$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa File: 3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa (raw, json) Hash identifier: lrzBfqehJUlOwQPEPsr6iJ4tqPpR4/esNBwJ2KIVmbs= Subject key identifier: 20:F6:8D:2B:29:51:7B:E5:86:55:E7:02:66:49:CD:C0:0E:70:62:68 Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 277B9FC35516EA3D36D41C7037866DEA0A2E21E5 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa Signing time: Mon 06 Apr 2026 06:00:00 +0000 ROA not before: Mon 06 Apr 2026 05:55:00 +0000 ROA not after: Mon 05 Apr 2027 06:00:00 +0000 asID: 45305 IP address blocks: 103.142.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:7b:9f:c3:55:16:ea:3d:36:d4:1c:70:37:86:6d:ea:0a:2e:21:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Apr 6 05:55:00 2026 GMT Not After : Apr 5 06:00:00 2027 GMT Subject: CN=20F68D2B29517BE58655E7026649CDC00E706268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:57:4b:e1:4a:50:d4:af:f3:ec:3f:15:52: e1:63:31:b0:82:3c:fe:7d:e5:10:8c:79:be:d6:84: 48:5a:00:2a:c4:b3:51:79:7b:fa:3d:de:79:00:ff: 4e:dc:21:41:b9:b3:93:48:8d:4a:a7:da:52:d0:5b: 37:b5:31:8e:bc:b6:fa:1c:5f:c3:af:73:39:75:07: f0:2c:30:6e:83:64:5e:ff:77:ed:d9:6d:80:11:f1: e2:64:eb:6e:ee:15:7f:9d:75:de:08:28:2d:f0:5e: d8:8f:d3:9f:1b:96:52:25:65:01:e8:03:c0:62:5f: ca:cd:82:78:e0:e2:86:cf:df:44:29:fe:7a:39:ed: b5:97:9b:55:23:24:20:5b:56:22:cf:93:f5:4a:c9: f0:1b:b7:a0:ac:ba:93:33:4f:4c:26:1a:ef:c7:a9: 82:5a:a2:5b:b2:cd:e7:9b:a8:27:76:1d:d2:df:26: 5d:5f:fc:56:1d:d1:14:d8:4c:51:49:d9:38:96:48: 5f:eb:c9:a9:fc:72:d5:68:fe:ab:fb:55:63:d4:8a: 39:e3:cb:96:33:02:7a:3a:e7:a9:90:ec:ad:b0:cd: 52:ae:6f:88:ed:86:49:25:eb:9b:a0:10:6c:fc:5e: 58:de:89:6c:47:47:fc:cc:78:52:ff:31:e4:1f:b5: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F6:8D:2B:29:51:7B:E5:86:55:E7:02:66:49:CD:C0:0E:70:62:68 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235342e302f32332d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.254.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:7e:c1:d0:c1:07:97:bc:1f:69:51:60:16:89:2f:55:27:08: 11:95:76:4e:44:0b:50:de:63:c0:7d:2f:a7:f1:e6:b5:9a:d2: ac:05:cd:f1:1e:d0:6c:91:6f:3f:6a:19:1d:a3:f5:87:91:eb: 3b:29:c9:bd:c0:52:cc:32:0b:ef:53:ee:ca:c3:21:0a:7b:da: 2e:7b:a4:ff:95:d8:c8:c0:92:2e:aa:cf:23:d1:6e:d5:ae:b9: dc:c6:50:54:0d:aa:01:92:90:d1:30:2b:cf:e6:9d:26:eb:4e: dd:cd:ba:65:ef:5e:a9:8a:48:61:b5:4e:d1:07:fc:74:a9:de: b6:f7:78:44:d5:c7:7f:58:04:30:fa:dd:31:1e:91:89:05:87: 31:24:08:20:fc:82:e4:23:73:31:a0:9f:30:e1:97:e5:f3:5d: 8e:5f:4b:19:fa:e5:fa:b5:2e:18:b9:3c:a0:ec:96:38:7f:90: cc:79:8e:15:2d:dc:73:9b:c2:e0:05:ca:d5:c0:2c:68:56:72: 95:56:df:db:42:fb:13:87:fb:92:c1:45:4e:a8:e6:43:01:7b: e9:08:9c:dc:72:9e:ee:85:fd:7c:38:b6:56:9d:15:fe:f2:5b: 06:df:43:10:75:37:83:7f:2f:3b:13:43:2e:25:36:bd:09:8a: c2:3d:13:62 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJ3ufw1UW6j021BxwN4Zt6gouIeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNjA0MDYwNTU1MDBaFw0yNzA0MDUwNjAwMDBaMDMxMTAvBgNV BAMTKDIwRjY4RDJCMjk1MTdCRTU4NjU1RTcwMjY2NDlDREMwMEU3MDYyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+T1dL4UpQ1K/z7D8VUuFjMbCC PP595RCMeb7WhEhaACrEs1F5e/o93nkA/07cIUG5s5NIjUqn2lLQWze1MY68tvoc X8Ovczl1B/AsMG6DZF7/d+3ZbYAR8eJk627uFX+ddd4IKC3wXtiP058bllIlZQHo A8BiX8rNgnjg4obP30Qp/no57bWXm1UjJCBbViLPk/VKyfAbt6CsupMzT0wmGu/H qYJaoluyzeebqCd2HdLfJl1f/FYd0RTYTFFJ2TiWSF/ryan8ctVo/qv7VWPUijnj y5YzAno656mQ7K2wzVKub4jthkkl65ugEGz8XljeiWxHR/zMeFL/MeQftdN5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUIPaNKylRe+WGVecCZknNwA5wYmgwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ47+MA0GCSqG SIb3DQEBCwUAA4IBAQAMfsHQwQeXvB9pUWAWiS9VJwgRlXZORAtQ3mPAfS+n8ea1 mtKsBc3xHtBskW8/ahkdo/WHkes7Kcm9wFLMMgvvU+7KwyEKe9oue6T/ldjIwJIu qs8j0W7VrrncxlBUDaoBkpDRMCvP5p0m607dzbpl716pikhhtU7RB/x0qd6293hE 1cd/WAQw+t0xHpGJBYcxJAgg/ILkI3MxoJ8w4Zfl812OX0sZ+uX6tS4YuTyg7JY4 f5DMeY4VLdxzm8LgBcrVwCxoVnKVVt/bQvsTh/uSwUVOqOZDAXvpCJzccp7uhf18 OLZWnRX+8lsG30MQdTeDfy87E0MuJTa9CYrCPRNi -----END CERTIFICATE-----Generated at Sat Apr 18 01:42:37 2026 by rpki-client