$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa File: 3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa (raw, json) Hash identifier: 91fVtCC4AgaK4l2ZwLoX+I08uviYaVyJG9zR3Y9+wPU= Subject key identifier: 3D:0C:91:A5:8A:FA:18:9B:B5:E5:51:F3:9C:62:97:4D:22:1F:E2:EE Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 58FA4D3179DBEDF7A198185CBC232A71982F4F8B Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa Signing time: Fri 31 Oct 2025 15:00:02 +0000 ROA not before: Fri 31 Oct 2025 14:55:02 +0000 ROA not after: Fri 30 Oct 2026 15:00:02 +0000 asID: 140457 IP address blocks: 103.189.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fa:4d:31:79:db:ed:f7:a1:98:18:5c:bc:23:2a:71:98:2f:4f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Oct 31 14:55:02 2025 GMT Not After : Oct 30 15:00:02 2026 GMT Subject: CN=3D0C91A58AFA189BB5E551F39C62974D221FE2EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:80:90:36:eb:41:64:a3:4c:ff:12:83:4a: ed:3e:e0:b2:c2:e7:e1:84:a7:23:69:cb:4c:9e:b5: a2:b7:d2:d1:0f:5b:84:c3:d3:a8:2a:bb:b0:c5:f3: 1f:df:81:41:c8:1e:ce:06:44:2e:3f:b1:67:78:b0: 1f:3d:d4:70:c8:1f:ab:cc:3e:ec:1c:52:be:c1:1b: e0:61:e8:e0:9e:c4:66:01:6a:28:1f:c8:78:59:d4: 34:79:99:cd:46:30:37:78:fa:98:37:1b:70:30:58: 03:73:9f:d3:44:f1:bc:19:bf:83:92:d5:a6:21:7b: 01:ee:b2:3e:8a:73:65:34:78:cd:55:30:95:f5:2e: c0:a9:da:92:e3:04:6a:ce:9c:ba:2e:ae:aa:b2:52: 55:29:22:55:6c:e7:b5:8a:bc:30:6e:7c:5d:30:f9: e9:fa:82:d7:2d:91:56:b8:ba:98:e1:ff:e4:77:40: ca:e2:db:37:c0:55:01:6b:ab:89:a2:93:68:80:62: e3:b8:65:81:2c:fb:a5:67:07:bd:e2:35:b2:77:c2: c0:50:9e:8b:39:91:0f:5f:06:54:ed:91:a3:a6:8f: 99:c0:e6:5d:3d:57:ca:31:b3:22:f2:67:3c:e5:4e: 4c:54:22:be:49:22:6f:76:c3:c9:ad:3f:4b:c3:1c: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0C:91:A5:8A:FA:18:9B:B5:E5:51:F3:9C:62:97:4D:22:1F:E2:EE X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132322e302f32342d3234203d3e20313430343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.122.0/24 Signature Algorithm: sha256WithRSAEncryption 19:5c:a9:0f:3c:34:cf:88:0b:a1:1b:f6:16:a8:66:17:31:de: c2:1e:a5:b9:cc:e5:67:d1:72:56:1d:18:5e:ec:cd:d6:a6:fc: 94:82:2f:7d:ac:b4:d1:ae:55:96:d2:f4:0a:13:ad:96:e1:e8: 0e:f4:c3:1e:62:e1:78:01:22:81:3c:5b:42:81:7f:45:34:6c: dc:34:93:5e:dd:50:06:d3:6e:6f:66:4d:56:09:ac:51:ad:d8: f7:19:4c:0e:5d:59:44:a3:f0:b6:31:02:95:ab:e6:64:94:af: 54:82:12:87:9b:48:30:84:ce:32:45:a8:8a:c1:4c:85:6f:3f: 3c:04:6d:ed:28:42:d3:de:7d:86:75:1f:1c:6a:88:18:a9:5f: 0c:29:2d:20:82:ab:20:5c:80:9f:63:23:de:67:aa:24:1f:d6: 5f:7f:d7:de:80:d1:cb:eb:6d:a8:71:e9:c1:56:c5:62:8a:63: 21:76:31:2a:be:5f:77:7a:5e:1c:52:53:00:ee:76:a0:58:11: 68:23:49:55:16:ec:54:a5:69:ac:50:b2:26:a2:07:93:de:43: e5:fe:2e:ce:54:83:cd:63:62:f8:6f:b8:db:92:f9:7c:fe:9c: 6f:49:3b:9e:aa:2b:fe:8e:6e:34:f0:b9:d2:e8:e2:f2:4d:fd: 14:bb:5d:6e -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWPpNMXnb7fehmBhcvCMqcZgvT4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTEwMzExNDU1MDJaFw0yNjEwMzAxNTAwMDJaMDMxMTAvBgNV BAMTKDNEMEM5MUE1OEFGQTE4OUJCNUU1NTFGMzlDNjI5NzREMjIxRkUyRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8moCQNutBZKNM/xKDSu0+4LLC 5+GEpyNpy0yetaK30tEPW4TD06gqu7DF8x/fgUHIHs4GRC4/sWd4sB891HDIH6vM PuwcUr7BG+Bh6OCexGYBaigfyHhZ1DR5mc1GMDd4+pg3G3AwWANzn9NE8bwZv4OS 1aYhewHusj6Kc2U0eM1VMJX1LsCp2pLjBGrOnLourqqyUlUpIlVs57WKvDBufF0w +en6gtctkVa4upjh/+R3QMri2zfAVQFrq4mik2iAYuO4ZYEs+6VnB73iNbJ3wsBQ nos5kQ9fBlTtkaOmj5nA5l09V8oxsyLyZzzlTkxUIr5JIm92w8mtP0vDHMwXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUPQyRpYr6GJu15VHznGKXTSIf4u4wHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYTBiOGY4LTRmY2YtNGI5Yi05 Nzk0LWNkM2I0ZTQwNmVhYi8wLzMxMzAzMzJlMzEzODM5MmUzMTMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM1Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXowDQYJ KoZIhvcNAQELBQADggEBABlcqQ88NM+IC6Eb9haoZhcx3sIepbnM5WfRclYdGF7s zdam/JSCL32stNGuVZbS9AoTrZbh6A70wx5i4XgBIoE8W0KBf0U0bNw0k17dUAbT bm9mTVYJrFGt2PcZTA5dWUSj8LYxApWr5mSUr1SCEoebSDCEzjJFqIrBTIVvPzwE be0oQtPefYZ1HxxqiBipXwwpLSCCqyBcgJ9jI95nqiQf1l9/196A0cvrbahx6cFW xWKKYyF2MSq+X3d6XhxSUwDudqBYEWgjSVUW7FSlaaxQsiaiB5PeQ+X+Ls5Ug81j YvhvuNuS+Xz+nG9JO56qK/6ObjTwudLo4vJN/RS7XW4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:43 2025 by rpki-client