$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa File: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (raw, json) Hash identifier: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU= Subject key identifier: C7:56:FB:1C:7A:58:C8:2F:82:8A:C0:90:35:BC:9A:B3:89:60:EC:31 Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 521824F4AC36F20F4CD0D860D0F08983F9863DC8 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa Signing time: Mon 03 Nov 2025 10:02:24 +0000 ROA not before: Mon 03 Nov 2025 09:57:24 +0000 ROA not after: Mon 02 Nov 2026 10:02:24 +0000 asID: 132678 IP address blocks: 103.241.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:18:24:f4:ac:36:f2:0f:4c:d0:d8:60:d0:f0:89:83:f9:86:3d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Nov 3 09:57:24 2025 GMT Not After : Nov 2 10:02:24 2026 GMT Subject: CN=C756FB1C7A58C82F828AC09035BC9AB38960EC31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:8a:12:ed:19:d4:99:72:07:30:28:ae:3f: 1e:01:20:eb:2e:ba:f2:93:75:a7:79:89:1e:9b:4e: 86:41:ea:e1:65:f4:19:f8:57:a1:0b:d0:2d:9e:73: 75:09:a4:a9:58:1a:0d:c7:fb:09:9c:bf:69:18:74: 66:65:82:2b:10:3e:ee:ec:d8:6b:f7:c5:90:25:f8: 48:1e:6a:54:94:af:b6:bd:bc:34:be:3a:56:56:e1: c0:9e:ec:4b:b9:51:50:76:13:d1:f5:3e:24:ee:c7: c5:64:b1:c7:7b:14:b8:6c:f4:46:2c:91:d4:d7:52: ea:3e:79:57:55:a8:a5:a5:8f:3d:7f:c0:53:7d:5b: 03:f4:ef:c9:bb:10:f4:0d:5c:ba:e1:c6:1f:a0:f9: 77:20:0d:4d:ef:6d:12:85:f5:4b:07:50:3a:f0:7b: fe:5e:81:95:fe:a2:e8:8d:27:b1:1d:98:e8:e5:17: 96:89:71:4b:ec:e4:9b:a5:56:a4:69:ef:f0:70:ce: 41:19:05:0d:cd:9d:22:46:49:02:06:3b:80:a4:f3: 6c:c4:ca:e9:32:ea:96:d7:30:c9:45:d8:ea:30:3d: 0a:c7:86:43:6b:5a:4d:b2:c9:56:41:ad:06:84:38: 00:de:e9:b7:fd:df:97:fe:df:50:e5:6f:30:0e:32: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:FB:1C:7A:58:C8:2F:82:8A:C0:90:35:BC:9A:B3:89:60:EC:31 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.204.0/24 Signature Algorithm: sha256WithRSAEncryption 25:cc:d9:41:4e:40:3f:37:d8:00:7f:23:83:45:ef:44:53:27: 5e:e6:94:47:80:40:46:65:d6:6f:42:a5:1a:b4:7e:6e:f6:e6: b6:c7:12:bb:ad:87:2d:6b:93:4f:8d:f8:86:b3:b6:a9:97:21: 85:33:e0:35:85:76:a0:f1:b5:2f:ed:fb:ff:bf:46:6a:af:bf: ae:a8:86:b4:1e:9c:80:8d:3c:1b:34:2c:d5:68:35:9b:37:83: 3b:c9:33:55:1a:7c:58:4c:3b:3b:49:0d:c7:ed:01:e7:9c:a4: f3:68:1e:07:83:ba:49:d7:5c:ae:9a:30:50:2c:95:51:3d:b2: 09:38:c6:ec:b2:b9:6c:ff:bf:7f:24:7b:1b:46:2f:4e:cf:7e: ae:e6:f3:89:fd:16:29:16:40:fe:60:4d:35:4a:29:b2:0d:cd: 89:0f:2a:06:70:b6:e2:0b:a1:60:37:a8:22:bd:4e:e4:0f:d1: bb:cc:4a:12:19:bb:55:2e:0a:1b:d4:63:c1:51:2b:4a:c8:54: 22:f1:24:2d:77:7a:94:69:da:e3:85:e4:44:c9:70:10:b8:db: e2:dd:9a:85:78:d9:68:5d:8b:79:c0:17:69:0d:ce:b5:e9:26: 88:23:14:b0:3d:bd:5d:fc:67:18:3e:66:9e:37:30:e0:ce:4d: e0:b6:40:35 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUhgk9Kw28g9M0Nhg0PCJg/mGPcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTExMDMwOTU3MjRaFw0yNjExMDIxMDAyMjRaMDMxMTAvBgNV BAMTKEM3NTZGQjFDN0E1OEM4MkY4MjhBQzA5MDM1QkM5QUIzODk2MEVDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZooS7RnUmXIHMCiuPx4BIOsu uvKTdad5iR6bToZB6uFl9Bn4V6EL0C2ec3UJpKlYGg3H+wmcv2kYdGZlgisQPu7s 2Gv3xZAl+EgealSUr7a9vDS+OlZW4cCe7Eu5UVB2E9H1PiTux8Vkscd7FLhs9EYs kdTXUuo+eVdVqKWljz1/wFN9WwP078m7EPQNXLrhxh+g+XcgDU3vbRKF9UsHUDrw e/5egZX+ouiNJ7EdmOjlF5aJcUvs5JulVqRp7/BwzkEZBQ3NnSJGSQIGO4Ck82zE yuky6pbXMMlF2OowPQrHhkNrWk2yyVZBrQaEOADe6bf935f+31DlbzAOMthhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUx1b7HHpYyC+CisCQNbyas4lg7DEwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYTBjZjlhLWM1N2QtNDM5NS05 MjQ5LWJmY2Y0NjcyNDI4Mi8wLzMxMzAzMzJlMzIzNDMxMmUzMjMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn8cwwDQYJ KoZIhvcNAQELBQADggEBACXM2UFOQD832AB/I4NF70RTJ17mlEeAQEZl1m9CpRq0 fm725rbHEruthy1rk0+N+IaztqmXIYUz4DWFdqDxtS/t+/+/Rmqvv66ohrQenICN PBs0LNVoNZs3gzvJM1UafFhMOztJDcftAeecpPNoHgeDuknXXK6aMFAslVE9sgk4 xuyyuWz/v38kextGL07Pfq7m84n9FikWQP5gTTVKKbINzYkPKgZwtuILoWA3qCK9 TuQP0bvMShIZu1UuChvUY8FRK0rIVCLxJC13epRp2uOF5ETJcBC42+LdmoV42Whd i3nAF2kNzrXpJogjFLA9vV38Zxg+Zp43MODOTeC2QDU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:42 2025 by rpki-client