$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa File: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (raw, json) Hash identifier: kJKEjz2D3G1RJer7Y7hYkLjIkHGT1MOdybvh9xHf4rg= Subject key identifier: 96:69:C9:53:BA:E7:BB:F3:4F:92:8D:D2:08:A8:55:16:D8:E5:32:81 Certificate issuer: /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Certificate serial: 1EEAE12E4CA04844FA3C08E8B4521A6C01E19905 Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa Signing time: Thu 30 Oct 2025 10:00:02 +0000 ROA not before: Thu 30 Oct 2025 09:55:02 +0000 ROA not after: Thu 29 Oct 2026 10:00:02 +0000 asID: 142385 IP address blocks: 103.172.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ea:e1:2e:4c:a0:48:44:fa:3c:08:e8:b4:52:1a:6c:01:e1:99:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Validity Not Before: Oct 30 09:55:02 2025 GMT Not After : Oct 29 10:00:02 2026 GMT Subject: CN=9669C953BAE7BBF34F928DD208A85516D8E53281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:a9:fe:dc:6f:05:10:b3:4a:bf:7b:95:6c: 83:ec:b4:d5:c4:37:d2:1b:99:f8:42:f1:c2:b7:1e: bc:7b:cb:0e:d0:0c:6d:bc:02:f5:f7:89:87:18:04: 2b:59:e2:d9:93:1b:6f:2a:4e:cc:09:47:a7:9e:12: 71:83:ff:6e:c6:7d:8c:f5:73:00:22:8e:ec:f4:10: 04:2d:9d:3c:ca:5a:3b:01:5b:c2:d9:65:bb:9d:e4: 3b:9c:a7:b8:4f:e6:9c:1a:f0:f4:5a:19:3b:5d:c3: b9:9c:0a:83:12:19:98:a5:69:4e:3f:59:87:d1:a9: 8d:6c:e0:6f:a2:de:dd:43:34:70:ce:90:98:df:c0: bf:42:55:88:9d:d0:2d:93:a2:c8:c7:1a:b5:58:9b: 0a:68:f5:9b:06:54:ef:95:e4:18:03:bf:ad:34:9f: f1:82:c4:03:e9:57:39:c6:18:f1:b2:f3:0c:8e:a9: a9:a6:28:75:69:b6:e8:25:d8:70:31:44:bd:38:30: 3c:59:5e:44:a7:7a:78:a4:ed:99:71:05:18:98:4c: 06:4c:e5:e5:da:43:34:2a:b5:a9:38:31:54:e3:fe: ca:2a:a1:2b:a0:66:ea:fd:6d:81:21:07:80:01:44: 1e:7f:b3:77:b5:61:ce:c2:09:23:f5:fc:fe:cc:f6: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:69:C9:53:BA:E7:BB:F3:4F:92:8D:D2:08:A8:55:16:D8:E5:32:81 X509v3 Authority Key Identifier: keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.43.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:de:49:ba:69:5d:3a:84:e2:73:aa:b8:80:5e:25:a5:95:b0: 6b:72:9c:54:69:e8:91:a9:39:42:15:a2:e3:11:8a:a5:a1:8c: c0:da:ac:b9:a6:29:68:25:c5:8d:2a:91:03:1b:c5:37:f8:9d: c1:80:19:f1:ba:9d:c6:3e:49:2a:c3:7b:3b:45:e8:69:77:fd: 91:2b:c7:c9:2a:5d:88:f0:eb:33:ba:3a:ae:5a:a7:4c:30:87: a2:b4:f6:ef:59:63:bb:b3:83:3a:03:8b:98:e7:4d:e6:f1:87: 0d:63:ba:27:5d:72:bc:a8:6f:ff:83:2a:13:7d:b9:16:9f:c9: 36:57:45:2a:31:c3:47:1e:06:c1:2e:13:05:b8:13:62:fa:71: bc:27:8e:b5:3d:64:0c:14:66:17:98:91:5b:8a:8c:43:98:03: b9:4d:55:be:e2:dd:c7:ab:f8:47:94:08:67:f8:53:da:46:37: a0:f1:99:56:06:52:b6:bf:e6:fc:67:49:7f:4f:4c:36:dd:71: 9c:61:b9:44:8f:f1:b7:d1:67:3c:69:56:ae:b3:79:9d:b6:98: f5:f1:bd:55:7b:00:24:1f:3d:42:d3:67:04:aa:59:db:6c:9f: 4f:6a:29:67:82:1b:e7:66:3f:b4:ef:30:f7:1e:b0:22:5f:99: b6:6f:9c:48 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHurhLkygSET6PAjotFIabAHhmQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIy RUE1MzE5RDAeFw0yNTEwMzAwOTU1MDJaFw0yNjEwMjkxMDAwMDJaMDMxMTAvBgNV BAMTKDk2NjlDOTUzQkFFN0JCRjM0RjkyOEREMjA4QTg1NTE2RDhFNTMyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdqn+3G8FELNKv3uVbIPstNXE N9IbmfhC8cK3Hrx7yw7QDG28AvX3iYcYBCtZ4tmTG28qTswJR6eeEnGD/27GfYz1 cwAijuz0EAQtnTzKWjsBW8LZZbud5Ducp7hP5pwa8PRaGTtdw7mcCoMSGZilaU4/ WYfRqY1s4G+i3t1DNHDOkJjfwL9CVYid0C2TosjHGrVYmwpo9ZsGVO+V5BgDv600 n/GCxAPpVznGGPGy8wyOqammKHVptugl2HAxRL04MDxZXkSnenik7ZlxBRiYTAZM 5eXaQzQqtak4MVTj/soqoSugZur9bYEhB4ABRB5/s3e1Yc7CCSP1/P7M9g2VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlmnJU7rnu/NPko3SCKhVFtjlMoEwHwYDVR0j BBgwFoAUguq/JO+REGworPlIOy7xGy6lMZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMxYzY5YS1iNzkyLTQwYTQtYTE0NC0yMzRiNWExZGRlNTIvMC84MkVBQkYyNEVG OTExMDZDMjhBQ0Y5NDgzQjJFRjExQjJFQTUzMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIyRUE1 MzE5RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlMzFjNjlhLWI3OTItNDBhNC1h MTQ0LTIzNGI1YTFkZGU1Mi8wLzMxMzAzMzJlMzEzNzMyMmUzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6wrMA0GCSqG SIb3DQEBCwUAA4IBAQCc3km6aV06hOJzqriAXiWllbBrcpxUaeiRqTlCFaLjEYql oYzA2qy5piloJcWNKpEDG8U3+J3BgBnxup3GPkkqw3s7Rehpd/2RK8fJKl2I8Osz ujquWqdMMIeitPbvWWO7s4M6A4uY503m8YcNY7onXXK8qG//gyoTfbkWn8k2V0Uq McNHHgbBLhMFuBNi+nG8J461PWQMFGYXmJFbioxDmAO5TVW+4t3Hq/hHlAhn+FPa Rjeg8ZlWBlK2v+b8Z0l/T0w23XGcYblEj/G30Wc8aVaus3mdtpj18b1VewAkHz1C 02cEqlnbbJ9PailnghvnZj+07zD3HrAiX5m2b5xI -----END CERTIFICATE-----Generated at Tue Nov 4 07:42:57 2025 by rpki-client