$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa File: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (raw, json) Hash identifier: qHXQ3QdEStqD3uKNvFn/PgcoJYTH2F/sc5gVhh/RXSU= Subject key identifier: 19:01:90:19:8B:F2:65:9E:5B:C8:E0:97:3C:F8:50:FA:2B:8F:CC:33 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 79629EEE9894A4A391A38CBCC55C4275BE0B08CB Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa Signing time: Mon 02 Feb 2026 16:23:46 +0000 ROA not before: Mon 02 Feb 2026 16:18:46 +0000 ROA not after: Mon 01 Feb 2027 16:23:46 +0000 asID: 150970 IP address blocks: 103.132.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:62:9e:ee:98:94:a4:a3:91:a3:8c:bc:c5:5c:42:75:be:0b:08:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: Feb 2 16:18:46 2026 GMT Not After : Feb 1 16:23:46 2027 GMT Subject: CN=190190198BF2659E5BC8E0973CF850FA2B8FCC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:af:c4:4b:44:b8:f7:fe:9d:9d:3b:4f:7c: 82:70:69:3a:c7:6d:f5:d6:74:f4:0b:04:0b:22:52: a8:d3:29:88:a8:82:f4:43:5f:c9:1a:5a:19:05:c4: 4b:79:70:0f:38:e6:71:30:b3:d4:da:57:1c:22:75: 9e:44:4c:fc:c3:a9:c1:f4:46:4f:0e:ab:a1:4a:19: 4a:b9:03:d0:72:72:24:f9:56:76:58:9e:cc:fd:6c: 05:7f:8c:21:58:b2:66:6c:04:5a:e0:2a:5f:21:bf: 36:2c:84:6d:e8:70:5e:3a:57:90:d8:1a:bf:83:61: f7:df:26:a6:fc:f1:3b:42:7f:bb:ee:ec:d0:ea:b0: 13:8e:27:f9:34:d1:51:a1:10:35:9c:ec:4e:c7:d2: 7b:a3:38:43:73:8c:35:7d:20:4e:d4:13:6d:7e:cd: ea:b8:6a:ee:68:b2:3d:93:fa:74:f3:db:36:eb:45: 8c:94:49:a2:a0:e7:39:97:fd:fd:ce:4f:05:13:a8: 7a:12:57:ca:96:e5:f3:da:ed:0e:84:04:c4:50:3a: 0e:f5:0c:ec:98:9f:e7:9f:34:58:fd:f2:1f:f3:8e: 00:d8:25:aa:6e:da:f7:44:3d:e0:7a:ba:99:df:c1: 31:8c:c7:7e:72:2b:6f:52:00:f1:8d:0d:80:f5:d6: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:01:90:19:8B:F2:65:9E:5B:C8:E0:97:3C:F8:50:FA:2B:8F:CC:33 X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.40.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:39:91:24:fa:78:eb:af:43:fe:4f:07:d9:e4:ea:aa:43:0f: f2:d8:7d:1f:a8:31:bb:61:38:55:20:3e:06:72:a3:77:62:05: f7:7f:3f:3e:b9:04:9f:3f:69:3a:5e:5a:15:c6:c8:59:ae:84: 5e:2a:f1:13:97:48:f2:1b:12:9a:8e:e5:c8:d3:3e:b0:e4:87: df:ca:51:9c:1c:e3:62:d0:9a:02:d2:63:a3:20:ad:8e:f2:14: 29:4c:f5:a1:ff:12:a8:c5:a9:05:a5:91:f5:69:88:ed:5f:76: da:78:d9:7b:79:b5:9c:99:46:66:c9:97:1a:54:c4:ae:96:28: b6:f8:e2:44:97:3f:c3:63:c8:25:4b:11:f7:ee:4e:ce:e5:ad: 0b:9a:13:37:70:10:fe:43:5c:db:73:ae:3e:f4:c0:02:6f:45: e2:9c:c4:66:1b:e6:3e:30:a8:fc:45:d4:77:38:ba:32:ed:41: ad:df:36:26:de:8e:ec:62:8b:b2:2e:78:ed:58:4b:29:94:a5: 5e:93:e9:f2:a5:5a:cd:14:6e:76:7c:01:4b:0e:74:e0:b2:2e: a6:c0:7d:a0:18:45:d6:22:2a:85:67:95:7e:44:59:98:5c:0e: bb:93:4e:64:a2:66:03:e7:8a:43:f4:2c:fc:11:4a:72:44:a2: 4e:81:23:e4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeWKe7piUpKORo4y8xVxCdb4LCMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNjAyMDIxNjE4NDZaFw0yNzAyMDExNjIzNDZaMDMxMTAvBgNV BAMTKDE5MDE5MDE5OEJGMjY1OUU1QkM4RTA5NzNDRjg1MEZBMkI4RkNDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR4a/ES0S49/6dnTtPfIJwaTrH bfXWdPQLBAsiUqjTKYiogvRDX8kaWhkFxEt5cA845nEws9TaVxwidZ5ETPzDqcH0 Rk8Oq6FKGUq5A9ByciT5VnZYnsz9bAV/jCFYsmZsBFrgKl8hvzYshG3ocF46V5DY Gr+DYfffJqb88TtCf7vu7NDqsBOOJ/k00VGhEDWc7E7H0nujOENzjDV9IE7UE21+ zeq4au5osj2T+nTz2zbrRYyUSaKg5zmX/f3OTwUTqHoSV8qW5fPa7Q6EBMRQOg71 DOyYn+efNFj98h/zjgDYJapu2vdEPeB6upnfwTGMx35yK29SAPGNDYD11kADAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGQGQGYvyZZ5byOCXPPhQ+iuPzDMwHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkZjJmZmRhLTA1ZDEtNDA4NS1h MTM1LTAzOTg3YTA3ZjM5ZS8wLzMxMzAzMzJlMzEzMzMyMmUzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4QoMA0GCSqG SIb3DQEBCwUAA4IBAQB9OZEk+njrr0P+TwfZ5OqqQw/y2H0fqDG7YThVID4GcqN3 YgX3fz8+uQSfP2k6XloVxshZroReKvETl0jyGxKajuXI0z6w5IffylGcHONi0JoC 0mOjIK2O8hQpTPWh/xKoxakFpZH1aYjtX3baeNl7ebWcmUZmyZcaVMSulii2+OJE lz/DY8glSxH37k7O5a0LmhM3cBD+Q1zbc64+9MACb0XinMRmG+Y+MKj8RdR3OLoy 7UGt3zYm3o7sYouyLnjtWEsplKVek+nypVrNFG52fAFLDnTgsi6mwH2gGEXWIiqF Z5V+RFmYXA67k05komYD54pD9Cz8EUpyRKJOgSPk -----END CERTIFICATE-----Generated at Mon Mar 2 13:04:12 2026 by rpki-client