$ rpki-client -vvf repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa File: 3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa (raw, json) Hash identifier: 745SbMdhMmIVd9+YwllDATXoMHy8b7XWNJsce0BNxUE= Subject key identifier: 2A:80:F0:BA:97:45:09:99:29:39:A4:29:D6:A1:79:A6:AA:F9:96:04 Certificate issuer: /CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Certificate serial: 5B5312682BC3845F883CCA63FAFC8162D2C57BCF Authority key identifier: 2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa Signing time: Fri 24 Oct 2025 23:44:31 +0000 ROA not before: Fri 24 Oct 2025 23:39:31 +0000 ROA not after: Fri 23 Oct 2026 23:44:31 +0000 asID: 141959 IP address blocks: 103.166.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 09:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:53:12:68:2b:c3:84:5f:88:3c:ca:63:fa:fc:81:62:d2:c5:7b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E Validity Not Before: Oct 24 23:39:31 2025 GMT Not After : Oct 23 23:44:31 2026 GMT Subject: CN=2A80F0BA974509992939A429D6A179A6AAF99604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:be:59:c4:de:39:e6:f4:fa:48:15:16:a0: 94:90:63:06:9c:26:5e:01:25:c7:d3:ec:f8:06:65: 46:2d:ce:b4:04:65:51:b7:82:e0:8f:6b:07:e9:a4: 35:53:2e:5d:78:e5:ff:04:94:44:03:6a:31:21:63: be:83:a5:76:e1:77:36:36:2a:5b:58:f3:d0:78:af: 8f:ba:d4:b3:0a:e0:7c:14:bf:f5:ca:7f:9a:2f:0d: 81:a0:95:b0:47:1b:f4:71:59:ac:4d:5b:5f:3b:51: a2:d5:45:ed:7d:64:12:1c:16:16:51:ab:cf:80:c4: ce:fa:ba:90:ac:77:4b:83:56:6f:58:ea:eb:ab:fe: 0c:1a:e1:ce:de:2e:1e:d9:83:d3:01:97:52:c8:de: 3e:2b:0d:9b:70:bd:2e:ef:ec:0b:7c:23:97:fe:b0: 8b:b7:4f:7e:42:63:56:be:fb:1c:a6:ce:2e:08:ec: 24:21:b2:bd:1d:ad:c4:c2:4d:8d:78:87:7c:0f:c6: 45:70:43:b2:1e:13:09:d9:46:de:82:d0:20:ed:f4: f4:e9:df:b3:12:62:b9:e7:e8:c0:d3:98:c8:e3:6b: 3e:55:3d:f6:c4:5e:5b:3d:4f:94:7a:5a:29:15:9e: cd:03:46:47:0c:a1:7d:0d:10:62:4c:8a:44:68:0c: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:80:F0:BA:97:45:09:99:29:39:A4:29:D6:A1:79:A6:AA:F9:96:04 X509v3 Authority Key Identifier: keyid:2C:27:A0:D9:DD:25:31:EB:EF:1E:2E:C5:6A:CB:CB:CE:B2:1C:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C27A0D9DD2531EBEF1E2EC56ACBCBCEB21C498E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ff09584-9110-4b0d-8f6d-2ce5258e846b/0/3130332e3136362e3232372e302f32342d3234203d3e20313431393539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.227.0/24 Signature Algorithm: sha256WithRSAEncryption 