$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa File: 3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (raw, json) Hash identifier: C2QFcfs/YhAogD6WV5sZt+GhgdgTDt0K+flb9n7TxLw= Subject key identifier: A6:79:0D:63:60:72:00:C7:9F:B0:DD:81:93:90:62:13:3B:DB:C1:C9 Certificate issuer: /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Certificate serial: 4D599EB3269D18D972ECA26E3F92FABB55059D79 Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa Signing time: Wed 11 Mar 2026 10:02:45 +0000 ROA not before: Wed 11 Mar 2026 09:57:45 +0000 ROA not after: Wed 10 Mar 2027 10:02:45 +0000 asID: 17995 IP address blocks: 103.158.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 00:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:59:9e:b3:26:9d:18:d9:72:ec:a2:6e:3f:92:fa:bb:55:05:9d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6 Validity Not Before: Mar 11 09:57:45 2026 GMT Not After : Mar 10 10:02:45 2027 GMT Subject: CN=A6790D63607200C79FB0DD81939062133BDBC1C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:2c:db:3c:3b:62:0a:90:9d:a9:04:84:f0: 7a:3e:a0:38:d1:ea:b3:e5:ec:ed:ab:fd:90:2b:98: 00:43:27:68:ce:69:34:0f:b1:1d:8b:b4:01:a2:11: 8d:0b:2d:6e:28:31:77:9a:96:e7:4f:f5:a2:0d:57: 1d:4c:86:9c:ff:6b:a3:9e:a7:b8:a2:d7:0b:78:e3: 95:99:38:32:9c:58:5b:8d:1b:b9:95:f4:2a:b2:6d: 6c:b8:90:28:da:73:88:21:82:fe:bb:c9:c0:61:d4: a3:d7:74:f7:e4:77:43:82:17:4a:b3:1e:13:f9:56: 47:36:96:40:f2:e0:27:b1:14:be:24:c1:30:54:f8: ea:71:2f:c6:a4:68:aa:ee:4f:af:51:cb:dd:49:00: a9:e1:f7:2d:d0:33:a4:f1:c7:ba:e6:ab:33:1e:9c: 42:20:d6:41:5b:8f:7c:57:28:bb:66:5d:8c:45:c1: 4d:2f:88:70:c4:46:0e:1f:16:d7:da:be:d9:5a:81: 6d:ca:ae:40:e0:ea:9f:d9:c2:38:4e:5e:cb:c4:0a: 14:2c:ff:d7:91:b1:aa:40:ab:96:12:ff:c1:55:7d: 69:b2:03:42:86:87:13:b4:f2:db:bb:11:c3:c2:8a: d9:94:d5:94:01:54:bc:7d:3f:3b:23:b4:ed:44:72: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:79:0D:63:60:72:00:C7:9F:B0:DD:81:93:90:62:13:3B:DB:C1:C9 X509v3 Authority Key Identifier: keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.162.0/24 Signature Algorithm: sha256WithRSAEncryption a0:ed:1b:b7:b4:b4:fe:76:48:45:27:03:01:da:a4:13:55:e0: 03:0c:10:c5:a5:c1:da:8f:b1:84:02:9c:d2:5d:1a:db:4c:ad: f2:cf:65:ce:03:20:39:ed:48:06:37:60:bf:6a:9c:6f:c2:80: 74:0a:10:a1:d1:75:f5:94:4e:bb:47:70:4e:22:17:87:3c:e6: f8:9b:4a:7b:06:03:4b:8e:32:84:3a:39:88:4e:95:86:f9:2d: 25:17:fd:37:41:c0:9c:43:7f:58:c1:62:37:28:d5:0d:b3:72: a4:39:2a:d7:5f:f5:2f:19:ce:98:8a:96:57:b5:75:df:aa:15: 1e:ee:25:79:aa:59:c9:11:16:01:33:95:50:f6:bd:0d:53:33: 5c:fb:59:6c:0c:04:21:c9:75:f7:2e:db:7b:95:5f:3f:7f:90: ea:78:00:9d:17:43:86:a2:c7:cf:56:4b:4e:ad:15:26:1f:f3: 06:d4:fe:d3:c4:e7:26:f4:90:28:eb:e5:99:16:bb:54:a5:e1: 58:02:e8:8a:eb:fd:bd:9f:1a:83:22:fb:81:90:e3:8e:81:67: 3b:fe:5e:cf:d7:c7:7d:58:ad:5e:8e:cd:a3:57:6e:0f:d2:1c: f3:fb:29:69:05:82:80:21:fa:7c:2f:db:51:a5:90:3a:dc:1e: 48:cc:cb:04 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTVmesyadGNly7KJuP5L6u1UFnXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2 MTc1NThBNjAeFw0yNjAzMTEwOTU3NDVaFw0yNzAzMTAxMDAyNDVaMDMxMTAvBgNV BAMTKEE2NzkwRDYzNjA3MjAwQzc5RkIwREQ4MTkzOTA2MjEzM0JEQkMxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHyzbPDtiCpCdqQSE8Ho+oDjR 6rPl7O2r/ZArmABDJ2jOaTQPsR2LtAGiEY0LLW4oMXealudP9aINVx1Mhpz/a6Oe p7ii1wt445WZODKcWFuNG7mV9CqybWy4kCjac4ghgv67ycBh1KPXdPfkd0OCF0qz HhP5Vkc2lkDy4CexFL4kwTBU+OpxL8akaKruT69Ry91JAKnh9y3QM6Txx7rmqzMe nEIg1kFbj3xXKLtmXYxFwU0viHDERg4fFtfavtlagW3KrkDg6p/ZwjhOXsvEChQs /9eRsapAq5YS/8FVfWmyA0KGhxO08tu7EcPCitmU1ZQBVLx9PzsjtO1EclhXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpnkNY2ByAMefsN2Bk5BiEzvbwckwHwYDVR0j BBgwFoAUo5j73zV3kMfcZ8bZKhWj1GF1WKYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmMxYzUyOS02MjQ0LTQ1MDMtYWY1Ni02OTQ1OWU0YTc2MGYvMC9BMzk4RkJERjM1 Nzc5MEM3REM2N0M2RDkyQTE1QTNENDYxNzU1OEE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5OEZCREYzNTc3OTBDN0RDNjdDNkQ5MkExNUEzRDQ2MTc1 NThBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YzFjNTI5LTYyNDQtNDUwMy1h ZjU2LTY5NDU5ZTRhNzYwZi8wLzMxMzAzMzJlMzEzNTM4MmUzMTM2MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ56iMA0GCSqG SIb3DQEBCwUAA4IBAQCg7Ru3tLT+dkhFJwMB2qQTVeADDBDFpcHaj7GEApzSXRrb TK3yz2XOAyA57UgGN2C/apxvwoB0ChCh0XX1lE67R3BOIheHPOb4m0p7BgNLjjKE OjmITpWG+S0lF/03QcCcQ39YwWI3KNUNs3KkOSrXX/UvGc6YipZXtXXfqhUe7iV5 qlnJERYBM5VQ9r0NUzNc+1lsDAQhyXX3Ltt7lV8/f5DqeACdF0OGosfPVktOrRUm H/MG1P7TxOcm9JAo6+WZFrtUpeFYAuiK6/29nxqDIvuBkOOOgWc7/l7P18d9WK1e js2jV24P0hzz+ylpBYKAIfp8L9tRpZA63B5IzMsE -----END CERTIFICATE-----Generated at Tue Mar 24 00:38:45 2026 by rpki-client