$ rpki-client -vvf repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa File: 3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa (raw, json) Hash identifier: FTaMUAMOYiAyM4toX95w1wSNKuDUIK7Os5wz1HYyIRk= Subject key identifier: B4:7D:1E:C0:55:38:28:00:CC:BA:CA:63:F0:BE:92:18:D4:C8:D2:A3 Certificate issuer: /CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Certificate serial: 778BA08DF0E2294BD7C25C8C8AA39467FD4DCE3F Authority key identifier: 6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa Signing time: Mon 02 Mar 2026 13:00:01 +0000 ROA not before: Mon 02 Mar 2026 12:55:01 +0000 ROA not after: Mon 01 Mar 2027 13:00:01 +0000 asID: 141673 IP address blocks: 103.163.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 12:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:8b:a0:8d:f0:e2:29:4b:d7:c2:5c:8c:8a:a3:94:67:fd:4d:ce:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FEAE120D8CD63D6824D8261F7B098631EF412E0 Validity Not Before: Mar 2 12:55:01 2026 GMT Not After : Mar 1 13:00:01 2027 GMT Subject: CN=B47D1EC055382800CCBACA63F0BE9218D4C8D2A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:9e:85:93:d1:c7:ec:3a:b9:96:c6:e5:11: 7e:2b:fc:fc:43:70:4f:e3:fe:ac:72:32:12:33:f9: 7f:6d:0e:f5:00:a9:f5:a0:cf:65:17:db:95:7c:29: f9:44:30:3c:69:3d:ff:0c:0a:38:2d:e2:f2:d6:5b: eb:29:eb:b1:28:c8:0c:10:42:14:8a:f0:57:d1:60: 9c:ea:84:0f:f4:e4:b1:e1:3f:21:5d:07:ed:03:ef: d9:25:08:14:00:3e:56:97:43:e5:7b:be:e9:93:d8: 5f:77:7c:ba:46:1a:9d:43:36:54:d4:f9:24:55:25: 22:c2:7f:1e:eb:e3:8e:aa:aa:5c:0c:17:bd:fb:b7: 64:9e:c3:5a:95:62:d7:e0:44:93:81:55:21:10:34: c9:3b:2e:65:0b:ae:7e:d4:b2:73:b6:cb:6d:4b:d6: b7:f2:87:42:4a:b2:35:c8:b8:00:6b:c3:da:44:37: 9a:75:41:42:cf:99:80:83:81:ac:83:d7:da:fe:97: a9:bd:91:74:ac:8e:d3:48:21:ea:15:88:70:31:b2: 02:59:0e:45:43:6b:7e:3f:71:ac:51:d5:4c:46:61: 40:90:da:04:25:df:0e:8e:7f:b5:a7:a4:46:88:a6: 71:68:05:ee:17:70:46:ae:ba:f1:78:55:09:9a:10: 1d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7D:1E:C0:55:38:28:00:CC:BA:CA:63:F0:BE:92:18:D4:C8:D2:A3 X509v3 Authority Key Identifier: keyid:6F:EA:E1:20:D8:CD:63:D6:82:4D:82:61:F7:B0:98:63:1E:F4:12:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/6FEAE120D8CD63D6824D8261F7B098631EF412E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FEAE120D8CD63D6824D8261F7B098631EF412E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c1e49ab-50ca-4b3e-823c-8b3d31ba85f2/0/3130332e3136332e3130322e302f32332d3233203d3e20313431363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.102.0/23 