$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/3130332e3133332e36382e302f32322d3234203d3e203338333230.roa File: 3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (raw, json) Hash identifier: Hrip94cO74HpeyGLfnNJex6umgoDOwaX6F5+UX0Yo2Y= Subject key identifier: 70:49:1E:F7:3D:6C:92:AE:F7:A3:62:4A:52:68:60:17:F8:36:68:F7 Certificate issuer: /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Certificate serial: 4CEEEA927418FFC0B353A8290928B991737BF59C Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/3130332e3133332e36382e302f32322d3234203d3e203338333230.roa Signing time: Thu 19 Mar 2026 03:00:00 +0000 ROA not before: Thu 19 Mar 2026 02:55:00 +0000 ROA not after: Thu 18 Mar 2027 03:00:00 +0000 asID: 38320 IP address blocks: 103.133.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ee:ea:92:74:18:ff:c0:b3:53:a8:29:09:28:b9:91:73:7b:f5:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1 Validity Not Before: Mar 19 02:55:00 2026 GMT Not After : Mar 18 03:00:00 2027 GMT Subject: CN=70491EF73D6C92AEF7A3624A52686017F83668F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:81:2f:e6:5f:bf:2d:5b:c2:0c:fe:2c:1c: 8f:c0:ab:d8:f1:75:52:37:b6:80:ad:92:49:c4:0c: 80:e8:b9:d2:ad:b7:d7:77:45:25:2d:23:8c:4b:f4: 7f:e2:e5:bf:61:28:e9:33:c7:af:b7:80:a9:06:70: c5:7e:78:a0:ce:78:55:57:0f:1f:fa:5b:c2:cd:83: 9d:7c:4f:b1:17:6e:e2:a7:6c:65:e3:5d:2b:b0:ce: 1c:7e:87:cf:56:c3:20:73:63:63:58:02:9b:c3:1c: 3a:f5:58:be:52:cf:d4:b9:3e:37:28:12:79:3b:66: 48:41:71:f4:fd:91:80:f7:25:1a:b0:63:e5:f7:9f: 30:76:87:d3:3f:b6:bc:c8:e8:0e:2f:b8:de:35:70: 90:38:19:98:e8:54:1d:7b:94:4a:77:d4:46:e4:32: 94:2a:dd:39:68:62:e0:8a:71:2d:4a:1f:57:72:02: 2b:4c:41:1b:09:d3:69:98:bf:20:95:ba:51:14:b2: e7:1e:da:98:0e:f6:e3:63:99:33:06:65:24:83:e4: 5c:3d:33:85:34:ed:42:1f:c1:6a:aa:dc:42:53:d6: 40:97:93:f1:96:73:ac:e1:bf:11:bf:93:79:14:41: f5:6c:e6:23:a4:26:c7:3e:cd:26:70:58:eb:5e:88: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:49:1E:F7:3D:6C:92:AE:F7:A3:62:4A:52:68:60:17:F8:36:68:F7 X509v3 Authority Key Identifier: keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/3130332e3133332e36382e302f32322d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.68.0/22 Signature Algorithm: sha256WithRSAEncryption 25:35:5d:4d:54:8a:25:35:a9:5d:df:d8:e8:f4:1d:d7:ef:60: f6:4d:88:b4:3c:ca:a4:8d:23:92:90:e5:fc:dd:ec:77:83:15: