$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa File: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: 9XvG7lgnGTa2TMybG5m34Ghm7U76tWIWHi96o5X/RSg= Subject key identifier: 8C:D3:38:89:78:13:3B:B3:EE:8D:5A:21:F6:36:64:42:41:13:69:19 Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 4AB9B28A98D42E1EB3A04DBD2B77B97105ECC5C4 Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa Signing time: Wed 22 Oct 2025 11:02:26 +0000 ROA not before: Wed 22 Oct 2025 10:57:26 +0000 ROA not after: Wed 21 Oct 2026 11:02:26 +0000 asID: 58477 IP address blocks: 103.56.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b9:b2:8a:98:d4:2e:1e:b3:a0:4d:bd:2b:77:b9:71:05:ec:c5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Oct 22 10:57:26 2025 GMT Not After : Oct 21 11:02:26 2026 GMT Subject: CN=8CD3388978133BB3EE8D5A21F636644241136919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:9a:ee:d7:6f:58:33:a0:c2:33:51:5e:b6: 5e:e8:96:dd:ba:80:0a:88:d0:52:95:59:ee:b8:ce: e9:75:f5:1c:29:c3:e7:e9:94:3f:8d:51:ff:01:c7: a8:26:64:9a:d5:67:42:ca:32:4e:e0:37:3f:c1:e1: 7c:73:25:4d:15:eb:9c:92:13:af:f9:5b:24:91:79: 65:fd:85:9d:42:5c:1f:bd:0e:56:08:99:ac:94:94: 63:09:6a:48:10:e7:f1:51:72:19:12:f1:33:f7:15: cf:a7:ee:16:bb:3c:da:26:5c:36:a4:60:4a:46:e6: 28:ec:fe:20:29:60:f6:3e:38:37:14:59:c8:fa:e1: 38:8a:09:30:58:a0:8b:d0:1d:26:ea:5a:70:c1:60: 45:56:ca:e3:d1:cc:a6:f2:4d:b7:a2:a7:2f:bc:44: ff:86:89:95:db:83:e0:df:7f:4c:db:08:3e:69:56: ae:2e:dd:28:6f:61:e2:7a:5c:9a:90:0b:79:2e:8c: 03:17:90:a1:3e:1f:8d:03:7d:67:62:61:fe:f5:04: cc:cd:19:e5:88:51:21:bd:b6:f9:af:3a:97:a6:54: 57:5c:43:17:de:3e:20:2b:3c:45:18:71:9e:ca:10: d1:1a:0c:0a:e9:e1:63:cd:2b:d2:33:70:8e:2b:29: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:38:89:78:13:3B:B3:EE:8D:5A:21:F6:36:64:42:41:13:69:19 X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.92.0/24 Signature Algorithm: sha256WithRSAEncryption 10:fb:1c:12:56:8e:b8:1e:7c:0b:16:7c:7d:6f:64:ca:9b:db: 59:53:ca:fb:74:af:74:a5:12:5e:48:a7:81:e5:da:b5:cc:aa: 1a:fb:58:35:11:11:75:ad:25:3b:fb:b9:51:d0:dd:d7:62:72: eb:94:21:5a:2c:c3:ea:af:72:cf:d1:27:39:e6:d6:6c:fe:13: bd:ff:04:b5:d4:13:a4:d9:2f:a9:87:45:28:97:60:9b:6d:5e: dc:5a:fc:f2:2d:ec:60:b8:fe:58:f3:af:e0:e9:09:2f:08:e5: 4f:e3:8f:20:f0:4c:1c:a2:56:a7:65:32:2a:be:ab:1c:e8:f3: ec:ee:8a:44:fc:52:1d:95:9e:bb:6d:82:63:a7:b5:96:7f:e5: d8:fd:33:6d:4b:ac:ae:43:56:8e:a7:ba:44:6c:c4:38:21:27: 7d:74:9f:ba:05:d2:86:1d:68:c1:15:d7:38:bd:f8:11:1f:e2: 51:98:06:4e:06:d5:18:7c:77:7a:e8:63:8a:6b:79:44:f9:b0: bd:e4:f0:49:0b:1b:7a:8b:f0:5a:64:49:bf:4a:56:a1:89:6a: 43:04:c7:3d:e8:9c:21:75:c9:ca:6d:16:ba:51:96:d6:56:22: 50:9b:ec:63:7c:23:57:1b:e0:76:66:1e:2c:4d:9e:ea:a4:0f: e3:6c:f3:a8 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSrmyipjULh6zoE29K3e5cQXsxcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNTEwMjIxMDU3MjZaFw0yNjEwMjExMTAyMjZaMDMxMTAvBgNV BAMTKDhDRDMzODg5NzgxMzNCQjNFRThENUEyMUY2MzY2NDQyNDExMzY5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZZru129YM6DCM1Fetl7olt26 gAqI0FKVWe64zul19Rwpw+fplD+NUf8Bx6gmZJrVZ0LKMk7gNz/B4XxzJU0V65yS E6/5WySReWX9hZ1CXB+9DlYImayUlGMJakgQ5/FRchkS8TP3Fc+n7ha7PNomXDak YEpG5ijs/iApYPY+ODcUWcj64TiKCTBYoIvQHSbqWnDBYEVWyuPRzKbyTbeipy+8 RP+GiZXbg+Dff0zbCD5pVq4u3ShvYeJ6XJqQC3kujAMXkKE+H40DfWdiYf71BMzN GeWIUSG9tvmvOpemVFdcQxfePiArPEUYcZ7KENEaDArp4WPNK9IzcI4rKW5zAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUjNM4iXgTO7PujVoh9jZkQkETaRkwHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNmNkMjZmLWZiZGEtNGNkOC1h MDFjLWIwMTU1NTEzMDE1Zi8wLzMxMzAzMzJlMzUzNjJlMzkzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnOFwwDQYJKoZIhvcN AQELBQADggEBABD7HBJWjrgefAsWfH1vZMqb21lTyvt0r3SlEl5Ip4Hl2rXMqhr7 WDUREXWtJTv7uVHQ3ddicuuUIVosw+qvcs/RJznm1mz+E73/BLXUE6TZL6mHRSiX YJttXtxa/PIt7GC4/ljzr+DpCS8I5U/jjyDwTByiVqdlMiq+qxzo8+zuikT8Uh2V nrttgmOntZZ/5dj9M21LrK5DVo6nukRsxDghJ310n7oF0oYdaMEV1zi9+BEf4lGY Bk4G1Rh8d3roY4preUT5sL3k8EkLG3qL8FpkSb9KVqGJakMExz3onCF1ycptFrpR ltZWIlCb7GN8I1cb4HZmHixNnuqkD+Ns86g= -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:40 2025 by rpki-client