$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa File: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (raw, json) Hash identifier: Hj/Oe+Radw8pbluCv/VN2XxQ+sX4+0STYPYTyYPvjyc= Subject key identifier: 6D:F6:27:D1:38:E1:CD:C4:F3:89:0D:1E:00:65:60:90:B4:61:53:26 Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 3117CD18F7FB141721C023D01CE5A55AD033B3CF Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa Signing time: Tue 04 Nov 2025 00:00:01 +0000 ROA not before: Mon 03 Nov 2025 23:55:01 +0000 ROA not after: Tue 03 Nov 2026 00:00:01 +0000 asID: 150523 IP address blocks: 103.75.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:17:cd:18:f7:fb:14:17:21:c0:23:d0:1c:e5:a5:5a:d0:33:b3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Nov 3 23:55:01 2025 GMT Not After : Nov 3 00:00:01 2026 GMT Subject: CN=6DF627D138E1CDC4F3890D1E00656090B4615326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:de:1f:a5:5a:fe:c7:ea:e9:5e:14:b7:7c: cb:80:5d:ff:8a:e7:6f:f2:02:20:eb:46:0a:6c:b9: 77:c4:27:be:65:d9:ab:c2:fa:76:83:1e:0d:79:f4: 94:08:b0:5f:c6:79:ab:27:57:b1:89:b5:e6:65:d9: 30:97:b3:9d:e1:09:76:95:7d:62:42:b7:4f:94:9e: 2b:f8:d2:84:3c:e2:8e:17:40:36:33:2e:e8:f0:59: 19:cf:69:db:93:d1:be:fc:0b:1d:00:94:3b:96:dd: db:1b:75:7f:02:5a:cc:ff:5f:4e:e3:18:60:86:45: 8f:98:0e:81:32:29:9e:6e:a7:32:b5:18:b6:e6:10: 7a:d5:4c:d3:f3:1a:b8:7d:4f:9f:91:f6:80:f1:1c: 0d:6f:05:1f:7c:47:28:58:83:d4:97:ca:ae:7c:9a: 7b:ba:fa:ce:9a:bc:52:65:e1:96:8b:1d:7c:bd:67: 9a:fe:f2:be:14:5d:0d:cd:81:14:6b:6b:97:bc:bd: 6b:77:4a:1f:7c:d1:8c:37:b4:20:d2:0d:57:82:53: 5d:dd:16:75:2f:14:a3:1a:a9:fd:06:c1:64:ff:99: db:0a:8a:a1:3d:17:d5:70:ba:0e:83:81:9e:a8:c8: 50:a5:c3:d4:1c:9b:2f:0b:2f:b9:1c:5c:05:83:64: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F6:27:D1:38:E1:CD:C4:F3:89:0D:1E:00:65:60:90:B4:61:53:26 X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.136.0/23 Signature Algorithm: sha256WithRSAEncryption 32:19:af:b2:97:c4:03:de:9a:0d:3e:fb:f3:57:b6:c0:c7:d8: 9f:15:d3:97:6c:03:51:79:97:b2:99:bc:bc:fc:d5:bd:c8:dd: 76:26:c5:54:96:46:ec:ac:49:14:fa:bb:60:60:f0:7a:38:4d: 82:d2:c3:a1:e9:0a:8e:c0:b2:a5:50:64:83:fe:bf:5e:60:ce: 84:0d:27:be:0e:3a:c6:cc:34:83:1a:06:05:0f:ed:af:11:2f: 29:16:a0:d8:93:26:ee:13:c7:30:f4:e7:99:62:05:e1:27:2f: be:38:14:51:6c:0a:9b:c0:1f:3b:58:e4:7c:69:73:b9:57:ad: de:56:ab:77:b6:50:81:b7:72:4b:93:9d:64:7a:7c:ad:9f:e2: 30:4a:fe:cb:05:dc:89:9e:9c:c5:cf:00:22:cd:79:0f:5f:9f: 02:51:d9:44:9d:dd:27:31:73:66:21:8c:a0:7c:2f:6b:d6:2d: 3f:f1:71:5c:f3:97:3a:f3:d6:ff:d1:b9:82:c6:ee:c4:bd:74: 74:ca:7e:3c:06:b7:1f:08:39:9c:44:0d:91:87:7e:f9:0a:a2: 29:de:b2:e5:55:b3:fe:cb:4e:2c:d0:5a:fe:32:86:49:88:99: 68:52:7f:45:ec:74:ee:18:1a:0c:32:49:18:ea:74:02:e0:bf: df:ab:67:98 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMRfNGPf7FBchwCPQHOWlWtAzs88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNTExMDMyMzU1MDFaFw0yNjExMDMwMDAwMDFaMDMxMTAvBgNV BAMTKDZERjYyN0QxMzhFMUNEQzRGMzg5MEQxRTAwNjU2MDkwQjQ2MTUzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHG94fpVr+x+rpXhS3fMuAXf+K 52/yAiDrRgpsuXfEJ75l2avC+naDHg159JQIsF/GeasnV7GJteZl2TCXs53hCXaV fWJCt0+Univ40oQ84o4XQDYzLujwWRnPaduT0b78Cx0AlDuW3dsbdX8CWsz/X07j GGCGRY+YDoEyKZ5upzK1GLbmEHrVTNPzGrh9T5+R9oDxHA1vBR98RyhYg9SXyq58 mnu6+s6avFJl4ZaLHXy9Z5r+8r4UXQ3NgRRra5e8vWt3Sh980Yw3tCDSDVeCU13d FnUvFKMaqf0GwWT/mdsKiqE9F9Vwug6DgZ6oyFClw9Qcmy8LL7kcXAWDZPCRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbfYn0TjhzcTziQ0eAGVgkLRhUyYwHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4NDYzMjg1LTdjMjgtNDM1YS04 MmJiLWZjYzMyZDU4MDIwZS8wLzMxMzAzMzJlMzczNTJlMzEzMzM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0uIMA0GCSqG SIb3DQEBCwUAA4IBAQAyGa+yl8QD3poNPvvzV7bAx9ifFdOXbANReZeymby8/NW9 yN12JsVUlkbsrEkU+rtgYPB6OE2C0sOh6QqOwLKlUGSD/r9eYM6EDSe+DjrGzDSD GgYFD+2vES8pFqDYkybuE8cw9OeZYgXhJy++OBRRbAqbwB87WOR8aXO5V63eVqt3 tlCBt3JLk51kenytn+IwSv7LBdyJnpzFzwAizXkPX58CUdlEnd0nMXNmIYygfC9r 1i0/8XFc85c689b/0bmCxu7EvXR0yn48BrcfCDmcRA2Rh375CqIp3rLlVbP+y04s 0Fr+MoZJiJloUn9F7HTuGBoMMkkY6nQC4L/fq2eY -----END CERTIFICATE-----Generated at Wed Nov 5 04:26:14 2025 by rpki-client