$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa File: 3130332e36382e332e302f32342d3234203d3e20313335343539.roa (raw, json) Hash identifier: 0l5kmySMjjsx5+tXbm7BMhXxqkpT2OomAPcwFliwHUc= Subject key identifier: 50:DA:19:87:65:7B:BF:DD:6D:B2:00:2D:EB:67:94:8D:F5:80:97:D9 Certificate issuer: /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Certificate serial: 30C464501D56C3C56FDACC99993E009DF70709F0 Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa Signing time: Wed 22 Oct 2025 18:00:01 +0000 ROA not before: Wed 22 Oct 2025 17:55:01 +0000 ROA not after: Wed 21 Oct 2026 18:00:01 +0000 asID: 135459 IP address blocks: 103.68.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:c4:64:50:1d:56:c3:c5:6f:da:cc:99:99:3e:00:9d:f7:07:09:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448 Validity Not Before: Oct 22 17:55:01 2025 GMT Not After : Oct 21 18:00:01 2026 GMT Subject: CN=50DA1987657BBFDD6DB2002DEB67948DF58097D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a5:2a:be:f1:57:43:ee:38:be:96:75:d4:2c: 9d:63:93:f0:53:4b:07:75:89:cd:d6:c7:fb:75:30: 6e:3d:98:60:2d:6d:b7:03:27:e7:3b:a2:ea:85:12: 52:fe:6b:5b:31:be:ea:24:1e:2c:a5:58:77:13:54: 64:4a:ea:38:cd:c8:c1:15:e6:75:c4:6a:1b:a7:71: 47:15:2a:22:93:7c:79:5c:d2:79:9a:44:22:57:f0: c0:84:8a:0d:ca:bf:49:ec:22:1d:22:e3:8d:52:29: c7:7b:4b:b6:65:41:26:7b:3c:d7:52:22:59:a3:74: b3:18:95:be:d9:b9:d4:72:70:bf:05:a5:a5:e2:02: b2:90:6b:70:60:a4:11:0b:c4:ff:dc:bc:bd:22:32: 5f:fd:90:d2:42:e8:f5:33:a9:17:06:e8:65:20:4c: 23:03:ce:e4:ff:f0:b8:7d:84:14:cf:23:46:c7:2a: ee:89:cb:e5:85:44:6f:61:1c:b3:b2:84:52:81:2f: 38:2b:90:81:b7:1f:d9:91:32:bd:88:cc:4f:d0:99: 89:4c:31:cb:de:45:cd:59:e1:b8:cb:3f:dd:d2:c2: 39:29:5d:24:0e:aa:67:cf:b7:7f:1f:41:b4:2d:a7: 39:fa:db:b2:30:d5:df:3c:e0:60:ee:ff:a8:b4:1d: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DA:19:87:65:7B:BF:DD:6D:B2:00:2D:EB:67:94:8D:F5:80:97:D9 X509v3 Authority Key Identifier: keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.68.3.0/24 Signature Algorithm: sha256WithRSAEncryption 26:02:b0:14:ff:37:f9:c4:ca:2b:b8:5f:9d:c0:6d:3b:80:be: 26:d8:76:f9:36:28:7a:9a:02:2a:55:20:7e:d8:72:f2:83:5b: 5a:5e:29:ca:05:b4:65:e2:56:f9:55:aa:c7:5e:18:c1:2b:6a: d0:97:56:07:c5:10:04:99:6e:a6:2f:20:e9:47:67:2c:b3:22: 1a:c6:c4:4b:2c:f4:81:7f:fb:a2:42:2e:13:b8:81:5a:35:4b: 50:bd:dc:7a:ca:ad:f9:4b:9d:1c:b4:cd:10:a7:49:58:8d:90: 73:b5:10:f8:01:60:40:ab:60:f3:cd:8c:d5:9b:12:5b:2e:e3: 1b:37:93:c1:e5:c1:57:82:58:42:bf:a7:43:9d:f6:28:35:ec: 36:40:92:ef:f1:8a:ee:af:dc:85:7b:10:d2:74:00:2a:0d:c8: b4:a1:59:7b:db:93:ec:b4:87:e9:54:fe:bf:44:f4:34:a1:75: 40:6b:1a:c4:22:bf:0e:15:56:07:5d:59:28:17:a8:26:2d:6e: d8:a7:b8:ec:66:f3:60:eb:cc:de:d6:09:5b:b1:30:7e:fe:9c: 7e:27:03:f3:44:6f:56:e8:0a:5f:98:19:83:10:18:b7:37:22: 33:58:d0:d7:fa:ae:e1:3c:02:a2:7a:f6:c5:ac:d4:c5:13:d0: 03:a8:cf:ea -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUMMRkUB1Ww8Vv2syZmT4AnfcHCfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw RTMxMDQ0ODAeFw0yNTEwMjIxNzU1MDFaFw0yNjEwMjExODAwMDFaMDMxMTAvBgNV BAMTKDUwREExOTg3NjU3QkJGREQ2REIyMDAyREVCNjc5NDhERjU4MDk3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pSq+8VdD7ji+lnXULJ1jk/BT Swd1ic3Wx/t1MG49mGAtbbcDJ+c7ouqFElL+a1sxvuokHiylWHcTVGRK6jjNyMEV 5nXEahuncUcVKiKTfHlc0nmaRCJX8MCEig3Kv0nsIh0i441SKcd7S7ZlQSZ7PNdS IlmjdLMYlb7ZudRycL8FpaXiArKQa3BgpBELxP/cvL0iMl/9kNJC6PUzqRcG6GUg TCMDzuT/8Lh9hBTPI0bHKu6Jy+WFRG9hHLOyhFKBLzgrkIG3H9mRMr2IzE/QmYlM McveRc1Z4bjLP93SwjkpXSQOqmfPt38fQbQtpzn627Iw1d884GDu/6i0Ha9DAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUUNoZh2V7v91tsgAt62eUjfWAl9kwHwYDVR0j BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzMyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzUzNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRAMwDQYJKoZIhvcN AQELBQADggEBACYCsBT/N/nEyiu4X53AbTuAvibYdvk2KHqaAipVIH7YcvKDW1pe KcoFtGXiVvlVqsdeGMEratCXVgfFEASZbqYvIOlHZyyzIhrGxEss9IF/+6JCLhO4 gVo1S1C93HrKrflLnRy0zRCnSViNkHO1EPgBYECrYPPNjNWbElsu4xs3k8HlwVeC WEK/p0Od9ig17DZAku/xiu6v3IV7ENJ0ACoNyLShWXvbk+y0h+lU/r9E9DShdUBr GsQivw4VVgddWSgXqCYtbtinuOxm82DrzN7WCVuxMH7+nH4nA/NEb1boCl+YGYMQ GLc3IjNY0Nf6ruE8AqJ69sWs1MUT0AOoz+o= -----END CERTIFICATE-----Generated at Tue Nov 4 16:43:25 2025 by rpki-client