$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa File: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (raw, json) Hash identifier: ulG9hAPafYF/fjm1VCpnsLbedi2oEF3AIxqv5ctSs9c= Subject key identifier: 3D:2A:A2:0D:0C:F3:62:6B:56:DE:FA:58:06:00:4D:4F:F8:C0:A2:47 Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 1F03E3B92A6CE460F26B1F9566E356779828E8C0 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa Signing time: Fri 10 Apr 2026 08:00:00 +0000 ROA not before: Fri 10 Apr 2026 07:55:00 +0000 ROA not after: Fri 09 Apr 2027 08:00:00 +0000 asID: 141950 IP address blocks: 103.166.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:48:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:03:e3:b9:2a:6c:e4:60:f2:6b:1f:95:66:e3:56:77:98:28:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Apr 10 07:55:00 2026 GMT Not After : Apr 9 08:00:00 2027 GMT Subject: CN=3D2AA20D0CF3626B56DEFA5806004D4FF8C0A247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fd:9f:de:69:6e:51:7e:a0:b0:f3:58:69:46: e7:7a:7d:75:79:10:39:ad:60:40:f2:6a:5e:de:f5: a8:87:4e:5b:da:2a:1a:3f:e3:92:4e:43:ba:41:f9: bc:2c:62:7e:99:b4:82:ee:85:2b:bc:41:e2:53:08: ac:0a:ef:93:05:2c:71:1d:65:ef:66:39:12:09:a4: c9:5c:59:fa:34:7d:f1:69:ff:76:3e:bb:7d:8b:97: 53:be:bc:6a:e6:36:09:fb:31:13:b5:97:48:3a:ec: 46:96:e0:bb:39:42:b6:32:9b:c4:a4:4a:e1:38:cf: 6f:3a:c4:c0:ee:cf:b7:83:bc:71:6d:27:73:b5:ad: d9:18:a0:b9:67:d6:eb:7f:67:cf:0b:c2:57:af:bc: 1d:61:4e:cb:fd:96:d0:39:6f:74:2c:87:26:af:88: 88:48:a1:d1:2b:8c:1c:22:e9:b2:7f:ec:f6:95:5e: fb:7d:47:43:e7:56:b0:af:a9:52:3c:7c:22:7f:ba: bb:de:1d:b3:98:a0:df:95:52:5e:15:b5:3e:14:96: 87:33:9c:b8:2d:82:33:7a:99:50:ff:68:9a:9a:f9: e1:bc:19:58:a1:86:07:3f:40:35:dc:2c:4d:ff:52: bd:b3:24:07:d1:1d:2b:cd:b8:9e:c0:2e:bc:a2:2d: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:A2:0D:0C:F3:62:6B:56:DE:FA:58:06:00:4D:4F:F8:C0:A2:47 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.164.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:fd:bb:80:5b:6b:77:97:5a:4f:20:e7:11:14:98:e5:b0:ee: f2:b8:fb:e2:c6:0c:15:5c:9b:46:84:7f:4b:c1:6e:8a:34:e2: b6:50:61:32:7a:72:77:ee:24:eb:74:c0:54:cc:27:f4:96:2d: 0d:87:ac:56:1c:e5:de:97:df:dc:0f:1a:b3:38:3e:0f:af:39: 82:51:e8:4b:d6:48:36:ea:dd:60:39:41:59:32:9c:dd:fb:2e: 6c:59:c6:da:93:8d:07:36:9f:df:f6:49:99:81:0b:e7:2b:3c: 79:1b:c1:fd:8c:3e:9d:eb:da:e4:18:30:b4:92:d3:12:a0:fc: 66:e0:9b:e7:d8:d2:f4:ed:27:d8:01:5b:87:5e:87:30:96:8f: 87:fd:f6:3f:99:8b:b5:72:03:93:62:73:46:ba:e5:62:7e:e8: ec:f4:cc:1f:85:01:bd:ba:8f:25:d0:ce:0c:9b:b2:b9:9a:66: bf:43:dc:70:4f:6b:2d:2b:e8:83:cc:88:c5:dc:4a:cf:40:ef: 58:ce:d6:0e:ca:99:1f:a3:5b:f8:d4:78:7a:45:64:33:e1:d5: 10:c3:ba:f8:61:b2:a4:65:05:97:3d:6c:e5:bb:03:b1:97:a4: 7b:bd:bd:4d:2b:c2:52:97:60:9c:69:00:b8:44:a5:1f:33:10: d8:a3:4e:4a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUHwPjuSps5GDyax+VZuNWd5go6MAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNjA0MTAwNzU1MDBaFw0yNzA0MDkwODAwMDBaMDMxMTAvBgNV BAMTKDNEMkFBMjBEMENGMzYyNkI1NkRFRkE1ODA2MDA0RDRGRjhDMEEyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/Z/eaW5RfqCw81hpRud6fXV5 EDmtYEDyal7e9aiHTlvaKho/45JOQ7pB+bwsYn6ZtILuhSu8QeJTCKwK75MFLHEd Ze9mORIJpMlcWfo0ffFp/3Y+u32Ll1O+vGrmNgn7MRO1l0g67EaW4Ls5QrYym8Sk SuE4z286xMDuz7eDvHFtJ3O1rdkYoLln1ut/Z88LwlevvB1hTsv9ltA5b3Qshyav iIhIodErjBwi6bJ/7PaVXvt9R0PnVrCvqVI8fCJ/urveHbOYoN+VUl4VtT4Ulocz nLgtgjN6mVD/aJqa+eG8GVihhgc/QDXcLE3/Ur2zJAfRHSvNuJ7ALryiLRVfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPSqiDQzzYmtW3vpYBgBNT/jAokcwHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhOWI4MjJhLThiOTEtNDhkMi05 YmMxLWFlMGQ5MDBiZjljNy8wLzMxMzAzMzJlMzEzNjM2MmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpqQwDQYJ KoZIhvcNAQELBQADggEBAGv9u4Bba3eXWk8g5xEUmOWw7vK4++LGDBVcm0aEf0vB boo04rZQYTJ6cnfuJOt0wFTMJ/SWLQ2HrFYc5d6X39wPGrM4Pg+vOYJR6EvWSDbq 3WA5QVkynN37LmxZxtqTjQc2n9/2SZmBC+crPHkbwf2MPp3r2uQYMLSS0xKg/Gbg m+fY0vTtJ9gBW4dehzCWj4f99j+Zi7VyA5Nic0a65WJ+6Oz0zB+FAb26jyXQzgyb srmaZr9D3HBPay0r6IPMiMXcSs9A71jO1g7KmR+jW/jUeHpFZDPh1RDDuvhhsqRl BZc9bOW7A7GXpHu9vU0rwlKXYJxpALhEpR8zENijTko= -----END CERTIFICATE-----Generated at Fri Apr 17 22:30:07 2026 by rpki-client