$ rpki-client -vvf repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa File: 3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa (raw, json) Hash identifier: 9GPvbzS14nrsGqBa86Psp3VYtnnpTdNwmEPZ8WpOVfk= Subject key identifier: 07:51:DB:88:E2:E3:8E:05:61:FB:E9:F8:73:8E:8C:D6:D0:00:61:C9 Certificate issuer: /CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Certificate serial: 234AE0D8881CE9D192115DF466553B06A69D7913 Authority key identifier: 1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa Signing time: Tue 28 Oct 2025 12:02:29 +0000 ROA not before: Tue 28 Oct 2025 11:57:29 +0000 ROA not after: Tue 27 Oct 2026 12:02:29 +0000 asID: 9251 IP address blocks: 103.253.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4a:e0:d8:88:1c:e9:d1:92:11:5d:f4:66:55:3b:06:a6:9d:79:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AD597D3403FBD137C81429E3DE6D87BC886F1DE Validity Not Before: Oct 28 11:57:29 2025 GMT Not After : Oct 27 12:02:29 2026 GMT Subject: CN=0751DB88E2E38E0561FBE9F8738E8CD6D00061C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:05:bd:61:2b:a3:e2:52:fc:8e:30:84:88: f5:88:99:69:a4:12:bf:1a:7a:cf:19:2d:8b:31:85: 9b:14:ef:2f:9b:fd:b4:11:3d:fc:11:73:61:7b:dc: 04:71:9f:26:3e:e4:29:98:a8:3a:37:55:ec:d7:67: fc:63:dd:d7:18:65:99:6b:03:87:3f:96:d0:2a:09: 52:04:cc:58:48:d0:7b:a4:27:b4:e0:3b:30:b9:07: bc:f5:f9:20:11:44:aa:8b:b1:47:5d:14:d1:8a:56: aa:09:9d:dd:61:a0:f5:24:8e:8c:33:38:98:e5:00: a0:08:2e:87:ae:d9:9f:ca:a1:ee:14:00:de:b7:06: a1:68:f3:30:0a:9e:39:b2:97:d0:8c:f8:67:25:ad: 6a:98:12:21:53:3c:95:9c:93:38:7e:7a:b4:4f:38: 02:c5:79:9a:2d:80:a6:83:32:82:30:65:02:ec:7f: d7:f8:5c:8f:46:f4:a5:b8:0f:c6:40:0f:0e:a2:cd: 0b:9e:82:3b:04:83:79:f1:e1:2d:52:f0:4b:bc:59: 4d:a7:06:33:65:45:c2:c4:49:4b:5f:a1:16:82:96: 1c:e1:c8:d7:8b:41:a8:72:e0:05:d1:0a:48:d6:5a: ee:45:54:e6:3b:2d:e8:f4:30:fa:74:7b:5a:76:f4: 98:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:51:DB:88:E2:E3:8E:05:61:FB:E9:F8:73:8E:8C:D6:D0:00:61:C9 X509v3 Authority Key Identifier: keyid:1A:D5:97:D3:40:3F:BD:13:7C:81:42:9E:3D:E6:D8:7B:C8:86:F1:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AD597D3403FBD137C81429E3DE6D87BC886F1DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65ec25e4-9aa8-4bef-9097-c0bec0b266a7/0/3130332e3235332e3130372e302f32342d3234203d3e2039323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.107.0/24 Signature Algorithm: sha256WithRSAEncryption b6:2e:ea:dc:37:af:b5:b9:2b:7a:ed:fb:47:95:5d:0d:07:70: