$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa File: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (raw, json) Hash identifier: UFUV1/+yR0VUs891QJzA0faKiQcIk8IHhuxW1Cq8AbQ= Subject key identifier: A1:9C:80:F7:9A:A3:7B:58:5E:9B:56:AF:CC:D7:FA:1A:C1:5F:28:5C Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 303E7908681AB3872881FB97DF89D2854DC81B85 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa Signing time: Thu 26 Feb 2026 15:00:00 +0000 ROA not before: Thu 26 Feb 2026 14:55:00 +0000 ROA not after: Thu 25 Feb 2027 15:00:00 +0000 asID: 150980 IP address blocks: 103.70.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3e:79:08:68:1a:b3:87:28:81:fb:97:df:89:d2:85:4d:c8:1b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Feb 26 14:55:00 2026 GMT Not After : Feb 25 15:00:00 2027 GMT Subject: CN=A19C80F79AA37B585E9B56AFCCD7FA1AC15F285C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:bf:9d:ac:9d:86:ee:39:f6:61:50:ce:57: 85:13:28:6f:b1:2d:8a:91:db:d8:69:55:8a:2c:50: 2e:2b:28:fd:4e:4d:ba:7c:e4:49:be:03:04:6f:9a: 45:c8:95:f7:23:09:7b:60:ba:a4:04:91:9e:16:09: 3f:ca:9a:f2:28:a1:c1:bc:55:1c:93:43:68:6d:6c: ca:3b:9b:0f:57:5b:ca:18:0f:62:3c:9e:63:83:a4: b1:6a:93:9f:ee:01:91:bb:df:30:a2:86:96:c2:03: 74:64:a2:55:e5:5c:b3:d4:b0:7d:b6:9b:d0:f8:42: ed:22:9b:61:d2:cb:e3:ea:9b:73:47:26:a0:8d:e9: b5:c4:bc:b7:21:7c:9c:56:5c:66:22:33:4e:87:68: ae:8e:e9:1f:a2:fb:6b:57:18:b6:ef:d8:0b:b6:fa: cc:57:25:0d:cb:a5:31:c0:e8:20:d4:61:62:99:74: aa:c1:06:2c:ad:a6:ac:e2:52:25:44:fe:c0:c1:d8: 69:22:5c:73:b2:df:87:98:1f:aa:32:76:43:c6:fb: 04:28:bf:88:83:7d:58:dc:82:4c:75:8e:4e:35:30: 3b:f9:cd:52:6c:a4:3c:48:ba:75:32:a2:db:46:b0: bd:b1:b6:cb:ff:0b:8c:f6:e2:3d:5e:37:d3:70:24: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:80:F7:9A:A3:7B:58:5E:9B:56:AF:CC:D7:FA:1A:C1:5F:28:5C X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.70.123.0/24 Signature Algorithm: sha256WithRSAEncryption 93:c0:d1:78:51:15:c4:d6:2c:61:df:58:09:26:e5:d7:ad:e2: 1e:13:91:0c:6c:8e:5d:82:d0:6a:7a:50:e9:e6:2d:50:d8:0f: 70:14:7d:ec:9c:bf:a2:fc:cc:46:e5:08:f7:3a:62:e1:c9:b2: 7d:ca:03:37:9a:60:64:8d:b1:c1:b2:20:53:85:4c:51:e1:a8: 90:f8:07:a1:aa:09:61:c2:70:46:06:01:8e:83:1c:05:7b:29: 6e:4c:29:94:04:37:4c:79:9b:8d:db:ea:68:10:53:a8:e8:bb: 92:bc:10:70:3b:91:20:d7:4d:01:fe:92:74:8b:22:d5:21:89: cc:ec:a2:95:46:98:5f:b2:4b:12:4d:19:b4:ea:cd:25:a9:e6: c1:b4:11:1e:00:b2:b3:07:e2:9c:ea:5b:40:5a:a5:c3:e2:f4: 8b:72:3a:7f:41:b1:1e:e9:78:d6:19:43:d4:b7:df:d8:7b:21: 04:1d:6d:82:10:5c:e0:d5:b2:10:12:42:c3:3e:c0:60:68:7a: 36:63:62:e6:52:84:6e:3c:63:d4:16:d5:f7:7e:de:10:01:87: ac:1c:7e:1b:dd:5d:cd:44:b8:9b:6c:9e:14:ad:ff:87:4c:7d: a9:1b:33:84:c5:0e:06:26:fc:41:13:92:a3:ae:cd:3d:5f:52: f9:7c:a8:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMD55CGgas4cogfuX34nShU3IG4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNjAyMjYxNDU1MDBaFw0yNzAyMjUxNTAwMDBaMDMxMTAvBgNV BAMTKEExOUM4MEY3OUFBMzdCNTg1RTlCNTZBRkNDRDdGQTFBQzE1RjI4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAb+drJ2G7jn2YVDOV4UTKG+x LYqR29hpVYosUC4rKP1OTbp85Em+AwRvmkXIlfcjCXtguqQEkZ4WCT/KmvIoocG8 VRyTQ2htbMo7mw9XW8oYD2I8nmODpLFqk5/uAZG73zCihpbCA3RkolXlXLPUsH22 m9D4Qu0im2HSy+Pqm3NHJqCN6bXEvLchfJxWXGYiM06HaK6O6R+i+2tXGLbv2Au2 +sxXJQ3LpTHA6CDUYWKZdKrBBiytpqziUiVE/sDB2GkiXHOy34eYH6oydkPG+wQo v4iDfVjcgkx1jk41MDv5zVJspDxIunUyottGsL2xtsv/C4z24j1eN9NwJHo9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoZyA95qje1hem1avzNf6GsFfKFwwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzMjUwNjYyLTNlZWYtNGFhOS05 ZWRlLTU2MjlkNWI2ZWE5NS8wLzMxMzAzMzJlMzczMDJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0Z7MA0GCSqG SIb3DQEBCwUAA4IBAQCTwNF4URXE1ixh31gJJuXXreIeE5EMbI5dgtBqelDp5i1Q 2A9wFH3snL+i/MxG5Qj3OmLhybJ9ygM3mmBkjbHBsiBThUxR4aiQ+AehqglhwnBG BgGOgxwFeyluTCmUBDdMeZuN2+poEFOo6LuSvBBwO5Eg100B/pJ0iyLVIYnM7KKV RphfsksSTRm06s0lqebBtBEeALKzB+Kc6ltAWqXD4vSLcjp/QbEe6XjWGUPUt9/Y eyEEHW2CEFzg1bIQEkLDPsBgaHo2Y2LmUoRuPGPUFtX3ft4QAYesHH4b3V3NRLib bJ4Urf+HTH2pGzOExQ4GJvxBE5Kjrs09X1L5fKgt -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:21 2026 by rpki-client