$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa File: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (raw, json) Hash identifier: qNsTe8hbYLDRuOTgoGtVFEisKaeZJB3/MvKL6YgIdCE= Subject key identifier: B9:EE:8D:87:1E:E6:EB:BE:B7:41:B3:F1:09:52:85:02:F5:54:9E:2D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 198DEAFDA9AB400832CF862D89B11C7E8854A396 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa Signing time: Wed 08 Apr 2026 04:00:56 +0000 ROA not before: Wed 08 Apr 2026 03:55:56 +0000 ROA not after: Wed 07 Apr 2027 04:00:56 +0000 asID: 140478 IP address blocks: 103.154.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8d:ea:fd:a9:ab:40:08:32:cf:86:2d:89:b1:1c:7e:88:54:a3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Apr 8 03:55:56 2026 GMT Not After : Apr 7 04:00:56 2027 GMT Subject: CN=B9EE8D871EE6EBBEB741B3F109528502F5549E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:75:2f:f9:4e:8d:3d:f7:b4:ea:9f:ff:5d:5e: aa:37:85:dd:c5:69:e6:a3:3b:72:1b:11:b2:e2:e4: 1d:1c:3a:bb:8e:97:5c:40:a6:76:84:37:53:ac:cb: 9f:5e:d3:dd:72:c8:fc:d3:ab:6a:e6:f2:01:a7:5f: 29:fe:98:47:34:98:00:5e:a5:ce:a4:6b:8d:7e:5a: 73:e8:d5:c1:33:b2:7f:b3:eb:7d:7f:5c:a0:f7:86: b3:da:7b:ea:99:8f:07:b3:32:66:18:d4:9a:4c:09: 07:cd:f6:f9:20:6b:c6:94:ff:c9:de:f1:89:3c:bf: 72:fe:6c:4a:9d:38:61:15:b9:d8:7b:62:16:c2:f7: 0f:c0:fa:c2:8f:13:f8:24:17:71:98:00:e4:72:e3: 65:3d:f6:01:68:67:b6:35:41:08:54:f4:96:80:de: 6a:cc:3c:f1:21:b9:0e:8c:0e:db:5c:2d:73:6d:23: 26:97:1d:8f:c8:25:0f:d4:61:71:95:83:e7:a3:38: bd:ee:56:66:5b:f1:29:e0:cf:13:47:fb:ae:2b:06: ba:eb:07:78:c5:3d:1f:f5:50:bb:c8:16:d3:7c:a2: 2f:7e:3e:4d:1c:5c:bc:e1:15:40:04:e2:98:e6:c7: ff:01:c2:bd:64:b2:23:69:e3:5f:fe:1e:b4:b7:56: 62:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EE:8D:87:1E:E6:EB:BE:B7:41:B3:F1:09:52:85:02:F5:54:9E:2D X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.24.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:8b:43:cb:e2:53:65:2a:de:7e:ec:4d:ea:98:e6:a5:65:65: a0:81:c4:ff:00:20:4b:c8:3c:3a:a4:d3:77:74:d6:04:cd:b1: 03:37:61:cd:d5:4f:1d:72:e1:dc:1d:11:aa:76:9c:1a:59:df: f2:78:2c:57:eb:2e:1a:2c:dd:ba:4b:74:1a:d5:44:e8:8e:fb: 3f:54:33:6c:df:9a:47:cb:e9:a2:7d:27:a4:af:2f:30:b0:97: b9:ea:b1:4f:ef:77:0c:56:b5:6a:ed:58:a9:75:0b:95:bb:70: 0c:7e:77:45:dc:8c:2b:9f:c2:23:7f:62:2f:30:8b:e4:34:82: 27:7a:37:39:fc:e1:29:1b:82:ba:29:b7:59:26:08:29:81:a1: 5a:5b:d2:63:db:d4:37:05:e9:8f:57:60:c3:ec:d5:ba:c5:eb: c1:bc:04:35:f2:0f:96:d8:46:be:ec:46:65:ed:1a:8c:31:18: 42:80:b8:ef:44:6c:65:e9:3b:86:20:b0:a0:43:52:78:24:e3: df:e0:87:9d:14:02:82:16:72:7b:f9:94:58:c3:af:06:2f:a3: c9:e0:bd:1e:02:6d:1b:9f:ee:19:69:2b:08:03:ae:ed:68:b5: 9a:53:46:23:d6:6f:73:79:33:68:cb:e2:bb:17:cf:ac:79:87: f6:0a:aa:3e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGY3q/amrQAgyz4YtibEcfohUo5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNjA0MDgwMzU1NTZaFw0yNzA0MDcwNDAwNTZaMDMxMTAvBgNV BAMTKEI5RUU4RDg3MUVFNkVCQkVCNzQxQjNGMTA5NTI4NTAyRjU1NDlFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZdS/5To0997Tqn/9dXqo3hd3F aeajO3IbEbLi5B0cOruOl1xApnaEN1Osy59e091yyPzTq2rm8gGnXyn+mEc0mABe pc6ka41+WnPo1cEzsn+z631/XKD3hrPae+qZjwezMmYY1JpMCQfN9vkga8aU/8ne 8Yk8v3L+bEqdOGEVudh7YhbC9w/A+sKPE/gkF3GYAORy42U99gFoZ7Y1QQhU9JaA 3mrMPPEhuQ6MDttcLXNtIyaXHY/IJQ/UYXGVg+ejOL3uVmZb8SngzxNH+64rBrrr B3jFPR/1ULvIFtN8oi9+Pk0cXLzhFUAE4pjmx/8Bwr1ksiNp41/+HrS3VmK/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUue6Nhx7m6763QbPxCVKFAvVUni0wHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViZWZiZjA0LTQxYmUtNDhkNy1h YzAwLThhM2M0OThjYTlhZS8wLzMxMzAzMzJlMzEzNTM0MmUzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5oYMA0GCSqG SIb3DQEBCwUAA4IBAQB8i0PL4lNlKt5+7E3qmOalZWWggcT/ACBLyDw6pNN3dNYE zbEDN2HN1U8dcuHcHRGqdpwaWd/yeCxX6y4aLN26S3Qa1UTojvs/VDNs35pHy+mi fSekry8wsJe56rFP73cMVrVq7VipdQuVu3AMfndF3Iwrn8Ijf2IvMIvkNIInejc5 /OEpG4K6KbdZJggpgaFaW9Jj29Q3BemPV2DD7NW6xevBvAQ18g+W2Ea+7EZl7RqM MRhCgLjvRGxl6TuGILCgQ1J4JOPf4IedFAKCFnJ7+ZRYw68GL6PJ4L0eAm0bn+4Z aSsIA67taLWaU0Yj1m9zeTNoy+K7F8+seYf2Cqo+ -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:41 2026 by rpki-client