ca:70:9b:23:3e:d5:cb:e7:da:ed:f5:55:f6:84:a0:a0:81:81: e3:bb:42:d3:45:4f:94:27:c5:90:83:a1:81:cb:6f:65:74:df: e6:9d:08:64:23:e0:32:08:c8:85:89:7e:dd:4b:e8:f8:64:3a: 4e:6a:b8:2c:ec:03:b4:7b:d8:9f:42:de:8e:fb:b1:77:bb:18: aa:e7:62:ed:df:dc:55:40:c0:dd:09:4a:d1:6b:31:e0:2d:86: b6:7e:24:d3:82:5a:d0:48:d0:a9:ce:b9:b6:4c:c4:91:11:aa: 1f:5a:99:75:d5:8e:66:50:93:ac:01:23:97:41:a8:e9:61:53: 45:d7:b9:4f:d9:2a:cc:cb:91:d7:f6:43:ac:dd:43:13:45:0d: 25:61:03:23:62:ee:ec:e4:63:56:3a:95:0a:6b:54:fe:43:21: 65:be:59:94:e0:92:89:fb:c0:4c:0d:2e:62:d9:e9:77:66:c6: 5c:a9:c0:e2:29:a0:b2:7d:ef:57:54:9e:75:5e:ed:16:43:fc: b0:e1:46:dc:95:f6:39:53:50:7d:2b:be:53:01:bc:7f:ab:3f: fa:b2:fc:7b:00:c1:9d:49:91:2c:ad:a7:38:09:d3:92:13:b0: 31:70:5c:42 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUI0rg2Igc6dGSEV30ZlU7BqadeRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JD ODg2RjFERTAeFw0yNTEwMjgxMTU3MjlaFw0yNjEwMjcxMjAyMjlaMDMxMTAvBgNV BAMTKDA3NTFEQjg4RTJFMzhFMDU2MUZCRTlGODczOEU4Q0Q2RDAwMDYxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbQW9YSuj4lL8jjCEiPWImWmk Er8aes8ZLYsxhZsU7y+b/bQRPfwRc2F73ARxnyY+5CmYqDo3VezXZ/xj3dcYZZlr A4c/ltAqCVIEzFhI0HukJ7TgOzC5B7z1+SARRKqLsUddFNGKVqoJnd1hoPUkjowz OJjlAKAILoeu2Z/Koe4UAN63BqFo8zAKnjmyl9CM+GclrWqYEiFTPJWckzh+erRP OALFeZotgKaDMoIwZQLsf9f4XI9G9KW4D8ZADw6izQuegjsEg3nx4S1S8Eu8WU2n BjNlRcLESUtfoRaClhzhyNeLQahy4AXRCkjWWu5FVOY7Lej0MPp0e1p29Jj5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUB1HbiOLjjgVh++n4c46M1tAAYckwHwYDVR0j BBgwFoAUGtWX00A/vRN8gUKePebYe8iG8d4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWVjMjVlNC05YWE4LTRiZWYtOTA5Ny1jMGJlYzBiMjY2YTcvMC8xQUQ1OTdEMzQw M0ZCRDEzN0M4MTQyOUUzREU2RDg3QkM4ODZGMURFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFENTk3RDM0MDNGQkQxMzdDODE0MjlFM0RFNkQ4N0JDODg2 RjFERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1ZWMyNWU0LTlhYTgtNGJlZi05 MDk3LWMwYmVjMGIyNjZhNy8wLzMxMzAzMzJlMzIzNTMzMmUzMTMwMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMyMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf9azANBgkqhkiG 9w0BAQsFAAOCAQEAti7q3Devtbkreu37R5VdDQdwynCbIz7Vy+fa7fVV9oSgoIGB 47tC00VPlCfFkIOhgctvZXTf5p0IZCPgMgjIhYl+3Uvo+GQ6Tmq4LOwDtHvYn0Le jvuxd7sYqudi7d/cVUDA3QlK0Wsx4C2Gtn4k04Ja0EjQqc65tkzEkRGqH1qZddWO ZlCTrAEjl0Go6WFTRde5T9kqzMuR1/ZDrN1DE0UNJWEDI2Lu7ORjVjqVCmtU/kMh Zb5ZlOCSifvATA0uYtnpd2bGXKnA4imgsn3vV1SedV7tFkP8sOFG3JX2OVNQfSu+ UwG8f6s/+rL8ewDBnUmRLK2nOAnTkhOwMXBcQg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:45:33 2025 by rpki-client