$ rpki-client -vvf repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa File: 3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa (raw, json) Hash identifier: EkANgkaL13bjaRF11H0zZE1hKYLJlJeMIfmupgq3iaU= Subject key identifier: 3C:08:9B:07:B4:0A:96:7D:16:CB:C1:F4:54:FE:07:E5:D3:8E:4C:86 Certificate issuer: /CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Certificate serial: 5D7BE1EC884A9BA9A5BF960DFC997F79E5072213 Authority key identifier: 6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa Signing time: Thu 30 Oct 2025 03:00:01 +0000 ROA not before: Thu 30 Oct 2025 02:55:01 +0000 ROA not after: Thu 29 Oct 2026 03:00:01 +0000 asID: 141968 IP address blocks: 103.42.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:7b:e1:ec:88:4a:9b:a9:a5:bf:96:0d:fc:99:7f:79:e5:07:22:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F485ADAD2068337FDF8B28FF007BCDC5B4999D8 Validity Not Before: Oct 30 02:55:01 2025 GMT Not After : Oct 29 03:00:01 2026 GMT Subject: CN=3C089B07B40A967D16CBC1F454FE07E5D38E4C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:4c:14:24:b0:b4:87:f1:31:b5:89:28:09: 73:59:f5:23:df:ee:f6:e7:6f:6e:3a:d0:d8:fa:27: 4c:da:41:b2:03:54:a0:cc:2b:7d:63:8d:a5:c8:a1: 34:76:40:be:cd:66:37:2b:1b:1b:de:c0:04:5d:f5: 34:0f:33:da:51:d9:b8:15:fe:29:89:5a:2e:d8:31: f1:d2:dc:c4:67:10:4b:7a:33:c3:aa:6b:4d:27:49: 0c:37:6d:c6:96:09:f5:9b:9b:83:6d:1a:c0:bd:93: 2c:bf:69:cd:09:de:09:ef:7d:c3:5c:e0:c5:7f:e0: d4:66:8a:48:7e:10:22:a7:f0:2a:fb:16:da:f5:59: b4:73:1b:ce:92:d1:3f:02:b6:a0:54:6b:44:e8:09: 75:8c:18:2e:ad:c1:89:29:10:53:ab:a3:f6:60:7c: e7:04:4e:37:a3:14:36:9a:e8:fc:b9:64:0f:cc:a1: 89:7e:15:a7:04:a3:aa:f3:a5:1c:81:f4:ef:19:c1: 1f:7a:db:71:98:b2:6f:e3:34:01:b6:d9:33:33:89: 72:d9:0f:6d:2c:72:b6:fa:d2:e4:b2:29:a9:e5:23: c2:70:a4:9e:f6:5c:63:40:a3:c0:7a:36:2f:cd:e8: df:b0:d7:4e:c8:72:f0:b6:4a:f8:e6:c3:86:64:19: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:9B:07:B4:0A:96:7D:16:CB:C1:F4:54:FE:07:E5:D3:8E:4C:86 X509v3 Authority Key Identifier: keyid:6F:48:5A:DA:D2:06:83:37:FD:F8:B2:8F:F0:07:BC:DC:5B:49:99:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6F485ADAD2068337FDF8B28FF007BCDC5B4999D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f58934d-1b00-4489-92ed-1ca6dc4b290f/0/3130332e34322e3131362e302f32342d3234203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.116.