$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa File: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (raw, json) Hash identifier: 1yTR12zVNlgV/3lhF5YF8WQX2wlBuTs2UGOXRfg1gpk= Subject key identifier: C9:95:CD:BC:02:25:79:85:A2:8F:EB:7F:B7:DA:A8:DD:14:06:AF:81 Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 5DC74E9DF2D6A26C8E7F7FC5105EE243A4482B72 Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa Signing time: Mon 03 Nov 2025 17:00:01 +0000 ROA not before: Mon 03 Nov 2025 16:55:01 +0000 ROA not after: Mon 02 Nov 2026 17:00:01 +0000 asID: 150523 IP address blocks: 103.75.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c7:4e:9d:f2:d6:a2:6c:8e:7f:7f:c5:10:5e:e2:43:a4:48:2b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Nov 3 16:55:01 2025 GMT Not After : Nov 2 17:00:01 2026 GMT Subject: CN=C995CDBC02257985A28FEB7FB7DAA8DD1406AF81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d3:94:fa:e3:3f:16:15:46:76:a1:36:0e:16: f1:cb:b6:91:ae:1a:d8:58:3e:f5:40:ea:9c:40:68: 1d:a6:9b:37:2e:d9:da:36:e0:f4:ed:71:8a:9d:99: 9d:67:37:50:17:23:c8:78:c4:c1:68:44:0c:bf:c6: ae:02:c8:d0:ac:f2:5b:db:0d:0d:82:ca:eb:2e:0b: 88:c5:62:39:87:cd:a3:64:ff:29:ed:6d:f3:ea:fc: fe:cb:a3:23:ca:87:23:61:48:84:66:29:03:ec:ff: 50:c5:5f:2c:e1:18:ff:62:50:a4:fd:ab:5b:6b:af: 13:af:2b:cb:5f:c4:4b:0e:02:2c:16:c8:58:aa:e7: ce:8b:17:c1:72:21:49:39:d7:af:31:c9:47:ba:16: a1:b6:bc:30:60:35:2d:5a:22:20:01:32:77:91:cd: ed:1d:f8:55:53:ec:99:2b:df:0d:b4:8f:74:85:83: d1:25:f7:23:9f:19:f5:70:b4:a1:1d:20:dd:b1:74: c9:d0:e3:ed:0e:38:f5:ea:58:70:69:64:64:61:85: 67:b5:c4:2d:40:9b:b9:19:f7:82:f1:fa:c1:d4:a8: 91:56:ed:34:85:14:33:31:69:3f:b7:e7:66:02:47: 1a:3b:9b:77:df:b1:e5:42:9f:43:78:9b:73:df:d9: 97:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:CD:BC:02:25:79:85:A2:8F:EB:7F:B7:DA:A8:DD:14:06:AF:81 X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.137.0/24 Signature Algorithm: sha256WithRSAEncryption a6:fe:e4:75:c8:de:68:9b:9e:40:47:b3:af:c0:4b:d2:ad:a5: 9e:ad:92:2f:28:31:47:98:f4:2b:c9:df:01:3a:bc:df:ae:12: d0:5f:56:65:4b:c0:4f:7d:3d:62:ef:e3:d6:24:26:66:6e:7a: 77:7f:ed:ff:4b:eb:b5:49:30:ad:e8:6e:c5:c4:02:fd:d4:1a: 8d:5c:77:96:5b:ce:1f:bd:87:c1:16:9c:ea:88:13:88:da:0b: bc:b8:4e:08:77:de:4f:fa:0c:1e:0d:af:8b:e9:88:2a:69:05: f6:40:97:df:3a:2d:e8:92:a8:77:59:16:a0:af:06:68:0e:42: b2:75:87:53:9a:3c:56:75:38:9e:9a:9e:27:3e:09:ec:19:52: e0:e6:cb:35:25:09:e6:67:e5:fe:ab:45:1a:6b:47:4d:fc:0b: 40:62:12:6d:bc:de:54:33:5d:5e:58:20:3a:47:6f:45:2a:46: 25:1e:04:34:60:73:12:60:2f:04:6b:e1:75:c1:22:5a:77:ad: 2e:a0:b8:21:9a:ac:98:07:e4:93:45:61:42:46:59:34:3b:15: 7f:e0:8f:6f:63:2c:0a:9d:f6:1a:db:98:75:4d:30:43:c2:21: cd:4b:60:a6:0a:23:1f:ea:d2:51:c4:28:34:87:f0:a0:a3:1f: 90:30:c0:3c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXcdOnfLWomyOf3/FEF7iQ6RIK3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNTExMDMxNjU1MDFaFw0yNjExMDIxNzAwMDFaMDMxMTAvBgNV BAMTKEM5OTVDREJDMDIyNTc5ODVBMjhGRUI3RkI3REFBOEREMTQwNkFGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH05T64z8WFUZ2oTYOFvHLtpGu GthYPvVA6pxAaB2mmzcu2do24PTtcYqdmZ1nN1AXI8h4xMFoRAy/xq4CyNCs8lvb DQ2CyusuC4jFYjmHzaNk/yntbfPq/P7LoyPKhyNhSIRmKQPs/1DFXyzhGP9iUKT9 q1trrxOvK8tfxEsOAiwWyFiq586LF8FyIUk5168xyUe6FqG2vDBgNS1aIiABMneR ze0d+FVT7Jkr3w20j3SFg9El9yOfGfVwtKEdIN2xdMnQ4+0OOPXqWHBpZGRhhWe1 xC1Am7kZ94Lx+sHUqJFW7TSFFDMxaT+352YCRxo7m3ffseVCn0N4m3Pf2ZeFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyZXNvAIleYWij+t/t9qo3RQGr4EwHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4NDYzMjg1LTdjMjgtNDM1YS04 MmJiLWZjYzMyZDU4MDIwZS8wLzMxMzAzMzJlMzczNTJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0uJMA0GCSqG SIb3DQEBCwUAA4IBAQCm/uR1yN5om55AR7OvwEvSraWerZIvKDFHmPQryd8BOrzf rhLQX1ZlS8BPfT1i7+PWJCZmbnp3f+3/S+u1STCt6G7FxAL91BqNXHeWW84fvYfB FpzqiBOI2gu8uE4Id95P+gweDa+L6YgqaQX2QJffOi3okqh3WRagrwZoDkKydYdT mjxWdTiemp4nPgnsGVLg5ss1JQnmZ+X+q0Uaa0dN/AtAYhJtvN5UM11eWCA6R29F KkYlHgQ0YHMSYC8Ea+F1wSJad60uoLghmqyYB+STRWFCRlk0OxV/4I9vYywKnfYa 25h1TTBDwiHNS2CmCiMf6tJRxCg0h/Cgox+QMMA8 -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:10 2025 by rpki-client