$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa File: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (raw, json) Hash identifier: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424= Subject key identifier: F9:54:85:EA:2F:D6:4E:6D:05:D2:A4:4D:18:FD:D3:AE:0A:73:42:7C Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 46C647BAF784C815C00397A8AD589944D82A8DC5 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa Signing time: Mon 02 Jun 2025 01:02:37 +0000 ROA not before: Mon 02 Jun 2025 00:57:37 +0000 ROA not after: Mon 01 Jun 2026 01:02:37 +0000 asID: 136868 IP address blocks: 103.105.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 21:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c6:47:ba:f7:84:c8:15:c0:03:97:a8:ad:58:99:44:d8:2a:8d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Jun 2 00:57:37 2025 GMT Not After : Jun 1 01:02:37 2026 GMT Subject: CN=F95485EA2FD64E6D05D2A44D18FDD3AE0A73427C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:99:7f:1e:a2:2d:e8:41:ab:ed:ce:f4:88: 36:48:da:4c:fb:a4:36:cc:0c:f5:fe:28:c0:42:0b: 81:10:f5:28:38:22:0e:fa:d0:e2:e7:eb:b2:e4:c2: 39:91:73:a1:2c:3a:7b:a1:38:a7:83:63:3c:b4:33: 89:c3:e6:96:2b:a9:0c:3d:62:56:d9:94:a3:55:0b: a0:18:69:fe:ab:93:ec:42:da:8c:97:96:49:0f:11: 7f:4e:bb:ef:d3:62:89:1a:e3:e7:4f:73:a5:fb:64: d8:43:21:83:11:31:da:c9:be:16:b7:90:b3:63:ad: 0e:47:47:68:52:ab:08:35:04:6e:3c:8d:72:1d:8d: e1:2e:38:eb:c1:dd:3a:17:48:5b:02:46:d3:95:a3: 5c:0b:7d:60:e6:e6:0b:61:37:f8:3a:70:a3:e9:f7: 14:9b:27:60:0f:0a:e3:a1:86:de:f5:1b:5f:f9:3b: 2b:ad:07:30:d0:0c:b6:b5:da:fd:07:95:52:8d:5b: 08:e8:93:8f:42:2c:e5:88:ce:55:05:a3:ed:f0:e2: 3d:93:32:d5:04:fb:aa:ac:be:51:05:74:76:ee:fb: 16:e6:d5:8d:76:19:8a:6a:fb:5f:5d:a3:df:23:b9: fc:d9:b1:a9:69:e6:1c:1a:02:99:30:6c:c7:36:87: 91:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:54:85:EA:2F:D6:4E:6D:05:D2:A4:4D:18:FD:D3:AE:0A:73:42:7C X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.98.0/24 Signature Algorithm: sha256WithRSAEncryption 69:92:1b:f3:bd:76:93:64:07:43:68:14:bc:0b:ae:4b:42:82: 92:e6:54:ee:21:45:17:af:6b:45:85:da:bf:a6:80:7e:b1:08: ce:87:bf:df:37:d6:17:1b:3e:d1:df:d8:d1:5c:18:53:2b:54: 71:76:2a:09:61:e9:d2:3c:4d:93:38:d4:d1:70:f4:3f:57:72: 60:83:2b:cf:52:9f:6e:e2:c5:a4:02:3b:c0:d6:83:c2:ea:52: 48:0e:4a:b7:4f:fe:44:4d:68:fd:ca:f8:7f:32:f2:06:87:bd: 66:66:5c:5e:68:bc:2f:cb:15:21:93:a5:9d:1c:73:d3:cb:08: 2a:82:ad:f4:71:61:cf:63:ff:a5:af:42:dd:de:43:9b:28:f0: 57:aa:37:2e:f2:56:2e:6a:6a:cb:61:af:57:93:ea:97:67:d5: 08:1e:54:d5:e0:26:4f:7d:2b:45:7f:9d:95:b9:95:ab:3c:87: 9a:06:ff:b5:bd:3a:a2:65:39:9f:5f:d2:01:5f:5f:49:10:a2: 51:2b:ea:e7:c0:2b:0f:a4:1d:ac:1e:4b:c3:40:9e:a7:cd:b1: 37:86:67:bf:bc:6b:d0:ce:a4:be:6f:01:a3:99:55:96:0e:7f: b0:a9:19:5e:7e:8a:18:e7:d5:ee:48:b8:5e:6c:2d:d0:31:5e: 8d:57:df:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURsZHuveEyBXAA5eorViZRNgqjcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNTA2MDIwMDU3MzdaFw0yNjA2MDEwMTAyMzdaMDMxMTAvBgNV BAMTKEY5NTQ4NUVBMkZENjRFNkQwNUQyQTQ0RDE4RkREM0FFMEE3MzQyN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjJl/HqIt6EGr7c70iDZI2kz7 pDbMDPX+KMBCC4EQ9Sg4Ig760OLn67LkwjmRc6EsOnuhOKeDYzy0M4nD5pYrqQw9 YlbZlKNVC6AYaf6rk+xC2oyXlkkPEX9Ou+/TYoka4+dPc6X7ZNhDIYMRMdrJvha3 kLNjrQ5HR2hSqwg1BG48jXIdjeEuOOvB3ToXSFsCRtOVo1wLfWDm5gthN/g6cKPp 9xSbJ2APCuOhht71G1/5OyutBzDQDLa12v0HlVKNWwjok49CLOWIzlUFo+3w4j2T MtUE+6qsvlEFdHbu+xbm1Y12GYpq+19do98jufzZsalp5hwaApkwbMc2h5GdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+VSF6i/WTm0F0qRNGP3TrgpzQnwwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMjRhYThjLWRlZGMtNDM3Ni05 MzgxLTBhODFlNmJjYzU2NC8wLzMxMzAzMzJlMzEzMDM1MmUzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2liMA0GCSqG SIb3DQEBCwUAA4IBAQBpkhvzvXaTZAdDaBS8C65LQoKS5lTuIUUXr2tFhdq/poB+ sQjOh7/fN9YXGz7R39jRXBhTK1RxdioJYenSPE2TONTRcPQ/V3JggyvPUp9u4sWk AjvA1oPC6lJIDkq3T/5ETWj9yvh/MvIGh71mZlxeaLwvyxUhk6WdHHPTywgqgq30 cWHPY/+lr0Ld3kObKPBXqjcu8lYuamrLYa9Xk+qXZ9UIHlTV4CZPfStFf52VuZWr PIeaBv+1vTqiZTmfX9IBX19JEKJRK+rnwCsPpB2sHkvDQJ6nzbE3hme/vGvQzqS+ bwGjmVWWDn+wqRlefooY59XuSLhebC3QMV6NV9/H -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:48 2025 by rpki-client