$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa File: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (raw, json) Hash identifier: 6/s2KAnQCmxKlD3EU03jhWpXfqnY8gSv1EFXD611Zco= Subject key identifier: C1:C4:61:C4:1C:99:31:F7:08:1D:0A:D2:BD:58:D9:59:B9:0B:8A:D8 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 4ABFFA1E5B642580B4DDAA7D7DAF816FCFCCA9A0 Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa Signing time: Wed 04 Feb 2026 12:00:02 +0000 ROA not before: Wed 04 Feb 2026 11:55:02 +0000 ROA not after: Wed 03 Feb 2027 12:00:02 +0000 asID: 141970 IP address blocks: 103.167.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:bf:fa:1e:5b:64:25:80:b4:dd:aa:7d:7d:af:81:6f:cf:cc:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Feb 4 11:55:02 2026 GMT Not After : Feb 3 12:00:02 2027 GMT Subject: CN=C1C461C41C9931F7081D0AD2BD58D959B90B8AD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c3:7c:41:ce:bd:35:33:dc:d8:8e:5d:a4:97: ab:13:df:30:d1:d4:9b:3e:f1:a1:cb:80:2a:c4:42: 4d:ba:99:81:26:1f:60:b5:cd:35:2d:cf:8a:3e:6d: fa:03:94:20:85:c6:59:84:7a:ce:56:0f:9e:63:f1: d3:af:51:ad:c6:5a:14:6f:ac:16:d4:db:86:00:02: ec:7c:7d:91:51:e9:b5:e4:e1:a1:45:b3:b1:97:ce: f1:e5:6c:d0:4c:18:08:18:a5:8f:1f:27:00:5e:4b: 89:2c:cf:4f:89:7e:45:1e:0d:e6:15:51:b0:24:08: 98:ff:82:de:fd:b4:8f:be:c5:a2:42:59:30:b2:21: 02:c2:39:c0:83:db:f1:05:c3:a7:c3:e7:4a:14:ff: 0e:77:ee:08:91:2b:07:b0:aa:80:27:bc:00:54:fa: ae:f4:3f:9e:93:b4:87:ff:e6:d9:59:a0:d9:2e:00: de:7f:ef:b0:98:4e:0d:8e:dc:d4:66:26:c7:01:23: af:e2:b6:33:7b:6c:8f:fa:5a:57:9b:34:de:a2:7b: 28:7f:66:d1:db:52:de:67:7f:c8:11:2a:49:ce:ea: a0:92:4a:b3:42:7d:9c:79:43:13:e2:12:50:4a:ef: d7:f7:2e:ce:d5:9c:a7:09:a2:a7:47:12:7e:42:dd: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C4:61:C4:1C:99:31:F7:08:1D:0A:D2:BD:58:D9:59:B9:0B:8A:D8 X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.20.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:85:a5:f1:46:31:2d:f2:4c:fd:01:75:74:ab:a5:83:9e:e5: 02:af:8a:21:ad:ce:4c:da:b0:12:56:3d:84:4f:58:38:77:75: 1c:ef:7e:d5:02:62:af:46:3e:72:be:4d:c0:91:ff:d7:1e:96: 81:49:a4:c7:ff:7e:70:6a:01:19:a4:0c:f6:0c:4a:18:8d:92: 66:e7:80:72:db:4a:8f:cf:df:7b:30:8e:95:4e:15:f6:e6:6d: be:96:19:44:c0:ba:9b:6e:fe:8b:c5:c5:a1:0a:dd:14:ac:a4: bd:ec:f7:37:b3:43:64:a9:e6:c7:e7:43:68:48:50:6d:c1:ee: 02:51:71:8e:71:10:4c:8c:22:40:6d:fb:81:66:7b:a5:e6:ee: 92:ed:bd:58:c1:b6:8a:44:5e:8d:3b:3c:f6:98:8d:d1:ab:b1: d2:b0:26:8c:b1:08:72:92:98:ab:5e:36:5d:f0:c5:2e:33:e4: 84:3d:7c:94:c6:4f:ab:b1:d0:ab:95:c2:9b:af:81:41:e6:a3: db:9e:61:5a:0e:2f:42:e8:24:12:56:a4:05:4a:83:03:78:07: 93:b6:1b:e8:a1:25:fc:5f:eb:4a:a7:07:9f:e4:21:aa:48:7d: 3f:86:c4:42:63:45:60:ed:4c:24:06:03:cc:54:e5:e3:39:0a: 23:a4:4e:f8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSr/6HltkJYC03ap9fa+Bb8/MqaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNjAyMDQxMTU1MDJaFw0yNzAyMDMxMjAwMDJaMDMxMTAvBgNV BAMTKEMxQzQ2MUM0MUM5OTMxRjcwODFEMEFEMkJENThEOTU5QjkwQjhBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYw3xBzr01M9zYjl2kl6sT3zDR 1Js+8aHLgCrEQk26mYEmH2C1zTUtz4o+bfoDlCCFxlmEes5WD55j8dOvUa3GWhRv rBbU24YAAux8fZFR6bXk4aFFs7GXzvHlbNBMGAgYpY8fJwBeS4ksz0+JfkUeDeYV UbAkCJj/gt79tI++xaJCWTCyIQLCOcCD2/EFw6fD50oU/w537giRKwewqoAnvABU +q70P56TtIf/5tlZoNkuAN5/77CYTg2O3NRmJscBI6/itjN7bI/6WlebNN6ieyh/ ZtHbUt5nf8gRKknO6qCSSrNCfZx5QxPiElBK79f3Ls7VnKcJoqdHEn5C3VgjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwcRhxByZMfcIHQrSvVjZWbkLitgwHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmNzZiNzczLTQwNWYtNDU4Zi05 Yjg4LTg1MjA5NTE3M2YxNi8wLzMxMzAzMzJlMzEzNjM3MmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6cUMA0GCSqG SIb3DQEBCwUAA4IBAQA7haXxRjEt8kz9AXV0q6WDnuUCr4ohrc5M2rASVj2ET1g4 d3Uc737VAmKvRj5yvk3Akf/XHpaBSaTH/35wagEZpAz2DEoYjZJm54By20qPz997 MI6VThX25m2+lhlEwLqbbv6LxcWhCt0UrKS97Pc3s0NkqebH50NoSFBtwe4CUXGO cRBMjCJAbfuBZnul5u6S7b1YwbaKRF6NOzz2mI3Rq7HSsCaMsQhykpirXjZd8MUu M+SEPXyUxk+rsdCrlcKbr4FB5qPbnmFaDi9C6CQSVqQFSoMDeAeTthvooSX8X+tK pwef5CGqSH0/hsRCY0Vg7UwkBgPMVOXjOQojpE74 -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:07 2026 by rpki-client