$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa File: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (raw, json) Hash identifier: ruqE2F34CZN/5KqJhiyDZO8euZHnYhKqfwBiaFPn2lc= Subject key identifier: BA:A3:FC:4C:4E:90:91:C6:8E:46:92:D8:92:13:0C:94:AE:58:91:1C Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 708B99BB9C5E4F9DA4ED36182A61372AB1A531BE Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa Signing time: Thu 23 Oct 2025 07:00:03 +0000 ROA not before: Thu 23 Oct 2025 06:55:03 +0000 ROA not after: Thu 22 Oct 2026 07:00:03 +0000 asID: 38320 IP address blocks: 103.167.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8b:99:bb:9c:5e:4f:9d:a4:ed:36:18:2a:61:37:2a:b1:a5:31:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Oct 23 06:55:03 2025 GMT Not After : Oct 22 07:00:03 2026 GMT Subject: CN=BAA3FC4C4E9091C68E4692D892130C94AE58911C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:9d:1a:fd:f7:cc:60:0f:5f:a4:9a:a9:19: e2:b5:b9:a6:c6:c6:7f:91:c1:a3:c5:a0:1a:13:bf: f1:cd:46:59:2a:7e:63:b8:a5:38:5a:6a:7c:f2:d9: aa:3e:c9:82:c1:97:c0:40:73:09:d3:dd:c3:57:1e: 0c:39:5d:c3:b3:58:6b:0a:35:d7:d2:53:d4:14:05: 0a:29:0a:23:5e:0f:d3:51:61:f9:85:e3:ed:7b:0e: 4b:8a:1f:95:e1:95:39:c6:67:90:38:6a:8b:56:55: 6c:c5:12:8f:12:51:12:f4:01:fb:22:25:f1:a7:b2: 1e:b1:23:58:6e:05:12:60:f3:e7:e4:5a:97:5b:b0: 30:ab:d4:ea:43:63:b6:30:a1:c0:98:7e:54:64:06: f7:5a:dd:b7:37:e6:20:09:7f:5e:99:f6:21:63:0c: 8c:18:13:b9:98:84:73:57:8e:38:1f:41:de:5a:1c: c6:60:38:76:d4:9c:11:6c:cb:05:1a:ad:a5:e0:3b: 55:97:66:56:5d:c9:11:e5:8f:60:13:b9:80:1b:ac: 90:35:8b:a2:d6:08:18:b5:6a:0c:e7:ea:80:ff:c1: 4c:d8:62:fb:01:b0:ae:b4:f9:0a:88:9c:21:f5:d9: 32:6b:9a:6e:25:9c:36:8c:9e:85:87:5f:6d:f9:74: f4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A3:FC:4C:4E:90:91:C6:8E:46:92:D8:92:13:0C:94:AE:58:91:1C X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.105.0/24 Signature Algorithm: sha256WithRSAEncryption a4:24:b6:43:3e:1f:82:e8:e1:c8:d1:1b:b3:39:c0:11:99:03: 51:cf:18:6b:ec:13:b1:4e:70:a9:bc:5f:77:a2:85:ad:cd:ac: d1:99:a4:d4:54:e9:a7:ef:61:06:65:b4:ac:cb:64:e2:b1:08: d9:b4:a6:0e:fb:de:eb:01:3d:85:43:67:e6:99:ed:0a:36:22: 08:db:a0:7a:4f:bd:60:a9:9a:58:1a:5f:3a:5b:61:d4:83:8b: ce:91:70:04:bf:a2:cb:37:df:23:69:39:5b:33:0d:a5:0f:04: 7f:fd:cf:66:59:2d:43:fd:e9:14:cc:ce:cd:48:23:23:fc:09: 78:f8:43:d4:74:7c:fd:bc:67:c6:b9:eb:7d:17:a7:ad:67:a3: 6c:de:fd:e6:a7:9f:ef:7f:e1:6b:17:bd:60:4a:b7:41:60:74: 35:a5:87:bd:f9:7a:ef:53:d1:45:77:cf:a8:13:6d:3d:b5:04: 92:af:d9:7a:f1:e3:70:7a:ad:ba:f9:3f:bc:9f:2c:eb:e8:0f: 70:6f:53:fb:e3:8c:18:b8:44:da:dd:51:c7:75:be:8a:e1:ec: cc:e3:62:2a:53:b8:aa:de:cd:da:76:d6:a5:a9:bb:ac:38:c6: d6:57:28:f3:41:c4:6b:fe:17:11:d0:bf:f9:b9:76:79:99:a3: 17:c0:92:fb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcIuZu5xeT52k7TYYKmE3KrGlMb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTEwMjMwNjU1MDNaFw0yNjEwMjIwNzAwMDNaMDMxMTAvBgNV BAMTKEJBQTNGQzRDNEU5MDkxQzY4RTQ2OTJEODkyMTMwQzk0QUU1ODkxMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxvp0a/ffMYA9fpJqpGeK1uabG xn+RwaPFoBoTv/HNRlkqfmO4pThaanzy2ao+yYLBl8BAcwnT3cNXHgw5XcOzWGsK NdfSU9QUBQopCiNeD9NRYfmF4+17DkuKH5XhlTnGZ5A4aotWVWzFEo8SURL0Afsi JfGnsh6xI1huBRJg8+fkWpdbsDCr1OpDY7YwocCYflRkBvda3bc35iAJf16Z9iFj DIwYE7mYhHNXjjgfQd5aHMZgOHbUnBFsywUaraXgO1WXZlZdyRHlj2ATuYAbrJA1 i6LWCBi1agzn6oD/wUzYYvsBsK60+QqInCH12TJrmm4lnDaMnoWHX235dPS7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUuqP8TE6QkcaORpLYkhMMlK5YkRwwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwM2ViYWJiLTk5OWYtNGYzZS04 NGMxLWJmMjc5YmZlMTc4Ny8wLzMxMzAzMzJlMzEzNjM3MmUzMTMwMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6dpMA0GCSqG SIb3DQEBCwUAA4IBAQCkJLZDPh+C6OHI0RuzOcARmQNRzxhr7BOxTnCpvF93ooWt zazRmaTUVOmn72EGZbSsy2TisQjZtKYO+97rAT2FQ2fmme0KNiII26B6T71gqZpY Gl86W2HUg4vOkXAEv6LLN98jaTlbMw2lDwR//c9mWS1D/ekUzM7NSCMj/Al4+EPU dHz9vGfGuet9F6etZ6Ns3v3mp5/vf+FrF71gSrdBYHQ1pYe9+XrvU9FFd8+oE209 tQSSr9l68eNweq26+T+8nyzr6A9wb1P744wYuETa3VHHdb6K4ezM42IqU7iq3s3a dtalqbusOMbWVyjzQcRr/hcR0L/5uXZ5maMXwJL7 -----END CERTIFICATE-----Generated at Tue Nov 4 17:00:06 2025 by rpki-client