69:58:95:97:f1:86:2d:2b:1b:ef:01:5b:2c:79:3f:80:7c:f4: 65:0a:3f:f8:16:8c:30:37:43:9c:e7:4c:0f:40:59:f2:04:7c: 95:6f:8e:e2:2a:8a:e5:2a:a7:6d:78:4f:ac:a2:bc:9a:e1:0b: b3:97:a6:1a:23:96:e9:11:cf:29:e0:50:c7:de:99:c1:bc:e2: 45:65:8f:aa:56:d5:bf:57:b1:a8:45:32:54:ac:25:9a:82:6e: 47:17:7f:94:32:1d:46:4a:24:ae:b5:fc:00:90:11:de:be:82: ac:a7:a3:0c:8c:54:ea:89:30:0d:f4:3f:7b:7f:1f:2b:5a:a7: 31:69:85:7b:ee:f2:9f:65:94:78:c9:63:bd:57:8e:9b:ed:b8: 74:b9:2f:fa:66:2f:22:d8:30:ca:5e:97:b3:41:b1:2a:86:e7: 5f:2f:2e:02:47:59:57:26:6f:68:f3:2a:e0:18:4e:71:f2:75: 86:d7:05:b9:54:da:de:50:e5:30:03:b3:56:16:a7:55:14:3f: 3e:81:40:88:b3:08:87:a9:6f:41:92:b3:1e:64:ca:42:92:53: 8f:4d:04:92:c7:47:50:25:bc:8c:c5:c4:fb:5e:1b:83:26:e1: 84:f6:bc:7c:ce:ab:0d:8c:c5:63:8a:2e:f0:a3:53:31:48:25: b4:0b:7f:3a -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUW1MSaCvDhF+IPMpj+vyBYtLFe88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VC MjFDNDk4RTAeFw0yNTEwMjQyMzM5MzFaFw0yNjEwMjMyMzQ0MzFaMDMxMTAvBgNV BAMTKDJBODBGMEJBOTc0NTA5OTkyOTM5QTQyOUQ2QTE3OUE2QUFGOTk2MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnkb5ZxN455vT6SBUWoJSQYwac Jl4BJcfT7PgGZUYtzrQEZVG3guCPawfppDVTLl145f8ElEQDajEhY76DpXbhdzY2 KltY89B4r4+61LMK4HwUv/XKf5ovDYGglbBHG/RxWaxNW187UaLVRe19ZBIcFhZR q8+AxM76upCsd0uDVm9Y6uur/gwa4c7eLh7Zg9MBl1LI3j4rDZtwvS7v7At8I5f+ sIu3T35CY1a++xymzi4I7CQhsr0drcTCTY14h3wPxkVwQ7IeEwnZRt6C0CDt9PTp 37MSYrnn6MDTmMjjaz5VPfbEXls9T5R6WikVns0DRkcMoX0NEGJMikRoDISTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUKoDwupdFCZkpOaQp1qF5pqr5lgQwHwYDVR0j BBgwFoAULCeg2d0lMevvHi7FasvLzrIcSY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmYwOTU4NC05MTEwLTRiMGQtOGY2ZC0yY2U1MjU4ZTg0NmIvMC8yQzI3QTBEOURE MjUzMUVCRUYxRTJFQzU2QUNCQ0JDRUIyMUM0OThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkMyN0EwRDlERDI1MzFFQkVGMUUyRUM1NkFDQkNCQ0VCMjFD NDk4RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhmZjA5NTg0LTkxMTAtNGIwZC04 ZjZkLTJjZTUyNThlODQ2Yi8wLzMxMzAzMzJlMzEzNjM2MmUzMjMyMzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpuMwDQYJ KoZIhvcNAQELBQADggEBAGlYlZfxhi0rG+8BWyx5P4B89GUKP/gWjDA3Q5znTA9A WfIEfJVvjuIqiuUqp214T6yivJrhC7OXphojlukRzyngUMfemcG84kVlj6pW1b9X sahFMlSsJZqCbkcXf5QyHUZKJK61/ACQEd6+gqynowyMVOqJMA30P3t/HytapzFp hXvu8p9llHjJY71XjpvtuHS5L/pmLyLYMMpel7NBsSqG518vLgJHWVcmb2jzKuAY TnHydYbXBblU2t5Q5TADs1YWp1UUPz6BQIizCIepb0GSsx5kykKSU49NBJLHR1Al vIzFxPteG4Mm4YT2vHzOqw2MxWOKLvCjUzFIJbQLfzo= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:02 2025 by rpki-client