$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa File: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (raw, json) Hash identifier: s9YO6rgovPFygVKDvxvdCQqCqWD4vEgIZoUoDmMCbHA= Subject key identifier: 8A:7D:5C:C7:1E:E2:01:E5:BA:E4:58:DB:D3:29:BD:4D:37:60:57:2A Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Certificate serial: 017DFA0B4FD67D7373CEDD22F4B0F2C0B0CB214B Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa Signing time: Tue 24 Feb 2026 03:00:24 +0000 ROA not before: Tue 24 Feb 2026 02:55:24 +0000 ROA not after: Tue 23 Feb 2027 03:00:24 +0000 asID: 136865 IP address blocks: 103.239.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7d:fa:0b:4f:d6:7d:73:73:ce:dd:22:f4:b0:f2:c0:b0:cb:21:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Validity Not Before: Feb 24 02:55:24 2026 GMT Not After : Feb 23 03:00:24 2027 GMT Subject: CN=8A7D5CC71EE201E5BAE458DBD329BD4D3760572A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:6e:68:f1:4e:1d:a5:7b:de:ea:9a:6f:f9: 54:11:79:dd:c6:b4:ae:e2:64:c1:27:37:86:6e:fd: 0e:b6:98:2d:81:fd:d3:51:a8:1b:1b:77:c9:58:42: 5b:f9:cf:4f:73:3b:1a:c1:f1:bd:a3:76:a9:3e:c7: b1:15:c6:4f:6c:fd:e6:66:fd:36:5e:b3:e2:c0:21: af:0e:41:1b:f2:5b:f4:45:cc:39:92:40:41:a1:86: 5f:18:d2:7b:4f:e8:da:86:49:21:54:5f:04:ba:fe: 9e:f6:ba:12:41:17:14:44:d5:12:fd:45:2b:61:ef: 2e:bc:36:0d:68:c8:d2:1c:6e:e5:1c:c5:0e:dc:a0: a6:61:be:02:be:39:14:f8:e8:b7:a5:57:85:55:48: b3:09:ff:f1:07:35:7a:e0:fe:ab:77:99:89:62:e1: cf:6f:98:a7:fb:99:31:83:42:c9:7f:0a:6f:cf:a3: db:07:0d:fd:58:5f:da:3e:1d:7f:6e:84:ba:c3:4e: 7e:b6:92:47:4f:ec:56:41:50:83:bf:b2:45:65:1a: ec:da:0e:d4:5d:34:00:df:45:65:11:e3:f9:22:c9: 1d:3f:30:0a:5d:09:de:f2:24:06:2e:2c:14:5d:bf: a4:4f:aa:80:dd:98:84:6a:a8:d2:2b:60:9c:2f:4a: f9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:7D:5C:C7:1E:E2:01:E5:BA:E4:58:DB:D3:29:BD:4D:37:60:57:2A X509v3 Authority Key Identifier: keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.22.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:55:60:eb:50:21:c3:eb:f1:02:cc:f1:36:6b:cb:a4:80:da: 78:0f:bc:f6:86:e7:4d:ba:79:41:f9:59:b1:33:0b:43:4d:44: 36:c7:a3:c4:ff:18:08:a1:64:ce:0d:d4:61:a0:72:93:11:6e: c5:d0:76:03:56:5d:40:ed:bc:cd:a7:84:19:18:b5:6c:d8:43: df:1d:15:a9:eb:5e:d2:ee:3f:a5:ec:26:f5:a9:94:ef:d6:a8: e2:09:8f:89:4d:5a:64:ff:f4:7c:67:b4:11:b7:0b:79:f6:95: d6:6b:0c:fa:4e:46:c7:a2:be:a2:aa:71:48:ba:59:b9:33:c5: 88:03:7b:ac:44:46:6a:a8:fe:53:71:35:33:64:44:a7:5e:bb: 67:0c:57:ec:fc:e8:2e:ef:28:8e:16:fd:64:b1:de:c9:db:dd: 63:2c:d7:59:28:ed:60:32:6b:b2:cc:f1:a6:76:53:13:d8:82: 43:fe:ae:44:37:3c:dc:f8:ce:ea:c4:35:5b:ea:a8:cd:df:ac: d5:e6:a8:05:aa:00:59:d2:0e:54:3c:f6:1e:7b:1b:dc:87:aa: 31:ef:51:12:12:1e:73:df:0d:b6:75:07:ec:65:f6:08:a8:b0: b9:dd:87:52:75:3e:0e:0a:49:17:ff:ca:32:5f:a1:80:9d:26: 76:09:b8:90 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAX36C0/WfXNzzt0i9LDywLDLIUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZG NDJBOTQ0QjAeFw0yNjAyMjQwMjU1MjRaFw0yNzAyMjMwMzAwMjRaMDMxMTAvBgNV BAMTKDhBN0Q1Q0M3MUVFMjAxRTVCQUU0NThEQkQzMjlCRDREMzc2MDU3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTW5o8U4dpXve6ppv+VQRed3G tK7iZMEnN4Zu/Q62mC2B/dNRqBsbd8lYQlv5z09zOxrB8b2jdqk+x7EVxk9s/eZm /TZes+LAIa8OQRvyW/RFzDmSQEGhhl8Y0ntP6NqGSSFUXwS6/p72uhJBFxRE1RL9 RSth7y68Ng1oyNIcbuUcxQ7coKZhvgK+ORT46LelV4VVSLMJ//EHNXrg/qt3mYli 4c9vmKf7mTGDQsl/Cm/Po9sHDf1YX9o+HX9uhLrDTn62kkdP7FZBUIO/skVlGuza DtRdNADfRWUR4/kiyR0/MApdCd7yJAYuLBRdv6RPqoDdmIRqqNIrYJwvSvk9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUin1cxx7iAeW65Fjb0ym9TTdgVyowHwYDVR0j BBgwFoAUTgVOBk3N8uSfcoLXNwuer/QqlEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC80RTA1NEUwNjRE Q0RGMkU0OUY3MjgyRDczNzBCOUVBRkY0MkE5NDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZGNDJB OTQ0Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzOTgwNjNlLTU3YTEtNDBmMi04 NTI3LTRkMGE2OWM1ZDY0Ny8wLzMxMzAzMzJlMzIzMzM5MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+8WMA0GCSqG SIb3DQEBCwUAA4IBAQAcVWDrUCHD6/ECzPE2a8ukgNp4D7z2hudNunlB+VmxMwtD TUQ2x6PE/xgIoWTODdRhoHKTEW7F0HYDVl1A7bzNp4QZGLVs2EPfHRWp617S7j+l 7Cb1qZTv1qjiCY+JTVpk//R8Z7QRtwt59pXWawz6TkbHor6iqnFIulm5M8WIA3us REZqqP5TcTUzZESnXrtnDFfs/Ogu7yiOFv1ksd7J291jLNdZKO1gMmuyzPGmdlMT 2IJD/q5ENzzc+M7qxDVb6qjN36zV5qgFqgBZ0g5UPPYeexvch6ox71ESEh5z3w22 dQfsZfYIqLC53YdSdT4OCkkX/8oyX6GAnSZ2CbiQ -----END CERTIFICATE-----Generated at Mon Mar 2 15:18:02 2026 by rpki-client