$ rpki-client -vvf repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa File: 3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa (raw, json) Hash identifier: 4RGO73jPUEYZsGWgfGegl/rwd/0QbjuHMtgIH17ts/g= Subject key identifier: 37:8F:46:F0:32:63:B6:9A:6A:C1:5B:57:55:4E:9B:FF:5C:4C:DC:59 Certificate issuer: /CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Certificate serial: 0EBD8DBDFD272FAF007603874BE246D9A9BDD862 Authority key identifier: F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa Signing time: Sat 25 Oct 2025 02:00:01 +0000 ROA not before: Sat 25 Oct 2025 01:55:01 +0000 ROA not after: Sat 24 Oct 2026 02:00:01 +0000 asID: 141968 IP address blocks: 103.167.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 08:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:bd:8d:bd:fd:27:2f:af:00:76:03:87:4b:e2:46:d9:a9:bd:d8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387 Validity Not Before: Oct 25 01:55:01 2025 GMT Not After : Oct 24 02:00:01 2026 GMT Subject: CN=378F46F03263B69A6AC15B57554E9BFF5C4CDC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:99:50:d2:f9:ab:51:a0:e6:7f:41:0c:8c:2c: 47:93:43:06:e0:c9:7c:2f:ab:76:ea:ab:62:9e:63: f7:b0:96:bd:44:e8:2d:ab:9f:b7:d7:8c:35:8b:96: 30:05:3c:36:97:a4:b1:ed:b9:6d:a7:2a:bd:4f:91: 68:e7:a4:75:ee:6a:e6:48:7d:3c:c3:e1:72:b6:72: a3:b4:40:e5:c9:b7:93:71:79:83:fb:ee:cd:61:f9: d3:c9:d9:84:1b:40:43:1b:54:0e:bc:5b:93:4e:ff: ad:c1:e0:39:e6:51:67:e7:76:16:72:aa:27:c7:88: a1:28:cf:e7:e4:51:96:c0:4b:3c:63:d9:77:55:e0: 13:13:52:22:45:c6:74:36:22:e7:cf:9d:d8:67:d4: 08:a1:c8:63:87:7a:c4:aa:f7:e7:4c:11:23:9b:85: 98:92:d8:13:32:3d:01:9d:c3:2a:c3:44:be:7a:00: 6e:54:c8:ce:1d:45:7e:92:5b:ef:df:a7:a2:fa:cb: c7:db:d3:f0:34:af:5e:62:1b:12:bd:b8:8a:76:2c: 97:f1:4c:7c:ad:d4:86:e4:39:08:30:3a:7e:04:15: 1f:65:c6:0d:e8:b3:d8:72:f9:e3:6d:1f:c2:51:7c: d2:f6:48:8c:95:ec:6b:3f:4c:bc:af:4a:2e:ce:ef: 83:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8F:46:F0:32:63:B6:9A:6A:C1:5B:57:55:4E:9B:FF:5C:4C:DC:59 X509v3 Authority Key Identifier: keyid:F0:61:54:57:40:B6:B6:6A:9D:3C:1D:1F:E4:F3:FD:B5:A4:F6:93:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F061545740B6B66A9D3C1D1FE4F3FDB5A4F69387.