$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32332d3233203d3e203536323436.roa File: 3130332e31302e3132322e302f32332d3233203d3e203536323436.roa (raw, json) Hash identifier: gMf/mBz5EBlfyvNikoGk+vBvJLhiKI+jcGh0+th1BTM= Subject key identifier: 0B:E8:88:B0:32:55:6A:41:4F:54:82:46:53:99:DF:80:D8:64:D0:07 Certificate issuer: /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Certificate serial: 2B6F17F71E203753190B408AAEE119E25DCBD912 Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32332d3233203d3e203536323436.roa Signing time: Mon 02 Jun 2025 01:03:08 +0000 ROA not before: Mon 02 Jun 2025 00:58:08 +0000 ROA not after: Mon 01 Jun 2026 01:03:08 +0000 asID: 56246 IP address blocks: 103.10.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6f:17:f7:1e:20:37:53:19:0b:40:8a:ae:e1:19:e2:5d:cb:d9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6 Validity Not Before: Jun 2 00:58:08 2025 GMT Not After : Jun 1 01:03:08 2026 GMT Subject: CN=0BE888B032556A414F5482465399DF80D864D007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:ac:41:58:14:ac:c0:32:45:4a:8e:24:50: f0:fc:c5:10:b8:72:74:15:57:8c:98:a2:1c:00:58: 61:67:42:d6:b8:34:b9:79:cd:29:6c:1b:50:ef:97: 2d:11:f2:5d:7c:37:ce:81:51:ae:b6:89:31:5f:9f: a1:e5:dd:0f:80:ed:59:b1:13:76:ff:4d:26:8f:f0: 91:c8:77:0a:c9:49:a9:72:d3:60:af:65:36:ee:74: 3a:93:bb:60:7f:6f:7b:68:97:aa:83:4f:62:1d:34: 4b:3e:4d:7a:72:f1:97:89:52:27:e6:37:0b:6f:9a: 0d:ce:8a:db:45:ca:ea:e7:70:2f:d8:65:da:ac:5f: 33:c1:24:69:f7:35:6b:1a:ef:62:2d:88:93:31:73: c6:30:b5:8f:d1:65:2d:f1:f4:9a:56:1a:3c:ca:ba: 09:ba:75:34:f5:36:90:0c:ac:91:1c:61:aa:f7:d2: 13:5d:46:cb:58:08:8c:62:3b:68:b1:e4:d3:cc:94: 00:80:59:1e:77:1c:76:5e:ae:1b:0b:be:d5:48:0d: 56:cc:1c:f4:57:2d:df:3a:7a:ba:e7:67:e1:b9:25: 99:1a:ef:cb:03:6c:94:5e:ef:f6:e5:47:10:0d:a2: fe:5f:31:5a:68:93:0b:8d:0a:84:08:43:69:69:88: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:88:B0:32:55:6A:41:4F:54:82:46:53:99:DF:80:D8:64:D0:07 X509v3 Authority Key Identifier: keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31302e3132322e302f32332d3233203d3e203536323436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.122.0/23 Signature Algorithm: sha256WithRSAEncryption 83:5a:65:3f:bc:29:17:b1:c8:bd:d1:c5:0c:ed:42:b9:f2:03: e1:68:9a:4c:93:85:f4:db:c4:21:6b:5b:30:6e:e2:ce:c7:0f: 97:e1:df:b0:f0:8d:35:72:87:46:f8:f8:49:fb:b1:89:81:c1: 85:04:4a:e0:67:ec:e2:1c:e9:6f:d1:1a:27:c0:39:84:30:72: 9c:c2:4e:2b:8d:26:8a:1b:53:6f:72:06:5d:4e:e2:80:5a:01: 83:34:57:1f:d4:24:32:fe:d4:5f:18:32:db:29:14:aa:40:7d: 32:d2:61:b1:51:cb:ea:4c:d1:98:b1:08:1f:aa:d2:1e:26:4c: e7:db:16:4d:73:45:69:ca:33:b1:89:aa:9c:c1:20:8a:f1:69: f2:f9:49:7d:9f:70:f8:19:ce:da:c7:03:15:71:dd:d1:89:0d: 76:40:5d:48:43:d2:c5:e9:4a:4b:50:ba:51:d9:06:a9:9c:05: c7:09:73:88:94:16:06:76:9a:c6:76:c1:05:c0:da:c7:86:31: de:37:16:c8:40:0d:9d:e4:bf:a7:af:08:89:1b:3b:4e:e2:09: 14:f3:f9:95:89:66:5e:97:da:13:5e:06:dc:d4:95:37:80:26: cf:4f:b6:d7:0d:d4:d0:0a:27:29:0d:d1:75:ab:bc:6b:a3:b3: 76:b6:f6:a1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK28X9x4gN1MZC0CKruEZ4l3L2RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF NEQ1RkRFNjAeFw0yNTA2MDIwMDU4MDhaFw0yNjA2MDEwMTAzMDhaMDMxMTAvBgNV BAMTKDBCRTg4OEIwMzI1NTZBNDE0RjU0ODI0NjUzOTlERjgwRDg2NEQwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpmqxBWBSswDJFSo4kUPD8xRC4 cnQVV4yYohwAWGFnQta4NLl5zSlsG1Dvly0R8l18N86BUa62iTFfn6Hl3Q+A7Vmx E3b/TSaP8JHIdwrJSaly02CvZTbudDqTu2B/b3tol6qDT2IdNEs+TXpy8ZeJUifm Nwtvmg3OittFyurncC/YZdqsXzPBJGn3NWsa72ItiJMxc8YwtY/RZS3x9JpWGjzK ugm6dTT1NpAMrJEcYar30hNdRstYCIxiO2ix5NPMlACAWR53HHZerhsLvtVIDVbM HPRXLd86errnZ+G5JZka78sDbJRe7/blRxANov5fMVpokwuNCoQIQ2lpiPy7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUC+iIsDJVakFPVIJGU5nfgNhk0AcwHwYDVR0j BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1 RkRFNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05 NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMDJlMzEzMjMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzUzNjMyMzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcKejANBgkqhkiG 9w0BAQsFAAOCAQEAg1plP7wpF7HIvdHFDO1CufID4WiaTJOF9NvEIWtbMG7izscP l+HfsPCNNXKHRvj4SfuxiYHBhQRK4Gfs4hzpb9EaJ8A5hDBynMJOK40mihtTb3IG XU7igFoBgzRXH9QkMv7UXxgy2ykUqkB9MtJhsVHL6kzRmLEIH6rSHiZM59sWTXNF acozsYmqnMEgivFp8vlJfZ9w+BnO2scDFXHd0YkNdkBdSEPSxelKS1C6UdkGqZwF xwlziJQWBnaaxnbBBcDax4Yx3jcWyEANneS/p68IiRs7TuIJFPP5lYlmXpfaE14G 3NSVN4Amz0+21w3U0AonKQ3Rdau8a6Ozdrb2oQ== -----END CERTIFICATE-----Generated at Wed Nov 5 08:55:42 2025 by rpki-client