$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa File: 3130332e36382e302e302f32322d3232203d3e20313335343539.roa (raw, json) Hash identifier: kGHRZBs24FaHRVFBTo5H8TSK40P9obhHUYCt28Ne49U= Subject key identifier: 14:9A:CD:78:FE:CC:66:2D:FF:E5:4A:EC:A5:B2:60:ED:D6:80:7E:B7 Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 02DCF55B492A0FCCE70CD159D22E9B13D3553270 Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa Signing time: Wed 18 Mar 2026 09:02:49 +0000 ROA not before: Wed 18 Mar 2026 08:57:49 +0000 ROA not after: Wed 17 Mar 2027 09:02:49 +0000 asID: 135459 IP address blocks: 103.68.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:dc:f5:5b:49:2a:0f:cc:e7:0c:d1:59:d2:2e:9b:13:d3:55:32:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: Mar 18 08:57:49 2026 GMT Not After : Mar 17 09:02:49 2027 GMT Subject: CN=149ACD78FECC662DFFE54AECA5B260EDD6807EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:29:4b:64:07:c0:69:92:45:2b:6e:f8:ff: 2e:5b:12:ad:a4:4f:c4:17:09:a5:1f:35:d0:96:c6: 52:9c:80:56:52:f1:de:9f:38:a9:cf:a0:fb:73:d2: 43:bb:a1:3f:21:cb:67:25:b0:00:0d:b5:84:61:17: d5:e8:a2:95:15:fe:c3:c8:0e:28:ce:98:52:15:65: 6a:c7:2a:13:a7:0a:39:ae:d1:d7:3e:17:c6:50:e5: a1:d2:c1:40:6a:de:51:83:f0:e2:20:51:de:a9:49: 8b:79:5c:77:74:ad:df:fa:75:6a:c3:e0:dc:8b:bb: 65:19:ff:28:75:7b:d0:23:d2:76:7f:5c:c5:f0:58: a1:78:ff:f6:58:c5:c4:2b:aa:24:a0:e7:63:52:bb: b5:d3:86:a9:70:10:4b:e4:ab:b3:ae:05:f6:1b:d1: 07:7d:87:cb:1a:17:c8:f1:72:03:ad:8f:00:f3:fa: 63:b6:96:ba:dd:fe:1c:05:1e:9b:bb:11:03:62:ee: 50:6c:6c:88:54:1a:d5:97:39:da:03:04:34:51:5d: 21:c4:0a:0e:d9:36:51:d6:2f:57:88:67:30:a1:23: e6:32:f5:07:68:8b:16:52:3d:13:2e:1a:4d:f3:82: 28:30:59:05:8c:6c:e1:c5:6d:1b:39:db:db:06:86: 8e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9A:CD:78:FE:CC:66:2D:FF:E5:4A:EC:A5:B2:60:ED:D6:80:7E:B7 X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.0.0/22 Signature Algorithm: sha256WithRSAEncryption 12:b2:93:f2:e6:3a:bd:bb:ee:c3:5c:27:65:a5:a4:bc:c8:38: 3c:1f:60:dc:40:fc:c1:71:1e:22:35:2a:d6:2b:b9:9a:0c:2e: be:be:95:ad:65:3c:e6:b2:7a:2a:a3:75:bb:89:16:c6:32:25: df:1a:a9:5d:cd:4a:df:d2:07:c0:e6:0a:e2:70:1d:69:91:79: 04:81:6d:b0:6f:79:f9:35:6e:f6:bb:a0:bb:db:fb:00:7e:93: 47:6a:2d:8b:9a:85:e4:65:1f:a0:29:25:0f:32:62:7b:22:3b: da:61:1b:cf:20:a7:dd:6d:12:e2:45:5f:4d:5c:80:d6:32:36: 70:eb:f5:1d:f4:e0:27:fa:b4:11:5a:12:b1:3c:70:13:5f:c5: 5c:98:14:f4:3e:2f:4c:c6:56:69:cf:f8:12:92:59:1b:82:05: 2d:03:b8:13:8c:71:b9:98:c8:c4:d7:53:5c:a4:eb:83:5e:07: 21:0a:f0:21:ac:1a:57:7b:d7:8e:4a:ea:ed:69:77:43:20:0b: 54:a1:a1:5a:f4:61:24:27:e4:51:09:f7:8d:96:8c:44:0e:b5: a1:02:37:bd:0e:d3:6d:2e:89:39:bb:e8:dd:80:0a:ae:62:28: 54:e3:8e:c9:c9:f1:e8:c9:8a:26:d4:c1:9e:ba:11:94:1e:90: d4:32:0e:f8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUAtz1W0kqD8znDNFZ0i6bE9NVMnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNjAzMTgwODU3NDlaFw0yNzAzMTcwOTAyNDlaMDMxMTAvBgNV BAMTKDE0OUFDRDc4RkVDQzY2MkRGRkU1NEFFQ0E1QjI2MEVERDY4MDdFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fClLZAfAaZJFK274/y5bEq2k T8QXCaUfNdCWxlKcgFZS8d6fOKnPoPtz0kO7oT8hy2clsAANtYRhF9XoopUV/sPI DijOmFIVZWrHKhOnCjmu0dc+F8ZQ5aHSwUBq3lGD8OIgUd6pSYt5XHd0rd/6dWrD 4NyLu2UZ/yh1e9Aj0nZ/XMXwWKF4//ZYxcQrqiSg52NSu7XThqlwEEvkq7OuBfYb 0Qd9h8saF8jxcgOtjwDz+mO2lrrd/hwFHpu7EQNi7lBsbIhUGtWXOdoDBDRRXSHE Cg7ZNlHWL1eIZzChI+Yy9QdoixZSPRMuGk3zgigwWQWMbOHFbRs529sGho5TAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUFJrNeP7MZi3/5UrspbJg7daAfrcwHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzAyZTMwMmYzMjMyMmQz MjMyMjAzZDNlMjAzMTMzMzUzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnRAAwDQYJKoZIhvcN AQELBQADggEBABKyk/LmOr277sNcJ2WlpLzIODwfYNxA/MFxHiI1KtYruZoMLr6+ la1lPOayeiqjdbuJFsYyJd8aqV3NSt/SB8DmCuJwHWmReQSBbbBvefk1bva7oLvb +wB+k0dqLYuaheRlH6ApJQ8yYnsiO9phG88gp91tEuJFX01cgNYyNnDr9R304Cf6 tBFaErE8cBNfxVyYFPQ+L0zGVmnP+BKSWRuCBS0DuBOMcbmYyMTXU1yk64NeByEK 8CGsGld7145K6u1pd0MgC1ShoVr0YSQn5FEJ942WjEQOtaECN70O020uiTm76N2A Cq5iKFTjjsnJ8ejJiibUwZ66EZQekNQyDvg= -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:16 2026 by rpki-client