$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa File: 3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa (raw, json) Hash identifier: mn89fCBpa1L+r4Zi4IcWuFHARAg3/d1uhObCHoGGpiQ= Subject key identifier: 12:93:63:B4:D7:42:C2:D1:80:57:36:68:BA:CF:DA:11:CD:CD:DE:26 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 424ECDCB748C599E22B7F7301D9C7166D45CDDF4 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa Signing time: Tue 28 Oct 2025 12:02:29 +0000 ROA not before: Tue 28 Oct 2025 11:57:29 +0000 ROA not after: Tue 27 Oct 2026 12:02:29 +0000 asID: 9251 IP address blocks: 103.253.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4e:cd:cb:74:8c:59:9e:22:b7:f7:30:1d:9c:71:66:d4:5c:dd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Oct 28 11:57:29 2025 GMT Not After : Oct 27 12:02:29 2026 GMT Subject: CN=129363B4D742C2D180573668BACFDA11CDCDDE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:7e:1d:af:84:eb:f8:31:b6:f1:e5:2b:b0: 3b:07:ec:0d:e9:1e:27:b3:4e:35:0a:ae:23:9a:56: 5e:cc:22:ec:70:14:6e:ff:f4:27:c3:6c:6d:cc:cc: 9f:09:eb:6f:dc:f2:c2:45:7f:04:26:cc:a9:70:89: 13:a6:8f:5c:41:54:30:16:2e:6b:38:b0:e9:a7:f9: df:fe:d9:24:bb:51:59:82:2d:2b:d7:ce:76:70:49: 69:0b:1b:b1:79:39:40:f3:83:cc:13:b8:71:e1:01: 64:83:77:08:21:94:b6:3f:bf:d7:bf:b3:96:0f:93: 0c:ed:a4:31:1b:82:d9:35:c1:ed:2b:35:01:61:41: 00:9d:29:b2:d8:9f:68:09:d2:7b:da:b9:a3:39:2f: f1:15:f0:c1:ec:75:94:cd:3f:96:01:3e:3b:89:95: 74:38:72:0b:0b:d6:be:2f:41:21:fd:52:e7:7d:a0: ff:9e:9f:54:d4:30:95:e1:e8:b3:be:73:11:00:3b: 4b:11:b3:ec:ba:2f:58:b8:4f:49:b0:12:57:4d:c3: a7:ed:8c:7f:15:6e:0a:57:97:32:57:f1:a8:78:c6: 36:7c:ab:02:28:53:2f:74:bb:1e:c0:5a:d0:e3:02: bd:03:2a:55:35:56:6a:e8:3d:7f:91:1c:f7:11:94: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:93:63:B4:D7:42:C2:D1:80:57:36:68:BA:CF:DA:11:CD:CD:DE:26 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130362e302f32332d3233203d3e2039323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.106.0/23 Signature Algorithm: sha256WithRSAEncryption 36:62:6d:06:45:4d:f6:9f:14:49:f6:39:7e:77:a3:82:7b:6e: a5:53:fb:06:ec:a0:0e:96:36:84:b5:15:df:35:23:7a:62:50: b0:27:d4:28:88:d8:b9:98:de:fc:2d:64:0c:ca:41:16:09:25: 84:2a:5a:43:78:d1:e8:27:1a:51:93:74:7f:54:1a:f4:16:ea: cb:66:f3:07:62:23:bd:e2:ac:da:33:de:a7:fd:bd:14:a7:1f: 03:31:b8:fb:50:d3:7f:3c:14:4a:f3:ef:5a:49:63:3d:42:d4: b3:a9:30:3e:e5:b7:cf:b6:ae:b9:4c:6e:f4:8e:07:c2:7a:35: b4:71:6a:aa:7a:7f:9f:8b:2d:d1:85:43:dd:2c:9b:49:e6:7e: 18:ec:53:7d:9e:f3:7f:a9:48:ce:3d:15:f1:ce:df:aa:7c:d5: 60:62:f9:13:75:c6:02:b7:68:b6:53:e1:b3:d1:9b:74:41:80: c2:50:80:8a:a0:ef:7f:34:f8:4e:cf:3f:d8:c3:f9:ac:c8:23: b9:ce:38:b7:c2:0c:cd:7f:2d:25:7b:e9:93:da:dd:70:61:5e: ac:d0:91:e5:70:ef:32:ac:67:91:8d:f0:22:fd:d1:e8:6e:cc: ad:3f:19:3b:a7:62:95:73:48:97:92:bf:e3:27:5b:03:7a:2c: b3:c8:d7:77 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQk7Ny3SMWZ4it/cwHZxxZtRc3fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTEwMjgxMTU3MjlaFw0yNjEwMjcxMjAyMjlaMDMxMTAvBgNV BAMTKDEyOTM2M0I0RDc0MkMyRDE4MDU3MzY2OEJBQ0ZEQTExQ0RDRERFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1H4dr4Tr+DG28eUrsDsH7A3p HiezTjUKriOaVl7MIuxwFG7/9CfDbG3MzJ8J62/c8sJFfwQmzKlwiROmj1xBVDAW Lms4sOmn+d/+2SS7UVmCLSvXznZwSWkLG7F5OUDzg8wTuHHhAWSDdwghlLY/v9e/ s5YPkwztpDEbgtk1we0rNQFhQQCdKbLYn2gJ0nvauaM5L/EV8MHsdZTNP5YBPjuJ lXQ4cgsL1r4vQSH9Uud9oP+en1TUMJXh6LO+cxEAO0sRs+y6L1i4T0mwEldNw6ft jH8VbgpXlzJX8ah4xjZ8qwIoUy90ux7AWtDjAr0DKlU1VmroPX+RHPcRlH7fAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUEpNjtNdCwtGAVzZous/aEc3N3iYwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNTMzMmUzMTMwMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzOTMyMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWf9ajANBgkqhkiG 9w0BAQsFAAOCAQEANmJtBkVN9p8USfY5fnejgntupVP7BuygDpY2hLUV3zUjemJQ sCfUKIjYuZje/C1kDMpBFgklhCpaQ3jR6CcaUZN0f1Qa9Bbqy2bzB2IjveKs2jPe p/29FKcfAzG4+1DTfzwUSvPvWkljPULUs6kwPuW3z7auuUxu9I4Hwno1tHFqqnp/ n4st0YVD3SybSeZ+GOxTfZ7zf6lIzj0V8c7fqnzVYGL5E3XGArdotlPhs9GbdEGA wlCAiqDvfzT4Ts8/2MP5rMgjuc44t8IMzX8tJXvpk9rdcGFerNCR5XDvMqxnkY3w Iv3R6G7MrT8ZO6dilXNIl5K/4ydbA3oss8jXdw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:43:14 2025 by rpki-client