$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa File: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (raw, json) Hash identifier: uNA/yO7Jurn3EZm3l95rlsLVpHCEIuUhUwihJjKDdLE= Subject key identifier: 70:6C:0B:CC:5E:59:14:03:40:7A:29:C7:17:DF:1D:A0:0A:9E:FF:C2 Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 2EF0587CB5B1047C7AB4589628AF8523CB71048A Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa Signing time: Mon 03 Nov 2025 17:00:01 +0000 ROA not before: Mon 03 Nov 2025 16:55:01 +0000 ROA not after: Mon 02 Nov 2026 17:00:01 +0000 asID: 150523 IP address blocks: 103.75.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f0:58:7c:b5:b1:04:7c:7a:b4:58:96:28:af:85:23:cb:71:04:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Nov 3 16:55:01 2025 GMT Not After : Nov 2 17:00:01 2026 GMT Subject: CN=706C0BCC5E591403407A29C717DF1DA00A9EFFC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:f8:39:c5:5a:47:1b:f7:96:3a:06:38:cd: 4f:a8:a4:44:8c:12:65:27:ec:7d:21:58:6f:e2:06: 3f:bf:eb:40:5b:8d:a2:47:36:9c:a0:11:79:63:3a: d0:a8:9f:44:97:6d:2d:a4:40:25:cd:6c:ae:0a:d4: 7f:f2:a3:0e:37:59:68:35:5d:0c:c7:46:17:32:6e: fb:34:7f:5d:51:d3:6c:76:ba:a5:10:e1:19:d8:db: 88:5e:ab:ec:41:57:f1:60:b3:83:da:5d:58:3a:6a: 87:40:b3:ab:57:87:c7:96:5b:e5:d1:22:a1:80:1f: b1:3e:96:d8:df:08:6f:16:0e:c9:74:28:b5:06:86: 26:eb:8c:f1:91:f6:fc:78:30:7c:4f:8d:f9:e6:bb: 49:41:3f:c8:c7:ed:c7:09:d5:e2:16:0f:16:61:49: c7:11:2d:df:32:86:76:a6:97:52:c1:6b:bb:23:cf: cf:71:1a:96:0e:1c:6d:78:14:71:11:fd:a2:a0:6d: db:62:31:db:31:88:98:26:20:07:62:b2:52:7b:a9: c5:e5:69:f3:b2:e8:a9:12:a3:f1:8f:b3:3b:f5:9f: 81:55:a0:82:26:0a:26:1d:d4:3e:5a:75:3e:64:3d: 6e:a0:6b:07:fe:a4:25:4b:83:db:9f:57:42:9d:23: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6C:0B:CC:5E:59:14:03:40:7A:29:C7:17:DF:1D:A0:0A:9E:FF:C2 X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.136.0/24 Signature Algorithm: sha256WithRSAEncryption b4:74:3a:9d:7b:12:db:cc:69:fa:0b:6c:b4:88:39:dc:c2:65: f3:33:de:34:8c:99:5f:09:10:e6:41:a6:66:22:d9:d8:bb:9a: 4c:bd:dd:70:89:34:52:ba:fa:58:9f:9d:29:ce:06:c0:e3:85: c6:ae:09:e8:ed:fe:9e:02:b2:34:12:35:68:f0:f8:ec:06:ff: 91:21:cd:81:c1:6b:59:32:92:9c:cb:ea:0b:1e:e6:f3:ae:5d: 5a:ff:1e:0c:b0:37:bc:16:86:53:10:9b:7b:5c:90:8a:34:a6: a8:44:ce:43:f4:11:c9:d1:c3:33:c9:86:7f:95:c8:7a:cf:4d: 53:dd:57:f9:32:ce:7c:22:3e:24:b8:0a:ae:cd:b1:47:35:98: cf:8a:81:5d:bf:48:fc:2e:bd:5e:cf:5f:58:57:fb:fa:ce:17: 60:0e:36:79:3c:da:6a:a4:37:43:b3:88:33:b8:3b:cf:e3:36: ce:a1:f2:cb:93:58:9d:1b:01:eb:a1:80:5f:31:45:60:d8:f7: 6c:97:3d:4d:4a:0b:78:49:3b:4e:45:03:d7:3d:9c:a3:c1:04: e9:cd:bf:9c:c5:be:e4:dc:06:83:d7:d0:ad:e6:92:93:5c:d3: d5:7b:02:93:58:c1:c6:1c:ed:10:54:e1:fc:7b:ee:5f:b6:dc: dd:9e:38:8d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULvBYfLWxBHx6tFiWKK+FI8txBIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNTExMDMxNjU1MDFaFw0yNjExMDIxNzAwMDFaMDMxMTAvBgNV BAMTKDcwNkMwQkNDNUU1OTE0MDM0MDdBMjlDNzE3REYxREEwMEE5RUZGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sPg5xVpHG/eWOgY4zU+opESM EmUn7H0hWG/iBj+/60BbjaJHNpygEXljOtCon0SXbS2kQCXNbK4K1H/yow43WWg1 XQzHRhcybvs0f11R02x2uqUQ4RnY24heq+xBV/Fgs4PaXVg6aodAs6tXh8eWW+XR IqGAH7E+ltjfCG8WDsl0KLUGhibrjPGR9vx4MHxPjfnmu0lBP8jH7ccJ1eIWDxZh SccRLd8yhnaml1LBa7sjz89xGpYOHG14FHER/aKgbdtiMdsxiJgmIAdislJ7qcXl afOy6KkSo/GPszv1n4FVoIImCiYd1D5adT5kPW6gawf+pCVLg9ufV0KdI8JNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcGwLzF5ZFANAeinHF98doAqe/8IwHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4NDYzMjg1LTdjMjgtNDM1YS04 MmJiLWZjYzMyZDU4MDIwZS8wLzMxMzAzMzJlMzczNTJlMzEzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0uIMA0GCSqG SIb3DQEBCwUAA4IBAQC0dDqdexLbzGn6C2y0iDncwmXzM940jJlfCRDmQaZmItnY u5pMvd1wiTRSuvpYn50pzgbA44XGrgno7f6eArI0EjVo8PjsBv+RIc2BwWtZMpKc y+oLHubzrl1a/x4MsDe8FoZTEJt7XJCKNKaoRM5D9BHJ0cMzyYZ/lch6z01T3Vf5 Ms58Ij4kuAquzbFHNZjPioFdv0j8Lr1ez19YV/v6zhdgDjZ5PNpqpDdDs4gzuDvP 4zbOofLLk1idGwHroYBfMUVg2Pdslz1NSgt4STtORQPXPZyjwQTpzb+cxb7k3AaD 19Ct5pKTXNPVewKTWMHGHO0QVOH8e+5fttzdnjiN -----END CERTIFICATE-----Generated at Wed Nov 5 07:53:32 2025 by rpki-client