a3:0b:1e:7a:be:ed:b4:a0:5e:47:88:a1:2f:e0:16:31:84:fa: 91:35:3b:ad:4f:53:ea:b0:97:a1:3a:1d:e8:34:95:bb:84:a9: f4:c3:7c:56:24:e9:91:4a:cd:f0:ef:31:c3:af:dd:1f:42:07: 55:a3:1e:5a:c0:8a:ad:ef:97:61:62:2c:62:d2:f8:f5:6d:f9: 6a:99:dc:18:5a:dd:5b:aa:8b:0e:ab:c7:9e:92:59:3f:03:1c: 1c:fc:a1:46:8d:c7:e9:e5:cb:14:0e:30:c2:86:f0:ae:8f:f0: 1c:01:b9:9a:dc:b5:57:bb:f1:0a:18:c9:91:7d:3a:3b:ba:a3: 46:a7:9c:e9:9c:7a:0c:7b:f4:72:b4:05:3c:a4:78:70:f3:44: 5c:1d:f8:c8:ca:16:b1:54:99:88:f5:32:7e:ff:10:82:b9:0f: ca:12:9d:39:50:c0:06:01:86:e2:d0:5d:14:93:1a:da:e7:c0: 09:7a:8e:95:13:b7:a1:12:41:b9:84:4c:0c:b0:f3:1d:54:4f: 64:91:91:2e:c3:09:7c:1f:4b:78:31:dd:40:8a:a7:1f:01:ce: 56:4f:b4:25 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTO7qknQY/8CzU6gpCSi5kXN79ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZE QkFDMTBBMTAeFw0yNjAzMTkwMjU1MDBaFw0yNzAzMTgwMzAwMDBaMDMxMTAvBgNV BAMTKDcwNDkxRUY3M0Q2QzkyQUVGN0EzNjI0QTUyNjg2MDE3RjgzNjY4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM34Ev5l+/LVvCDP4sHI/Aq9jx dVI3toCtkknEDIDoudKtt9d3RSUtI4xL9H/i5b9hKOkzx6+3gKkGcMV+eKDOeFVX Dx/6W8LNg518T7EXbuKnbGXjXSuwzhx+h89WwyBzY2NYApvDHDr1WL5Sz9S5Pjco Enk7ZkhBcfT9kYD3JRqwY+X3nzB2h9M/trzI6A4vuN41cJA4GZjoVB17lEp31Ebk MpQq3TloYuCKcS1KH1dyAitMQRsJ02mYvyCVulEUsuce2pgO9uNjmTMGZSSD5Fw9 M4U07UIfwWqq3EJT1kCXk/GWc6zhvxG/k3kUQfVs5iOkJsc+zSZwWOteiPOdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUcEke9z1skq73o2JKUmhgF/g2aPcwHwYDVR0j BBgwFoAUC3Cmxu9FDWFMGkXmGh4wxtusEKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjlmZDVhMS02MDI2LTRiZmEtYTY3MS1mMjc3MWFmZTAwN2MvMC8wQjcwQTZDNkVG NDUwRDYxNEMxQTQ1RTYxQTFFMzBDNkRCQUMxMEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEI3MEE2QzZFRjQ1MEQ2MTRDMUE0NUU2MUExRTMwQzZEQkFD MTBBMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2OWZkNWExLTYwMjYtNGJmYS1h NjcxLWYyNzcxYWZlMDA3Yy8wLzMxMzAzMzJlMzEzMzMzMmUzNjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmeFRDANBgkqhkiG 9w0BAQsFAAOCAQEAJTVdTVSKJTWpXd/Y6PQd1+9g9k2ItDzKpI0jkpDl/N3sd4MV owseer7ttKBeR4ihL+AWMYT6kTU7rU9T6rCXoTod6DSVu4Sp9MN8ViTpkUrN8O8x w6/dH0IHVaMeWsCKre+XYWIsYtL49W35apncGFrdW6qLDqvHnpJZPwMcHPyhRo3H 6eXLFA4wwobwro/wHAG5mty1V7vxChjJkX06O7qjRqec6Zx6DHv0crQFPKR4cPNE XB34yMoWsVSZiPUyfv8QgrkPyhKdOVDABgGG4tBdFJMa2ufACXqOlRO3oRJBuYRM DLDzHVRPZJGRLsMJfB9LeDHdQIqnHwHOVk+0JQ== -----END CERTIFICATE-----Generated at Fri Mar 27 00:45:25 2026 by rpki-client