$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa File: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (raw, json) Hash identifier: rC9zDsuuHrRHxm490P5sveoMq6dVJ3UnsdtYS7hgs/E= Subject key identifier: 57:A2:68:A9:CA:57:86:08:52:EA:2F:60:D7:4D:EC:6A:3D:19:9B:5D Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 2471F5FEFAF69C6AE244D64EB5F5C157BFB20222 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa Signing time: Tue 10 Mar 2026 10:00:03 +0000 ROA not before: Tue 10 Mar 2026 09:55:03 +0000 ROA not after: Tue 09 Mar 2027 10:00:03 +0000 asID: 149675 IP address blocks: 103.184.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 22:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:71:f5:fe:fa:f6:9c:6a:e2:44:d6:4e:b5:f5:c1:57:bf:b2:02:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Mar 10 09:55:03 2026 GMT Not After : Mar 9 10:00:03 2027 GMT Subject: CN=57A268A9CA57860852EA2F60D74DEC6A3D199B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:f8:fa:d8:1e:50:14:69:c3:c0:7e:b6:b9: eb:5b:7e:0e:62:af:eb:b3:62:8c:3c:5d:de:9c:24: 86:87:23:cc:ab:34:d2:22:a6:ef:48:62:a8:5f:79: 7d:96:79:3a:bc:1c:2d:0a:6f:62:f3:e8:b1:78:47: 2a:68:a7:07:2c:55:4e:3a:d3:91:4f:a5:53:c1:f9: 8f:bf:81:bc:92:1d:f3:bd:3d:15:e7:eb:5d:2c:83: 63:e6:58:07:7f:9d:43:38:54:27:18:2a:d6:c6:81: 4e:25:3d:1d:50:42:60:28:15:e4:03:15:6d:44:52: 36:cd:1d:5f:84:4d:45:7d:cc:d9:57:7f:fb:5a:a4: b7:31:f0:75:4d:9b:04:70:b0:63:ea:7d:cb:c4:fa: 26:56:58:64:eb:03:c4:fd:70:c9:2e:99:f0:35:df: 01:7d:7d:72:b0:8a:56:6b:ce:d9:8b:61:65:a4:8a: 59:8a:1a:ac:0f:f0:95:8c:e8:85:dc:82:23:b0:80: 57:90:78:f7:ac:e6:60:06:b7:7e:a2:fd:3c:6d:dd: 0d:62:a1:0a:09:46:86:2d:6d:f1:1f:14:bd:27:b3: 46:5a:78:14:33:f6:d9:4c:6e:ff:5e:a0:b1:b1:92: 77:71:2f:56:23:1f:b4:c7:77:b6:46:00:b2:6a:9a: a3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A2:68:A9:CA:57:86:08:52:EA:2F:60:D7:4D:EC:6A:3D:19:9B:5D X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.19.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:38:82:ba:4e:2d:24:6f:b1:41:70:4f:4d:46:cd:33:6c:1d: ff:6b:09:d1:e9:1b:ff:cb:55:77:45:17:a0:fb:d2:ca:50:44: b4:dd:3f:25:f9:ee:6c:08:e7:00:4c:b2:a7:21:32:1f:8d:f5: 6b:f4:d4:c0:bf:09:fd:49:31:7f:96:cd:b4:78:05:ac:2d:b3: f6:16:b2:c6:81:77:82:07:e6:68:c1:24:42:95:ee:56:24:6f: e1:df:9e:ca:3c:dd:9d:01:84:9a:42:89:46:47:f0:93:c8:4e: b0:43:d0:d5:f0:3a:50:f9:26:b1:75:2c:ab:14:14:c4:1c:bd: c0:5b:be:aa:4d:32:8a:9d:75:a8:79:cc:62:88:d5:9f:60:f4: cc:56:6d:e4:0f:49:95:08:66:ed:51:f4:b4:8f:97:88:96:d6: c2:09:05:6a:80:36:11:c5:cd:75:00:96:cf:fd:81:a1:d4:c8: f6:72:f5:28:0d:6e:72:ef:9d:9a:25:e0:b8:59:39:5e:7c:59: e8:61:1b:0f:5c:03:a5:33:f4:7a:cc:bd:ba:ee:b4:f2:40:f1: ee:3f:1a:12:9b:0c:91:04:c0:f7:62:b5:65:b0:53:a6:80:42: 2c:0d:95:08:97:5c:a1:d6:89:12:84:ce:86:f2:15:1d:ef:5d: 23:76:84:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJHH1/vr2nGriRNZOtfXBV7+yAiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNjAzMTAwOTU1MDNaFw0yNzAzMDkxMDAwMDNaMDMxMTAvBgNV BAMTKDU3QTI2OEE5Q0E1Nzg2MDg1MkVBMkY2MEQ3NERFQzZBM0QxOTlCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3/j62B5QFGnDwH62uetbfg5i r+uzYow8Xd6cJIaHI8yrNNIipu9IYqhfeX2WeTq8HC0Kb2Lz6LF4RypopwcsVU46 05FPpVPB+Y+/gbySHfO9PRXn610sg2PmWAd/nUM4VCcYKtbGgU4lPR1QQmAoFeQD FW1EUjbNHV+ETUV9zNlXf/tapLcx8HVNmwRwsGPqfcvE+iZWWGTrA8T9cMkumfA1 3wF9fXKwilZrztmLYWWkilmKGqwP8JWM6IXcgiOwgFeQePes5mAGt36i/Txt3Q1i oQoJRoYtbfEfFL0ns0ZaeBQz9tlMbv9eoLGxkndxL1YjH7THd7ZGALJqmqPbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUV6JoqcpXhghS6i9g103saj0Zm10wHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwZDkxNGVmLTBiMWYtNDkwYi04 MDhkLWEyN2I4M2ZmOWEzZS8wLzMxMzAzMzJlMzEzODM0MmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7gTMA0GCSqG SIb3DQEBCwUAA4IBAQCcOIK6Ti0kb7FBcE9NRs0zbB3/awnR6Rv/y1V3RReg+9LK UES03T8l+e5sCOcATLKnITIfjfVr9NTAvwn9STF/ls20eAWsLbP2FrLGgXeCB+Zo wSRCle5WJG/h357KPN2dAYSaQolGR/CTyE6wQ9DV8DpQ+SaxdSyrFBTEHL3AW76q TTKKnXWoecxiiNWfYPTMVm3kD0mVCGbtUfS0j5eIltbCCQVqgDYRxc11AJbP/YGh 1Mj2cvUoDW5y752aJeC4WTlefFnoYRsPXAOlM/R6zL267rTyQPHuPxoSmwyRBMD3 YrVlsFOmgEIsDZUIl1yh1okShM6G8hUd710jdoSI -----END CERTIFICATE-----Generated at Sat Mar 21 04:31:54 2026 by rpki-client