$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa File: 3130332e34372e31302e302f32342d3234203d3e203539323733.roa (raw, json) Hash identifier: R73yUQxsrQ2/QYaOv8BqS7ocOQns71iqOhL/AfjwD0s= Subject key identifier: C9:F6:88:DE:66:81:E7:41:DB:D4:4F:CC:D4:52:BB:84:02:E4:9D:C1 Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 0D409FB2EDE47A8B6A7C2004782EC0E1443927E9 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa Signing time: Fri 19 Sep 2025 17:00:01 +0000 ROA not before: Fri 19 Sep 2025 16:55:01 +0000 ROA not after: Fri 18 Sep 2026 17:00:01 +0000 asID: 59273 IP address blocks: 103.47.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:9f:b2:ed:e4:7a:8b:6a:7c:20:04:78:2e:c0:e1:44:39:27:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Sep 19 16:55:01 2025 GMT Not After : Sep 18 17:00:01 2026 GMT Subject: CN=C9F688DE6681E741DBD44FCCD452BB8402E49DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:9b:5c:cc:66:47:2e:79:17:3e:7d:1b:92: c2:f4:8f:32:a2:67:6e:29:83:29:46:fc:80:af:e9: 55:e1:d4:8a:76:96:f0:b0:c9:a3:68:ab:51:1f:25: 9f:88:ac:6e:58:d3:36:6e:11:89:ce:73:52:3a:3f: 89:3f:8d:56:e8:f5:7c:64:f1:ef:3b:b0:0a:70:79: 6e:43:f1:b1:c8:dc:22:36:dc:db:c9:3e:cf:41:af: 56:34:54:31:05:a3:11:f8:ad:4b:89:a7:06:29:16: ab:51:52:02:75:42:6e:6a:03:84:ef:95:41:3b:18: 23:89:cc:ef:ff:36:e1:6b:87:47:87:84:14:35:60: ed:e6:f9:08:46:50:b1:25:27:f2:d7:3a:26:f1:9e: 26:50:19:28:d9:c8:51:99:c1:ac:df:15:18:e4:e3: d7:1d:9d:84:bd:4d:90:cd:7d:1e:72:98:59:a7:83: 95:66:32:1c:1d:45:66:f1:72:95:9e:ba:a5:83:b1: a8:73:97:78:3e:b7:ed:a3:c7:39:5e:7d:db:a4:f0: e5:57:9b:21:af:cf:28:36:e9:da:10:9f:9d:7c:53: c5:e6:1a:c3:9d:d8:1e:2d:5d:7b:6f:5e:c8:5b:27: 70:ef:17:dd:cf:d3:84:29:fd:b8:95:32:f0:d3:c6: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F6:88:DE:66:81:E7:41:DB:D4:4F:CC:D4:52:BB:84:02:E4:9D:C1 X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.10.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:4f:32:af:1a:d3:97:13:56:3d:b4:f9:dd:a3:8d:f3:17:0c: e9:db:c8:c9:64:96:f5:9e:fa:a6:95:ea:26:e1:f5:4f:a8:2e: 8d:88:70:fa:6f:0c:04:19:50:dd:fc:29:fc:df:18:86:1d:8c: 81:f5:c1:90:d6:8a:da:33:ad:7d:55:48:c8:ce:96:70:3f:b5: 00:c9:3d:3e:b6:40:38:28:1c:2d:9b:14:a2:ba:67:7a:31:31: 5b:61:ae:22:42:c9:88:22:39:aa:dd:e3:d5:17:0e:41:68:5e: d4:38:89:c9:7f:3a:79:16:37:75:20:af:44:30:fc:c0:50:b2: 11:6a:79:b9:8e:e6:56:0e:28:55:e7:34:68:c0:f6:87:a5:32: 6b:82:7d:a1:63:bd:0d:bc:4d:af:58:2e:c1:5e:b6:27:c7:ca: cc:6c:73:5d:e2:4e:39:58:96:f7:52:4a:6e:56:04:22:87:95: 4e:e2:da:ac:aa:76:42:ce:ec:60:58:e9:5c:ca:c8:8a:97:56: 2d:39:18:c1:c5:6d:d0:35:1d:0a:90:d4:98:93:a6:72:68:f1: 52:ea:4e:f9:06:f5:f7:a4:e7:3b:08:85:25:04:29:b2:a2:6d: 53:7d:c1:47:4f:d5:46:d8:42:12:c7:b2:8f:26:96:d6:0d:01: bf:b6:f0:74 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDUCfsu3keotqfCAEeC7A4UQ5J+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTA5MTkxNjU1MDFaFw0yNjA5MTgxNzAwMDFaMDMxMTAvBgNV BAMTKEM5RjY4OERFNjY4MUU3NDFEQkQ0NEZDQ0Q0NTJCQjg0MDJFNDlEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOZtczGZHLnkXPn0bksL0jzKi Z24pgylG/ICv6VXh1Ip2lvCwyaNoq1EfJZ+IrG5Y0zZuEYnOc1I6P4k/jVbo9Xxk 8e87sApweW5D8bHI3CI23NvJPs9Br1Y0VDEFoxH4rUuJpwYpFqtRUgJ1Qm5qA4Tv lUE7GCOJzO//NuFrh0eHhBQ1YO3m+QhGULElJ/LXOibxniZQGSjZyFGZwazfFRjk 49cdnYS9TZDNfR5ymFmng5VmMhwdRWbxcpWeuqWDsahzl3g+t+2jxzlefduk8OVX myGvzyg26doQn518U8XmGsOd2B4tXXtvXshbJ3DvF93P04Qp/biVMvDTxi6vAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUyfaI3maB50Hb1E/M1FK7hALkncEwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1YTcyZWI5LThlNTMtNDQ3Mi1h MzVhLWZlZThiZjBhZjQ2Zi8wLzMxMzAzMzJlMzQzNzJlMzEzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzkzMjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnLwowDQYJKoZIhvcN AQELBQADggEBAD5PMq8a05cTVj20+d2jjfMXDOnbyMlklvWe+qaV6ibh9U+oLo2I cPpvDAQZUN38KfzfGIYdjIH1wZDWitozrX1VSMjOlnA/tQDJPT62QDgoHC2bFKK6 Z3oxMVthriJCyYgiOard49UXDkFoXtQ4icl/OnkWN3Ugr0Qw/MBQshFqebmO5lYO KFXnNGjA9oelMmuCfaFjvQ28Ta9YLsFetifHysxsc13iTjlYlvdSSm5WBCKHlU7i 2qyqdkLO7GBY6VzKyIqXVi05GMHFbdA1HQqQ1JiTpnJo8VLqTvkG9fek5zsIhSUE KbKibVN9wUdP1UbYQhLHso8mltYNAb+28HQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:03:05 2025 by rpki-client