$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa File: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (raw, json) Hash identifier: rX/k/SGX3GdbaAjJlBSXE/K1KEEwMrEbwKyMsbAa4hs= Subject key identifier: 4E:35:78:97:7F:E4:8A:EA:E3:5D:86:AA:EA:7B:CE:21:AE:29:3C:3C Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 2C8DDD58552372D291D0A7B198AB17F318B1D4F4 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa Signing time: Tue 07 Apr 2026 06:02:48 +0000 ROA not before: Tue 07 Apr 2026 05:57:48 +0000 ROA not after: Tue 06 Apr 2027 06:02:48 +0000 asID: 63504 IP address blocks: 103.40.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8d:dd:58:55:23:72:d2:91:d0:a7:b1:98:ab:17:f3:18:b1:d4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Apr 7 05:57:48 2026 GMT Not After : Apr 6 06:02:48 2027 GMT Subject: CN=4E3578977FE48AEAE35D86AAEA7BCE21AE293C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:65:3a:12:e3:55:e0:91:79:64:d0:c5:10: 03:da:54:22:ea:bc:cb:97:83:6c:11:ba:54:e1:2f: 91:99:66:06:66:a9:6e:25:e0:53:4b:78:c2:54:b3: e0:56:19:6a:1b:a9:de:6b:aa:f5:e3:89:83:a5:3d: a4:ea:45:12:2a:18:31:ea:2d:6c:bd:bf:5b:87:a8: 74:44:cf:c2:7d:2a:61:40:03:61:99:32:86:20:b8: 85:b1:96:39:95:fe:df:25:88:3f:c8:6b:6e:26:1e: 06:34:03:f4:2d:cb:08:15:94:3d:29:51:70:62:49: 5d:53:53:75:40:4b:75:d9:ee:87:43:ee:3b:0f:85: 3c:37:a1:be:3c:02:e9:78:3f:e4:69:8b:50:61:c7: 8b:fd:2d:3f:ca:57:77:d8:74:9c:c4:dd:a8:cf:05: ae:88:09:1a:c5:17:c5:f2:d1:83:f0:e1:56:bd:24: e4:77:51:e7:f8:63:26:bf:ff:d7:31:de:c1:48:3a: cd:04:fe:9b:b7:d7:b8:5b:a6:8a:22:ed:32:b0:57: e7:99:3c:f3:15:e4:e4:d5:fb:35:23:97:81:2c:9d: 00:0d:8d:e0:68:b3:7b:f4:7a:82:0a:06:65:e5:fc: ea:98:7c:88:16:14:fa:1c:c6:ad:6a:61:10:dc:29: 99:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:35:78:97:7F:E4:8A:EA:E3:5D:86:AA:EA:7B:CE:21:AE:29:3C:3C X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.92.0/23 Signature Algorithm: sha256WithRSAEncryption 74:e2:cf:8f:13:36:9e:bb:ca:4f:64:b7:ac:4e:d0:ed:be:5b: d9:84:e2:ca:79:84:2a:57:3d:20:9c:4e:99:b6:7c:f4:4f:83: e4:f9:89:d2:90:c8:0a:82:98:c9:39:ce:43:d5:45:d4:c3:22: 20:48:dc:73:2d:91:a9:6d:4d:5d:10:9b:d2:ce:b6:67:03:e7: 4a:2c:56:25:0d:ea:92:d0:10:a4:3f:cd:c6:36:a3:fc:60:37: e9:05:c3:09:a5:9e:9a:53:e8:39:17:63:af:0a:45:21:34:60: 53:7f:68:b4:80:ad:52:ea:61:06:34:d3:39:19:ce:6f:4e:32: ec:6c:dd:fe:f2:b6:82:9e:16:2a:25:9f:55:c6:0c:a6:5d:96: 8d:9b:5c:c6:3e:c4:62:e9:fb:30:fb:d0:a8:16:9b:44:e9:03: 96:0d:7a:2e:81:d8:0b:d3:b8:44:b2:74:82:49:04:a3:11:d5: de:28:5b:c3:52:04:94:52:ae:7f:2f:c3:89:8c:04:15:92:3b: 6a:70:e3:0c:17:51:dc:a4:b7:26:ea:6e:a6:f4:aa:4f:03:88: fd:70:a7:6b:f4:ed:df:92:00:47:7f:e6:7e:2d:41:df:d3:88: d3:a3:f8:48:8b:78:eb:eb:95:15:5e:06:73:22:ba:f5:15:69: 07:e1:ca:e8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULI3dWFUjctKR0KexmKsX8xix1PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNjA0MDcwNTU3NDhaFw0yNzA0MDYwNjAyNDhaMDMxMTAvBgNV BAMTKDRFMzU3ODk3N0ZFNDhBRUFFMzVEODZBQUVBN0JDRTIxQUUyOTNDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2MmU6EuNV4JF5ZNDFEAPaVCLq vMuXg2wRulThL5GZZgZmqW4l4FNLeMJUs+BWGWobqd5rqvXjiYOlPaTqRRIqGDHq LWy9v1uHqHREz8J9KmFAA2GZMoYguIWxljmV/t8liD/Ia24mHgY0A/QtywgVlD0p UXBiSV1TU3VAS3XZ7odD7jsPhTw3ob48Aul4P+Rpi1Bhx4v9LT/KV3fYdJzE3ajP Ba6ICRrFF8Xy0YPw4Va9JOR3Uef4Yya//9cx3sFIOs0E/pu317hbpooi7TKwV+eZ PPMV5OTV+zUjl4EsnQANjeBos3v0eoIKBmXl/OqYfIgWFPocxq1qYRDcKZkXAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUTjV4l3/kiurjXYaq6nvOIa4pPDwwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VjZGFlMGE1LWI0ZjYtNGUwOC04 YmViLTYzZWJlMDg1M2RmMy8wLzMxMzAzMzJlMzQzMDJlMzkzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM2MzMzNTMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnKFwwDQYJKoZIhvcN AQELBQADggEBAHTiz48TNp67yk9kt6xO0O2+W9mE4sp5hCpXPSCcTpm2fPRPg+T5 idKQyAqCmMk5zkPVRdTDIiBI3HMtkaltTV0Qm9LOtmcD50osViUN6pLQEKQ/zcY2 o/xgN+kFwwmlnppT6DkXY68KRSE0YFN/aLSArVLqYQY00zkZzm9OMuxs3f7ytoKe Fioln1XGDKZdlo2bXMY+xGLp+zD70KgWm0TpA5YNei6B2AvTuESydIJJBKMR1d4o W8NSBJRSrn8vw4mMBBWSO2pw4wwXUdyktybqbqb0qk8DiP1wp2v07d+SAEd/5n4t Qd/TiNOj+EiLeOvrlRVeBnMiuvUVaQfhyug= -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:29 2026 by rpki-client