$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa File: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (raw, json) Hash identifier: 6n0zbkjlvbHceH0p62I2wThs9xuZUKLnW06pWcnuIOM= Subject key identifier: 19:F8:9F:F9:D9:F9:71:43:B6:52:DC:D3:16:2C:A5:B4:A3:B8:AC:D5 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 1AC363AAA155954048F4E03C51EAE67E33E67122 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa Signing time: Wed 21 Jan 2026 11:03:38 +0000 ROA not before: Wed 21 Jan 2026 10:58:38 +0000 ROA not after: Wed 20 Jan 2027 11:03:38 +0000 asID: 132641 IP address blocks: 103.83.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c3:63:aa:a1:55:95:40:48:f4:e0:3c:51:ea:e6:7e:33:e6:71:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Jan 21 10:58:38 2026 GMT Not After : Jan 20 11:03:38 2027 GMT Subject: CN=19F89FF9D9F97143B652DCD3162CA5B4A3B8ACD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d1:9f:8f:9d:b6:5b:45:2b:93:00:d2:d4:ca: 8a:a1:17:3e:0f:8f:0c:da:a4:4d:1c:5d:fe:32:60: d7:be:44:50:ea:7f:9f:06:25:24:f1:79:6f:13:c9: e4:13:12:e9:34:85:7d:bb:b5:a6:9e:7b:eb:31:99: f5:59:42:d1:bd:33:fa:fe:cc:4c:35:7a:97:20:43: a6:ad:09:ba:04:81:05:2a:73:6c:b0:b9:a6:8e:28: ca:61:a3:98:01:9b:3c:ca:ab:48:fe:05:90:c9:ea: 1c:7b:1e:bd:26:e3:b6:c8:57:79:4f:b9:38:cd:7f: 39:4d:07:94:c5:b0:69:9a:ec:5e:44:51:a5:7f:da: cb:44:92:73:95:1e:3d:46:7b:8f:fc:59:d6:3d:f3: 6d:ab:2d:b1:0e:e3:4f:70:1f:ec:a8:d1:ca:35:42: 9f:0a:4c:77:23:f5:33:9e:3d:94:2a:e7:31:ef:c4: 0a:72:75:36:b3:d9:2e:08:bf:23:23:26:65:61:7d: 54:c3:59:9d:a7:1e:76:de:a5:32:52:26:81:29:66: 56:7e:fe:d8:fc:fe:a0:98:6d:90:f2:e1:b1:49:77: a6:32:0a:ba:66:f0:95:16:08:e4:b9:a5:cc:f8:29: bb:00:04:44:d9:8c:22:87:ba:47:b7:7b:a9:f6:b3: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:9F:F9:D9:F9:71:43:B6:52:DC:D3:16:2C:A5:B4:A3:B8:AC:D5 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.172.0/22 Signature Algorithm: sha256WithRSAEncryption 64:21:d4:f8:e7:83:c6:66:37:88:26:92:be:88:14:b6:50:e2: 23:f7:06:8b:34:9a:4c:38:1b:8d:6e:be:d4:0d:ec:7d:f5:1e: ed:43:53:da:b4:3a:44:9a:fd:29:5c:0b:a3:c5:fa:11:f9:f9: f0:f6:9e:eb:1b:7b:72:a2:a5:8d:b0:5f:c3:ba:ab:e0:a5:30: 9b:5f:97:eb:74:61:67:76:52:9e:7f:1f:56:f0:ef:ff:91:d0: 73:32:c8:c4:5d:be:5b:8b:cd:50:91:8d:80:81:39:cb:a1:87: 15:4f:c7:b3:25:49:4a:ac:dd:f3:93:99:2e:e0:45:26:bf:0f: 64:bc:f6:17:41:85:c2:d8:a7:93:e4:bb:5a:29:5d:8b:0a:64: e1:c5:ff:51:b8:c3:72:db:2a:40:9a:77:2c:4a:6f:ab:5d:8d: 9d:ae:12:56:b6:65:29:69:8d:66:83:b5:b7:e9:63:92:73:93: e0:7b:0f:0b:e5:fb:87:b4:07:99:63:54:71:d9:ec:4e:7d:a0: ea:98:e0:6e:0c:e2:a4:45:ad:ea:33:6a:1e:c9:7e:d4:db:95: 72:d2:59:c2:b7:d5:a6:16:18:4a:08:ed:02:94:6d:19:a7:be: c1:66:55:e1:fc:6c:8c:0b:54:83:44:24:8a:eb:b7:09:0d:8d: 04:0f:23:74 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGsNjqqFVlUBI9OA8UermfjPmcSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNjAxMjExMDU4MzhaFw0yNzAxMjAxMTAzMzhaMDMxMTAvBgNV BAMTKDE5Rjg5RkY5RDlGOTcxNDNCNjUyRENEMzE2MkNBNUI0QTNCOEFDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0Z+PnbZbRSuTANLUyoqhFz4P jwzapE0cXf4yYNe+RFDqf58GJSTxeW8TyeQTEuk0hX27taaee+sxmfVZQtG9M/r+ zEw1epcgQ6atCboEgQUqc2ywuaaOKMpho5gBmzzKq0j+BZDJ6hx7Hr0m47bIV3lP uTjNfzlNB5TFsGma7F5EUaV/2stEknOVHj1Ge4/8WdY9822rLbEO409wH+yo0co1 Qp8KTHcj9TOePZQq5zHvxApydTaz2S4IvyMjJmVhfVTDWZ2nHnbepTJSJoEpZlZ+ /tj8/qCYbZDy4bFJd6YyCrpm8JUWCOS5pcz4KbsABETZjCKHuke3e6n2s3KtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGfif+dn5cUO2UtzTFiyltKO4rNUwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y2ZjY1ZGMzLTRhMmItNDIwNy1i Y2NiLWIwZDE0ZGQ5MzQwMy8wLzMxMzAzMzJlMzgzMzJlMzEzNzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ1OsMA0GCSqG SIb3DQEBCwUAA4IBAQBkIdT454PGZjeIJpK+iBS2UOIj9waLNJpMOBuNbr7UDex9 9R7tQ1PatDpEmv0pXAujxfoR+fnw9p7rG3tyoqWNsF/DuqvgpTCbX5frdGFndlKe fx9W8O//kdBzMsjEXb5bi81QkY2AgTnLoYcVT8ezJUlKrN3zk5ku4EUmvw9kvPYX QYXC2KeT5LtaKV2LCmThxf9RuMNy2ypAmncsSm+rXY2drhJWtmUpaY1mg7W36WOS c5Pgew8L5fuHtAeZY1Rx2exOfaDqmOBuDOKkRa3qM2oeyX7U25Vy0lnCt9WmFhhK CO0ClG0Zp77BZlXh/GyMC1SDRCSK67cJDY0EDyN0 -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:32 2026 by rpki-client