$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa File: 3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa (raw, json) Hash identifier: O/zlYAvAs7v4wgG3NM581/meU2MKG9Ug+TtqOP46WoM= Subject key identifier: D8:15:CC:9C:11:FB:21:6F:A3:09:44:8D:F7:B3:EA:B3:CD:B7:40:2F Certificate issuer: /CN=755B61748263D4DD472C69CA7F1847254B03EBBC Certificate serial: 242C48A28F3ACDD71268B6D399C1DEFBB9BFDCAF Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa Signing time: Fri 10 Oct 2025 05:01:01 +0000 ROA not before: Fri 10 Oct 2025 04:56:01 +0000 ROA not after: Fri 09 Oct 2026 05:01:01 +0000 asID: 150261 IP address blocks: 103.22.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:2c:48:a2:8f:3a:cd:d7:12:68:b6:d3:99:c1:de:fb:b9:bf:dc:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC Validity Not Before: Oct 10 04:56:01 2025 GMT Not After : Oct 9 05:01:01 2026 GMT Subject: CN=D815CC9C11FB216FA309448DF7B3EAB3CDB7402F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:1b:74:e7:ea:f2:37:d7:5f:b4:cd:ac:b6: 43:dd:13:b6:6d:ce:92:0c:46:ac:8a:82:fd:c8:67: eb:b5:73:ae:e2:ab:41:02:b9:de:6e:5c:2d:d9:ed: e2:9b:88:fc:fc:63:fd:71:e2:53:fd:ed:00:9d:27: 19:86:29:fd:12:14:3f:3e:a4:48:f8:2f:22:bb:7d: 54:05:36:2a:8a:a7:3b:0b:80:c3:f0:74:c2:fc:04: 59:73:70:7c:8d:d7:8b:d2:92:78:57:f6:98:6a:5a: eb:b7:31:3f:ce:10:29:d4:8d:84:a0:68:0a:2a:06: 59:f7:5c:22:36:7c:97:01:d8:f3:b8:a7:95:66:75: 4c:75:58:7a:a1:0e:a4:d9:96:11:6d:8b:5d:db:9c: 4c:90:37:62:7e:83:1b:4c:6e:5a:dd:1c:5a:75:5d: 0d:80:4b:17:1f:34:98:13:71:25:e5:28:f3:cc:0b: 9c:53:0a:df:a6:99:e9:20:64:6b:16:09:89:ae:d0: 9f:a1:0a:a2:c8:8c:94:de:04:84:d3:47:c1:34:b6: 60:8e:c1:1e:c1:ce:09:94:8e:0d:d5:2a:d7:d9:2b: 47:24:1a:cf:85:89:27:5d:7b:3e:81:d5:2a:0c:24: 13:cc:db:86:67:47:22:ec:5c:13:23:04:9f:07:36: 52:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:15:CC:9C:11:FB:21:6F:A3:09:44:8D:F7:B3:EA:B3:CD:B7:40:2F X509v3 Authority Key Identifier: keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32342d3234203d3e20313530323631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.216.0/24 Signature Algorithm: sha256WithRSAEncryption 42:26:39:2e:9c:0e:01:23:14:53:fb:80:85:0d:06:eb:2d:be: 4a:77:f6:52:95:81:bd:70:42:be:c5:1f:9c:6d:80:3f:57:14: 11:e1:df:58:e4:b6:e7:e5:2e:bc:63:b3:9b:f2:73:f9:48:06: ea:36:79:a0:37:88:2e:fc:66:81:63:6d:78:fa:c5:41:2d:ef: 2a:24:bd:0d:10:c6:8b:53:4f:94:b8:bc:ff:17:8c:25:a4:7a: d8:ea:86:83:d4:33:9d:de:d4:39:de:e4:0b:9c:6c:b0:5b:dc: a6:e6:74:2c:09:e9:e7:5f:33:a3:ff:6d:e8:15:5b:6d:e6:8f: 25:a2:ea:f9:2f:c4:4d:93:4a:77:e2:93:2a:0a:a3:dd:fa:20: 01:ce:e1:3f:8c:c1:05:b2:95:b9:d0:b0:60:47:54:46:e9:bd: 49:15:d5:ef:e7:86:69:e5:ee:6f:6a:ac:75:0a:ba:af:65:e4: 7c:28:e7:63:29:31:5f:d7:15:9a:ab:cf:4d:e4:83:be:5d:13: 58:35:ac:e3:d2:4b:e9:2e:08:1e:c9:4b:4c:9e:7b:9d:de:67: 02:77:96:30:60:e6:54:85:38:92:a8:9e:74:b4:c7:d9:d0:43: c7:88:ab:97:4e:47:13:ce:05:b9:c1:6f:d4:51:e4:68:94:25: c6:b9:d3:c5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJCxIoo86zdcSaLbTmcHe+7m/3K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0 QjAzRUJCQzAeFw0yNTEwMTAwNDU2MDFaFw0yNjEwMDkwNTAxMDFaMDMxMTAvBgNV BAMTKEQ4MTVDQzlDMTFGQjIxNkZBMzA5NDQ4REY3QjNFQUIzQ0RCNzQwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9ht05+ryN9dftM2stkPdE7Zt zpIMRqyKgv3IZ+u1c67iq0ECud5uXC3Z7eKbiPz8Y/1x4lP97QCdJxmGKf0SFD8+ pEj4LyK7fVQFNiqKpzsLgMPwdML8BFlzcHyN14vSknhX9phqWuu3MT/OECnUjYSg aAoqBln3XCI2fJcB2PO4p5VmdUx1WHqhDqTZlhFti13bnEyQN2J+gxtMblrdHFp1 XQ2ASxcfNJgTcSXlKPPMC5xTCt+mmekgZGsWCYmu0J+hCqLIjJTeBITTR8E0tmCO wR7BzgmUjg3VKtfZK0ckGs+FiSddez6B1SoMJBPM24ZnRyLsXBMjBJ8HNlILAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2BXMnBH7IW+jCUSN97Pqs823QC8wHwYDVR0j BBgwFoAUdVthdIJj1N1HLGnKfxhHJUsD67wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTQ2MDdmMC0xNzAxLTQ5YjEtOTFmZi1iMWJlZDVjYmRlZDEvMC83NTVCNjE3NDgy NjNENERENDcyQzY5Q0E3RjE4NDcyNTRCMDNFQkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU1QjYxNzQ4MjYzRDRERDQ3MkM2OUNBN0YxODQ3MjU0QjAz RUJCQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1NDYwN2YwLTE3MDEtNDliMS05 MWZmLWIxYmVkNWNiZGVkMS8wLzMxMzAzMzJlMzIzMjJlMzIzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxbYMA0GCSqG SIb3DQEBCwUAA4IBAQBCJjkunA4BIxRT+4CFDQbrLb5Kd/ZSlYG9cEK+xR+cbYA/ VxQR4d9Y5Lbn5S68Y7Ob8nP5SAbqNnmgN4gu/GaBY214+sVBLe8qJL0NEMaLU0+U uLz/F4wlpHrY6oaD1DOd3tQ53uQLnGywW9ym5nQsCennXzOj/23oFVtt5o8lour5 L8RNk0p34pMqCqPd+iABzuE/jMEFspW50LBgR1RG6b1JFdXv54Zp5e5vaqx1Crqv ZeR8KOdjKTFf1xWaq89N5IO+XRNYNazj0kvpLggeyUtMnnud3mcCd5YwYOZUhTiS qJ50tMfZ0EPHiKuXTkcTzgW5wW/UUeRolCXGudPF -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:41 2025 by rpki-client