$ rpki-client -vvf repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa File: 3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa (raw, json) Hash identifier: XXDfIIYOEglBKxR32q76DP0xk41MtlD2sFhZIbxce4A= Subject key identifier: BB:FC:E0:5B:72:DC:65:D8:66:C3:5A:DA:86:DF:3A:7F:5E:C4:45:3D Certificate issuer: /CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Certificate serial: 1BA3D83257D6135A8EA13ADA89A518D8EE18BB47 Authority key identifier: EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa Signing time: Tue 28 Oct 2025 06:00:00 +0000 ROA not before: Tue 28 Oct 2025 05:55:00 +0000 ROA not after: Tue 27 Oct 2026 06:00:00 +0000 asID: 138082 IP address blocks: 103.120.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a3:d8:32:57:d6:13:5a:8e:a1:3a:da:89:a5:18:d8:ee:18:bb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA01C91511C5E347C7C11EA4649B0F041A5D0520 Validity Not Before: Oct 28 05:55:00 2025 GMT Not After : Oct 27 06:00:00 2026 GMT Subject: CN=BBFCE05B72DC65D866C35ADA86DF3A7F5EC4453D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:47:2a:3e:53:9b:58:54:15:d6:45:a0:76:d3: 96:9e:55:8f:66:26:5c:17:16:ce:03:89:c1:4c:ea: a4:49:99:2c:43:d4:9c:f3:f8:a1:22:3f:eb:8e:0a: d3:a8:ee:a5:7d:5f:7f:98:ed:64:c0:d0:a2:2c:fc: 0a:da:d3:aa:1c:eb:08:26:4e:70:5c:28:28:4c:54: ef:fd:05:5f:66:74:d6:35:69:b8:b0:41:e9:bb:6f: ed:30:20:11:36:16:0a:d8:5b:80:f9:ba:c9:dd:45: ce:fd:f6:4e:2c:c4:32:99:15:64:fc:2f:e1:d1:1e: 35:be:84:d1:52:18:db:31:2a:fa:0b:e9:30:2f:79: 9d:ed:a9:b7:7b:82:22:7e:7b:0e:bb:f1:58:21:db: 73:d8:86:a5:63:ae:fb:7f:5e:e3:c8:d0:82:82:49: 30:68:4b:45:99:17:68:87:4a:b0:e9:65:51:b6:1c: 7b:06:09:8b:58:52:0e:0e:53:07:bb:ac:cf:6d:0d: 70:15:42:20:36:74:96:5d:45:e3:e7:99:21:87:98: a2:d7:b2:35:ae:73:30:a8:21:6f:f2:a6:76:44:64: fb:c0:2d:28:84:12:b9:bb:65:1d:75:b3:2f:82:db: 57:cb:5c:db:2e:37:f6:d4:79:1f:eb:04:23:25:b3: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FC:E0:5B:72:DC:65:D8:66:C3:5A:DA:86:DF:3A:7F:5E:C4:45:3D X509v3 Authority Key Identifier: keyid:EA:01:C9:15:11:C5:E3:47:C7:C1:1E:A4:64:9B:0F:04:1A:5D:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/EA01C91511C5E347C7C11EA4649B0F041A5D0520.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA01C91511C5E347C7C11EA4649B0F041A5D0520.