$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa File: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (raw, json) Hash identifier: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ= Subject key identifier: 64:C1:21:16:14:F6:DC:27:D4:22:53:14:F6:74:C8:F5:DA:A9:3B:99 Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 19A0B72F65B086569F72CC5F383B03E6117E09D5 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa Signing time: Mon 03 Nov 2025 10:02:24 +0000 ROA not before: Mon 03 Nov 2025 09:57:24 +0000 ROA not after: Mon 02 Nov 2026 10:02:24 +0000 asID: 132678 IP address blocks: 103.241.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a0:b7:2f:65:b0:86:56:9f:72:cc:5f:38:3b:03:e6:11:7e:09:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Nov 3 09:57:24 2025 GMT Not After : Nov 2 10:02:24 2026 GMT Subject: CN=64C1211614F6DC27D4225314F674C8F5DAA93B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:56:80:d0:ed:da:59:e0:15:e4:f6:a5:42: c7:7c:7e:1d:cf:c5:77:32:64:e2:cb:c3:33:11:4d: 5a:25:73:51:f1:ff:4e:28:76:b1:ad:6b:62:4b:d7: 0c:b4:88:f2:81:32:98:67:2c:e4:4e:db:6c:65:51: 21:f3:b5:eb:22:49:46:24:0d:20:36:01:bf:66:b7: da:b1:c0:1a:ba:97:6c:01:7a:db:25:b2:dc:fe:46: 53:10:33:c6:b5:11:9e:31:f5:cb:8f:84:f7:56:7d: cb:da:4b:ca:d6:aa:f5:e7:d4:ac:c9:c3:79:92:7e: 8c:ad:7e:2c:31:2f:c1:58:27:4a:b4:b3:52:3b:9e: c6:f5:63:89:77:0c:7e:cc:c5:0f:d5:6b:3b:f3:d2: 32:a8:76:34:88:37:3a:5b:16:6b:5d:0f:f0:7e:50: c8:e9:74:de:98:37:10:b4:8b:27:30:24:64:3d:6d: 01:8e:43:a2:6e:43:a4:84:cd:dc:93:dc:02:90:3a: ce:5b:fb:3f:3c:90:7d:d9:d6:ae:86:62:da:9f:f6: 0c:4f:7d:79:b3:cf:77:3a:23:b0:5d:4d:2d:9d:c9: 69:5b:44:2b:52:29:79:b0:68:6f:ad:6d:22:a7:e7: 5c:13:7f:96:b0:ad:d1:5b:84:f1:33:21:f1:a5:d0: 7d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C1:21:16:14:F6:DC:27:D4:22:53:14:F6:74:C8:F5:DA:A9:3B:99 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.205.0/24 Signature Algorithm: sha256WithRSAEncryption 45:e7:c2:ac:50:22:de:45:49:e8:2f:a6:1b:8b:18:4b:e0:3e: 1b:2f:62:3e:99:24:88:ad:2a:9f:b4:cd:53:30:fb:3f:dc:43: 15:84:66:81:6c:ac:27:97:44:1a:c3:3d:43:96:ed:c0:db:a4: 09:70:bf:f0:74:44:ef:13:97:56:55:53:d6:46:b5:87:bc:76: 38:f9:75:62:33:3e:77:9a:9a:c7:86:cc:00:1f:80:33:99:bd: e6:ad:29:08:06:7a:3b:6b:38:da:b6:63:d9:bf:f6:11:f5:ee: ee:0c:fe:dd:0c:97:3a:0b:83:c6:d8:30:8e:d0:01:99:73:05: 1b:37:af:fc:0e:8a:9d:7f:e8:b7:32:0a:c2:da:4d:9f:2b:fc: 80:d3:55:f5:cf:76:fc:13:b6:b2:1c:03:14:8f:15:cd:85:23: 0d:8d:51:1a:3a:20:c9:2d:dc:e2:e6:dc:fe:78:dd:9b:5a:3d: c1:c3:a4:f5:f7:de:26:04:28:c4:da:96:cf:dc:a5:a8:70:85: dc:f2:86:b0:99:29:9e:b3:9e:b6:87:42:f5:9c:60:0e:77:bc: 88:4d:d0:f5:eb:7f:26:27:aa:ed:7d:01:e9:65:0e:89:4f:4a: d8:27:32:29:4e:9e:50:33:df:14:9c:fd:71:cd:7e:43:9a:69: c8:84:57:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGaC3L2WwhlafcsxfODsD5hF+CdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTExMDMwOTU3MjRaFw0yNjExMDIxMDAyMjRaMDMxMTAvBgNV BAMTKDY0QzEyMTE2MTRGNkRDMjdENDIyNTMxNEY2NzRDOEY1REFBOTNCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjX1aA0O3aWeAV5PalQsd8fh3P xXcyZOLLwzMRTVolc1Hx/04odrGta2JL1wy0iPKBMphnLORO22xlUSHztesiSUYk DSA2Ab9mt9qxwBq6l2wBetslstz+RlMQM8a1EZ4x9cuPhPdWfcvaS8rWqvXn1KzJ w3mSfoytfiwxL8FYJ0q0s1I7nsb1Y4l3DH7MxQ/Vazvz0jKodjSINzpbFmtdD/B+ UMjpdN6YNxC0iycwJGQ9bQGOQ6JuQ6SEzdyT3AKQOs5b+z88kH3Z1q6GYtqf9gxP fXmzz3c6I7BdTS2dyWlbRCtSKXmwaG+tbSKn51wTf5awrdFbhPEzIfGl0H2ZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUZMEhFhT23CfUIlMU9nTI9dqpO5kwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYTBjZjlhLWM1N2QtNDM5NS05 MjQ5LWJmY2Y0NjcyNDI4Mi8wLzMxMzAzMzJlMzIzNDMxMmUzMjMwMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn8c0wDQYJ KoZIhvcNAQELBQADggEBAEXnwqxQIt5FSegvphuLGEvgPhsvYj6ZJIitKp+0zVMw +z/cQxWEZoFsrCeXRBrDPUOW7cDbpAlwv/B0RO8Tl1ZVU9ZGtYe8djj5dWIzPnea mseGzAAfgDOZveatKQgGejtrONq2Y9m/9hH17u4M/t0MlzoLg8bYMI7QAZlzBRs3 r/wOip1/6LcyCsLaTZ8r/IDTVfXPdvwTtrIcAxSPFc2FIw2NURo6IMkt3OLm3P54 3ZtaPcHDpPX33iYEKMTals/cpahwhdzyhrCZKZ6znraHQvWcYA53vIhN0PXrfyYn qu19AellDolPStgnMilOnlAz3xSc/XHNfkOaaciEVzY= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:32 2025 by rpki-client