$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32332d3234203d3e203436303233.roa File: 3130332e32342e3130362e302f32332d3234203d3e203436303233.roa (raw, json) Hash identifier: /2Kl1IiUL6nX94Sr4GVxgxuNXprutPNg3TxwcvXxbeE= Subject key identifier: 3A:02:83:32:B4:14:51:7E:C7:EB:65:FA:B2:4F:83:AA:31:16:47:CC Certificate issuer: /CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Certificate serial: 0C1EFA873FF47C43CAACFEDA7108C9C118C9C0CB Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32332d3234203d3e203436303233.roa Signing time: Tue 14 Oct 2025 13:00:03 +0000 ROA not before: Tue 14 Oct 2025 12:55:03 +0000 ROA not after: Tue 13 Oct 2026 13:00:03 +0000 asID: 46023 IP address blocks: 103.24.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:1e:fa:87:3f:f4:7c:43:ca:ac:fe:da:71:08:c9:c1:18:c9:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Validity Not Before: Oct 14 12:55:03 2025 GMT Not After : Oct 13 13:00:03 2026 GMT Subject: CN=3A028332B414517EC7EB65FAB24F83AA311647CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:8d:82:12:40:86:9c:23:e7:a8:f5:5f:16: e1:92:b5:66:12:89:bc:c1:4c:69:9e:2a:d6:71:55: c3:c3:25:b5:19:01:e2:04:fe:ea:ab:a4:82:f5:c0: 02:ab:26:d4:2b:fb:32:1b:4a:ee:36:04:82:9a:04: 5e:be:79:9b:3b:fd:bc:42:e8:5e:4f:ec:37:5f:2b: 2b:a5:2d:d1:e9:b5:f2:8b:06:b3:72:a4:5d:bf:44: 3e:f1:36:18:b0:bd:ac:e1:52:21:30:73:6e:18:2b: 58:f0:1b:6b:3f:d5:25:7f:6c:cd:ec:10:fb:af:19: 43:e5:44:79:be:97:c4:07:a8:9d:14:6c:b6:7f:56: 01:45:4c:d2:ec:38:36:f0:85:d4:4a:a9:1c:46:5d: d1:5c:c6:a8:9e:c0:39:9a:38:1b:de:63:2b:aa:f0: 41:73:33:05:62:2d:bf:32:0c:29:66:84:77:de:a4: 1d:0b:3f:36:17:51:e0:37:43:b7:70:89:9e:53:7d: ae:e1:67:3f:78:d0:e0:6d:7b:5d:96:92:42:90:6b: 8b:f2:63:34:9f:83:5a:cc:24:69:a8:b4:41:5e:79: fa:72:72:28:2d:e5:23:90:2c:f3:e9:fc:bf:69:23: 9a:f1:9a:01:ae:15:e2:0e:fd:0f:d4:6b:63:21:3d: fe:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:02:83:32:B4:14:51:7E:C7:EB:65:FA:B2:4F:83:AA:31:16:47:CC X509v3 Authority Key Identifier: keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3130332e32342e3130362e302f32332d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.106.0/23 Signature Algorithm: sha256WithRSAEncryption 85:7a:c5:76:ac:08:13:ab:53:b1:18:a2:75:8c:0e:83:2d:ed: a1:47:6c:c9:8c:e3:4f:30:67:b8:6a:31:22:b0:a1:2a:e6:a5: 5a:5e:54:15:42:59:7d:5b:e5:ed:3d:1f:a5:21:90:00:3d:19: 2d:0e:d7:fe:65:52:9a:38:29:d5:ad:fe:d5:b7:0d:5d:5e:23: 58:37:44:d7:89:a9:fe:94:49:77:5d:75:2c:53:ef:87:b6:4e: 37:88:cd:7f:78:7c:da:29:57:b4:ec:7a:1e:27:92:b3:93:a8: 5f:0f:55:79:cf:16:34:a6:f9:dc:da:c7:8f:5a:43:14:1a:a2: 45:65:7e:7d:75:09:5b:49:17:38:24:00:b2:7d:9f:ad:fd:9c: a2:1d:e5:32:fe:c1:f5:0c:b9:b0:8a:19:05:d1:ae:46:47:6c: 6a:32:48:75:1f:77:47:5b:d2:7f:ac:d5:29:0e:ca:5b:91:66: 7a:5d:fc:4e:da:c4:11:14:c3:08:40:69:4e:21:cb:fa:31:16: 27:24:6c:8c:d4:20:26:92:00:a0:82:c3:96:f6:fc:82:2b:dd: f8:19:f8:41:ce:c5:ae:94:f4:e0:9a:4c:d1:c7:c8:53:b2:b0: fa:00:e7:89:b6:5d:55:de:95:01:c1:33:d8:5d:6a:e1:f3:c0: d2:cc:54:b5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUDB76hz/0fEPKrP7acQjJwRjJwMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3 NjRBNDY5NTAeFw0yNTEwMTQxMjU1MDNaFw0yNjEwMTMxMzAwMDNaMDMxMTAvBgNV BAMTKDNBMDI4MzMyQjQxNDUxN0VDN0VCNjVGQUIyNEY4M0FBMzExNjQ3Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+Y2CEkCGnCPnqPVfFuGStWYS ibzBTGmeKtZxVcPDJbUZAeIE/uqrpIL1wAKrJtQr+zIbSu42BIKaBF6+eZs7/bxC 6F5P7DdfKyulLdHptfKLBrNypF2/RD7xNhiwvazhUiEwc24YK1jwG2s/1SV/bM3s EPuvGUPlRHm+l8QHqJ0UbLZ/VgFFTNLsODbwhdRKqRxGXdFcxqiewDmaOBveYyuq 8EFzMwViLb8yDClmhHfepB0LPzYXUeA3Q7dwiZ5Tfa7hZz940OBte12WkkKQa4vy YzSfg1rMJGmotEFeefpycigt5SOQLPPp/L9pI5rxmgGuFeIO/Q/Ua2MhPf5HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOgKDMrQUUX7H62X6sk+DqjEWR8wwHwYDVR0j BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB NDY5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05 NjU1LTAzMjQ1YTAxYWVmOC8wLzMxMzAzMzJlMzIzNDJlMzEzMDM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcYajANBgkqhkiG 9w0BAQsFAAOCAQEAhXrFdqwIE6tTsRiidYwOgy3toUdsyYzjTzBnuGoxIrChKual Wl5UFUJZfVvl7T0fpSGQAD0ZLQ7X/mVSmjgp1a3+1bcNXV4jWDdE14mp/pRJd111 LFPvh7ZON4jNf3h82ilXtOx6HieSs5OoXw9Vec8WNKb53NrHj1pDFBqiRWV+fXUJ W0kXOCQAsn2frf2coh3lMv7B9Qy5sIoZBdGuRkdsajJIdR93R1vSf6zVKQ7KW5Fm el38TtrEERTDCEBpTiHL+jEWJyRsjNQgJpIAoILDlvb8givd+Bn4Qc7FrpT04JpM 0cfIU7Kw+gDnibZdVd6VAcEz2F1q4fPA0sxUtQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:06 2025 by rpki-client