$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa File: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (raw, json) Hash identifier: 1RATtgEQ2fC4CTZxbGq9E6JcRJ2nj2d+lfS9XKYbQiw= Subject key identifier: 76:38:6A:33:2A:40:45:C0:C7:17:12:D7:4E:E8:BC:17:E5:95:44:81 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 2C9EA770EB76A4611F694EAE8F373C88C8174AC9 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa Signing time: Tue 17 Mar 2026 09:03:25 +0000 ROA not before: Tue 17 Mar 2026 08:58:25 +0000 ROA not after: Tue 16 Mar 2027 09:03:25 +0000 asID: 55662 IP address blocks: 103.71.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9e:a7:70:eb:76:a4:61:1f:69:4e:ae:8f:37:3c:88:c8:17:4a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Mar 17 08:58:25 2026 GMT Not After : Mar 16 09:03:25 2027 GMT Subject: CN=76386A332A4045C0C71712D74EE8BC17E5954481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:d5:f0:66:5f:d3:b5:47:bc:2f:77:85:21:c9: 09:bf:86:fd:b3:5a:9d:fb:a5:9f:dc:9d:c8:5b:55: ab:7f:ab:2e:3d:62:ee:f2:c1:18:f0:32:03:9f:c4: e0:cd:89:3e:a3:5d:17:24:90:84:c9:a7:e6:df:2c: a7:e2:4d:3a:c1:c6:19:d2:f1:96:92:a6:14:a7:02: 5f:14:f2:e7:47:ea:cc:2a:33:fa:23:f5:04:18:68: 35:ba:d6:e5:9d:46:e3:b8:34:bf:d9:87:e9:41:b0: 06:44:e9:0a:78:8b:0c:6d:7d:94:4d:a6:52:c9:1c: e8:39:d9:21:db:09:d0:6b:e6:97:d1:27:01:52:7b: e5:3d:fc:5b:2a:62:00:6e:64:bc:2d:32:33:ae:26: f2:c7:23:65:75:bb:21:db:4c:60:5a:51:47:70:b1: 27:8c:82:df:03:25:c5:6a:68:15:16:85:36:62:38: f3:a4:ff:b3:07:fb:9d:e2:41:69:ba:91:6b:f4:5f: 2f:44:f1:6b:30:b2:59:d7:1b:75:6a:6b:d7:72:65: d3:da:be:f8:5c:8a:b3:40:3a:36:66:22:9b:f9:cc: 5f:e8:92:12:ba:ff:f7:12:25:b9:68:5e:72:0b:39: 15:84:27:fe:40:25:c8:4d:2b:d9:6d:f2:b9:9d:75: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:38:6A:33:2A:40:45:C0:C7:17:12:D7:4E:E8:BC:17:E5:95:44:81 X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31312e302f32342d3234203d3e203535363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.11.0/24 Signature Algorithm: sha256WithRSAEncryption 08:c5:3b:77:07:e5:fb:dc:ff:39:18:2e:c3:08:e7:84:6c:35: 92:39:9d:a2:1b:bc:c5:5c:5c:57:a5:47:eb:bc:22:58:c7:99: 42:bf:d0:cd:4d:6d:19:8c:cc:25:b6:da:dc:cc:67:6d:38:0f: 52:12:d2:70:57:6d:83:0e:46:67:3f:c4:7b:bd:8c:fa:54:67: 32:48:0e:21:04:bd:6f:34:8b:c8:ec:dd:82:0e:b7:a8:78:9d: 4b:c7:26:6e:8a:8f:18:77:62:f0:7f:5f:be:92:92:86:5e:50: 78:5b:ec:78:5a:ec:62:70:93:e9:42:e0:3e:5c:eb:a5:26:67: 3e:f5:51:66:13:dc:76:7b:08:1b:04:24:94:3d:39:29:ea:c0: 8c:46:17:37:14:12:fe:ea:c1:79:18:2e:eb:24:7a:63:3b:0f: 5f:53:b0:b7:fc:3b:81:62:cf:94:99:7a:a8:01:bd:58:52:a1: c7:51:7c:4d:e1:bb:a5:64:6e:6a:df:86:78:95:4b:53:3d:10: a0:81:76:b4:b2:bb:e0:e9:f0:f6:3f:68:f6:c8:03:57:24:8e: 5b:c0:af:91:0a:20:74:1b:b6:f0:76:49:d6:0a:d7:e9:2a:5e: ca:09:7e:26:0d:90:3d:99:dc:7e:32:57:89:13:7b:ac:2f:3c: 1c:96:0e:62 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULJ6ncOt2pGEfaU6ujzc8iMgXSskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjAzMTcwODU4MjVaFw0yNzAzMTYwOTAzMjVaMDMxMTAvBgNV BAMTKDc2Mzg2QTMzMkE0MDQ1QzBDNzE3MTJENzRFRThCQzE3RTU5NTQ0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD71fBmX9O1R7wvd4UhyQm/hv2z Wp37pZ/cnchbVat/qy49Yu7ywRjwMgOfxODNiT6jXRckkITJp+bfLKfiTTrBxhnS 8ZaSphSnAl8U8udH6swqM/oj9QQYaDW61uWdRuO4NL/Zh+lBsAZE6Qp4iwxtfZRN plLJHOg52SHbCdBr5pfRJwFSe+U9/FsqYgBuZLwtMjOuJvLHI2V1uyHbTGBaUUdw sSeMgt8DJcVqaBUWhTZiOPOk/7MH+53iQWm6kWv0Xy9E8WswslnXG3Vqa9dyZdPa vvhcirNAOjZmIpv5zF/okhK6//cSJbloXnILORWEJ/5AJchNK9lt8rmddS73AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUdjhqMypARcDHFxLXTui8F+WVRIEwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhNDk2MDgyLWEwYWEtNDgzNi1i NTg3LTk3M2RkN2UyOTdhZi8wLzMxMzAzMzJlMzczMTJlMzEzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRwswDQYJKoZIhvcN AQELBQADggEBAAjFO3cH5fvc/zkYLsMI54RsNZI5naIbvMVcXFelR+u8IljHmUK/ 0M1NbRmMzCW22tzMZ204D1IS0nBXbYMORmc/xHu9jPpUZzJIDiEEvW80i8js3YIO t6h4nUvHJm6Kjxh3YvB/X76SkoZeUHhb7Hha7GJwk+lC4D5c66UmZz71UWYT3HZ7 CBsEJJQ9OSnqwIxGFzcUEv7qwXkYLuskemM7D19TsLf8O4Fiz5SZeqgBvVhSocdR fE3hu6VkbmrfhniVS1M9EKCBdrSyu+Dp8PY/aPbIA1ckjlvAr5EKIHQbtvB2SdYK 1+kqXsoJfiYNkD2Z3H4yV4kTe6wvPByWDmI= -----END CERTIFICATE-----Generated at Thu Mar 19 11:28:24 2026 by rpki-client