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0cd24e82-f306-4400-b00a-d59b41e286bb/0/3130332e3132302e3231382e302f32342d3234203d3e20313338303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.218.0/24 Signature Algorithm: sha256WithRSAEncryption ad:c1:a1:8d:67:e0:c9:dc:ea:1f:e0:5c:3a:73:37:b0:f6:2d: c7:35:9a:b4:34:81:77:68:3e:45:d8:d1:a5:af:24:d5:4b:92: 05:04:df:40:fd:4e:65:56:e3:7e:f4:75:73:95:29:df:c4:69: 64:a9:55:3b:96:a1:a5:26:b4:93:eb:eb:8e:51:26:1d:4a:ca: 64:ec:28:9c:24:41:b5:2c:07:0b:1e:3c:a3:79:3f:86:26:aa: c6:5a:d3:71:ee:8b:74:5a:41:03:50:58:98:35:81:a1:a6:3f: 26:7b:ff:e2:49:bf:a3:68:83:47:bc:1a:57:ab:d3:0c:e2:96: 6c:5a:a8:99:30:db:29:d0:25:eb:39:b9:22:02:71:dd:e8:06: 50:1d:db:12:44:ed:b9:c4:81:62:d1:fb:96:9d:90:6f:a6:ac: e2:e3:d5:b3:8c:40:f5:d3:e4:a1:68:e2:9f:39:dd:a3:14:b5: a8:d6:7c:7e:99:ef:5a:86:ef:70:2d:9a:38:b4:2c:6b:8d:d2: e3:20:94:de:6a:ff:0c:7d:39:6b:82:e0:dd:9b:f1:46:a8:30: 83:fc:ac:61:03:6d:71:36:28:14:d7:49:87:51:10:25:da:65: 25:e8:95:d8:c6:a4:3e:73:03:1b:91:78:54:da:9a:d0:77:06: a2:4b:25:bb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUG6PYMlfWE1qOoTraiaUY2O4Yu0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQx QTVEMDUyMDAeFw0yNTEwMjgwNTU1MDBaFw0yNjEwMjcwNjAwMDBaMDMxMTAvBgNV BAMTKEJCRkNFMDVCNzJEQzY1RDg2NkMzNUFEQTg2REYzQTdGNUVDNDQ1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ryo+U5tYVBXWRaB205aeVY9m JlwXFs4DicFM6qRJmSxD1Jzz+KEiP+uOCtOo7qV9X3+Y7WTA0KIs/Ara06oc6wgm TnBcKChMVO/9BV9mdNY1abiwQem7b+0wIBE2FgrYW4D5usndRc799k4sxDKZFWT8 L+HRHjW+hNFSGNsxKvoL6TAveZ3tqbd7giJ+ew678Vgh23PYhqVjrvt/XuPI0IKC STBoS0WZF2iHSrDpZVG2HHsGCYtYUg4OUwe7rM9tDXAVQiA2dJZdRePnmSGHmKLX sjWuczCoIW/ypnZEZPvALSiEErm7ZR11sy+C21fLXNsuN/bUeR/rBCMls7u3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUu/zgW3LcZdhmw1raht86f17ERT0wHwYDVR0j BBgwFoAU6gHJFRHF40fHwR6kZJsPBBpdBSAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Y2QyNGU4Mi1mMzA2LTQ0MDAtYjAwYS1kNTliNDFlMjg2YmIvMC9FQTAxQzkxNTEx QzVFMzQ3QzdDMTFFQTQ2NDlCMEYwNDFBNUQwNTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUEwMUM5MTUxMUM1RTM0N0M3QzExRUE0NjQ5QjBGMDQxQTVE MDUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjZDI0ZTgyLWYzMDYtNDQwMC1i MDBhLWQ1OWI0MWUyODZiYi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM4MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneNowDQYJ KoZIhvcNAQELBQADggEBAK3BoY1n4Mnc6h/gXDpzN7D2Lcc1mrQ0gXdoPkXY0aWv JNVLkgUE30D9TmVW4370dXOVKd/EaWSpVTuWoaUmtJPr645RJh1KymTsKJwkQbUs BwsePKN5P4YmqsZa03Hui3RaQQNQWJg1gaGmPyZ7/+JJv6Nog0e8Gler0wzilmxa qJkw2ynQJes5uSICcd3oBlAd2xJE7bnEgWLR+5adkG+mrOLj1bOMQPXT5KFo4p85 3aMUtajWfH6Z71qG73Atmji0LGuN0uMglN5q/wx9OWuC4N2b8UaoMIP8rGEDbXE2 KBTXSYdRECXaZSXoldjGpD5zAxuReFTamtB3BqJLJbs= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:24 2025 by rpki-client