
$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa
File: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (raw, json)
Hash identifier: FKKog+XQSDkvlhkDlh/3Ao41iJ0gN8My01/0TZX5i0E=
Subject key identifier: 28:C6:0B:03:24:15:EC:61:04:07:99:C3:16:7B:B0:6F:D3:EC:12:24
Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Certificate serial: 46AC5BA52812EA2B7319A6E94208890ADCE8900B
Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa
Signing time: Thu 26 Feb 2026 15:00:00 +0000
ROA not before: Thu 26 Feb 2026 14:55:00 +0000
ROA not after: Thu 25 Feb 2027 15:00:00 +0000
asID: 150980
IP address blocks: 103.70.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl
rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ac:5b:a5:28:12:ea:2b:73:19:a6:e9:42:08:89:0a:dc:e8:90:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Validity
Not Before: Feb 26 14:55:00 2026 GMT
Not After : Feb 25 15:00:00 2027 GMT
Subject: CN=28C60B032415EC61040799C3167BB06FD3EC1224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:18:51:58:0d:4d:0b:0b:1c:1b:49:a0:1a:
56:cb:ab:67:70:dd:40:f4:44:d8:e3:37:3e:ff:09:
32:85:71:2b:3e:a0:68:90:6b:39:d0:05:98:48:26:
a4:39:40:84:f8:09:50:73:74:4d:5a:0d:47:bb:4b:
66:4e:bb:41:bf:15:db:86:90:8c:7a:28:54:bf:70:
05:7a:de:87:2b:25:27:4b:59:4c:9a:6b:ce:80:ac:
c9:78:76:c0:8b:2e:6e:29:2d:54:6e:03:49:23:71:
d7:02:45:b2:25:a9:8b:e1:04:77:2a:b0:64:00:7f:
64:f2:26:0b:29:2f:1f:f3:76:86:8b:e0:2a:08:75:
ba:2b:aa:de:83:0e:2c:ee:76:7b:10:96:f1:32:0f:
3e:c3:dc:7c:d4:66:08:1f:27:38:56:12:5a:5b:b2:
ad:9e:e3:47:84:72:c0:ce:38:ed:d0:c0:5c:b1:1c:
bd:d1:e8:fc:b4:b8:ca:48:78:1c:42:58:f8:ff:de:
4b:ec:ed:69:55:6c:e0:43:eb:fa:e1:3a:f8:12:ad:
79:b4:3d:c0:e0:9f:38:a5:e4:f7:5b:e1:5b:b0:d1:
c3:a7:8d:1f:97:3b:66:83:ba:ee:8c:f6:bd:0c:c7:
34:7f:c5:7d:4c:94:10:8d:b8:d5:0b:c0:ef:45:f1:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C6:0B:03:24:15:EC:61:04:07:99:C3:16:7B:B0:6F:D3:EC:12:24
X509v3 Authority Key Identifier:
keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.70.122.0/24
Signature Algorithm: sha256WithRSAEncryption
73:98:c8:c5:2f:cc:ec:63:2a:06:7d:51:df:72:68:ad:c8:15:
55:ed:fc:99:f8:0b:4a:e0:20:ea:bf:0b:85:76:60:94:75:aa:
8f:69:aa:4d:26:41:c7:7f:c2:f4:68:9c:e5:34:9f:5f:25:c8:
83:62:82:d2:a1:97:db:c5:bf:d0:c5:2a:cd:cf:96:44:b3:cd:
e5:77:77:cc:91:06:c0:3e:7d:35:81:de:0f:99:f6:23:16:57:
5e:7b:60:00:50:7d:da:86:b5:65:f7:64:2f:a6:5a:2a:13:b7:
d0:e0:6f:93:d3:62:ad:7b:f5:ab:db:b6:dc:39:19:2d:27:0b:
cc:80:02:b2:b4:3d:be:18:f7:a1:59:16:b3:43:e8:2c:6d:36:
22:00:f1:38:d3:c4:c5:71:69:c8:c5:44:bf:5c:71:5e:2c:2c:
f0:99:f6:ac:4a:da:61:c4:7a:7f:4f:7d:f2:15:f3:fd:a6:9b:
e8:64:4f:f9:6e:93:89:20:d7:8e:98:c4:0b:cb:de:01:a7:e8:
6f:00:42:e4:da:3c:2c:5b:a4:22:51:9a:05:ed:f6:b8:1d:9f:
f1:17:96:49:eb:e8:eb:4d:9c:69:33:54:03:4d:cc:8f:1d:1b:
c9:f0:c6:2e:5e:9d:0a:47:5f:08:11:8f:4b:bf:ea:a0:6c:f5:
71:ac:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:45 2026 by rpki-client