$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa File: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (raw, json) Hash identifier: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw= Subject key identifier: D2:1B:76:E3:3A:08:3E:25:12:85:83:6B:BD:42:A0:1B:9B:33:3D:AC Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 26E4CC53ACE2119A0CB85A4FCA33E54D46E67ED5 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa Signing time: Mon 03 Nov 2025 10:02:24 +0000 ROA not before: Mon 03 Nov 2025 09:57:24 +0000 ROA not after: Mon 02 Nov 2026 10:02:24 +0000 asID: 132678 IP address blocks: 103.241.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e4:cc:53:ac:e2:11:9a:0c:b8:5a:4f:ca:33:e5:4d:46:e6:7e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Nov 3 09:57:24 2025 GMT Not After : Nov 2 10:02:24 2026 GMT Subject: CN=D21B76E33A083E251285836BBD42A01B9B333DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:09:98:f8:ff:83:b0:eb:7c:f5:33:c2:15: 7b:0a:85:f2:28:fb:22:f9:9b:37:91:7f:71:9c:f7: ef:83:04:f6:80:1f:98:67:ac:9c:a9:11:57:47:a5: 4d:f6:48:53:9a:0a:6f:84:85:2a:c8:53:a2:43:af: 98:32:3b:b6:2b:e2:31:43:4f:99:24:82:af:a7:9a: 72:76:89:d4:18:29:b8:e8:22:8d:5c:54:e1:7d:92: c6:06:c2:7d:47:e2:71:d1:2f:30:a6:d6:9a:1d:27: c4:89:f2:dc:e9:20:d1:ff:3c:f3:64:f3:22:3b:f5: 53:48:cb:09:e4:5e:a6:40:ec:0f:2c:c4:a0:db:c5: 21:5c:79:56:d4:2a:04:4a:5c:58:b8:37:92:84:4c: 6a:d2:9e:17:a1:e0:75:fd:68:7e:eb:ff:6e:66:2d: 89:2f:ab:dc:97:c6:29:ed:58:a2:cc:47:1f:9e:c0: 64:dd:a1:15:47:3d:7a:ea:24:64:6c:1a:ee:b4:31: 4c:8f:28:5d:1c:e6:1a:44:fb:17:87:70:7a:05:92: 2e:6e:4f:a4:63:11:a2:5a:6c:ca:3a:45:60:6d:0d: ce:0b:ad:a8:02:f2:5c:af:8f:4a:27:39:97:67:b7: d7:08:b9:3a:f9:bd:ba:54:38:0d:c3:b0:7d:dc:dd: 03:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:1B:76:E3:3A:08:3E:25:12:85:83:6B:BD:42:A0:1B:9B:33:3D:AC X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.241.206.0/24 Signature Algorithm: sha256WithRSAEncryption 39:45:b9:35:20:bf:9a:b5:4b:6f:b6:36:2f:c7:5b:52:87:11: cc:ca:49:42:ea:bf:49:ef:9b:b2:2b:40:ad:1e:84:73:57:62: 1c:56:b9:13:9e:b5:55:a8:45:a4:73:14:eb:9b:0d:a1:5a:83: 70:2a:c9:2f:dd:5d:83:1b:f6:ec:4f:26:f0:a6:2c:65:d1:b7: 10:bd:b5:fc:e8:24:3e:24:3f:d8:07:81:37:1b:cd:80:bb:78: 92:f0:05:a8:d6:f8:d5:58:bb:a6:67:d1:5c:6b:b8:04:7b:4b: 37:c1:38:2b:95:d4:ac:25:dc:f0:2d:bc:98:9f:1a:66:d6:20: 06:9f:2d:47:43:79:6a:e1:6f:76:0c:fe:d0:5b:7e:86:47:db: f6:a7:d2:b7:39:db:6b:98:08:ad:46:d9:ba:9f:86:a2:87:66: 8b:32:ea:4a:e0:ba:20:2a:5a:23:74:d8:8b:24:2f:8c:68:df: f0:fa:4a:f6:10:cc:12:02:07:f6:cb:53:d4:a1:3a:5a:19:2a: 99:97:21:b9:e8:7c:07:05:d9:a5:0b:19:4e:b0:e2:96:7d:d5: 97:5a:3b:f0:e2:ab:cc:29:a4:19:fb:5a:9a:95:f2:37:63:b3: 0c:9d:0b:da:ae:9c:0d:46:3a:af:ca:93:ca:fd:ff:bf:ba:85: 0b:f4:46:a9 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJuTMU6ziEZoMuFpPyjPlTUbmftUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTExMDMwOTU3MjRaFw0yNjExMDIxMDAyMjRaMDMxMTAvBgNV BAMTKEQyMUI3NkUzM0EwODNFMjUxMjg1ODM2QkJENDJBMDFCOUIzMzNEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9wmY+P+DsOt89TPCFXsKhfIo +yL5mzeRf3Gc9++DBPaAH5hnrJypEVdHpU32SFOaCm+EhSrIU6JDr5gyO7Yr4jFD T5kkgq+nmnJ2idQYKbjoIo1cVOF9ksYGwn1H4nHRLzCm1podJ8SJ8tzpINH/PPNk 8yI79VNIywnkXqZA7A8sxKDbxSFceVbUKgRKXFi4N5KETGrSnheh4HX9aH7r/25m LYkvq9yXxintWKLMRx+ewGTdoRVHPXrqJGRsGu60MUyPKF0c5hpE+xeHcHoFki5u T6RjEaJabMo6RWBtDc4LragC8lyvj0onOZdnt9cIuTr5vbpUOA3DsH3c3QOlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0ht24zoIPiUShYNrvUKgG5szPawwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYTBjZjlhLWM1N2QtNDM5NS05 MjQ5LWJmY2Y0NjcyNDI4Mi8wLzMxMzAzMzJlMzIzNDMxMmUzMjMwMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzIzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn8c4wDQYJ KoZIhvcNAQELBQADggEBADlFuTUgv5q1S2+2Ni/HW1KHEczKSULqv0nvm7IrQK0e hHNXYhxWuROetVWoRaRzFOubDaFag3AqyS/dXYMb9uxPJvCmLGXRtxC9tfzoJD4k P9gHgTcbzYC7eJLwBajW+NVYu6Zn0VxruAR7SzfBOCuV1Kwl3PAtvJifGmbWIAaf LUdDeWrhb3YM/tBbfoZH2/an0rc522uYCK1G2bqfhqKHZosy6krguiAqWiN02Isk L4xo3/D6SvYQzBICB/bLU9ShOloZKpmXIbnofAcF2aULGU6w4pZ91ZdaO/Diq8wp pBn7WpqV8jdjswydC9qunA1GOq/Kk8r9/7+6hQv0Rqk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:29:37 2025 by rpki-client