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:56:ed:28:d4:2e:70:b0:c0:1b:ea:b2:be:1e:65:38:a6:7c: 4b:45:b9:b4:56:25:81:90:db:e8:30:19:52:12:2d:70:91:f6: 18:80:0d:5a:8a:69:f0:2e:5c:29:df:e1:8f:80:76:8e:41:d0: bb:14:70:ca:95:1a:b5:b7:b4:ff:4f:25:ed:e3:a1:2e:d1:e7: c0:d5:09:dc:68:96:a5:4e:36:d1:f8:89:37:81:ea:ce:73:43: 62:4b:7b:62:25:a3:a8:20:25:c9:80:7e:7e:ae:ca:b5:f8:83: b5:ae:50:7e:e1:4c:51:db:06:e3:ee:c2:cb:16:41:3d:ba:6d: b6:71:ca:6d:62:8e:fb:15:9f:fc:c8:6b:f0:f5:17:fc:73:a7: 24:fd:cf:0b:25:99:42:13:88:73:de:4e:fd:88:80:c6:0e:cc: c2:3f:09:c3:a8:34:53:64:4a:c2:d3:e7:25:f4:d4:51:66:a7: 76:b2:ee:51:cc:0d:88:6f:a3:d7:d8:99:b3:35:36:04:dc:b7: 18:7f:cf:58:16:9f:ce:b4:33:d9:59:21:fb:b3:71:6f:fa:3e: 8b:bc:85:ed:24:6f:ef:63:b0:67:11:dd:e9:b5:ab:ed:6a:5a: 3b:11:c4:42:46:33:e2:61:e2:f6:ae:ed:48:b8:5d:3e:88:b7: b5:a3:a3:f9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXXvh7IhKm6mlv5YN/Jl/eeUHIhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1 QjQ5OTlEODAeFw0yNTEwMzAwMjU1MDFaFw0yNjEwMjkwMzAwMDFaMDMxMTAvBgNV BAMTKDNDMDg5QjA3QjQwQTk2N0QxNkNCQzFGNDU0RkUwN0U1RDM4RTRDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7kwUJLC0h/ExtYkoCXNZ9SPf 7vbnb2460Nj6J0zaQbIDVKDMK31jjaXIoTR2QL7NZjcrGxvewARd9TQPM9pR2bgV /imJWi7YMfHS3MRnEEt6M8Oqa00nSQw3bcaWCfWbm4NtGsC9kyy/ac0J3gnvfcNc 4MV/4NRmikh+ECKn8Cr7Ftr1WbRzG86S0T8CtqBUa0ToCXWMGC6twYkpEFOro/Zg fOcETjejFDaa6Py5ZA/MoYl+FacEo6rzpRyB9O8ZwR9623GYsm/jNAG22TMziXLZ D20scrb60uSyKanlI8JwpJ72XGNAo8B6Ni/N6N+w107IcvC2Svjmw4ZkGQCDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUPAibB7QKln0Wy8H0VP4H5dOOTIYwHwYDVR0j BBgwFoAUb0ha2tIGgzf9+LKP8Ae83FtJmdgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjU4OTM0ZC0xYjAwLTQ0ODktOTJlZC0xY2E2ZGM0YjI5MGYvMC82RjQ4NUFEQUQy MDY4MzM3RkRGOEIyOEZGMDA3QkNEQzVCNDk5OUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkY0ODVBREFEMjA2ODMzN0ZERjhCMjhGRjAwN0JDREM1QjQ5 OTlEOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNTg5MzRkLTFiMDAtNDQ4OS05 MmVkLTFjYTZkYzRiMjkwZi8wLzMxMzAzMzJlMzQzMjJlMzEzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyp0MA0GCSqG SIb3DQEBCwUAA4IBAQB6Vu0o1C5wsMAb6rK+HmU4pnxLRbm0ViWBkNvoMBlSEi1w kfYYgA1aimnwLlwp3+GPgHaOQdC7FHDKlRq1t7T/TyXt46Eu0efA1QncaJalTjbR +Ik3gerOc0NiS3tiJaOoICXJgH5+rsq1+IO1rlB+4UxR2wbj7sLLFkE9um22ccpt Yo77FZ/8yGvw9Rf8c6ck/c8LJZlCE4hz3k79iIDGDszCPwnDqDRTZErC0+cl9NRR Zqd2su5RzA2Ib6PX2JmzNTYE3LcYf89YFp/OtDPZWSH7s3Fv+j6LvIXtJG/vY7Bn Ed3ptavtalo7EcRCRjPiYeL2ru1IuF0+iLe1o6P5 -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:52 2025 by rpki-client