$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa File: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (raw, json) Hash identifier: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE= Subject key identifier: 98:17:41:E6:03:E3:DC:26:1D:11:DC:49:72:C3:CA:BA:D4:E5:55:57 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 2F7F139FB2C7231D299BD34D2932B931A36B3BC4 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa Signing time: Wed 22 Oct 2025 05:00:02 +0000 ROA not before: Wed 22 Oct 2025 04:55:02 +0000 ROA not after: Wed 21 Oct 2026 05:00:02 +0000 asID: 151554 IP address blocks: 103.244.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:7f:13:9f:b2:c7:23:1d:29:9b:d3:4d:29:32:b9:31:a3:6b:3b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Oct 22 04:55:02 2025 GMT Not After : Oct 21 05:00:02 2026 GMT Subject: CN=981741E603E3DC261D11DC4972C3CABAD4E55557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:6a:7a:6b:8c:1b:2b:fe:18:40:a2:d7:15: e6:23:10:9e:89:71:20:2b:f0:ef:79:38:48:f4:02: 17:0c:bd:f8:b5:70:31:4d:a9:4f:51:2f:17:39:72: 10:1b:a4:1f:ce:81:b8:b2:09:7d:82:66:b5:4a:a7: 49:fe:98:32:5f:d4:73:79:63:f0:18:c3:7f:74:24: d8:80:1b:30:41:b6:cf:3d:f9:66:fe:96:79:a3:46: 05:da:9d:79:8b:cb:ee:16:11:b7:30:11:08:98:ff: c0:e3:7a:ba:78:83:de:63:df:ea:b1:52:af:de:1d: a6:e3:6b:da:71:91:e5:c2:2c:d5:00:9b:6c:3f:24: b7:b3:24:3f:3e:f2:34:42:b1:db:62:5e:2c:44:5e: 06:58:d4:ff:be:42:ea:d7:88:e3:f0:d5:af:34:43: be:aa:fe:76:6a:a1:fe:ad:28:d3:41:43:0f:b8:f0: c4:d9:1c:75:84:0a:a1:2a:86:f8:7d:cc:8b:4d:91: 10:74:fb:e5:89:ee:18:03:3e:ca:e2:17:92:cc:76: 4c:bc:b1:c3:e9:56:bd:c7:2e:37:1a:52:4d:7b:76: 6b:05:c4:27:f4:65:20:42:6e:69:ff:81:e6:50:41: 32:cc:a5:a2:24:88:a9:48:32:19:61:3f:65:30:96: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:17:41:E6:03:E3:DC:26:1D:11:DC:49:72:C3:CA:BA:D4:E5:55:57 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.244.104.0/24 Signature Algorithm: sha256WithRSAEncryption 78:e8:f9:f5:8a:89:3a:cc:38:1a:ee:69:c2:fd:5b:35:72:24: fe:3d:e8:5e:7b:c0:87:bd:11:ff:24:48:4c:53:0f:96:8f:e5: 2c:4b:ad:c8:3d:e5:ec:72:e2:fc:c8:83:8e:f9:b7:d2:06:a8: 2b:28:82:ab:a4:c5:35:9d:e2:74:58:67:1a:2e:e6:07:f9:19: 1c:37:70:cb:1b:fc:fc:5f:3d:00:55:dd:e7:2f:89:60:06:b9: 42:96:87:2c:5b:e8:f1:c6:6c:ea:cf:a8:66:bd:c8:7d:b6:73: fa:f5:ed:45:09:b1:bc:88:13:32:ae:d8:ad:4e:3e:b2:c2:a6: 8c:fb:87:10:7d:ff:e0:43:76:32:74:dc:d7:10:e6:c8:3f:d5: 51:2d:09:4c:15:70:10:6a:73:ba:b3:7b:91:39:f6:28:0d:0d: 67:75:19:d9:82:50:fe:37:10:0c:73:d0:07:86:b7:10:9c:8a: 11:05:36:57:d8:93:6f:56:b5:1a:87:bd:c9:2f:32:27:94:e6: 58:92:13:31:ef:c5:68:36:64:9c:87:8e:f5:00:ae:dc:e6:0a: f0:cd:3b:b6:5e:d4:f9:43:2a:cb:b6:01:7d:f2:98:c4:13:89: 14:bb:0b:75:c4:6f:f4:9c:d4:80:a0:50:33:bd:99:a3:6c:4d: 10:85:16:c2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUL38Tn7LHIx0pm9NNKTK5MaNrO8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNTEwMjIwNDU1MDJaFw0yNjEwMjEwNTAwMDJaMDMxMTAvBgNV BAMTKDk4MTc0MUU2MDNFM0RDMjYxRDExREM0OTcyQzNDQUJBRDRFNTU1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fWp6a4wbK/4YQKLXFeYjEJ6J cSAr8O95OEj0AhcMvfi1cDFNqU9RLxc5chAbpB/OgbiyCX2CZrVKp0n+mDJf1HN5 Y/AYw390JNiAGzBBts89+Wb+lnmjRgXanXmLy+4WEbcwEQiY/8Djerp4g95j3+qx Uq/eHabja9pxkeXCLNUAm2w/JLezJD8+8jRCsdtiXixEXgZY1P++QurXiOPw1a80 Q76q/nZqof6tKNNBQw+48MTZHHWECqEqhvh9zItNkRB0++WJ7hgDPsriF5LMdky8 scPpVr3HLjcaUk17dmsFxCf0ZSBCbmn/geZQQTLMpaIkiKlIMhlhP2Uwlt67AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmBdB5gPj3CYdEdxJcsPKutTlVVcwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkMmZhNTFlLTNmZDQtNDUyMC1i Mzc1LTA5ZWVmNWUwZTUxMC8wLzMxMzAzMzJlMzIzNDM0MmUzMTMwMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM1MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9GgwDQYJ KoZIhvcNAQELBQADggEBAHjo+fWKiTrMOBruacL9WzVyJP496F57wIe9Ef8kSExT D5aP5SxLrcg95exy4vzIg475t9IGqCsogqukxTWd4nRYZxou5gf5GRw3cMsb/Pxf PQBV3ecviWAGuUKWhyxb6PHGbOrPqGa9yH22c/r17UUJsbyIEzKu2K1OPrLCpoz7 hxB9/+BDdjJ03NcQ5sg/1VEtCUwVcBBqc7qze5E59igNDWd1GdmCUP43EAxz0AeG txCcihEFNlfYk29WtRqHvckvMieU5liSEzHvxWg2ZJyHjvUArtzmCvDNO7Ze1PlD Ksu2AX3ymMQTiRS7C3XEb/Sc1ICgUDO9maNsTRCFFsI= -----END CERTIFICATE-----Generated at Tue Nov 4 07:42:55 2025 by rpki-client