$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa File: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (raw, json) Hash identifier: UhAy8yzq5pzmyemjvMQXWmvod4+mB55v0YcY/Z40TGU= Subject key identifier: E5:36:AE:39:A1:9B:98:F2:1C:D2:25:84:15:07:62:B2:6E:F5:9E:DC Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 08FC0D9888F62270E602ABD83654F8FC5F66C9C8 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa Signing time: Wed 08 Apr 2026 04:00:56 +0000 ROA not before: Wed 08 Apr 2026 03:55:56 +0000 ROA not after: Wed 07 Apr 2027 04:00:56 +0000 asID: 140478 IP address blocks: 103.154.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fc:0d:98:88:f6:22:70:e6:02:ab:d8:36:54:f8:fc:5f:66:c9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Apr 8 03:55:56 2026 GMT Not After : Apr 7 04:00:56 2027 GMT Subject: CN=E536AE39A19B98F21CD22584150762B26EF59EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:93:f4:ff:4d:29:d5:8b:47:2d:32:42:cc: 6b:df:8e:73:22:f7:fa:45:66:7b:9d:c3:8a:5d:8a: 8b:f5:b1:a7:15:29:e7:cd:ba:69:eb:de:99:14:66: a2:ec:45:7a:d5:24:df:cb:08:07:df:32:a1:1d:60: 45:6c:b7:00:62:15:f2:03:33:7e:c8:0c:da:ad:71: 67:97:c9:ef:bc:6b:18:bd:2a:aa:82:21:e7:68:7b: 75:8f:31:5b:6f:42:ac:7e:d7:bd:0d:d5:28:aa:5c: fc:37:f9:4c:12:4b:38:f6:58:b4:bb:3f:88:e9:bd: f6:1f:77:b7:c4:a4:ff:55:46:1c:4e:d0:3c:72:e0: 47:3f:36:c8:d4:e0:03:11:77:c7:2e:e4:d7:fb:b1: e2:48:5c:d9:bf:f8:43:2a:da:1c:85:3e:e1:ef:26: ee:bd:7c:41:2f:9b:e5:58:49:25:73:34:6a:85:b5: 55:9a:7e:e1:7c:8e:84:26:b3:05:32:58:a6:88:ac: 77:57:f1:dc:52:37:3a:fa:c0:ca:4e:32:06:6e:c1: 25:34:fb:dd:e2:69:b0:9d:be:f7:e8:4d:21:76:f8: a6:1d:35:15:d6:9b:25:ef:70:3a:d7:78:c1:d6:18: 45:8d:52:04:f8:00:64:c1:f7:94:44:92:cd:0f:03: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:36:AE:39:A1:9B:98:F2:1C:D2:25:84:15:07:62:B2:6E:F5:9E:DC X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.25.0/24 Signature Algorithm: sha256WithRSAEncryption b3:41:68:df:80:6a:45:33:b0:63:17:73:99:40:d4:97:71:78: aa:38:cd:84:5a:f8:09:7d:6c:6f:ff:29:5c:17:43:67:3b:8d: 56:99:fc:9f:08:19:4d:60:07:bd:ee:62:9e:e2:fc:6e:bc:24: f2:fd:0f:f7:70:06:2d:2a:fe:a3:cf:aa:93:b6:cd:49:35:4d: 70:0d:a0:2a:8e:06:be:c8:87:5b:bc:51:b7:ab:1f:3a:86:b5: 7e:be:28:97:de:75:b2:c7:18:42:b9:25:3f:ec:cf:65:eb:b2: 83:00:56:0b:60:63:2f:ed:bb:43:8e:39:6e:ed:ee:b9:eb:ac: da:30:cd:3f:28:90:49:b0:15:a8:5f:f2:bb:2a:98:8a:1a:0b: 13:f6:56:9b:6b:3a:e5:f2:15:aa:d9:75:cc:e8:de:49:19:9e: 35:7b:15:f7:a9:e4:0c:96:30:ac:90:35:a8:04:ec:e5:00:db: 57:3b:33:72:54:23:bd:8b:7b:36:f1:94:01:b2:04:f2:03:8c: cb:70:1d:ba:36:b9:b1:6e:37:c5:dd:4e:78:9b:5a:0f:fe:99: 82:f1:59:3c:1b:2c:b1:f2:35:80:14:8b:f4:a2:f6:c9:e0:4e: 4c:e9:32:94:b2:18:a6:c9:06:eb:00:b2:d3:1c:8b:8c:78:20: d7:20:01:f0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCPwNmIj2InDmAqvYNlT4/F9mycgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNjA0MDgwMzU1NTZaFw0yNzA0MDcwNDAwNTZaMDMxMTAvBgNV BAMTKEU1MzZBRTM5QTE5Qjk4RjIxQ0QyMjU4NDE1MDc2MkIyNkVGNTlFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXZP0/00p1YtHLTJCzGvfjnMi 9/pFZnudw4pdiov1sacVKefNumnr3pkUZqLsRXrVJN/LCAffMqEdYEVstwBiFfID M37IDNqtcWeXye+8axi9KqqCIedoe3WPMVtvQqx+170N1SiqXPw3+UwSSzj2WLS7 P4jpvfYfd7fEpP9VRhxO0Dxy4Ec/NsjU4AMRd8cu5Nf7seJIXNm/+EMq2hyFPuHv Ju69fEEvm+VYSSVzNGqFtVWafuF8joQmswUyWKaIrHdX8dxSNzr6wMpOMgZuwSU0 +93iabCdvvfoTSF2+KYdNRXWmyXvcDrXeMHWGEWNUgT4AGTB95REks0PA4+LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5TauOaGbmPIc0iWEFQdism71ntwwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViZWZiZjA0LTQxYmUtNDhkNy1h YzAwLThhM2M0OThjYTlhZS8wLzMxMzAzMzJlMzEzNTM0MmUzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5oZMA0GCSqG SIb3DQEBCwUAA4IBAQCzQWjfgGpFM7BjF3OZQNSXcXiqOM2EWvgJfWxv/ylcF0Nn O41WmfyfCBlNYAe97mKe4vxuvCTy/Q/3cAYtKv6jz6qTts1JNU1wDaAqjga+yIdb vFG3qx86hrV+viiX3nWyxxhCuSU/7M9l67KDAFYLYGMv7btDjjlu7e6566zaMM0/ KJBJsBWoX/K7KpiKGgsT9labazrl8hWq2XXM6N5JGZ41exX3qeQMljCskDWoBOzl ANtXOzNyVCO9i3s28ZQBsgTyA4zLcB26NrmxbjfF3U54m1oP/pmC8Vk8Gyyx8jWA FIv0ovbJ4E5M6TKUshimyQbrALLTHIuMeCDXIAHw -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:27 2026 by rpki-client