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36a2171-12a0-4e01-bcab-be3b6b836f5d/0/3130332e3136372e33342e302f32342d3234203d3e20313431393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.34.0/24 Signature Algorithm: sha256WithRSAEncryption c3:e1:0a:65:78:9c:98:9c:28:8d:cc:cb:f6:4b:eb:2a:4e:ca: a1:ce:96:c2:94:52:e9:22:ea:ca:d5:08:14:bb:c9:a8:0a:07: ab:be:28:57:14:b3:8e:80:24:bd:6f:42:62:03:22:56:00:57: e8:01:d3:26:01:42:bd:cc:69:fa:62:34:b0:9f:a6:c4:3c:51: fd:7c:aa:53:ae:b5:a8:9d:b3:10:dc:7a:ac:c6:d6:f9:62:54: a3:cb:87:18:8a:d2:45:f0:21:db:42:bd:4c:bb:5e:34:b4:b9: 8e:0a:f7:6d:cb:c2:1d:9e:43:b2:6f:d8:7a:ef:18:64:0c:49: 0f:4a:71:ef:02:78:fa:05:bd:ec:b4:31:3f:03:fa:88:18:93: c3:5b:f6:e4:02:68:ef:e0:87:39:b7:b1:4e:d3:fb:7a:0b:60: 5a:e5:61:d0:f9:aa:21:b4:75:f7:99:c6:5a:ae:30:33:a1:91: 4d:f1:9d:84:36:fe:2e:7a:80:99:ef:02:ff:71:07:10:04:39: 9f:72:91:95:11:05:39:bb:31:03:29:3b:4e:c6:c2:9b:e7:cb: ab:69:44:f7:b8:90:03:94:b4:36:9d:09:37:eb:c6:33:0c:eb: 98:8d:2d:7d:74:f0:97:fd:e4:80:20:b5:89:4b:1f:9f:74:39: 6a:03:6f:4b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDr2Nvf0nL68AdgOHS+JG2am92GIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVB NEY2OTM4NzAeFw0yNTEwMjUwMTU1MDFaFw0yNjEwMjQwMjAwMDFaMDMxMTAvBgNV BAMTKDM3OEY0NkYwMzI2M0I2OUE2QUMxNUI1NzU1NEU5QkZGNUM0Q0RDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLmVDS+atRoOZ/QQyMLEeTQwbg yXwvq3bqq2KeY/ewlr1E6C2rn7fXjDWLljAFPDaXpLHtuW2nKr1PkWjnpHXuauZI fTzD4XK2cqO0QOXJt5NxeYP77s1h+dPJ2YQbQEMbVA68W5NO/63B4DnmUWfndhZy qifHiKEoz+fkUZbASzxj2XdV4BMTUiJFxnQ2IufPndhn1AihyGOHesSq9+dMESOb hZiS2BMyPQGdwyrDRL56AG5UyM4dRX6SW+/fp6L6y8fb0/A0r15iGxK9uIp2LJfx THyt1IbkOQgwOn4EFR9lxg3os9hy+eNtH8JRfNL2SIyV7Gs/TLyvSi7O74NhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUN49G8DJjtppqwVtXVU6b/1xM3FkwHwYDVR0j BBgwFoAU8GFUV0C2tmqdPB0f5PP9taT2k4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzZhMjE3MS0xMmEwLTRlMDEtYmNhYi1iZTNiNmI4MzZmNWQvMC9GMDYxNTQ1NzQw QjZCNjZBOUQzQzFEMUZFNEYzRkRCNUE0RjY5Mzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjA2MTU0NTc0MEI2QjY2QTlEM0MxRDFGRTRGM0ZEQjVBNEY2 OTM4Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNmEyMTcxLTEyYTAtNGUwMS1i Y2FiLWJlM2I2YjgzNmY1ZC8wLzMxMzAzMzJlMzEzNjM3MmUzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6ciMA0GCSqG SIb3DQEBCwUAA4IBAQDD4QpleJyYnCiNzMv2S+sqTsqhzpbClFLpIurK1QgUu8mo CgervihXFLOOgCS9b0JiAyJWAFfoAdMmAUK9zGn6YjSwn6bEPFH9fKpTrrWonbMQ 3Hqsxtb5YlSjy4cYitJF8CHbQr1Mu140tLmOCvdty8IdnkOyb9h67xhkDEkPSnHv Anj6Bb3stDE/A/qIGJPDW/bkAmjv4Ic5t7FO0/t6C2Ba5WHQ+aohtHX3mcZarjAz oZFN8Z2ENv4ueoCZ7wL/cQcQBDmfcpGVEQU5uzEDKTtOxsKb58uraUT3uJADlLQ2 nQk368YzDOuYjS19dPCX/eSAILWJSx+fdDlqA29L -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:54 2025 by rpki-client