$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa File: 3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: bcf/uQa4NtyFtEle1bW7574Iy8XJA8twNe0fRjpQkHo= Subject key identifier: 76:F8:80:75:CF:B8:F0:85:4B:6C:26:49:32:46:15:22:70:77:07:A8 Certificate issuer: /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Certificate serial: 245B7D0E979DB89743A0FC7506463017B77682CE Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa Signing time: Thu 23 Apr 2026 05:34:30 +0000 ROA not before: Thu 23 Apr 2026 05:29:30 +0000 ROA not after: Thu 22 Apr 2027 05:34:30 +0000 asID: 138077 IP address blocks: 103.16.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Apr 2026 12:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5b:7d:0e:97:9d:b8:97:43:a0:fc:75:06:46:30:17:b7:76:82:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C Validity Not Before: Apr 23 05:29:30 2026 GMT Not After : Apr 22 05:34:30 2027 GMT Subject: CN=76F88075CFB8F0854B6C264932461522707707A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:79:23:a5:67:f1:f6:ab:3c:5c:de:e7:fe: 70:e0:a3:8e:88:7c:7c:77:cb:1b:cf:f7:68:fb:df: 5a:7a:6a:2d:82:54:29:b6:8a:b6:ae:a9:db:82:9f: 5c:df:c5:71:0c:5d:43:02:5e:2e:da:17:2c:1b:fa: d2:2c:d7:b2:49:45:5f:2d:06:02:b0:ab:b0:77:87: a4:7e:48:03:d2:a2:a4:42:56:bd:1e:18:0e:26:b4: 95:ef:df:f5:76:33:92:42:4b:eb:7d:54:1a:d2:66: e2:37:01:4a:4d:be:2a:ba:b0:5a:27:f4:59:12:b8: eb:13:90:0c:52:60:23:c9:58:5c:42:11:f1:d5:f6: 06:50:0a:35:6a:dc:1f:ca:8d:54:56:8a:25:aa:28: 6c:4d:1b:e7:38:20:14:8c:8b:59:a1:9c:8f:f6:cd: b4:ba:44:16:b0:45:42:b3:43:2b:17:3c:bf:e8:78: eb:41:c1:22:aa:78:67:43:aa:40:55:c9:af:42:98: ef:24:97:79:38:0e:18:6f:c7:d6:05:f6:57:01:79: 94:6d:27:ca:c5:19:c1:d4:2e:4e:96:12:b3:5e:e4: 39:b7:99:82:40:52:4d:63:3a:8a:77:eb:ed:88:90: 0b:57:41:86:54:f1:16:5a:cb:ac:a6:bf:7b:c3:25: 22:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:80:75:CF:B8:F0:85:4B:6C:26:49:32:46:15:22:70:77:07:A8 X509v3 Authority Key Identifier: keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31362e3133382e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.138.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b9:4a:5b:6d:b7:6c:1f:7f:0c:d2:52:ec:32:ba:99:9a:10: fc:23:70:e5:23:3f:01:6a:56:02:67:5a:d3:9d:49:b6:b6:a0: d5:2b:ba:00:7b:99:6f:85:5a:90:49:3c:19:d0:70:15:b5:d2: 80:8c:f3:48:5c:47:5d:6f:d2:c9:12:68:48:56:a2:13:66:cf: c0:6f:a3:db:04:7b:86:0b:69:36:57:0c:43:69:b4:c0:6c:28: cf:bf:2c:a9:5a:48:45:b0:f9:23:e6:66:ac:e4:1b:ff:3b:10: 2e:16:50:52:89:07:58:3a:9a:e7:d8:9f:e7:5b:5e:93:c6:9f: 03:c8:af:1a:00:ee:6e:c3:68:69:d9:3b:ee:d7:ce:46:a0:30: 4e:a0:fc:0f:ba:59:d5:bc:32:74:c7:fe:fe:ea:bc:bd:7c:9b: 96:17:64:b6:8a:55:29:51:68:61:92:44:e2:14:e3:1d:56:c7: 07:5a:2a:41:25:2d:5c:1f:a4:9f:be:6b:3f:f2:69:91:4f:ad: 15:a7:fb:dc:63:93:f5:95:14:c0:43:9e:b2:32:a7:f8:cc:2a: 67:3d:4d:f1:43:26:75:48:e3:9f:0c:66:96:9e:6b:f5:7a:e3: fd:c4:ea:19:b1:d3:d7:b6:cb:54:d9:e3:f4:96:fd:a7:0e:5e: 41:17:be:27 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJFt9DpeduJdDoPx1BkYwF7d2gs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1 N0NFQUQ4QzAeFw0yNjA0MjMwNTI5MzBaFw0yNzA0MjIwNTM0MzBaMDMxMTAvBgNV BAMTKDc2Rjg4MDc1Q0ZCOEYwODU0QjZDMjY0OTMyNDYxNTIyNzA3NzA3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqHkjpWfx9qs8XN7n/nDgo46I fHx3yxvP92j731p6ai2CVCm2irauqduCn1zfxXEMXUMCXi7aFywb+tIs17JJRV8t BgKwq7B3h6R+SAPSoqRCVr0eGA4mtJXv3/V2M5JCS+t9VBrSZuI3AUpNviq6sFon 9FkSuOsTkAxSYCPJWFxCEfHV9gZQCjVq3B/KjVRWiiWqKGxNG+c4IBSMi1mhnI/2 zbS6RBawRUKzQysXPL/oeOtBwSKqeGdDqkBVya9CmO8kl3k4Dhhvx9YF9lcBeZRt J8rFGcHULk6WErNe5Dm3mYJAUk1jOop36+2IkAtXQYZU8RZay6ymv3vDJSIDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdviAdc+48IVLbCZJMkYVInB3B6gwHwYDVR0j BBgwFoAUAZxOJu7CUuph+7Cf2FbN0FfOrYwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDVjNDcxNS0yODJlLTQ1N2YtYjg5ZS0wNDFiZjkxMTBhZjgvMC8wMTlDNEUyNkVF QzI1MkVBNjFGQkIwOUZEODU2Q0REMDU3Q0VBRDhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE5QzRFMjZFRUMyNTJFQTYxRkJCMDlGRDg1NkNERDA1N0NF QUQ4Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkNWM0NzE1LTI4MmUtNDU3Zi1i ODllLTA0MWJmOTExMGFmOC8wLzMxMzAzMzJlMzEzNjJlMzEzMzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxCKMA0GCSqG SIb3DQEBCwUAA4IBAQAtuUpbbbdsH38M0lLsMrqZmhD8I3DlIz8BalYCZ1rTnUm2 tqDVK7oAe5lvhVqQSTwZ0HAVtdKAjPNIXEddb9LJEmhIVqITZs/Ab6PbBHuGC2k2 VwxDabTAbCjPvyypWkhFsPkj5mas5Bv/OxAuFlBSiQdYOprn2J/nW16Txp8DyK8a AO5uw2hp2Tvu185GoDBOoPwPulnVvDJ0x/7+6ry9fJuWF2S2ilUpUWhhkkTiFOMd VscHWipBJS1cH6Sfvms/8mmRT60Vp/vcY5P1lRTAQ56yMqf4zCpnPU3xQyZ1SOOf DGaWnmv1euP9xOoZsdPXtstU2eP0lv2nDl5BF74n -----END CERTIFICATE-----Generated at Mon Apr 27 19:44:12 2026 by rpki-client