$ rpki-client -vvf repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa File: 3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa (raw, json) Hash identifier: gBuKZp3R0YXrjb4G0M3590pA6J7lO5rSoZLcNrVMmpY= Subject key identifier: 68:2B:3A:9C:23:8E:DF:51:68:7B:5A:4B:D7:1F:93:52:B7:A8:46:78 Certificate issuer: /CN=10FC4D9D2403FC433C19BB76131325B776505E51 Certificate serial: 3D76B1317EDB5CB7B31F0B57C2773EE6655E2D9E Authority key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa Signing time: Wed 13 Aug 2025 01:00:01 +0000 ROA not before: Wed 13 Aug 2025 00:55:01 +0000 ROA not after: Wed 12 Aug 2026 01:00:01 +0000 asID: 137315 IP address blocks: 103.109.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:76:b1:31:7e:db:5c:b7:b3:1f:0b:57:c2:77:3e:e6:65:5e:2d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Validity Not Before: Aug 13 00:55:01 2025 GMT Not After : Aug 12 01:00:01 2026 GMT Subject: CN=682B3A9C238EDF51687B5A4BD71F9352B7A84678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:ac:e1:a9:f7:c5:37:21:f1:ec:49:1c:f1: 0b:95:6a:70:d7:3a:0e:41:94:aa:8b:02:6a:32:d1: 4f:38:f3:8e:b3:22:da:8a:ce:c5:08:a2:33:34:95: 97:55:fd:60:00:84:88:51:68:68:0c:55:46:bc:0b: d5:c0:f4:4c:be:50:45:7b:08:b1:30:42:4d:44:1c: 35:06:5b:3b:9d:a9:33:d5:0f:38:54:82:2c:90:88: 7b:1d:33:a1:0c:74:c1:59:07:3e:72:21:58:72:ae: 60:75:02:e0:26:e5:ce:84:c7:4b:9c:5a:0f:66:e8: 0d:86:a0:b2:a2:7e:a2:d3:6b:8c:21:2f:9d:29:65: 20:a4:9d:72:29:67:b6:06:5f:3a:3c:a7:99:94:f5: 98:cc:d6:d1:9c:99:0d:97:03:f1:77:26:f2:f2:6f: 8f:9e:71:18:89:50:38:14:fe:db:aa:1e:dc:cc:bf: 00:6b:15:d4:59:14:27:e9:c8:e0:f2:6a:2f:0b:db: fe:43:6a:08:6a:31:53:50:69:88:cd:e7:ee:0c:74: a5:a7:01:40:d5:23:08:ca:f1:9b:5a:73:68:86:7a: 3b:be:48:5e:7c:b9:5b:5e:39:f1:81:d4:80:4e:08: ba:41:f4:3e:c5:db:10:07:49:8c:3a:fd:a4:f7:d9: b5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:3A:9C:23:8E:DF:51:68:7B:5A:4B:D7:1F:93:52:B7:A8:46:78 X509v3 Authority Key Identifier: keyid:10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/3130332e3130392e3231302e302f32342d3234203d3e20313337333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.210.0/24 Signature Algorithm: sha256WithRSAEncryption 53:20:47:d5:51:e4:43:2f:54:f3:d4:98:11:f3:56:ff:53:0b: 78:76:e7:04:32:f4:6f:9d:9f:fa:3e:60:32:a3:bf:cc:a8:20: e6:bf:0d:35:34:d3:8e:6a:e5:c3:96:53:37:c7:20:89:db:28: f3:b3:c9:f7:8e:6c:51:3c:e1:ba:00:fc:9c:c3:89:db:fe:b4: 1a:94:c6:78:17:bb:8b:41:29:ec:4a:6a:af:ff:1c:ad:63:35: 1b:6d:da:a6:29:7d:4b:6b:24:5b:cf:47:31:cc:07:0e:32:2e: ba:f6:71:d4:73:1d:12:d7:d6:a3:3e:72:79:4b:45:d5:e8:e9: 4c:c4:f6:c8:b6:e7:7d:5c:cf:2d:0e:13:a1:1a:f7:a0:8c:ec: 53:df:c1:5b:c1:29:d0:ea:1f:cd:ad:b8:73:3a:e1:ba:14:48: 02:c3:cf:a1:d5:5c:6d:26:b1:12:f9:03:b7:e4:87:52:cf:f0: db:ef:a5:35:0e:df:e9:12:3d:a2:0b:60:ad:5d:01:6e:64:a8: 5e:df:a5:8d:5c:6b:be:6c:0e:8e:f1:84:9d:09:4c:e6:44:47: ee:9b:ee:9c:18:9b:0f:f3:2f:a3:56:43:be:d8:d4:9b:a7:dd: cd:1e:13:81:f2:3d:0d:a6:16:03:72:d7:97:db:c9:0d:7c:54: f2:c4:a2:07 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPXaxMX7bXLezHwtXwnc+5mVeLZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3 NjUwNUU1MTAeFw0yNTA4MTMwMDU1MDFaFw0yNjA4MTIwMTAwMDFaMDMxMTAvBgNV BAMTKDY4MkIzQTlDMjM4RURGNTE2ODdCNUE0QkQ3MUY5MzUyQjdBODQ2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGe6zhqffFNyHx7Ekc8QuVanDX Og5BlKqLAmoy0U84846zItqKzsUIojM0lZdV/WAAhIhRaGgMVUa8C9XA9Ey+UEV7 CLEwQk1EHDUGWzudqTPVDzhUgiyQiHsdM6EMdMFZBz5yIVhyrmB1AuAm5c6Ex0uc Wg9m6A2GoLKifqLTa4whL50pZSCknXIpZ7YGXzo8p5mU9ZjM1tGcmQ2XA/F3JvLy b4+ecRiJUDgU/tuqHtzMvwBrFdRZFCfpyODyai8L2/5DaghqMVNQaYjN5+4MdKWn AUDVIwjK8Ztac2iGeju+SF58uVteOfGB1IBOCLpB9D7F2xAHSYw6/aT32bUdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUaCs6nCOO31Foe1pL1x+TUreoRngwHwYDVR0j BBgwFoAUEPxNnSQD/EM8Gbt2ExMlt3ZQXlEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMC8xMEZDNEQ5RDI0 MDNGQzQzM0MxOUJCNzYxMzEzMjVCNzc2NTA1RTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBGQzREOUQyNDAzRkM0MzNDMTlCQjc2MTMxMzI1Qjc3NjUw NUU1MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZjA2OGJkLThlM2EtNDY5NS04 OWVkLTNiMzI1MGY4NzVjOS8wLzMxMzAzMzJlMzEzMDM5MmUzMjMxMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMxMzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbdIwDQYJ KoZIhvcNAQELBQADggEBAFMgR9VR5EMvVPPUmBHzVv9TC3h25wQy9G+dn/o+YDKj v8yoIOa/DTU0045q5cOWUzfHIInbKPOzyfeObFE84boA/JzDidv+tBqUxngXu4tB KexKaq//HK1jNRtt2qYpfUtrJFvPRzHMBw4yLrr2cdRzHRLX1qM+cnlLRdXo6UzE 9si2531czy0OE6Ea96CM7FPfwVvBKdDqH82tuHM64boUSALDz6HVXG0msRL5A7fk h1LP8NvvpTUO3+kSPaILYK1dAW5kqF7fpY1ca75sDo7xhJ0JTOZER+6b7pwYmw/z L6NWQ77Y1Jun3c0eE4HyPQ2mFgNy15fbyQ18VPLEogc= -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:43 2025 by rpki-client