MCzpkBLydN+revh7ZGCb8BfDdV0IHZsW7jEz14dj3CfxUH iQbf4/AgCgFVHzOL9W7ETXk9EYQny0yvxEerRii56Na2h+kHtgu1zpKui9eB1MMX cI0LWo+Xg1CnTmGp1pQJw4aM6vmDVoHpOP+5US+ikKbV4d4D2KRy/C8iz1kzxAoP zZdWnn1BAjg3rdq8llQCrGLZSW3s9hAPSEDmBPHRVBxjiqA8ALoHvyU8P1l5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4Ma8cldgga6C8gPvBP1La1EhUN4wHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkNzQzYzdjLTA3ZTYtNDYxMS1i NDAzLWQ4YzVmMDEyNGE3OC8wLzMxMzAzMzJlMzEzNjMwMmUzMTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6ASMA0GCSqG SIb3DQEBCwUAA4IBAQBNMo2hy+/KneUWsGOGqpf2r7FeXY2WzIXdJgrjeuT92mwj JfKjJ1/30aFpIbfPxonDui3XHMboNFB+OCNzzNjBA36IVbTnm2QN8mZ2rPr7mXi+ /zU+QldCV4Yf20MIW+Ghc0IPzyzCjfwIr+f3SSSeb4Is2gXS0cvH2DZ2AKipomcf 5ZZN5ynVciytUh+kUaLgVDfNseHhzZPc7UQnC5EoLTpao2ZOJJ55X30dabX2breO 3h3OAnigEynn1eeKGeYKgFsh+P86KwlH0ZhoT9YkOzqNpde48qMYjAFLmrj0POHK ZsoDtAPUNE51d9zeDvXoxAW6XVt+SoyeRTFY99ud -----END CERTIFICATE-----Generated at Mon Mar 2 23:41:17 2026 by rpki-client