$ rpki-client -vvf repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa File: 3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa (raw, json) Hash identifier: UNdPaeewjHejuMUYYc9PN1Z/evxQJCBKoXDCWAm2I7U= Subject key identifier: B2:D2:B6:B8:41:99:C3:71:89:C1:86:96:38:ED:D7:50:FC:91:2F:9D Certificate issuer: /CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Certificate serial: 5AD3C61EEE7D649DE42BBCEC9D096C2419E8026C Authority key identifier: C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa Signing time: Fri 31 Oct 2025 15:00:02 +0000 ROA not before: Fri 31 Oct 2025 14:55:02 +0000 ROA not after: Fri 30 Oct 2026 15:00:02 +0000 asID: 140457 IP address blocks: 103.189.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d3:c6:1e:ee:7d:64:9d:e4:2b:bc:ec:9d:09:6c:24:19:e8:02:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728 Validity Not Before: Oct 31 14:55:02 2025 GMT Not After : Oct 30 15:00:02 2026 GMT Subject: CN=B2D2B6B84199C37189C1869638EDD750FC912F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:43:75:59:d5:ef:0d:d8:0b:f6:4a:29:0f: 69:1f:f8:ff:b9:96:ed:b4:95:f8:52:3b:e3:40:a5: 5e:91:fb:eb:86:73:f4:5f:d1:a9:2f:8d:4f:58:bc: f9:22:79:da:82:d7:09:95:12:32:28:f2:6d:7e:18: 69:57:db:bd:48:5e:6a:e1:2c:3b:2f:c5:e7:f0:f2: 34:65:3a:21:b0:b6:5f:59:52:b9:b8:2f:36:a5:09: 2e:79:56:3d:9b:1a:57:a0:5d:8f:46:ef:2c:35:e7: f7:15:da:20:d9:66:c6:61:04:0f:7d:2a:aa:43:cb: a1:7c:ef:c1:33:68:68:b3:c7:11:3d:b2:20:94:ba: 7e:53:40:6b:ec:82:66:2f:b4:ab:13:15:fd:60:41: 40:11:87:34:04:cd:97:17:5c:7e:5f:7b:e2:2b:ad: d6:94:25:cb:ab:6d:00:fb:f0:22:bd:24:d5:2f:aa: 0a:f5:8f:48:bf:17:fb:b0:29:d2:eb:12:21:5c:27: b4:86:b1:13:9e:3e:6b:c1:43:22:5e:a5:15:c7:fa: ee:31:00:ff:24:21:fe:68:6d:0f:75:bb:b5:81:0f: ba:6d:25:54:8b:4b:e2:16:5f:e7:82:59:80:14:cd: cf:e1:eb:7d:fc:b2:95:94:3e:29:38:78:63:b3:3b: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D2:B6:B8:41:99:C3:71:89:C1:86:96:38:ED:D7:50:FC:91:2F:9D X509v3 Authority Key Identifier: keyid:C9:F4:4E:61:DD:69:59:AC:A8:B0:B0:BE:9C:51:6F:5B:68:3E:D7:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9F44E61DD6959ACA8B0B0BE9C516F5B683ED728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ba0b8f8-4fcf-4b9b-9794-cd3b4e406eab/0/3130332e3138392e3132332e302f32342d3234203d3e20313430343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.123.0/24 Signature Algorithm: sha256WithRSAEncryption 04:52:cc:cd:a1:9c:31:1c:67:f8:b9:bb:61:8d:cb:00:d6:5e: 