$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa File: 3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (raw, json) Hash identifier: kQaBHWFZ09LwTrNpnEcdDDYi9aXzLqVrrUv/bLTySVg= Subject key identifier: 3F:EE:1D:C5:F4:CE:AD:9D:FF:DA:67:DD:65:1A:01:D9:A0:CD:6F:B8 Certificate issuer: /CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Certificate serial: 5F3AF24A63BE7A6CDC218C91BCCD43356D21AC50 Authority key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa Signing time: Sun 26 Oct 2025 13:00:02 +0000 ROA not before: Sun 26 Oct 2025 12:55:02 +0000 ROA not after: Sun 25 Oct 2026 13:00:02 +0000 asID: 137334 IP address blocks: 103.112.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3a:f2:4a:63:be:7a:6c:dc:21:8c:91:bc:cd:43:35:6d:21:ac:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Validity Not Before: Oct 26 12:55:02 2025 GMT Not After : Oct 25 13:00:02 2026 GMT Subject: CN=3FEE1DC5F4CEAD9DFFDA67DD651A01D9A0CD6FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:6c:f6:7c:77:ce:1b:df:09:6c:65:c4:97: 7b:36:36:8a:85:47:30:4f:0b:87:c0:39:e6:99:89: 48:c7:a3:2d:6a:bd:2d:30:06:22:de:a4:41:64:d5: d0:0f:8b:d0:c5:b9:fc:2b:3c:30:f5:e2:b1:e6:89: 24:f1:05:5e:68:32:93:20:99:12:3f:e9:dc:90:24: 81:11:c8:78:c3:cd:d4:9a:c0:53:ac:33:e5:fc:6c: c3:54:83:ae:b9:71:41:23:69:1d:3d:7b:62:a9:f0: aa:15:7a:c7:86:8b:b9:ab:4e:d6:0d:23:c6:88:c4: 17:59:da:b0:18:42:dd:5d:79:b5:48:82:08:06:90: 8f:ee:cc:d0:bd:35:f1:ed:7f:c7:1b:a9:8e:02:26: 9e:d3:67:c6:95:02:2a:5d:0e:45:fd:78:13:04:2a: e5:e2:b1:09:5c:f9:2b:be:f5:31:4b:15:ac:0d:85: 3b:be:eb:6f:e6:29:7c:c6:99:cd:2f:d6:10:e7:4b: fe:af:a9:6f:45:38:f1:c4:c4:21:5e:a6:4d:d9:55: a3:75:e2:c7:ba:89:db:a0:ba:83:d2:5f:f9:b0:2b: f1:80:27:dc:ce:e2:a8:8c:b7:ac:5f:18:98:63:37: b5:ed:41:a7:bd:80:39:4d:d4:f3:f2:30:9e:83:3e: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EE:1D:C5:F4:CE:AD:9D:FF:DA:67:DD:65:1A:01:D9:A0:CD:6F:B8 X509v3 Authority Key Identifier: keyid:09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.145.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:c6:83:63:a8:51:a1:be:63:11:5a:4d:38:8c:fa:a3:fe:08: 03:ac:a7:8d:4d:d6:96:5f:0a:42:89:aa:80:04:0a:88:79:c5: e8:2e:fd:91:12:5f:bf:60:94:06:03:85:24:2e:09:49:83:a9: 60:3b:ae:b3:6d:e2:a1:7b:59:04:5c:2a:ab:7f:9c:37:0d:dd: da:39:f9:34:d4:66:59:cf:26:b6:c3:51:e0:fa:a9:74:51:fa: 69:0a:81:c7:96:6d:9d:e3:f9:e5:ce:87:ac:af:65:55:ff:cb: 56:3e:fa:e9:a8:5a:ac:c1:ed:30:e4:42:e7:d9:84:9a:14:bf: de:21:50:d9:34:02:9c:ec:86:74:51:4f:83:b1:d6:59:a6:92: 61:da:e5:bb:34:5b:70:19:ed:31:a0:12:34:72:4e:b6:d4:8a: 22:f7:8c:32:c1:44:42:f4:85:05:9d:5c:2f:e9:af:a0:46:2e: 1d:61:94:b7:da:72:b1:39:5e:81:81:fb:b1:99:5c:b2:c5:33: b7:2d:1b:19:c3:0b:5b:df:a7:0f:ba:77:d6:97:91:ac:73:14: a4:9b:d4:14:70:2c:24:d1:ec:3a:b8:c2:c4:de:ad:76:44:0a: b9:8e:ba:d0:0a:87:63:57:b2:c2:39:59:da:7d:95:2c:78:3d: 8d:f2:67:10 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXzrySmO+emzcIYyRvM1DNW0hrFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJC MkM5ODEzQzAeFw0yNTEwMjYxMjU1MDJaFw0yNjEwMjUxMzAwMDJaMDMxMTAvBgNV BAMTKDNGRUUxREM1RjRDRUFEOURGRkRBNjdERDY1MUEwMUQ5QTBDRDZGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmWz2fHfOG98JbGXEl3s2NoqF RzBPC4fAOeaZiUjHoy1qvS0wBiLepEFk1dAPi9DFufwrPDD14rHmiSTxBV5oMpMg mRI/6dyQJIERyHjDzdSawFOsM+X8bMNUg665cUEjaR09e2Kp8KoVeseGi7mrTtYN I8aIxBdZ2rAYQt1debVIgggGkI/uzNC9NfHtf8cbqY4CJp7TZ8aVAipdDkX9eBME KuXisQlc+Su+9TFLFawNhTu+62/mKXzGmc0v1hDnS/6vqW9FOPHExCFepk3ZVaN1 4se6iduguoPSX/mwK/GAJ9zO4qiMt6xfGJhjN7XtQae9gDlN1PPyMJ6DPo/XAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUP+4dxfTOrZ3/2mfdZRoB2aDNb7gwHwYDVR0j BBgwFoAUCU1VbKC1WvSmNoc6Gx5wMrLJgTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMC8wOTRENTU2Q0Ew QjU1QUY0QTYzNjg3M0ExQjFFNzAzMkIyQzk4MTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0RDU1NkNBMEI1NUFGNEE2MzY4NzNBMUIxRTcwMzJCMkM5 ODEzQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIzLTkzN2QtNDMwNC05 MTY3LTQ2M2Q3YzU4ZDVlNC8wLzMxMzAzMzJlMzEzMTMyMmUzMTM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncJEwDQYJ KoZIhvcNAQELBQADggEBAAzGg2OoUaG+YxFaTTiM+qP+CAOsp41N1pZfCkKJqoAE Coh5xegu/ZESX79glAYDhSQuCUmDqWA7rrNt4qF7WQRcKqt/nDcN3do5+TTUZlnP JrbDUeD6qXRR+mkKgceWbZ3j+eXOh6yvZVX/y1Y++umoWqzB7TDkQufZhJoUv94h UNk0ApzshnRRT4Ox1lmmkmHa5bs0W3AZ7TGgEjRyTrbUiiL3jDLBREL0hQWdXC/p r6BGLh1hlLfacrE5XoGB+7GZXLLFM7ctGxnDC1vfpw+6d9aXkaxzFKSb1BRwLCTR 7Dq4wsTerXZECrmOutAKh2NXssI5Wdp9lSx4PY3yZxA= -----END CERTIFICATE-----Generated at Tue Nov 4 08:26:07 2025 by rpki-client