$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa File: 3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (raw, json) Hash identifier: NW99gB8qCJlT/OObHXKO0PNmXnjOgR9bEy3lZQmrUX8= Subject key identifier: 12:F4:DB:7A:F0:80:B1:88:03:AC:8D:BE:E8:96:49:EA:2C:F6:8D:5E Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC Certificate serial: 48ACDD633CEFE0FC5E765DC3F266887AE5860A11 Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa Signing time: Fri 10 Oct 2025 04:00:41 +0000 ROA not before: Fri 10 Oct 2025 03:55:41 +0000 ROA not after: Fri 09 Oct 2026 04:00:41 +0000 asID: 150261 IP address blocks: 103.22.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ac:dd:63:3c:ef:e0:fc:5e:76:5d:c3:f2:66:88:7a:e5:86:0a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC Validity Not Before: Oct 10 03:55:41 2025 GMT Not After : Oct 9 04:00:41 2026 GMT Subject: CN=12F4DB7AF080B18803AC8DBEE89649EA2CF68D5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:73:b6:cc:52:20:d2:b6:29:6e:37:40:d2: 96:41:aa:f8:97:28:b6:4e:fd:fe:7e:93:d5:cb:c1: 55:20:a7:fc:ac:75:4d:2f:6e:e5:66:df:1b:ee:af: f7:3d:0c:38:a9:3c:b5:b6:f9:ff:5a:0c:27:e7:92: 34:db:33:8c:b0:ca:85:43:5f:58:fe:78:ee:b0:51: 67:52:4e:54:2a:38:ce:af:e2:9f:b6:ee:32:93:ba: 94:c5:94:40:22:13:a2:ca:42:40:cb:f8:45:10:b6: 73:57:e1:15:40:b4:2b:25:c9:73:c6:e9:fa:40:72: 49:cb:f8:92:78:4a:b9:8e:30:91:9f:c3:bf:c9:e3: f1:92:e2:e6:95:ad:af:eb:5c:11:05:eb:3b:e2:97: d1:1b:ce:ef:08:80:d7:62:02:cf:70:d3:f2:ce:04: e7:dd:37:8d:9f:8e:b4:fa:11:99:60:3c:eb:91:5b: c1:46:0c:0a:19:f9:8b:2a:03:07:21:09:cb:4f:9d: b9:09:66:c1:60:30:8b:fa:33:b1:ae:9e:e3:a8:15: a8:71:cd:7c:b8:22:25:3f:0b:fd:d0:91:90:9f:bd: a2:c1:5f:29:f0:1f:05:45:cb:25:7e:4c:cd:df:ca: 54:98:a6:a8:60:cc:57:23:e6:8d:8f:15:8f:74:25: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F4:DB:7A:F0:80:B1:88:03:AC:8D:BE:E8:96:49:EA:2C:F6:8D:5E X509v3 Authority Key Identifier: keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.216.0/23 Signature Algorithm: sha256WithRSAEncryption c7:f0:6b:61:f0:12:23:f1:e3:c2:76:06:d8:5f:36:8c:03:6f: 77:26:84:12:82:e2:e9:46:3b:53:75:55:a7:36:32:f9:ec:dd: 58:0e:d2:0d:87:06:e6:31:69:4a:40:29:14:41:26:3c:45:c6: fb:63:ed:d9:cc:3a:fd:df:f9:98:b2:f6:65:83:6c:55:7a:58: 2b:6b:35:30:2e:a4:63:35:17:96:e9:6f:f5:7b:d7:be:7f:74: 64:a5:56:27:22:12:c6:56:28:3d:c3:d3:c6:b3:60:a3:fe:0b: 81:44:f1:54:73:d2:6a:19:cf:35:04:86:00:71:e5:2a:d5:e0: be:10:85:ce:14:18:e5:e5:9b:0e:ac:c2:ae:80:3f:2b:81:e3: 40:9c:e5:0f:71:21:f8:6f:86:b3:90:ec:b2:0a:c4:ea:4b:37: 88:53:80:7b:74:a7:4b:5b:20:8a:90:c8:15:09:0a:00:93:bb: 17:84:ca:45:7f:5a:5e:31:12:25:5e:d9:5e:9a:6b:c9:04:2e: 6c:21:b5:b1:a8:3d:99:de:83:21:f8:a8:de:fd:a8:34:74:a6: 4a:e1:ff:b2:be:23:fe:e5:df:4a:5b:ad:d2:ab:f4:e7:ef:bb: 9f:56:c3:fc:34:92:1a:fc:8a:8b:12:f7:a6:b6:9b:da:41:5d: ef:82:ef:89 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSKzdYzzv4Pxedl3D8maIeuWGChEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0 QjAzRUJCQzAeFw0yNTEwMTAwMzU1NDFaFw0yNjEwMDkwNDAwNDFaMDMxMTAvBgNV BAMTKDEyRjREQjdBRjA4MEIxODgwM0FDOERCRUU4OTY0OUVBMkNGNjhENUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXXO2zFIg0rYpbjdA0pZBqviX KLZO/f5+k9XLwVUgp/ysdU0vbuVm3xvur/c9DDipPLW2+f9aDCfnkjTbM4ywyoVD X1j+eO6wUWdSTlQqOM6v4p+27jKTupTFlEAiE6LKQkDL+EUQtnNX4RVAtCslyXPG 6fpAcknL+JJ4SrmOMJGfw7/J4/GS4uaVra/rXBEF6zvil9Ebzu8IgNdiAs9w0/LO BOfdN42fjrT6EZlgPOuRW8FGDAoZ+YsqAwchCctPnbkJZsFgMIv6M7GunuOoFahx zXy4IiU/C/3QkZCfvaLBXynwHwVFyyV+TM3fylSYpqhgzFcj5o2PFY90JbAjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEvTbevCAsYgDrI2+6JZJ6iz2jV4wHwYDVR0j BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz RUJCQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1NDYwN2YwLTE3MDEtNDliMS05 MWZmLWIxYmVkNWNiZGVkMS8wLzMxMzAzMzJlMzIzMjJlMzIzMTM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxbYMA0GCSqG SIb3DQEBCwUAA4IBAQDH8Gth8BIj8ePCdgbYXzaMA293JoQSguLpRjtTdVWnNjL5 7N1YDtINhwbmMWlKQCkUQSY8Rcb7Y+3ZzDr93/mYsvZlg2xVelgrazUwLqRjNReW 6W/1e9e+f3RkpVYnIhLGVig9w9PGs2Cj/guBRPFUc9JqGc81BIYAceUq1eC+EIXO FBjl5ZsOrMKugD8rgeNAnOUPcSH4b4azkOyyCsTqSzeIU4B7dKdLWyCKkMgVCQoA k7sXhMpFf1peMRIlXtlemmvJBC5sIbWxqD2Z3oMh+Kje/ag0dKZK4f+yviP+5d9K W63Sq/Tn77ufVsP8NJIa/IqLEvemtpvaQV3vgu+J -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:27 2025 by rpki-client