$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa File: 3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (raw, json) Hash identifier: E1Zc/UwpXG2NEKaf6TijDRvbu7t9U5+UrKGfBCasGq0= Subject key identifier: 3E:0C:73:FD:2B:4B:19:20:56:77:15:A7:05:9D:D5:37:C8:F8:88:2F Certificate issuer: /CN=38F85F0AA81AE33827BDF573D6A712452180A036 Certificate serial: 59703022178C0E58D931803704323F4A3B6EAE96 Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa Signing time: Wed 29 Oct 2025 12:00:01 +0000 ROA not before: Wed 29 Oct 2025 11:55:01 +0000 ROA not after: Wed 28 Oct 2026 12:00:01 +0000 asID: 136064 IP address blocks: 103.83.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:70:30:22:17:8c:0e:58:d9:31:80:37:04:32:3f:4a:3b:6e:ae:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036 Validity Not Before: Oct 29 11:55:01 2025 GMT Not After : Oct 28 12:00:01 2026 GMT Subject: CN=3E0C73FD2B4B1920567715A7059DD537C8F8882F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:36:67:35:37:f1:c8:91:33:cf:a4:1e:6b:63: ae:43:d5:03:53:ec:4f:7b:be:70:cc:38:f1:41:c9: ed:b7:a5:04:dd:e1:ef:c0:23:2f:2f:7f:c0:36:11: 6f:05:47:c6:0b:66:b2:b9:e1:78:6a:4a:42:7e:e3: 13:94:50:3b:37:df:73:d3:1c:27:b1:cf:5f:62:ff: 3e:b6:c9:a4:0b:a7:2e:31:7c:75:84:82:7b:6a:0c: d8:80:ee:20:f8:11:82:d4:61:1c:a0:bc:d8:b1:b2: 67:00:9f:5a:cf:05:52:3e:55:40:1b:17:76:59:8e: 65:a4:8a:d0:01:37:cf:07:68:9a:f7:b6:74:7a:1c: dd:42:9b:b0:b2:a8:e2:45:8c:b0:60:da:f5:14:57: f1:b1:0d:f0:42:1b:5d:da:bd:4f:47:33:bc:9f:ae: 24:69:e1:63:34:20:04:e4:7d:bf:a3:1e:8f:36:79: 8d:83:c0:ca:29:eb:fe:9d:24:9d:7f:ae:b1:38:23: 64:0d:ae:e5:a4:06:09:bb:69:bb:5e:c1:16:93:f9: 9c:bc:1b:39:b8:31:0c:65:45:29:85:a7:24:67:e1: 03:59:82:3e:7f:e1:54:04:18:47:b0:9b:0f:6b:0d: c5:08:4c:80:fb:6e:97:23:2c:cd:85:41:19:e1:c6: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0C:73:FD:2B:4B:19:20:56:77:15:A7:05:9D:D5:37:C8:F8:88:2F X509v3 Authority Key Identifier: keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.116.0/24 Signature Algorithm: sha256WithRSAEncryption 89:3a:0c:ec:ed:e4:41:c4:f1:79:a4:71:3f:2a:23:fd:f1:16: 0e:43:f3:35:78:7b:30:ce:18:a4:79:fb:33:57:ae:13:b8:c8: 71:07:ec:09:39:c6:12:8d:b0:9e:b3:c4:98:b1:2a:be:c4:6c: d3:9f:36:ed:25:af:f0:5c:50:5d:dc:9c:00:15:e7:ed:cb:dc: 34:fc:cc:37:d5:d7:0f:c5:7c:d7:51:a0:d8:43:5a:39:f6:e7: 79:52:74:63:43:95:32:7a:b6:3a:e2:7d:5b:44:83:73:21:3b: 58:4c:4a:73:88:4e:2f:dc:dd:47:97:27:2d:03:49:e2:13:ae: d8:c4:ef:79:80:63:c6:0c:14:97:33:85:0a:dd:3d:27:31:2d: 4d:3a:38:46:7a:f5:0e:82:7f:18:d1:ad:22:0e:0d:81:17:53: 43:43:e3:d6:3f:21:13:c7:bb:61:d7:11:a1:8d:80:1a:a7:bf: 35:a6:1b:11:94:15:e4:0f:cf:e5:ba:00:f6:50:ec:d1:03:95: b4:06:6c:8b:e4:fb:05:0c:3b:89:98:78:88:da:91:e0:86:d6: c4:35:25:37:d0:d1:fb:aa:df:30:84:42:73:3d:a9:07:43:70: ad:78:1c:37:d3:b6:31:9b:64:8d:02:4e:ce:b3:58:48:4c:fa: 55:eb:be:8b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWXAwIheMDljZMYA3BDI/SjturpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUy MTgwQTAzNjAeFw0yNTEwMjkxMTU1MDFaFw0yNjEwMjgxMjAwMDFaMDMxMTAvBgNV BAMTKDNFMEM3M0ZEMkI0QjE5MjA1Njc3MTVBNzA1OURENTM3QzhGODg4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWNmc1N/HIkTPPpB5rY65D1QNT 7E97vnDMOPFBye23pQTd4e/AIy8vf8A2EW8FR8YLZrK54XhqSkJ+4xOUUDs333PT HCexz19i/z62yaQLpy4xfHWEgntqDNiA7iD4EYLUYRygvNixsmcAn1rPBVI+VUAb F3ZZjmWkitABN88HaJr3tnR6HN1Cm7CyqOJFjLBg2vUUV/GxDfBCG13avU9HM7yf riRp4WM0IATkfb+jHo82eY2DwMop6/6dJJ1/rrE4I2QNruWkBgm7abtewRaT+Zy8 Gzm4MQxlRSmFpyRn4QNZgj5/4VQEGEewmw9rDcUITID7bpcjLM2FQRnhxjRtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPgxz/StLGSBWdxWnBZ3VN8j4iC8wHwYDVR0j BBgwFoAUOPhfCqga4zgnvfVz1qcSRSGAoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTk4YjNiZC0yODRkLTRhN2QtOWYyNy1jYjU4N2U5ZGQ4NDEvMC8zOEY4NUYwQUE4 MUFFMzM4MjdCREY1NzNENkE3MTI0NTIxODBBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzhGODVGMEFBODFBRTMzODI3QkRGNTczRDZBNzEyNDUyMTgw QTAzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlOThiM2JkLTI4NGQtNGE3ZC05 ZjI3LWNiNTg3ZTlkZDg0MS8wLzMxMzAzMzJlMzgzMzJlMzEzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1N0MA0GCSqG SIb3DQEBCwUAA4IBAQCJOgzs7eRBxPF5pHE/KiP98RYOQ/M1eHswzhikefszV64T uMhxB+wJOcYSjbCes8SYsSq+xGzTnzbtJa/wXFBd3JwAFefty9w0/Mw31dcPxXzX UaDYQ1o59ud5UnRjQ5UyerY64n1bRINzITtYTEpziE4v3N1HlyctA0niE67YxO95 gGPGDBSXM4UK3T0nMS1NOjhGevUOgn8Y0a0iDg2BF1NDQ+PWPyETx7th1xGhjYAa p781phsRlBXkD8/lugD2UOzRA5W0BmyL5PsFDDuJmHiI2pHghtbENSU30NH7qt8w hEJzPakHQ3CteBw307Yxm2SNAk7Os1hITPpV676L -----END CERTIFICATE-----Generated at Wed Nov 5 07:21:06 2025 by rpki-client