79:b9:82:7c:6d:6f:3c:55:f2:d1:06:fb:28:b9:4a:15:11:64: 22:a0:bc:ad:63:a9:12:84:59:30:c8:5a:af:59:93:5b:a7:9c: c1:74:00:ab:05:ac:7b:f1:5d:d9:dd:e5:65:98:7e:1d:b6:ef: 6a:a6:74:51:c9:63:7a:55:57:40:d7:0d:18:25:0a:9f:3c:42: 04:11:64:35:ad:3b:5c:90:e6:cc:4f:dd:85:71:23:ba:44:9e: d8:65:d5:b4:1b:9c:a6:5a:11:e1:a3:ad:ad:1a:51:f8:51:79: 1a:53:31:51:96:e3:bc:13:d8:c5:90:96:fd:d3:f0:e9:de:45: e5:7e:88:71:e1:41:97:4f:4f:bb:4f:2c:6b:83:87:48:0a:a2: 12:64:75:e4:21:77:bd:ae:d1:50:9d:f4:71:2c:13:56:ee:22: 98:8e:60:80:1d:f5:ea:18:93:6b:e6:fa:c2:03:f3:97:55:14: 5e:68:10:65:52:6e:17:2f:08:ee:64:58:29:87:50:ef:5b:c0: 54:f0:bd:64:55:f6:a3:fd:eb:1e:71:56:26:db:10:1b:bc:69: e4:51:d8:c2:7d:eb:de:62:2e:91:5a:5e:1b:77:86:46:d0:7c: 0d:72:4d:16 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWtPGHu59ZJ3kK7zsnQlsJBnoAmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2 ODNFRDcyODAeFw0yNTEwMzExNDU1MDJaFw0yNjEwMzAxNTAwMDJaMDMxMTAvBgNV BAMTKEIyRDJCNkI4NDE5OUMzNzE4OUMxODY5NjM4RURENzUwRkM5MTJGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvkN1WdXvDdgL9kopD2kf+P+5 lu20lfhSO+NApV6R++uGc/Rf0akvjU9YvPkiedqC1wmVEjIo8m1+GGlX271IXmrh LDsvxefw8jRlOiGwtl9ZUrm4LzalCS55Vj2bGlegXY9G7yw15/cV2iDZZsZhBA99 KqpDy6F878EzaGizxxE9siCUun5TQGvsgmYvtKsTFf1gQUARhzQEzZcXXH5fe+Ir rdaUJcurbQD78CK9JNUvqgr1j0i/F/uwKdLrEiFcJ7SGsROePmvBQyJepRXH+u4x AP8kIf5obQ91u7WBD7ptJVSLS+IWX+eCWYAUzc/h6338spWUPik4eGOzOwwlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUstK2uEGZw3GJwYaWOO3XUPyRL50wHwYDVR0j BBgwFoAUyfROYd1pWayosLC+nFFvW2g+1ygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmEwYjhmOC00ZmNmLTRiOWItOTc5NC1jZDNiNGU0MDZlYWIvMC9DOUY0NEU2MURE Njk1OUFDQThCMEIwQkU5QzUxNkY1QjY4M0VENzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlGNDRFNjFERDY5NTlBQ0E4QjBCMEJFOUM1MTZGNUI2ODNF RDcyOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYTBiOGY4LTRmY2YtNGI5Yi05 Nzk0LWNkM2I0ZTQwNmVhYi8wLzMxMzAzMzJlMzEzODM5MmUzMTMyMzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM1Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvXswDQYJ KoZIhvcNAQELBQADggEBAARSzM2hnDEcZ/i5u2GNywDWXnm5gnxtbzxV8tEG+yi5 ShURZCKgvK1jqRKEWTDIWq9Zk1unnMF0AKsFrHvxXdnd5WWYfh2272qmdFHJY3pV V0DXDRglCp88QgQRZDWtO1yQ5sxP3YVxI7pEnthl1bQbnKZaEeGjra0aUfhReRpT MVGW47wT2MWQlv3T8OneReV+iHHhQZdPT7tPLGuDh0gKohJkdeQhd72u0VCd9HEs E1buIpiOYIAd9eoYk2vm+sID85dVFF5oEGVSbhcvCO5kWCmHUO9bwFTwvWRV9qP9 6x5xVibbEBu8aeRR2MJ9695iLpFaXht3hkbQfA1yTRY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:57:30 2025 by rpki-client