Signature Algorithm: sha256WithRSAEncryption 59:47:c2:c9:d4:28:fb:65:5a:c3:a8:f8:1d:33:1b:e4:31:a7: b2:54:70:5d:8e:12:78:bf:27:02:52:ac:c3:d2:ba:3f:1a:db: 6c:87:7c:e7:53:f8:6c:7e:a1:bc:7e:33:fb:d5:1a:0a:b0:d3: 39:fb:b3:0e:ae:39:30:eb:81:6d:8a:e7:0b:8a:24:1a:7d:27: f5:15:96:1c:9d:6e:e0:0a:be:dc:2a:33:bb:fe:a7:93:f5:4c: ac:ed:6f:69:07:47:08:4c:d5:c5:b9:d4:ae:f7:8a:22:2b:88: 68:ef:d0:d1:4d:5d:c8:ca:85:5f:fe:ed:89:31:85:78:53:16: 36:33:d5:2a:ed:e4:ef:a2:5a:0f:f3:47:6f:41:34:55:11:25: 3d:5c:1a:82:6c:e4:49:2c:e9:f9:4f:28:e2:11:28:90:84:7d: 5e:e6:98:67:68:0c:87:ec:c7:67:32:da:6e:e7:3b:9a:99:48: 1d:5b:af:69:6f:37:72:6b:0b:26:a0:a3:98:cd:b1:a7:80:3c: 0d:1b:1f:65:5e:db:69:f9:fc:db:33:04:86:77:bc:ae:b6:0a: 42:8e:3a:96:f9:ba:d4:41:3b:ad:ab:0c:e5:cc:b0:b2:be:c6: 73:82:a9:d1:fb:52:34:7b:79:d2:02:c2:72:83:1f:84:55:de: 18:32:7b:79 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUd4ugjfDiKUvXwlyMiqOUZ/1Nzj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMx RUY0MTJFMDAeFw0yNjAzMDIxMjU1MDFaFw0yNzAzMDExMzAwMDFaMDMxMTAvBgNV BAMTKEI0N0QxRUMwNTUzODI4MDBDQ0JBQ0E2M0YwQkU5MjE4RDRDOEQyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe856Fk9HH7Dq5lsblEX4r/PxD cE/j/qxyMhIz+X9tDvUAqfWgz2UX25V8KflEMDxpPf8MCjgt4vLWW+sp67EoyAwQ QhSK8FfRYJzqhA/05LHhPyFdB+0D79klCBQAPlaXQ+V7vumT2F93fLpGGp1DNlTU +SRVJSLCfx7r446qqlwMF737t2Sew1qVYtfgRJOBVSEQNMk7LmULrn7UsnO2y21L 1rfyh0JKsjXIuABrw9pEN5p1QULPmYCDgayD19r+l6m9kXSsjtNIIeoViHAxsgJZ DkVDa34/caxR1UxGYUCQ2gQl3w6Of7WnpEaIpnFoBe4XcEauuvF4VQmaEB2pAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUtH0ewFU4KADMuspj8L6SGNTI0qMwHwYDVR0j BBgwFoAUb+rhINjNY9aCTYJh97CYYx70EuAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzFlNDlhYi01MGNhLTRiM2UtODIzYy04YjNkMzFiYTg1ZjIvMC82RkVBRTEyMEQ4 Q0Q2M0Q2ODI0RDgyNjFGN0IwOTg2MzFFRjQxMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkZFQUUxMjBEOENENjNENjgyNEQ4MjYxRjdCMDk4NjMxRUY0 MTJFMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMWU0OWFiLTUwY2EtNGIzZS04 MjNjLThiM2QzMWJhODVmMi8wLzMxMzAzMzJlMzEzNjMzMmUzMTMwMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFno2YwDQYJ KoZIhvcNAQELBQADggEBAFlHwsnUKPtlWsOo+B0zG+Qxp7JUcF2OEni/JwJSrMPS uj8a22yHfOdT+Gx+obx+M/vVGgqw0zn7sw6uOTDrgW2K5wuKJBp9J/UVlhydbuAK vtwqM7v+p5P1TKztb2kHRwhM1cW51K73iiIriGjv0NFNXcjKhV/+7YkxhXhTFjYz 1Srt5O+iWg/zR29BNFURJT1cGoJs5Eks6flPKOIRKJCEfV7mmGdoDIfsx2cy2m7n O5qZSB1br2lvN3JrCyago5jNsaeAPA0bH2Ve22n5/NszBIZ3vK62CkKOOpb5utRB O62rDOXMsLK+xnOCqdH7UjR7edICwnKDH4RV3hgye3k= -----END CERTIFICATE-----Generated at Thu Mar 19 10:59:16 2026 by rpki-client