$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa File: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (raw, json) Hash identifier: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA= Subject key identifier: DB:B8:6F:37:4E:E7:9D:D9:C7:81:C4:18:9E:5A:4D:4F:59:48:16:07 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 3E44FE04DCD863923B5344F1F9D48AB747190E77 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa Signing time: Mon 02 Jun 2025 02:03:05 +0000 ROA not before: Mon 02 Jun 2025 01:58:05 +0000 ROA not after: Mon 01 Jun 2026 02:03:05 +0000 asID: 138119 IP address blocks: 103.126.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:44:fe:04:dc:d8:63:92:3b:53:44:f1:f9:d4:8a:b7:47:19:0e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Jun 2 01:58:05 2025 GMT Not After : Jun 1 02:03:05 2026 GMT Subject: CN=DBB86F374EE79DD9C781C4189E5A4D4F59481607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:31:e0:18:a6:1d:38:e5:2c:53:c9:8b:88: cd:3f:67:c4:25:39:f2:d7:38:1e:c1:92:63:0c:c5: 9e:8a:60:2f:4e:10:66:81:8c:12:57:93:5f:48:f3: ae:69:64:56:9b:63:21:7f:63:fd:2c:d9:c9:cd:14: a1:2a:99:82:10:7f:3c:9e:86:d1:6a:32:b4:0f:73: 85:16:63:91:88:ad:b2:8b:1a:da:95:12:eb:05:0a: 00:54:4a:35:3e:22:b6:95:ac:5b:0e:90:14:43:8a: 38:0d:0e:3e:87:b4:a0:42:32:6a:ad:43:a0:9f:7b: ff:e7:b0:c2:32:e9:1f:37:12:67:6a:64:90:9f:ab: 72:84:36:56:2b:7b:72:2b:38:6f:fb:6e:3a:73:b8: 55:4d:9f:73:25:3f:57:5d:08:50:48:11:b6:ff:22: df:75:39:46:3f:3e:ca:04:fd:ae:b1:77:8c:1f:02: eb:da:10:f9:95:48:e7:1a:d8:f2:9c:7c:40:e2:64: f5:2c:a0:50:75:71:f1:e8:f3:0b:bc:fe:a5:e8:c2: 30:e2:b5:e3:fc:d5:6b:22:ab:ca:48:95:d8:d5:bb: ea:8f:ef:2c:a3:e1:84:8a:8c:cb:65:5c:56:cf:32: c5:05:da:29:da:e7:55:2b:c4:41:44:0b:0c:c9:28: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B8:6F:37:4E:E7:9D:D9:C7:81:C4:18:9E:5A:4D:4F:59:48:16:07 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.28.0/22 Signature Algorithm: sha256WithRSAEncryption 17:3d:c6:f9:52:99:44:e7:8a:58:ba:e2:1b:f1:a5:a9:04:de: dd:a3:38:e0:26:51:92:dd:f6:61:11:9e:57:68:4a:63:ca:46: c0:96:d5:ca:60:a3:f8:09:17:3b:d0:76:6d:17:f6:e9:69:25: 6f:f5:22:8a:d5:f7:01:9f:11:28:ae:34:ee:4e:a1:65:e6:7e: 9e:85:fc:5c:c1:7a:7b:13:75:54:92:fb:79:fc:33:4b:6a:b1: 40:0b:7a:8a:1c:17:7d:81:49:98:ae:f8:49:ab:5a:ab:c2:ac: 25:4e:83:55:f7:44:58:e5:dd:ad:22:cf:b3:f1:92:1f:30:91: 6e:eb:c4:2d:9d:ae:49:0b:4e:51:bd:aa:54:8b:1a:5d:fe:12: 10:5e:53:1d:f5:98:bc:70:6b:6b:a7:1a:ec:2c:03:1a:54:32: 94:13:69:21:5e:ec:33:b8:db:a2:fd:5f:c2:eb:c2:b9:20:ed: 81:d2:9e:a3:24:ff:1e:99:b3:07:f3:33:75:22:b3:59:ca:51: 06:e9:23:54:dc:9e:cc:5d:a6:44:0a:08:b6:c6:a0:30:b8:3e: 04:e5:68:30:18:d3:f8:65:b5:ea:43:60:32:62:c3:a1:81:34: 2f:38:2e:86:fe:33:9a:8e:22:e7:a4:eb:9c:ff:ae:81:42:cc: 5a:8e:17:b5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPkT+BNzYY5I7U0Tx+dSKt0cZDncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTA2MDIwMTU4MDVaFw0yNjA2MDEwMjAzMDVaMDMxMTAvBgNV BAMTKERCQjg2RjM3NEVFNzlERDlDNzgxQzQxODlFNUE0RDRGNTk0ODE2MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hTHgGKYdOOUsU8mLiM0/Z8Ql OfLXOB7BkmMMxZ6KYC9OEGaBjBJXk19I865pZFabYyF/Y/0s2cnNFKEqmYIQfzye htFqMrQPc4UWY5GIrbKLGtqVEusFCgBUSjU+IraVrFsOkBRDijgNDj6HtKBCMmqt Q6Cfe//nsMIy6R83EmdqZJCfq3KENlYre3IrOG/7bjpzuFVNn3MlP1ddCFBIEbb/ It91OUY/PsoE/a6xd4wfAuvaEPmVSOca2PKcfEDiZPUsoFB1cfHo8wu8/qXowjDi teP81Wsiq8pIldjVu+qP7yyj4YSKjMtlXFbPMsUF2ina51UrxEFECwzJKK5TAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU27hvN07nndnHgcQYnlpNT1lIFgcwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNmVhMjIxLTc3YjctNDc5MS1h OGE4LWI1MTY0YjAwZjFjNS8wLzMxMzAzMzJlMzEzMjM2MmUzMjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ34cMA0GCSqG SIb3DQEBCwUAA4IBAQAXPcb5UplE54pYuuIb8aWpBN7dozjgJlGS3fZhEZ5XaEpj ykbAltXKYKP4CRc70HZtF/bpaSVv9SKK1fcBnxEorjTuTqFl5n6ehfxcwXp7E3VU kvt5/DNLarFAC3qKHBd9gUmYrvhJq1qrwqwlToNV90RY5d2tIs+z8ZIfMJFu68Qt na5JC05RvapUixpd/hIQXlMd9Zi8cGtrpxrsLAMaVDKUE2khXuwzuNui/V/C68K5 IO2B0p6jJP8embMH8zN1IrNZylEG6SNU3J7MXaZECgi2xqAwuD4E5WgwGNP4ZbXq Q2AyYsOhgTQvOC6G/jOajiLnpOuc/66BQsxajhe1 -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:04 2025 by rpki-client