$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa File: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (raw, json) Hash identifier: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY= Subject key identifier: FA:EC:9D:D0:D5:72:AE:DA:9F:97:24:A6:7B:9D:CB:5C:28:3A:75:45 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 36B153D9EBCD40911F3BCB4DDA56BD294E60F988 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa Signing time: Thu 30 Oct 2025 17:00:01 +0000 ROA not before: Thu 30 Oct 2025 16:55:01 +0000 ROA not after: Thu 29 Oct 2026 17:00:01 +0000 asID: 141639 IP address blocks: 103.162.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:b1:53:d9:eb:cd:40:91:1f:3b:cb:4d:da:56:bd:29:4e:60:f9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Oct 30 16:55:01 2025 GMT Not After : Oct 29 17:00:01 2026 GMT Subject: CN=FAEC9DD0D572AEDA9F9724A67B9DCB5C283A7545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:97:11:36:9a:4d:13:4d:9c:fa:1e:04:04:f9: 86:92:c8:45:12:95:68:97:10:c5:44:b3:60:b2:f5: ff:9d:fb:6d:37:d6:32:79:52:3a:5f:a2:08:99:ab: e0:6c:a0:f3:8d:33:96:c6:c7:6b:d2:77:1c:b4:0f: c4:9c:61:c1:87:70:92:ea:4d:78:99:51:de:75:fe: 4f:13:10:bc:cd:17:d0:16:4d:ae:28:98:ce:60:91: 0b:4e:eb:d1:26:d1:31:1b:6b:15:31:26:01:c0:3a: e6:ba:23:bd:03:49:24:b4:63:0d:7b:67:d9:83:cb: 59:20:6c:c6:bf:bc:ec:d1:2c:76:31:3e:7d:d0:07: 22:7e:21:56:70:e2:d6:37:c8:cc:5a:f6:46:d7:1a: 58:5f:9f:fb:42:7d:98:49:6d:ee:dc:ab:3c:f6:5a: 45:6a:52:b6:99:8e:9e:e5:2c:b1:4a:e1:fb:2d:9b: 3c:75:f2:e0:b0:8f:26:34:ba:e1:85:00:36:58:44: 58:f4:eb:b4:1c:e1:e2:0d:da:62:a0:8b:af:ff:37: 7a:c5:36:13:fe:c2:d9:6d:14:ee:64:05:21:a6:43: 13:7e:37:9c:44:42:f2:d0:30:35:1b:d4:2f:14:9c: 4d:03:f9:4b:45:f0:0a:d9:80:73:00:b0:13:c1:28: 85:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EC:9D:D0:D5:72:AE:DA:9F:97:24:A6:7B:9D:CB:5C:28:3A:75:45 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.37.0/24 Signature Algorithm: sha256WithRSAEncryption 19:6e:b4:46:1a:88:f1:ef:2f:fa:88:6d:92:94:03:8b:8b:32: 1e:af:6a:3f:65:e9:46:b4:e9:c3:ec:38:df:9b:e1:d5:98:b1: b6:8b:a8:29:51:33:6a:c0:a5:82:ed:e9:76:c3:12:bc:5d:de: df:40:3a:7e:13:61:ff:73:9f:e2:3a:9e:7e:0d:30:d6:bf:41: ba:9a:8e:6a:ce:ac:9c:c5:b6:27:01:f7:93:f6:94:79:3b:67: e9:50:52:4a:12:e2:d6:f7:dc:7f:38:a7:dc:e1:bc:4a:72:a8: 2a:cf:60:b2:cf:6f:40:c2:1f:d6:79:1c:41:2a:93:4a:f4:fd: 2f:a1:a6:ce:6f:a4:6e:b9:18:5f:42:96:1c:b6:d8:dd:75:39: 00:ef:19:c2:fd:be:01:c3:5e:69:75:3c:66:a1:d9:77:ec:ad: b7:00:ff:9a:e7:b5:b5:79:d9:1d:6f:7d:45:b9:d0:0f:94:01: 4a:d2:0a:cf:67:43:75:4f:61:ce:24:d2:48:59:f9:18:da:49: da:b0:b7:ec:9d:59:71:02:05:91:e7:80:f7:46:78:f9:fc:e2: dc:08:aa:7b:33:74:fd:70:fb:91:d2:87:f7:5a:c9:1e:0e:97: bf:ae:5f:23:f0:cd:b6:8d:be:ff:af:1f:26:7b:04:33:30:85: 35:ba:d4:25 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNrFT2evNQJEfO8tN2la9KU5g+YgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNTEwMzAxNjU1MDFaFw0yNjEwMjkxNzAwMDFaMDMxMTAvBgNV BAMTKEZBRUM5REQwRDU3MkFFREE5Rjk3MjRBNjdCOURDQjVDMjgzQTc1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElxE2mk0TTZz6HgQE+YaSyEUS lWiXEMVEs2Cy9f+d+2031jJ5UjpfogiZq+BsoPONM5bGx2vSdxy0D8ScYcGHcJLq TXiZUd51/k8TELzNF9AWTa4omM5gkQtO69Em0TEbaxUxJgHAOua6I70DSSS0Yw17 Z9mDy1kgbMa/vOzRLHYxPn3QByJ+IVZw4tY3yMxa9kbXGlhfn/tCfZhJbe7cqzz2 WkVqUraZjp7lLLFK4fstmzx18uCwjyY0uuGFADZYRFj067Qc4eIN2mKgi6//N3rF NhP+wtltFO5kBSGmQxN+N5xEQvLQMDUb1C8UnE0D+UtF8ArZgHMAsBPBKIVvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+uyd0NVyrtqflySme53LXCg6dUUwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2ZjNhZTk3LWY1MmUtNDk3Ny05 MGQxLTQzNDlhYWQwNTJhOC8wLzMxMzAzMzJlMzEzNjMyMmUzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6IlMA0GCSqG SIb3DQEBCwUAA4IBAQAZbrRGGojx7y/6iG2SlAOLizIer2o/ZelGtOnD7Djfm+HV mLG2i6gpUTNqwKWC7el2wxK8Xd7fQDp+E2H/c5/iOp5+DTDWv0G6mo5qzqycxbYn AfeT9pR5O2fpUFJKEuLW99x/OKfc4bxKcqgqz2Cyz29Awh/WeRxBKpNK9P0voabO b6RuuRhfQpYcttjddTkA7xnC/b4Bw15pdTxmodl37K23AP+a57W1edkdb31FudAP lAFK0grPZ0N1T2HOJNJIWfkY2knasLfsnVlxAgWR54D3Rnj5/OLcCKp7M3T9cPuR 0of3WskeDpe/rl8j8M22jb7/rx8mewQzMIU1utQl -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:33 2025 by rpki-client