$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa File: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (raw, json) Hash identifier: Q+y2pzqpprtkt7B3xubITmAOPPlZQHJ5EdgubYKQqPw= Subject key identifier: 17:92:7D:C2:C8:0B:F8:A2:32:DE:6F:BB:B8:38:92:1B:48:A8:48:93 Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 4144E6BD280C8794A3AD8946009052D14ECEFC18 Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa Signing time: Fri 27 Mar 2026 17:00:03 +0000 ROA not before: Fri 27 Mar 2026 16:55:03 +0000 ROA not after: Fri 26 Mar 2027 17:00:03 +0000 asID: 141909 IP address blocks: 103.121.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:44:e6:bd:28:0c:87:94:a3:ad:89:46:00:90:52:d1:4e:ce:fc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Mar 27 16:55:03 2026 GMT Not After : Mar 26 17:00:03 2027 GMT Subject: CN=17927DC2C80BF8A232DE6FBBB838921B48A84893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:c1:d1:3a:1c:ff:a7:f3:c5:6c:87:ea:1d: 34:b3:19:f1:49:bf:a0:6c:9e:e0:35:c1:96:26:cf: 02:04:d3:ca:26:8d:15:6c:2e:f8:3f:e1:38:d4:2b: ac:1c:8e:cc:b6:6f:2c:90:29:5b:ba:48:3b:7f:c3: d8:dd:61:17:84:87:d7:14:36:80:9c:8d:7d:c3:62: db:93:5c:45:6b:55:1d:54:09:d0:86:59:9a:19:39: a9:57:91:39:5a:c2:f4:0f:76:38:4d:b2:1b:da:a0: e3:1d:54:b9:42:06:0c:80:dc:72:44:6c:87:3a:2d: 33:49:37:a6:60:9c:ce:46:0a:73:f6:df:a8:8e:a0: 24:f2:24:1c:47:72:25:c5:d2:63:34:d9:18:dc:29: 03:27:57:1c:b3:b7:d0:7e:64:bb:ec:f2:f3:41:97: 8f:4d:b2:1e:46:64:b9:34:07:31:87:89:10:6e:c6: ac:d0:04:84:5d:7f:4f:86:76:eb:23:38:99:1b:1e: be:ea:bc:9b:34:06:4a:1a:76:06:19:ef:18:0f:ee: 0d:ef:b2:59:2f:bd:a3:ea:f6:79:04:43:6f:03:72: de:88:7a:30:03:b3:47:63:94:32:63:07:f9:c4:a4: 2a:cd:ce:38:6d:3b:a5:38:b3:75:29:89:02:74:88: f1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:92:7D:C2:C8:0B:F8:A2:32:DE:6F:BB:B8:38:92:1B:48:A8:48:93 X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.186.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:6f:20:5f:f1:9c:21:55:e4:8e:b4:02:51:4b:ce:67:ed:af: 02:b8:dc:90:47:68:79:56:04:d9:e4:d3:1f:9d:43:09:96:f2: a5:78:8d:3d:4f:7e:0f:c2:5e:ea:30:2a:34:16:d5:35:be:93: 7e:3b:63:e7:6b:a1:30:ad:72:bf:46:c8:48:3f:ff:29:0c:b0: 43:cf:3f:18:40:ce:12:10:0f:64:54:d9:c7:64:e7:71:72:47: db:20:9c:8a:13:34:9c:8f:50:8d:7e:8b:03:ca:e4:37:83:ac: 9a:7b:6a:49:5c:4f:83:41:cc:be:6a:76:a3:f5:80:b4:e6:b9: 0b:7d:e7:42:53:a6:76:a9:93:ce:92:90:28:f7:1d:40:92:51: f5:0d:2b:cc:dd:ee:80:47:3a:f3:5f:a3:67:f7:ce:21:06:c3: 55:f0:1c:40:95:4c:31:7a:ba:67:3f:95:8f:70:03:76:10:55: 15:2b:4e:8e:60:b6:60:9b:8a:0e:07:19:ab:57:78:20:a9:21: 34:89:20:ce:33:64:e2:59:21:07:b5:88:0e:81:fc:34:30:00: 38:70:24:35:3d:37:e6:66:0a:a3:77:21:c1:22:36:9b:d4:a7: 1d:57:44:02:27:b1:b8:03:ed:31:bd:41:50:eb:ac:01:fc:50: 2d:59:3d:6f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQUTmvSgMh5SjrYlGAJBS0U7O/BgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNjAzMjcxNjU1MDNaFw0yNzAzMjYxNzAwMDNaMDMxMTAvBgNV BAMTKDE3OTI3REMyQzgwQkY4QTIzMkRFNkZCQkI4Mzg5MjFCNDhBODQ4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOcHROhz/p/PFbIfqHTSzGfFJ v6BsnuA1wZYmzwIE08omjRVsLvg/4TjUK6wcjsy2byyQKVu6SDt/w9jdYReEh9cU NoCcjX3DYtuTXEVrVR1UCdCGWZoZOalXkTlawvQPdjhNshvaoOMdVLlCBgyA3HJE bIc6LTNJN6ZgnM5GCnP236iOoCTyJBxHciXF0mM02RjcKQMnVxyzt9B+ZLvs8vNB l49Nsh5GZLk0BzGHiRBuxqzQBIRdf0+GdusjOJkbHr7qvJs0BkoadgYZ7xgP7g3v slkvvaPq9nkEQ28Dct6IejADs0djlDJjB/nEpCrNzjhtO6U4s3UpiQJ0iPEvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUF5J9wsgL+KIy3m+7uDiSG0ioSJMwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwNjIwY2ZjLWI0NmMtNDU3Yy05 ZmRlLTI5NzcxMGM1NDZhOS8wLzMxMzAzMzJlMzEzMjMxMmUzMTM4MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnebowDQYJ KoZIhvcNAQELBQADggEBAA9vIF/xnCFV5I60AlFLzmftrwK43JBHaHlWBNnk0x+d QwmW8qV4jT1Pfg/CXuowKjQW1TW+k347Y+droTCtcr9GyEg//ykMsEPPPxhAzhIQ D2RU2cdk53FyR9sgnIoTNJyPUI1+iwPK5DeDrJp7aklcT4NBzL5qdqP1gLTmuQt9 50JTpnapk86SkCj3HUCSUfUNK8zd7oBHOvNfo2f3ziEGw1XwHECVTDF6umc/lY9w A3YQVRUrTo5gtmCbig4HGatXeCCpITSJIM4zZOJZIQe1iA6B/DQwADhwJDU9N+Zm CqN3IcEiNpvUpx1XRAInsbgD7TG9QVDrrAH8UC1ZPW8= -----END CERTIFICATE-----Generated at Fri Apr 17 22:33:18 2026 by rpki-client