$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa File: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (raw, json) Hash identifier: gom2K2gkNEap6pRf8i6qpFWU+p3reMlN96fhfu6QcT4= Subject key identifier: A0:21:E1:76:2C:CE:63:5A:F4:4E:0A:53:74:25:39:1B:CB:E9:DD:5D Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 31732262DA00CF0C6E363A5E6AC74D39873FC430 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa Signing time: Tue 17 Mar 2026 09:03:24 +0000 ROA not before: Tue 17 Mar 2026 08:58:24 +0000 ROA not after: Tue 16 Mar 2027 09:03:24 +0000 asID: 55662 IP address blocks: 103.71.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:73:22:62:da:00:cf:0c:6e:36:3a:5e:6a:c7:4d:39:87:3f:c4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Mar 17 08:58:24 2026 GMT Not After : Mar 16 09:03:24 2027 GMT Subject: CN=A021E1762CCE635AF44E0A537425391BCBE9DD5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:01:ef:82:05:21:b1:25:31:03:42:52:36: 01:53:ba:55:62:ad:34:19:25:2d:58:82:03:90:cd: 08:be:f0:21:60:40:5c:ea:a3:f1:0d:b5:34:15:0d: a9:59:1b:bb:b8:79:63:35:31:ec:de:f8:5c:f0:fb: df:19:60:71:46:42:3c:45:bf:5e:3c:d3:2c:7b:05: ef:0a:32:6b:0f:f6:4d:db:24:14:d4:5c:bf:37:23: 21:43:12:5f:2e:85:f3:27:77:a8:c9:bf:1e:73:62: db:b6:a4:16:12:d5:35:ab:9d:c5:2c:85:8a:60:65: a1:3b:03:be:f6:d4:cc:6c:7d:cf:74:73:0a:b1:a4: 17:51:e6:51:5c:ab:f3:3d:1a:55:2d:53:5a:58:d8: 3e:57:85:07:23:02:52:5f:fb:80:6d:bf:04:49:66: 5f:d0:e9:9d:1f:a5:5c:0d:5b:46:bb:39:4a:47:18: 83:66:30:da:aa:f0:d4:7b:28:dd:a1:5f:c3:02:62: 1b:a8:46:d5:45:5c:02:79:8e:e5:c0:a5:22:5c:3b: 25:36:1e:11:f1:69:f5:33:f3:75:27:9a:df:22:19: 72:35:e4:8c:11:13:91:db:cf:f0:ee:5c:f2:2d:05: d7:2b:66:ec:1f:33:ae:22:64:22:90:a3:88:3a:b3: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:21:E1:76:2C:CE:63:5A:F4:4E:0A:53:74:25:39:1B:CB:E9:DD:5D X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32332d3234203d3e203535363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.8.0/23 Signature Algorithm: sha256WithRSAEncryption 14:6e:a1:08:29:e8:60:24:63:8c:83:3e:0e:b7:6a:ab:9a:32: 26:8c:db:7f:ee:f5:53:d7:5f:ff:8d:ec:77:59:0b:bb:4c:f8: 01:ce:49:26:86:18:3b:5f:97:2b:9c:c7:5e:61:f9:c6:77:d7: c1:15:48:d0:4e:b5:45:ad:0e:48:61:2d:4b:21:8e:9b:a0:76: 9e:4e:85:09:c6:d4:bc:c0:4d:a3:c2:98:ef:b5:a2:1e:83:79: 4c:a0:d7:21:2d:83:3f:a1:6f:db:fe:9a:b0:1b:77:20:0d:7d: fb:05:ea:07:12:45:ae:94:c4:92:a1:83:b9:a3:26:ec:15:a4: 10:0c:67:12:0f:ad:ec:b8:d7:fe:46:70:4e:5c:9a:c9:7c:57: d0:3a:b1:44:77:a0:ab:72:10:a9:22:f9:a8:1d:be:e8:42:07: 2c:f9:b8:ba:1e:b5:9c:4d:72:e7:65:72:a2:4a:0b:17:64:e4: 6f:1e:96:44:98:5a:5f:86:e6:6e:e1:c1:6e:fe:80:b6:2d:68: c4:1b:9a:c0:11:f7:66:18:51:69:3e:85:41:72:27:a9:7b:68: fe:51:94:f6:f0:3a:7c:2e:e3:0d:6a:f3:e0:b9:ed:41:2f:28: c7:90:75:74:76:33:6a:f2:86:da:4c:7c:49:12:87:cc:48:26: 4c:55:27:9d -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUMXMiYtoAzwxuNjpeasdNOYc/xDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjAzMTcwODU4MjRaFw0yNzAzMTYwOTAzMjRaMDMxMTAvBgNV BAMTKEEwMjFFMTc2MkNDRTYzNUFGNDRFMEE1Mzc0MjUzOTFCQ0JFOURENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLigHvggUhsSUxA0JSNgFTulVi rTQZJS1YggOQzQi+8CFgQFzqo/ENtTQVDalZG7u4eWM1Meze+Fzw+98ZYHFGQjxF v1480yx7Be8KMmsP9k3bJBTUXL83IyFDEl8uhfMnd6jJvx5zYtu2pBYS1TWrncUs hYpgZaE7A7721Mxsfc90cwqxpBdR5lFcq/M9GlUtU1pY2D5XhQcjAlJf+4BtvwRJ Zl/Q6Z0fpVwNW0a7OUpHGINmMNqq8NR7KN2hX8MCYhuoRtVFXAJ5juXApSJcOyU2 HhHxafUz83Unmt8iGXI15IwRE5Hbz/DuXPItBdcrZuwfM64iZCKQo4g6s3oHAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUoCHhdizOY1r0TgpTdCU5G8vp3V0wHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvMzEzMDMzMmUzNzMxMmUzODJlMzAyZjMyMzMyZDMy MzQyMDNkM2UyMDM1MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnRwgwDQYJKoZIhvcNAQEL BQADggEBABRuoQgp6GAkY4yDPg63aquaMiaM23/u9VPXX/+N7HdZC7tM+AHOSSaG GDtflyucx15h+cZ318EVSNBOtUWtDkhhLUshjpugdp5OhQnG1LzATaPCmO+1oh6D eUyg1yEtgz+hb9v+mrAbdyANffsF6gcSRa6UxJKhg7mjJuwVpBAMZxIPrey41/5G cE5cmsl8V9A6sUR3oKtyEKki+agdvuhCByz5uLoetZxNcudlcqJKCxdk5G8elkSY Wl+G5m7hwW7+gLYtaMQbmsAR92YYUWk+hUFyJ6l7aP5RlPbwOnwu4w1q8+C57UEv KMeQdXR2M2ryhtpMfEkSh8xIJkxVJ50= -----END CERTIFICATE-----Generated at Thu Mar 19 11:27:44 2026 by rpki-client