$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa File: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (raw, json) Hash identifier: FBKftcy5u8WLMlpAhKDN3+/qY75MgpkD76kkG1AgdUE= Subject key identifier: 30:1B:C7:06:D6:70:26:B3:3B:5E:46:F1:70:D1:C3:E1:18:D6:BB:E9 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 15C5F57FD175A9CF17E0CCA54EB3384FEF7F9C80 Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa Signing time: Wed 22 Oct 2025 07:01:49 +0000 ROA not before: Wed 22 Oct 2025 06:56:49 +0000 ROA not after: Wed 21 Oct 2026 07:01:49 +0000 asID: 17440 IP address blocks: 103.209.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c5:f5:7f:d1:75:a9:cf:17:e0:cc:a5:4e:b3:38:4f:ef:7f:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Oct 22 06:56:49 2025 GMT Not After : Oct 21 07:01:49 2026 GMT Subject: CN=301BC706D67026B33B5E46F170D1C3E118D6BBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:be:66:ae:10:3b:ba:c7:25:d9:57:48:d5: a4:86:2a:2c:b4:02:68:0f:e2:af:9f:f4:92:5d:04: c4:c6:3f:e7:f4:25:62:69:cf:52:4b:9c:30:20:bf: 50:51:6f:c0:28:97:5d:91:1a:74:b9:8b:a2:27:0f: 45:0f:18:8b:e1:8f:ea:69:c1:78:37:99:ee:0d:7c: 95:3c:26:02:1c:44:a8:5d:de:46:88:96:4c:99:b6: bb:64:da:ad:c2:9c:a8:81:10:21:f7:a7:7a:1e:b5: 16:9a:a8:b5:3f:3e:8a:01:0a:8a:d1:a1:e0:af:06: c1:1e:8a:be:51:ad:76:d0:2f:b4:29:51:14:bd:29: 51:fd:9a:76:e8:5e:e7:dd:ba:25:3a:0b:ff:11:0a: ea:33:1a:c8:90:af:5e:d2:e0:55:b9:dd:81:34:01: dc:88:d0:46:5d:50:9d:7b:31:46:f4:d9:db:eb:b1: a9:75:5f:b9:e5:e9:51:69:34:c6:ca:d9:ee:84:c0: ad:a0:3f:56:a2:37:80:0c:e0:3d:4d:07:89:10:c9: 8d:ca:fd:bb:2a:c7:7e:d2:dd:35:65:8e:c8:28:4b: 6a:ec:68:b9:02:2b:2b:96:f5:cb:19:1c:9e:5c:b6: 7b:76:e5:1c:74:e8:04:3d:18:53:0e:ae:19:99:b4: e2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1B:C7:06:D6:70:26:B3:3B:5E:46:F1:70:D1:C3:E1:18:D6:BB:E9 X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.248.0/22 Signature Algorithm: sha256WithRSAEncryption 36:71:6a:62:e0:39:32:d1:05:8b:f7:fd:25:50:bf:8f:3e:7b: 1f:45:69:f7:87:e4:2c:b5:fd:e1:65:f7:f6:6e:3a:3b:53:32: 8c:02:04:c5:86:f0:1b:9f:17:c5:49:cf:76:20:43:18:b5:e9: 72:56:70:25:35:b1:de:2b:58:46:5d:59:2c:25:1b:b2:2b:94: 15:e6:09:7d:c6:b1:a4:37:a3:a2:d9:52:fb:9f:fc:4c:20:27: 33:c4:8a:e0:8c:ca:52:ea:c6:7d:73:ed:b0:9a:79:1a:d3:53: 79:c0:77:2a:62:07:1b:64:88:d7:19:c5:75:81:64:35:29:30: ba:90:b6:21:ce:fa:20:96:3e:89:98:84:a9:74:58:0b:e9:94: e9:06:88:03:66:fe:a0:d1:10:cf:90:0d:b1:bd:ef:9d:32:fb: 4e:1b:1c:21:23:51:ce:24:22:a7:83:c7:bb:ff:95:43:b4:eb: f3:5f:d0:18:ac:15:72:85:6e:e8:c0:e2:f7:b1:45:20:2f:5c: cf:b1:46:ff:66:d7:83:bb:a8:94:5e:5c:35:96:22:a4:31:bf: 3a:8b:ac:78:ae:45:30:5c:5d:58:9a:e9:5c:61:8f:a0:ff:72: 97:b5:48:c4:81:e6:a8:f5:92:f0:3e:bd:a4:0f:36:7a:e7:ca: 98:4c:a1:39 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFcX1f9F1qc8X4MylTrM4T+9/nIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNTEwMjIwNjU2NDlaFw0yNjEwMjEwNzAxNDlaMDMxMTAvBgNV BAMTKDMwMUJDNzA2RDY3MDI2QjMzQjVFNDZGMTcwRDFDM0UxMThENkJCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmL5mrhA7uscl2VdI1aSGKiy0 AmgP4q+f9JJdBMTGP+f0JWJpz1JLnDAgv1BRb8Aol12RGnS5i6InD0UPGIvhj+pp wXg3me4NfJU8JgIcRKhd3kaIlkyZtrtk2q3CnKiBECH3p3oetRaaqLU/PooBCorR oeCvBsEeir5RrXbQL7QpURS9KVH9mnboXufduiU6C/8RCuozGsiQr17S4FW53YE0 AdyI0EZdUJ17MUb02dvrsal1X7nl6VFpNMbK2e6EwK2gP1aiN4AM4D1NB4kQyY3K /bsqx37S3TVljsgoS2rsaLkCKyuW9csZHJ5ctnt25Rx06AQ9GFMOrhmZtOJXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMBvHBtZwJrM7XkbxcNHD4RjWu+kwHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjMDc0Y2Q4LTI4MzAtNGVhYi1i ZGQ0LWE4MDdlYzUxMTVkYS8wLzMxMzAzMzJlMzIzMDM5MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMTM3MzQzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9H4MA0GCSqG SIb3DQEBCwUAA4IBAQA2cWpi4Dky0QWL9/0lUL+PPnsfRWn3h+Qstf3hZff2bjo7 UzKMAgTFhvAbnxfFSc92IEMYtelyVnAlNbHeK1hGXVksJRuyK5QV5gl9xrGkN6Oi 2VL7n/xMICczxIrgjMpS6sZ9c+2wmnka01N5wHcqYgcbZIjXGcV1gWQ1KTC6kLYh zvoglj6JmISpdFgL6ZTpBogDZv6g0RDPkA2xve+dMvtOGxwhI1HOJCKng8e7/5VD tOvzX9AYrBVyhW7owOL3sUUgL1zPsUb/ZteDu6iUXlw1liKkMb86i6x4rkUwXF1Y mulcYY+g/3KXtUjEgeao9ZLwPr2kDzZ658qYTKE5 -----END CERTIFICATE-----Generated at Tue Nov 4 08:23:27 2025 by rpki-client