$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137312e302f32342d3234203d3e203538333738.roa File: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (raw, json) Hash identifier: KhzKTO814xaTWdRSlk/4xqMeURWugzpnaAw0WCwE09Q= Subject key identifier: 01:B6:C2:2C:F6:4A:5A:65:3A:68:2C:16:04:3A:06:8D:70:AD:F7:2A Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 407233FA66E3101FC4AC2B7B6B53D33E7CC13008 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137312e302f32342d3234203d3e203538333738.roa Signing time: Fri 10 Apr 2026 05:00:00 +0000 ROA not before: Fri 10 Apr 2026 04:55:00 +0000 ROA not after: Fri 09 Apr 2027 05:00:00 +0000 asID: 58378 IP address blocks: 103.29.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:72:33:fa:66:e3:10:1f:c4:ac:2b:7b:6b:53:d3:3e:7c:c1:30:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Apr 10 04:55:00 2026 GMT Not After : Apr 9 05:00:00 2027 GMT Subject: CN=01B6C22CF64A5A653A682C16043A068D70ADF72A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b4:cf:48:73:f0:1f:f8:e2:0f:ab:f4:d2:1d: 28:30:25:23:2d:b2:8c:21:62:16:7a:f2:e6:19:a9: c0:a3:01:55:7d:c0:5c:ad:b0:fb:cb:6c:83:ca:c3: f2:40:a4:0a:1b:5b:16:33:a7:8d:b3:8c:4f:5c:56: 1e:5b:4c:af:52:95:c5:f5:b3:ae:c4:bd:8c:36:24: f1:c1:1c:eb:88:c6:77:57:20:43:e1:bc:fb:fb:0b: 12:b1:a6:a1:cd:62:6a:2a:d8:6e:af:11:01:17:2a: e8:80:c0:dc:19:52:27:aa:09:96:d4:20:9a:4e:32: 47:7c:a4:8c:58:14:69:cc:30:6e:1b:7f:7c:c5:69: f2:69:47:a2:7c:8b:9e:71:18:52:e5:b5:93:4f:75: d4:ac:bc:79:f7:3f:b7:86:8e:f4:b5:8a:0b:61:9f: f1:0e:f0:54:a2:6d:ed:07:da:20:47:98:a3:2d:ba: 61:73:f3:d2:2f:93:6b:ac:31:80:9f:bf:58:cd:26: 87:53:29:b9:98:03:47:3a:20:cd:b2:3f:4f:21:15: 1e:3f:7e:af:12:b7:4b:51:00:25:a3:aa:e9:dc:ef: 77:2b:5c:28:f7:94:45:76:95:ce:32:9b:23:06:1a: 04:54:a1:63:bc:0a:af:3f:13:10:01:3a:3b:a6:b9: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B6:C2:2C:F6:4A:5A:65:3A:68:2C:16:04:3A:06:8D:70:AD:F7:2A X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137312e302f32342d3234203d3e203538333738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.171.0/24 Signature Algorithm: sha256WithRSAEncryption 09:e5:04:67:f4:39:99:2a:f0:3e:33:7f:2b:64:1e:fc:7b:26: 41:e6:fd:e2:b2:9e:60:85:5b:13:36:7e:99:38:3c:c0:fe:e3: 67:d7:7f:89:2c:2d:d4:06:3e:d5:aa:6d:de:27:0d:53:1c:a6: 3f:d6:db:8a:41:64:73:14:fc:68:72:a6:bf:7b:ab:b7:98:04: d0:03:62:99:cf:5c:16:0d:74:d4:c2:8c:8b:34:43:47:1e:9c: e5:9c:7e:6e:a5:d6:31:3c:6d:35:50:2f:b1:86:2e:0b:2c:e8: bd:1c:82:02:15:c0:59:b1:e6:35:12:35:8d:33:12:16:65:05: 34:12:aa:40:79:5c:ae:ef:ca:bb:0d:09:f5:96:ce:8d:09:a6: 73:b0:08:b1:24:57:d1:a5:5b:c2:10:50:d4:14:34:75:5d:1c: 2d:6e:9b:f1:49:31:37:9e:8c:04:ec:32:30:e7:cd:d8:57:f7: 61:53:c8:fb:9c:85:c4:b2:c3:de:45:ee:fe:b7:7f:77:50:ee: 01:0a:c9:77:c1:56:7f:0e:58:ab:9f:ac:29:34:d5:87:73:23: 37:91:a7:a0:68:fd:ec:30:a3:2b:67:7b:16:17:03:26:3e:46: e2:29:ec:7e:85:2a:52:46:11:a7:f3:f9:0f:e2:16:28:de:9b: 26:69:f6:91 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQHIz+mbjEB/ErCt7a1PTPnzBMAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNjA0MTAwNDU1MDBaFw0yNzA0MDkwNTAwMDBaMDMxMTAvBgNV BAMTKDAxQjZDMjJDRjY0QTVBNjUzQTY4MkMxNjA0M0EwNjhENzBBREY3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDitM9Ic/Af+OIPq/TSHSgwJSMt sowhYhZ68uYZqcCjAVV9wFytsPvLbIPKw/JApAobWxYzp42zjE9cVh5bTK9SlcX1 s67EvYw2JPHBHOuIxndXIEPhvPv7CxKxpqHNYmoq2G6vEQEXKuiAwNwZUieqCZbU IJpOMkd8pIxYFGnMMG4bf3zFafJpR6J8i55xGFLltZNPddSsvHn3P7eGjvS1igth n/EO8FSibe0H2iBHmKMtumFz89Ivk2usMYCfv1jNJodTKbmYA0c6IM2yP08hFR4/ fq8St0tRACWjqunc73crXCj3lEV2lc4ymyMGGgRUoWO8Cq8/ExABOjumudytAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAbbCLPZKWmU6aCwWBDoGjXCt9yowHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzODA5Mzg0LTliMWMtNGY1YS1h YTZiLTlkZTNiNTJhOWMwNS8wLzMxMzAzMzJlMzIzOTJlMzEzNzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcdqzANBgkqhkiG 9w0BAQsFAAOCAQEACeUEZ/Q5mSrwPjN/K2Qe/HsmQeb94rKeYIVbEzZ+mTg8wP7j Z9d/iSwt1AY+1apt3icNUxymP9bbikFkcxT8aHKmv3urt5gE0ANimc9cFg101MKM izRDRx6c5Zx+bqXWMTxtNVAvsYYuCyzovRyCAhXAWbHmNRI1jTMSFmUFNBKqQHlc ru/Kuw0J9ZbOjQmmc7AIsSRX0aVbwhBQ1BQ0dV0cLW6b8UkxN56MBOwyMOfN2Ff3 YVPI+5yFxLLD3kXu/rd/d1DuAQrJd8FWfw5Yq5+sKTTVh3MjN5GnoGj97DCjK2d7 FhcDJj5G4insfoUqUkYRp/P5D+IWKN6bJmn2kQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:33 2026 by rpki-client