$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32342d3234203d3e203535363632.roa File: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (raw, json) Hash identifier: UAGKGSjm0CH0zknVedkxHzDnhJTtYq6aJ2UvpPN4dUI= Subject key identifier: C0:11:BB:7D:0B:C0:49:29:AF:61:D6:AB:82:A4:DD:25:B8:62:18:1D Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 5DD9BD79441F06098E0786E46D6ABDF182F65C1B Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32342d3234203d3e203535363632.roa Signing time: Tue 17 Mar 2026 09:03:24 +0000 ROA not before: Tue 17 Mar 2026 08:58:24 +0000 ROA not after: Tue 16 Mar 2027 09:03:24 +0000 asID: 55662 IP address blocks: 103.71.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d9:bd:79:44:1f:06:09:8e:07:86:e4:6d:6a:bd:f1:82:f6:5c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Mar 17 08:58:24 2026 GMT Not After : Mar 16 09:03:24 2027 GMT Subject: CN=C011BB7D0BC04929AF61D6AB82A4DD25B862181D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:e6:8d:13:0c:a7:11:2b:a8:ef:9a:25:05: 04:47:12:08:8c:60:18:d2:d3:29:21:4b:4a:d3:2e: b3:e7:45:05:8a:61:54:25:27:56:f2:69:91:d4:3f: d8:81:c8:38:5d:0e:79:04:3f:56:27:ca:18:88:b4: b0:44:4b:24:8c:6b:64:6d:33:65:b3:d0:6b:77:54: bd:c0:2e:7f:9e:bc:ec:ba:aa:d2:8b:a8:74:50:9b: ee:6e:17:68:c4:a6:9a:7f:65:d6:3a:18:ad:4e:2e: 5b:f0:3a:c4:0c:87:a0:98:60:20:af:f9:14:34:98: 82:91:c9:ce:7c:36:c2:92:0e:23:99:6c:c4:ec:1c: b2:ee:5b:19:7e:e8:67:af:f6:44:59:b2:92:79:a1: de:3c:8e:d5:62:7e:e9:05:1b:a6:7b:7b:70:ee:74: 4c:2e:a5:65:a2:60:3e:dc:24:cf:a1:af:af:b8:e7: 10:b3:8f:5c:3c:fa:2c:0a:85:bb:28:5f:05:91:68: 80:87:a0:80:13:5c:e2:25:ae:2d:af:1b:ed:55:18: 1e:af:5b:17:2b:53:b9:57:2a:b9:50:e3:0c:52:ee: 85:c0:3f:d0:a2:c2:36:09:d6:ae:a1:38:8c:f1:15: a0:54:62:67:2a:63:57:09:9b:80:65:38:e3:69:02: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:11:BB:7D:0B:C0:49:29:AF:61:D6:AB:82:A4:DD:25:B8:62:18:1D X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32342d3234203d3e203535363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.8.0/24 Signature Algorithm: sha256WithRSAEncryption 42:2f:5f:df:f0:d6:4f:52:cf:c4:28:0c:0b:55:87:90:a2:47: 4c:c2:d5:8a:0a:e7:c5:29:51:c4:db:0c:fa:52:32:8e:81:b5: 6d:0f:f4:90:21:28:fa:7d:02:6c:ee:41:03:6c:19:cc:6e:4e: 2f:af:b7:1a:e1:7e:70:a0:d5:9b:b2:1c:cc:8e:f7:16:37:8c: 31:0a:12:e1:45:0b:ee:79:66:a6:6f:31:94:7d:c7:51:59:95: c8:6f:30:bf:db:75:8a:c1:bb:c6:7b:d2:b3:a2:5c:12:ea:08: 8f:49:7c:e6:9b:9d:ed:54:50:e9:7d:98:2a:a1:6d:04:ab:87: 49:01:fe:7d:1f:16:5b:7f:cb:ca:1d:cc:31:c3:40:dd:5a:bb: a4:a3:b3:01:b4:e1:1a:dd:06:8a:6a:c9:e2:3f:b0:75:52:c8: c7:97:db:5e:1a:3a:92:10:69:2a:e4:a7:48:d1:20:ab:07:d4: 6a:c3:7f:b9:0f:c8:1a:9e:6b:fc:5d:7e:08:1c:d5:61:f5:57: 06:25:0c:38:1e:97:8a:09:72:87:18:95:3b:d2:d4:51:f6:2c: 2e:93:80:52:fc:6f:dc:fc:27:e4:27:b9:28:19:7f:69:99:0f: 59:31:42:d3:34:d0:d6:dd:c7:6b:48:82:bc:c7:32:c5:2a:96: 52:59:5c:22 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUXdm9eUQfBgmOB4bkbWq98YL2XBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjAzMTcwODU4MjRaFw0yNzAzMTYwOTAzMjRaMDMxMTAvBgNV BAMTKEMwMTFCQjdEMEJDMDQ5MjlBRjYxRDZBQjgyQTRERDI1Qjg2MjE4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMv+aNEwynESuo75olBQRHEgiM YBjS0ykhS0rTLrPnRQWKYVQlJ1byaZHUP9iByDhdDnkEP1YnyhiItLBESySMa2Rt M2Wz0Gt3VL3ALn+evOy6qtKLqHRQm+5uF2jEppp/ZdY6GK1OLlvwOsQMh6CYYCCv +RQ0mIKRyc58NsKSDiOZbMTsHLLuWxl+6Gev9kRZspJ5od48jtVifukFG6Z7e3Du dEwupWWiYD7cJM+hr6+45xCzj1w8+iwKhbsoXwWRaICHoIATXOIlri2vG+1VGB6v WxcrU7lXKrlQ4wxS7oXAP9CiwjYJ1q6hOIzxFaBUYmcqY1cJm4BlOONpAt2FAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUwBG7fQvASSmvYdargqTdJbhiGB0wHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvMzEzMDMzMmUzNzMxMmUzODJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDM1MzUzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRwgwDQYJKoZIhvcNAQEL BQADggEBAEIvX9/w1k9Sz8QoDAtVh5CiR0zC1YoK58UpUcTbDPpSMo6BtW0P9JAh KPp9AmzuQQNsGcxuTi+vtxrhfnCg1ZuyHMyO9xY3jDEKEuFFC+55ZqZvMZR9x1FZ lchvML/bdYrBu8Z70rOiXBLqCI9JfOabne1UUOl9mCqhbQSrh0kB/n0fFlt/y8od zDHDQN1au6SjswG04RrdBopqyeI/sHVSyMeX214aOpIQaSrkp0jRIKsH1GrDf7kP yBqea/xdfggc1WH1VwYlDDgel4oJcocYlTvS1FH2LC6TgFL8b9z8J+QnuSgZf2mZ D1kxQtM00Nbdx2tIgrzHMsUqllJZXCI= -----END CERTIFICATE-----Generated at Thu Mar 19 11:28:47 2026 by rpki-client