$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa File: 3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa (raw, json) Hash identifier: se2HXGKNNi7Ek+z5z36cxPafjHtBbEFygmNfu3EQrEQ= Subject key identifier: 94:AB:EC:78:BA:B9:09:3E:CC:80:F4:84:58:D7:EA:BF:F0:AF:43:52 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 25485110636C2F637A77CDA1E6D6F04DE1872451 Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa Signing time: Mon 23 Mar 2026 07:02:46 +0000 ROA not before: Mon 23 Mar 2026 06:57:46 +0000 ROA not after: Mon 22 Mar 2027 07:02:46 +0000 asID: 150464 IP address blocks: 103.170.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:48:51:10:63:6c:2f:63:7a:77:cd:a1:e6:d6:f0:4d:e1:87:24:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Mar 23 06:57:46 2026 GMT Not After : Mar 22 07:02:46 2027 GMT Subject: CN=94ABEC78BAB9093ECC80F48458D7EABFF0AF4352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:58:2f:7c:cf:80:67:96:cd:17:57:ab:6a: 15:08:2d:6c:80:bb:f9:1f:82:81:c3:69:e8:1d:0f: b4:ef:c0:b9:66:94:a3:60:41:c2:68:73:78:a8:37: b2:94:24:4a:85:c1:0e:50:f9:93:63:16:5c:89:bc: d4:cb:aa:37:36:b8:e4:e7:26:d7:2f:dd:9a:cb:15: 16:13:6e:01:57:32:61:8f:ca:47:89:4c:bb:9d:2a: 49:40:3c:77:13:d2:e8:e4:1d:e0:5d:a4:c1:81:0b: 40:7e:ac:f1:b2:68:ec:20:b3:f4:6a:29:90:45:55: 29:d1:23:f2:ba:0d:66:bd:af:36:30:9a:75:fe:df: 89:e9:2b:95:db:5e:0f:8b:02:4d:e3:c4:0c:4b:3f: f5:1b:09:5e:51:dd:89:49:40:fe:85:37:42:9c:c2: 7a:22:e1:77:fc:5d:cd:14:ec:a2:2a:0f:f6:31:73: 0b:6b:77:8a:41:db:8b:d9:b3:9f:6d:12:be:82:f6: 86:d7:6b:9b:58:c0:30:1a:b6:f7:cc:e4:86:cd:c4: e8:6b:0e:9b:5b:d3:56:4a:ac:5e:67:19:06:e4:4b: 81:6d:d1:6b:d4:99:d2:22:f5:a7:07:cf:50:b9:5a: ec:c2:c3:56:6d:1d:21:ca:44:e7:47:e0:9c:d6:da: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AB:EC:78:BA:B9:09:3E:CC:80:F4:84:58:D7:EA:BF:F0:AF:43:52 X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/3130332e3137302e3139382e302f32342d3234203d3e20313530343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.198.0/24 Signature Algorithm: sha256WithRSAEncryption 53:e3:7b:dd:b4:12:d2:3b:dd:fb:88:f6:8e:1d:52:d9:2b:e1: 62:9a:86:74:bb:e9:6f:28:4d:ff:ad:74:e7:c9:15:e3:9a:59: 3d:0e:ef:e8:9c:ce:ce:31:51:e1:f1:0d:ba:08:f6:82:cd:80: 8b:50:ec:69:a7:6c:53:b1:45:c1:12:ea:35:53:2b:3f:4f:f5: 28:5d:b1:92:85:81:98:7d:fb:f2:1d:1a:38:c6:61:7b:a8:af: 26:89:d4:b7:ab:00:aa:ce:cf:c8:84:b4:9e:67:d1:a0:fd:12: 4e:59:9a:eb:f8:57:9d:0d:de:7d:54:99:21:5c:90:41:5c:d5: 80:c2:98:b8:76:d5:f0:26:ca:ce:8e:17:33:f5:0d:01:61:a3: 7c:ff:63:96:de:f9:28:70:06:d0:7f:31:b0:b7:6f:73:6b:e8: 18:1d:cb:ff:d3:4d:fb:66:8e:dc:e4:b7:9c:18:35:84:60:48: c0:f2:31:a4:b6:95:d0:e5:53:2c:74:44:a8:92:6d:8b:8e:96: 9e:93:c3:c3:e0:5c:06:b7:bd:72:8b:f2:c0:fb:e1:77:83:29: df:35:b8:f2:1b:4d:fc:45:3c:9b:36:e6:55:0b:87:76:30:92: 01:bf:e0:16:e1:25:45:e9:37:ad:95:88:93:a3:20:e4:c6:0e: 88:91:8e:47 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJUhREGNsL2N6d82h5tbwTeGHJFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNjAzMjMwNjU3NDZaFw0yNzAzMjIwNzAyNDZaMDMxMTAvBgNV BAMTKDk0QUJFQzc4QkFCOTA5M0VDQzgwRjQ4NDU4RDdFQUJGRjBBRjQzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd11gvfM+AZ5bNF1erahUILWyA u/kfgoHDaegdD7TvwLlmlKNgQcJoc3ioN7KUJEqFwQ5Q+ZNjFlyJvNTLqjc2uOTn Jtcv3ZrLFRYTbgFXMmGPykeJTLudKklAPHcT0ujkHeBdpMGBC0B+rPGyaOwgs/Rq KZBFVSnRI/K6DWa9rzYwmnX+34npK5XbXg+LAk3jxAxLP/UbCV5R3YlJQP6FN0Kc wnoi4Xf8Xc0U7KIqD/Yxcwtrd4pB24vZs59tEr6C9obXa5tYwDAatvfM5IbNxOhr Dptb01ZKrF5nGQbkS4Ft0WvUmdIi9acHz1C5WuzCw1ZtHSHKROdH4JzW2vXBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlKvseLq5CT7MgPSEWNfqv/CvQ1IwHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZGE1ODgyLWI4MDQtNDE1NC05 NTliLTYzMzZiMjRlMThiMi8wLzMxMzAzMzJlMzEzNzMwMmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqsYwDQYJ KoZIhvcNAQELBQADggEBAFPje920EtI73fuI9o4dUtkr4WKahnS76W8oTf+tdOfJ FeOaWT0O7+iczs4xUeHxDboI9oLNgItQ7GmnbFOxRcES6jVTKz9P9ShdsZKFgZh9 +/IdGjjGYXuoryaJ1LerAKrOz8iEtJ5n0aD9Ek5Zmuv4V50N3n1UmSFckEFc1YDC mLh21fAmys6OFzP1DQFho3z/Y5be+ShwBtB/MbC3b3Nr6Bgdy//TTftmjtzkt5wY NYRgSMDyMaS2ldDlUyx0RKiSbYuOlp6Tw8PgXAa3vXKL8sD74XeDKd81uPIbTfxF PJs25lULh3YwkgG/4BbhJUXpN62ViJOjIOTGDoiRjkc= -----END CERTIFICATE-----Generated at Thu Mar 26 21:20:09 2026 by rpki-client