$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa File: 3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (raw, json) Hash identifier: jBGIPwzC9rfAoaToPs4ycvXpxHc225TBo551laGK1vY= Subject key identifier: 53:60:F8:D5:78:97:A4:CB:55:03:BA:AE:A3:A5:C9:C4:7C:5A:C5:56 Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Certificate serial: 59B0D49BA286EE681839C123211B0197C6BA60F8 Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa Signing time: Sat 18 Apr 2026 10:00:01 +0000 ROA not before: Sat 18 Apr 2026 09:55:01 +0000 ROA not after: Sat 17 Apr 2027 10:00:01 +0000 asID: 142366 IP address blocks: 103.170.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 14:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b0:d4:9b:a2:86:ee:68:18:39:c1:23:21:1b:01:97:c6:ba:60:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Validity Not Before: Apr 18 09:55:01 2026 GMT Not After : Apr 17 10:00:01 2027 GMT Subject: CN=5360F8D57897A4CB5503BAAEA3A5C9C47C5AC556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:3a:9d:8b:be:5e:4d:7a:be:53:a2:fc:4b: 30:2e:d3:a3:49:bd:de:d1:80:2e:65:c5:f5:4b:d6: 82:e2:b4:a4:4b:de:42:35:31:8c:51:f3:57:e2:8d: 9d:e6:4d:69:a2:d7:78:8e:73:df:84:e2:0b:ef:a1: a4:ab:b3:f9:3e:d0:2b:8c:7b:d4:76:8e:50:ac:44: 7e:68:b1:3e:7f:32:65:b9:b3:bd:a8:a3:77:21:ac: 43:44:2b:b4:e5:b9:de:17:24:2f:66:f0:26:10:9a: 48:6d:38:d6:2e:96:b5:2f:62:d5:d2:f9:4d:a1:09: 08:a2:d6:d0:4c:32:57:44:8a:60:ba:82:8b:7a:2c: 70:86:df:df:c0:27:26:2e:84:b0:c5:50:28:6c:3f: f0:41:14:8f:8b:0b:eb:6a:ed:5f:34:4e:39:f5:58: f4:fa:8a:03:82:7b:a6:7c:5c:b8:48:d6:4e:8f:bf: 60:8c:d2:1d:8c:b0:b7:a8:89:c7:41:6f:db:e6:24: 63:ac:14:70:cd:eb:b6:d1:a6:c1:1b:98:c0:b8:61: 94:fc:4b:61:27:c7:e0:02:36:21:3d:cb:62:f9:66: 06:cd:ab:12:7b:79:29:6b:3a:c4:ab:fa:3a:a7:ec: 5c:48:e4:8f:63:e0:b4:e4:40:8d:c6:6f:99:01:e5: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:60:F8:D5:78:97:A4:CB:55:03:BA:AE:A3:A5:C9:C4:7C:5A:C5:56 X509v3 Authority Key Identifier: keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.30.0/23 Signature Algorithm: sha256WithRSAEncryption 51:d6:d3:c1:f1:2e:7a:95:9e:80:8f:f7:86:a0:6f:c5:50:09: 25:3a:39:16:27:31:a5:d1:d1:dc:af:99:94:1c:58:cf:f6:bd: b2:53:19:1c:99:6b:d7:2e:bf:8f:66:12:83:98:df:25:12:88: 30:0f:af:b4:79:8b:bd:f0:26:f2:61:e0:af:58:24:42:e7:4a: b7:1b:4a:cd:95:91:ee:11:76:b5:1e:b3:cc:76:99:7b:35:83: 38:45:97:f0:5d:36:9e:11:5a:9d:7c:99:aa:67:b3:79:b2:18: d8:0c:09:68:96:44:9b:0a:d3:cf:ce:e9:01:56:e2:c2:0f:36: 39:5b:61:1c:29:d5:3c:81:43:f4:b0:15:1b:d2:20:b0:d8:75: 2b:a5:1f:4e:8e:d5:f6:ef:a7:b9:03:b2:aa:44:ac:05:e1:fd: b5:0e:78:cd:1b:ff:c2:5f:4a:07:55:81:3a:e4:9d:c9:50:66: 0a:0c:c7:6d:e7:3b:cd:91:36:44:27:72:0a:96:21:f6:af:e3: f1:7b:96:da:36:4d:ee:ab:de:3a:79:0a:1d:c8:1b:1e:71:be: 6d:cf:48:41:8a:22:aa:80:29:20:b6:07:3a:7b:80:9c:bf:6f: 5e:e6:01:3a:2e:93:66:b6:2b:94:e3:8a:3f:55:19:b7:83:27: e0:87:f9:78 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWbDUm6KG7mgYOcEjIRsBl8a6YPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5 NTc3RDMxQzAeFw0yNjA0MTgwOTU1MDFaFw0yNzA0MTcxMDAwMDFaMDMxMTAvBgNV BAMTKDUzNjBGOEQ1Nzg5N0E0Q0I1NTAzQkFBRUEzQTVDOUM0N0M1QUM1NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQljqdi75eTXq+U6L8SzAu06NJ vd7RgC5lxfVL1oLitKRL3kI1MYxR81fijZ3mTWmi13iOc9+E4gvvoaSrs/k+0CuM e9R2jlCsRH5osT5/MmW5s72oo3chrENEK7Tlud4XJC9m8CYQmkhtONYulrUvYtXS +U2hCQii1tBMMldEimC6got6LHCG39/AJyYuhLDFUChsP/BBFI+LC+tq7V80Tjn1 WPT6igOCe6Z8XLhI1k6Pv2CM0h2MsLeoicdBb9vmJGOsFHDN67bRpsEbmMC4YZT8 S2Enx+ACNiE9y2L5ZgbNqxJ7eSlrOsSr+jqn7FxI5I9j4LTkQI3Gb5kB5ZfpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUU2D41XiXpMtVA7quo6XJxHxaxVYwHwYDVR0j BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1 RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3 RDMxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMxMzAzMzJlMzEzNzMwMmUzMzMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMyMzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6oeMA0GCSqG SIb3DQEBCwUAA4IBAQBR1tPB8S56lZ6Aj/eGoG/FUAklOjkWJzGl0dHcr5mUHFjP 9r2yUxkcmWvXLr+PZhKDmN8lEogwD6+0eYu98CbyYeCvWCRC50q3G0rNlZHuEXa1 HrPMdpl7NYM4RZfwXTaeEVqdfJmqZ7N5shjYDAlolkSbCtPPzukBVuLCDzY5W2Ec KdU8gUP0sBUb0iCw2HUrpR9OjtX276e5A7KqRKwF4f21DnjNG//CX0oHVYE65J3J UGYKDMdt5zvNkTZEJ3IKliH2r+Pxe5baNk3uq946eQodyBsecb5tz0hBiiKqgCkg tgc6e4Ccv29e5gE6LpNmtiuU44o/VRm3gyfgh/l4 -----END CERTIFICATE-----Generated at Sun Apr 19 15:49:36 2026 by rpki-client