$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32322d3234203d3e20313333383131.roa File: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (raw, json) Hash identifier: EZ5aOL7mpVTkNbGpU33KXHXodkOhpTQ6YG1hqKJcWtg= Subject key identifier: BD:65:E7:9B:4A:42:06:C0:8F:31:3C:43:98:0E:7B:60:9C:80:EE:ED Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 604A338294C0E5A7747BFAE696555A29D43A5954 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32322d3234203d3e20313333383131.roa Signing time: Tue 03 Mar 2026 11:02:46 +0000 ROA not before: Tue 03 Mar 2026 10:57:46 +0000 ROA not after: Tue 02 Mar 2027 11:02:46 +0000 asID: 133811 IP address blocks: 103.52.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 09:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4a:33:82:94:c0:e5:a7:74:7b:fa:e6:96:55:5a:29:d4:3a:59:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Mar 3 10:57:46 2026 GMT Not After : Mar 2 11:02:46 2027 GMT Subject: CN=BD65E79B4A4206C08F313C43980E7B609C80EEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:aa:aa:0b:07:a5:1f:bb:f6:e7:f5:1d:a3:ed: 85:1f:af:eb:69:fe:8f:fc:45:d4:f0:cd:10:85:5b: d6:1b:42:ff:5d:00:41:a0:2d:e7:c7:28:74:40:4d: ca:b2:ce:67:fc:ea:fb:d5:31:b4:3b:4e:97:84:dd: 71:8b:d2:0e:e4:fc:25:81:31:40:af:7f:f9:6a:66: 95:06:7b:20:f5:cd:e0:19:16:34:6e:f8:d9:e9:c6: 01:f9:a5:b9:87:7c:7b:8f:30:02:7d:fb:eb:ec:e2: 57:d3:8a:1e:6b:01:ef:c4:51:9e:bb:89:0e:b7:53: f5:e6:26:b3:2b:a7:a3:e2:e9:8b:9e:3c:2e:04:da: ef:20:8b:72:ce:05:01:a8:37:e0:5a:a1:db:71:e3: 76:59:ba:50:3f:58:9a:01:78:ff:10:06:9b:fa:ff: 83:8a:50:e3:7c:e9:8b:f3:de:02:f0:d9:ac:19:53: f6:53:87:8a:c8:4c:dc:0a:2f:4a:b6:f5:14:53:7a: 05:eb:7f:63:e0:5f:04:64:bc:f8:d3:b1:d5:4a:43: 84:e7:50:58:cc:c5:65:df:46:ef:21:8c:71:2a:21: 9c:5b:92:30:9f:53:4d:42:b2:cb:e7:bf:89:f7:fb: ac:f5:a4:b5:e2:8e:71:dc:fe:04:ac:e4:61:5b:5e: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:65:E7:9B:4A:42:06:C0:8F:31:3C:43:98:0E:7B:60:9C:80:EE:ED X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/3130332e35322e31362e302f32322d3234203d3e20313333383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.16.0/22 Signature Algorithm: sha256WithRSAEncryption 76:c8:41:6e:a5:e3:74:e6:30:11:e1:6a:e6:9a:63:3e:72:a2: 97:5d:c6:4e:d0:a7:70:a9:6e:de:b2:ec:77:ca:4a:6e:5e:79: fb:3c:9c:10:dd:3a:dc:ad:b4:24:9d:7d:96:f6:f9:8f:4e:17: 55:19:c0:23:9f:d3:12:b4:85:5f:f0:17:45:f1:2e:b9:42:f2: 49:a7:9a:98:cc:dc:8f:0b:45:80:5c:45:d7:1f:6f:f6:ab:25: 46:90:b6:4d:71:d3:f6:8d:22:14:5f:9c:c4:68:ba:7b:10:1b: 0a:e9:43:28:e1:f9:e8:d3:c9:ef:51:cd:aa:af:73:1a:c2:00: cc:43:9f:69:1e:4f:db:cb:3f:87:78:b7:5f:a0:7a:38:51:34: 90:81:9a:fe:63:51:4b:b0:a4:1a:32:01:4f:61:e8:99:2a:71: 1c:4f:d5:76:4f:1c:f5:27:4a:ae:2d:d8:ab:63:6f:1a:53:9e: 8c:76:13:db:fd:7d:02:25:89:56:c3:2c:74:cd:04:34:d8:eb: ef:97:44:ed:c3:35:bb:d9:90:72:4f:17:f3:87:aa:f1:30:b9: e3:f6:8e:a9:e0:11:14:a9:12:f0:b2:d0:d2:65:11:29:4b:cc: 73:51:62:ab:d0:8f:01:ad:01:a4:57:c9:b6:4f:f4:32:3f:0f: 64:5f:d0:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYEozgpTA5ad0e/rmllVaKdQ6WVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNjAzMDMxMDU3NDZaFw0yNzAzMDIxMTAyNDZaMDMxMTAvBgNV BAMTKEJENjVFNzlCNEE0MjA2QzA4RjMxM0M0Mzk4MEU3QjYwOUM4MEVFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqqqoLB6Ufu/bn9R2j7YUfr+tp /o/8RdTwzRCFW9YbQv9dAEGgLefHKHRATcqyzmf86vvVMbQ7TpeE3XGL0g7k/CWB MUCvf/lqZpUGeyD1zeAZFjRu+NnpxgH5pbmHfHuPMAJ9++vs4lfTih5rAe/EUZ67 iQ63U/XmJrMrp6Pi6YuePC4E2u8gi3LOBQGoN+Baodtx43ZZulA/WJoBeP8QBpv6 /4OKUON86Yvz3gLw2awZU/ZTh4rITNwKL0q29RRTegXrf2PgXwRkvPjTsdVKQ4Tn UFjMxWXfRu8hjHEqIZxbkjCfU01Cssvnv4n3+6z1pLXijnHc/gSs5GFbXl+PAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUvWXnm0pCBsCPMTxDmA57YJyA7u0wHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZGQ3YzBmLTAyZDMtNDIxNy05 ZmMzLTAwNDdhZTE4MzZkYy8wLzMxMzAzMzJlMzUzMjJlMzEzNjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmc0EDANBgkqhkiG 9w0BAQsFAAOCAQEAdshBbqXjdOYwEeFq5ppjPnKil13GTtCncKlu3rLsd8pKbl55 +zycEN063K20JJ19lvb5j04XVRnAI5/TErSFX/AXRfEuuULySaeamMzcjwtFgFxF 1x9v9qslRpC2TXHT9o0iFF+cxGi6exAbCulDKOH56NPJ71HNqq9zGsIAzEOfaR5P 28s/h3i3X6B6OFE0kIGa/mNRS7CkGjIBT2HomSpxHE/Vdk8c9SdKri3Yq2NvGlOe jHYT2/19AiWJVsMsdM0ENNjr75dE7cM1u9mQck8X84eq8TC54/aOqeARFKkS8LLQ 0mURKUvMc1Fiq9CPAa0BpFfJtk/0Mj8PZF/QoA== -----END CERTIFICATE-----Generated at Thu Mar 19 10:57:42 2026 by rpki-client