$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa File: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (raw, json) Hash identifier: wyY3CPGpB3zzZUc8QiVL+ydL4s6XrQRhF73erj2QQSs= Subject key identifier: 95:39:1B:10:2D:66:50:9A:82:3C:2C:5F:FD:D0:DF:3A:3B:47:93:EE Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 200A3535EE43981AF161071C56FFE01D8E530AC6 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa Signing time: Tue 28 Oct 2025 05:00:01 +0000 ROA not before: Tue 28 Oct 2025 04:55:01 +0000 ROA not after: Tue 27 Oct 2026 05:00:01 +0000 asID: 139972 IP address blocks: 103.126.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0a:35:35:ee:43:98:1a:f1:61:07:1c:56:ff:e0:1d:8e:53:0a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Oct 28 04:55:01 2025 GMT Not After : Oct 27 05:00:01 2026 GMT Subject: CN=95391B102D66509A823C2C5FFDD0DF3A3B4793EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:e6:b7:f2:0b:75:ae:10:d8:71:72:67:24: a5:44:15:48:f4:3f:69:7f:6d:93:ea:4b:68:0e:94: 83:7d:04:0b:e2:a7:57:e7:37:5a:bb:b0:c8:40:d3: f0:f6:c3:b3:40:89:ed:22:59:6f:df:28:d0:56:47: cf:ca:bf:9c:47:42:50:0f:4c:20:6c:d9:62:0b:4d: 44:6e:cc:9d:ab:16:0c:fb:1f:27:15:ec:6f:44:b8: d5:52:5c:cb:5c:b7:5b:4d:c9:dc:94:36:3b:70:67: 27:ad:ff:c4:0a:6e:ed:c6:fb:53:fe:31:a1:d5:08: b0:98:0b:0f:dd:01:16:df:34:24:2e:c2:91:13:a7: 70:df:75:87:46:bc:95:42:95:60:68:c6:e2:1d:10: 6f:96:5c:80:ac:c9:2f:fd:8a:9f:d0:f4:1a:db:b5: f4:e1:3b:62:a9:27:27:1f:cc:5a:9a:df:4d:7b:b1: 41:02:21:7d:e7:8b:b0:ae:47:f8:ba:a6:2f:d3:0b: 47:00:9d:db:d1:8f:dc:85:f3:56:74:b9:11:3b:27: a5:89:63:cb:5c:c6:9c:a7:cf:7f:0c:0c:18:64:0b: 05:fd:35:b0:60:1b:2c:fd:f9:af:39:50:3e:0d:13: 94:98:2d:e9:0a:2c:78:d6:38:cc:cf:7f:65:49:5c: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:39:1B:10:2D:66:50:9A:82:3C:2C:5F:FD:D0:DF:3A:3B:47:93:EE X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.119.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:8e:a3:4f:c9:50:28:89:47:4e:a1:b5:f0:e4:7e:b7:c8:e8: ff:e0:00:65:f2:83:ae:c3:1d:28:86:72:90:61:de:b3:ed:b8: a6:0c:e0:b5:e0:2f:29:4c:16:3e:15:a8:d6:1a:f5:cd:ac:e3: ec:2b:30:44:04:49:0b:0e:8f:30:d7:cb:99:74:5e:a7:d5:ec: 0a:b3:54:f9:eb:6b:f9:39:24:ec:27:ae:ea:bd:1f:1b:38:de: 6f:44:11:db:92:27:23:17:5e:42:e9:7c:b1:3e:77:9f:53:31: be:22:8d:e2:71:7f:ee:58:23:f6:74:94:44:cd:eb:5a:a1:c8: c3:e6:07:43:79:80:4f:b1:a0:a4:0e:a1:06:7a:ee:48:f7:35: e1:91:ad:c3:cc:45:20:e8:7b:20:05:a8:79:d0:fe:39:1c:5a: 93:c8:87:fe:7e:d2:cd:e7:0f:17:21:30:d3:f0:a4:1f:c6:95: ac:df:74:07:46:9f:55:6f:70:70:6c:09:2d:5d:d7:05:d0:b1: 74:54:d1:44:bb:08:9d:24:96:6c:6d:7d:12:c2:51:84:7b:f3: 98:5c:c1:1d:f5:96:d7:fd:aa:5b:48:2b:5d:7c:d9:1d:1b:cd: bc:4c:9d:39:a4:d9:e0:5d:d6:0d:9d:d3:5f:8f:52:44:f9:cf: 4b:47:c0:f4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIAo1Ne5DmBrxYQccVv/gHY5TCsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTEwMjgwNDU1MDFaFw0yNjEwMjcwNTAwMDFaMDMxMTAvBgNV BAMTKDk1MzkxQjEwMkQ2NjUwOUE4MjNDMkM1RkZERDBERjNBM0I0NzkzRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZua38gt1rhDYcXJnJKVEFUj0 P2l/bZPqS2gOlIN9BAvip1fnN1q7sMhA0/D2w7NAie0iWW/fKNBWR8/Kv5xHQlAP TCBs2WILTURuzJ2rFgz7HycV7G9EuNVSXMtct1tNydyUNjtwZyet/8QKbu3G+1P+ MaHVCLCYCw/dARbfNCQuwpETp3DfdYdGvJVClWBoxuIdEG+WXICsyS/9ip/Q9Brb tfThO2KpJycfzFqa3017sUECIX3ni7CuR/i6pi/TC0cAndvRj9yF81Z0uRE7J6WJ Y8tcxpynz38MDBhkCwX9NbBgGyz9+a85UD4NE5SYLekKLHjWOMzPf2VJXDgZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlTkbEC1mUJqCPCxf/dDfOjtHk+4wHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk3ZDI2ZGUwLTY4Y2YtNDI5Yy04 YjBlLThkNjRiNzYyZjgyNC8wLzMxMzAzMzJlMzEzMjM2MmUzMTMxMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfncwDQYJ KoZIhvcNAQELBQADggEBAH+Oo0/JUCiJR06htfDkfrfI6P/gAGXyg67DHSiGcpBh 3rPtuKYM4LXgLylMFj4VqNYa9c2s4+wrMEQESQsOjzDXy5l0XqfV7AqzVPnra/k5 JOwnruq9Hxs43m9EEduSJyMXXkLpfLE+d59TMb4ijeJxf+5YI/Z0lETN61qhyMPm B0N5gE+xoKQOoQZ67kj3NeGRrcPMRSDoeyAFqHnQ/jkcWpPIh/5+0s3nDxchMNPw pB/GlazfdAdGn1VvcHBsCS1d1wXQsXRU0US7CJ0klmxtfRLCUYR785hcwR31ltf9 qltIK1182R0bzbxMnTmk2eBd1g2d01+PUkT5z0tHwPQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:42 2025 by rpki-client