$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa File: 3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (raw, json) Hash identifier: YDn+UkbOnA22nwNbzvw75sJ6kzbC7kgwQ8ntSkUIEQE= Subject key identifier: 37:8E:23:07:F6:3B:2F:CC:E4:32:FA:6E:F8:85:35:7F:40:14:E6:8D Certificate issuer: /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Certificate serial: 67D244B3040784ADFFCED6316AC5B92537853839 Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa Signing time: Tue 28 Oct 2025 12:00:00 +0000 ROA not before: Tue 28 Oct 2025 11:55:00 +0000 ROA not after: Tue 27 Oct 2026 12:00:00 +0000 asID: 141613 IP address blocks: 103.161.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d2:44:b3:04:07:84:ad:ff:ce:d6:31:6a:c5:b9:25:37:85:38:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Validity Not Before: Oct 28 11:55:00 2025 GMT Not After : Oct 27 12:00:00 2026 GMT Subject: CN=378E2307F63B2FCCE432FA6EF885357F4014E68D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:00:a2:ed:e5:47:20:66:7c:26:32:0e:e7:1d: 94:05:25:6c:5a:8e:20:af:33:f4:da:e4:f3:48:c9: 83:3b:85:63:c2:33:62:73:d3:6d:e6:3e:e5:15:d3: 54:12:53:97:5f:ea:cc:12:6b:81:bf:ab:d1:69:e7: e3:35:05:91:02:6f:24:0f:d8:40:5c:5c:32:3b:ae: 6c:9b:67:b1:8c:7c:ae:06:92:40:83:97:4b:bd:51: 49:57:e8:0d:c6:ae:17:47:5c:ba:7a:1e:95:f9:df: e0:c3:71:8d:0d:9c:09:b6:87:94:72:93:93:a0:1d: a0:fe:6c:73:b8:a0:14:0d:cf:32:f9:92:ff:c7:c7: 5f:a5:75:d3:fe:94:db:ad:e2:c3:b5:86:d1:f4:d8: cd:32:56:b2:e1:21:92:be:6d:ec:f8:72:3f:60:cc: d3:66:39:20:b3:60:c8:5a:7f:21:c9:e5:37:3a:cc: c7:b5:df:40:f4:49:47:87:5b:91:c6:62:ec:66:f6: ca:02:19:2b:64:f3:e2:f5:37:2b:e9:d9:c5:55:30: bd:64:ad:b0:9a:fd:a4:30:63:a9:19:52:16:df:f0: 15:3e:68:0e:e7:59:3e:75:9b:35:53:29:10:49:d7: c7:eb:3a:49:59:48:35:8e:ec:6e:74:e5:12:9a:9f: bd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8E:23:07:F6:3B:2F:CC:E4:32:FA:6E:F8:85:35:7F:40:14:E6:8D X509v3 Authority Key Identifier: keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.130.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:51:b8:6d:05:20:a0:8e:c0:99:4f:08:84:6d:d8:a3:7f:7d: d8:f5:a4:da:89:6e:47:b7:34:ef:7f:2a:67:99:7c:c5:3e:be: d1:89:3b:b6:de:f6:19:ea:bd:1d:9b:7f:5c:e5:60:be:94:1b: a6:41:78:7e:c3:b8:0d:0c:58:ae:52:8e:70:20:b6:c1:4f:90: 48:a5:1f:bc:7d:e2:9c:cc:78:34:7f:0f:db:6f:59:9a:c9:f6: ad:4e:28:d2:8a:0a:5d:06:a0:06:fd:52:8c:23:cf:09:b4:bc: 5e:85:7f:55:f4:48:99:e9:ee:94:6d:d6:b1:0e:80:ed:38:ec: 25:81:2d:a7:e5:62:7c:cb:64:55:0a:95:03:fd:27:82:77:83: 6c:80:90:a5:38:f9:02:51:a2:40:72:a2:20:d7:ca:7e:d5:1b: 73:77:14:45:1a:a0:cb:45:f9:6c:fb:2b:df:a1:fe:69:52:85: b2:a0:4b:70:d1:a8:ff:dd:86:62:b2:68:02:39:2e:6c:de:f7: 33:05:93:d3:aa:b4:9b:11:f9:fc:a9:f9:47:8d:40:ab:73:41: a1:72:6a:fa:4d:b4:0e:8f:09:a1:10:f0:24:72:63:c7:6b:82: 0d:ab:86:6e:59:12:01:09:26:17:bb:16:bd:77:a8:a5:c3:e9: d4:22:d1:5f -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZ9JEswQHhK3/ztYxasW5JTeFODkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQy MEU4MkZCQzAeFw0yNTEwMjgxMTU1MDBaFw0yNjEwMjcxMjAwMDBaMDMxMTAvBgNV BAMTKDM3OEUyMzA3RjYzQjJGQ0NFNDMyRkE2RUY4ODUzNTdGNDAxNEU2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AKLt5UcgZnwmMg7nHZQFJWxa jiCvM/Ta5PNIyYM7hWPCM2Jz023mPuUV01QSU5df6swSa4G/q9Fp5+M1BZECbyQP 2EBcXDI7rmybZ7GMfK4GkkCDl0u9UUlX6A3GrhdHXLp6HpX53+DDcY0NnAm2h5Ry k5OgHaD+bHO4oBQNzzL5kv/Hx1+lddP+lNut4sO1htH02M0yVrLhIZK+bez4cj9g zNNmOSCzYMhafyHJ5Tc6zMe130D0SUeHW5HGYuxm9soCGStk8+L1Nyvp2cVVML1k rbCa/aQwY6kZUhbf8BU+aA7nWT51mzVTKRBJ18frOklZSDWO7G505RKan72zAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUN44jB/Y7L8zkMvpu+IU1f0AU5o0wHwYDVR0j BBgwFoAU8lbtDGjUjnDdvjRzZE/bpCDoL7wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMC9GMjU2RUQwQzY4 RDQ4RTcwRERCRTM0NzM2NDRGREJBNDIwRTgyRkJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjI1NkVEMEM2OEQ0OEU3MEREQkUzNDczNjQ0RkRCQTQyMEU4 MkZCQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNWM3M2NjLTk4NWUtNGU5Mi1i YTY5LWNkOGJmZmU0YTUzZC8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoYIwDQYJ KoZIhvcNAQELBQADggEBAD5RuG0FIKCOwJlPCIRt2KN/fdj1pNqJbke3NO9/KmeZ fMU+vtGJO7be9hnqvR2bf1zlYL6UG6ZBeH7DuA0MWK5SjnAgtsFPkEilH7x94pzM eDR/D9tvWZrJ9q1OKNKKCl0GoAb9Uowjzwm0vF6Ff1X0SJnp7pRt1rEOgO047CWB LaflYnzLZFUKlQP9J4J3g2yAkKU4+QJRokByoiDXyn7VG3N3FEUaoMtF+Wz7K9+h /mlShbKgS3DRqP/dhmKyaAI5Lmze9zMFk9OqtJsR+fyp+UeNQKtzQaFyavpNtA6P CaEQ8CRyY8drgg2rhm5ZEgEJJhe7Fr13qKXD6dQi0V8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:23:42 2025 by rpki-client