$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa File: 3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa (raw, json) Hash identifier: MbvKBjhGVKXrhTAYqLQTkHHlmqfGdIcd1OSrPlpqfSU= Subject key identifier: E9:C1:DA:4F:90:F8:28:D2:DD:A2:9C:C5:F7:7C:7D:65:9E:6C:A9:0E Certificate issuer: /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Certificate serial: 55C65769A23C5C52CEAAA35D753C3F816DDE4FD3 Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa Signing time: Sat 06 Sep 2025 04:02:26 +0000 ROA not before: Sat 06 Sep 2025 03:57:26 +0000 ROA not after: Sat 05 Sep 2026 04:02:26 +0000 asID: 141579 IP address blocks: 103.160.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 06:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c6:57:69:a2:3c:5c:52:ce:aa:a3:5d:75:3c:3f:81:6d:de:4f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Validity Not Before: Sep 6 03:57:26 2025 GMT Not After : Sep 5 04:02:26 2026 GMT Subject: CN=E9C1DA4F90F828D2DDA29CC5F77C7D659E6CA90E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b1:ad:fa:43:fa:90:66:aa:75:bf:f6:55:f3: 83:6a:e3:82:4c:73:06:44:f8:70:73:32:68:e0:30: 33:5d:fa:59:23:5f:fe:61:70:f0:1c:ac:84:ff:e4: 4f:8f:d9:d0:ce:1b:95:0d:7e:fb:4e:fa:08:ac:9e: f1:01:80:d5:2a:da:61:a2:a1:2a:38:ab:d4:62:1e: e6:7e:c2:87:66:fc:7b:ae:90:8b:fd:59:96:da:8f: 95:0b:95:56:51:95:c1:00:18:5a:ac:5a:ae:fa:1b: 6e:10:cc:50:f1:16:8c:5f:d5:4e:2b:5d:ef:f7:53: cf:f5:e7:29:dd:ad:e9:3a:c1:1f:c8:1b:a7:82:5b: 6c:2d:6a:2c:dc:90:9b:b2:a1:4f:82:ae:2c:81:d3: 35:73:8c:e5:cc:7a:e0:11:b9:ae:e1:10:95:dd:84: 2e:1d:76:68:d2:67:a5:49:82:ec:0c:54:6d:e3:1b: 6f:59:a6:29:95:a1:77:d9:e8:36:b0:85:2a:4f:02: f2:0e:5b:e5:85:ed:b8:58:02:cf:8b:f4:af:a4:bb: 19:b1:bc:90:64:78:01:d4:83:00:39:95:b1:f2:c9: 8b:e3:cc:99:c6:42:44:ff:81:3b:19:73:61:7d:e0: c9:39:00:fd:60:46:9a:59:77:56:b4:30:c1:f8:94: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C1:DA:4F:90:F8:28:D2:DD:A2:9C:C5:F7:7C:7D:65:9E:6C:A9:0E X509v3 Authority Key Identifier: keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32342d3234203d3e20313431353739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.94.0/24 Signature Algorithm: sha256WithRSAEncryption ac:4d:37:2d:f1:ba:e0:c5:51:9c:11:61:75:c7:b4:84:01:8a: c5:6a:46:a8:da:0c:7d:d8:02:44:f8:6e:b4:21:dc:7b:6d:49: fe:76:49:6e:4e:4b:3b:3e:85:03:a2:bc:a3:81:5a:fe:ee:86: 3d:59:3d:7c:14:81:88:e4:78:99:c5:d6:2b:7e:99:c8:35:be: 1b:99:0c:d2:fa:0f:32:e9:32:b3:0b:0e:19:d9:7c:82:85:63: b9:b7:b7:d3:98:bb:20:c6:ed:57:d5:80:55:78:39:02:86:20: 8e:b7:63:e5:b6:65:5b:45:86:2f:19:5c:a0:81:e1:8b:4e:7d: 74:2a:26:dc:3d:bd:73:e5:85:01:a8:d3:01:de:65:fd:bf:3e: 6a:4b:f0:04:f0:a7:eb:5b:45:6d:5b:72:88:5c:c5:d0:7f:30: 59:46:5a:f4:d1:28:bc:60:bd:93:8c:02:ac:cd:e6:6c:8b:e4: 97:77:7e:47:3b:94:1e:db:d9:2b:be:ad:06:99:ba:d3:04:37: 2c:d2:6a:f0:c8:1d:aa:9c:76:28:b7:4f:b3:3c:8c:41:b7:35: 92:54:2c:df:c3:dc:eb:d9:62:71:54:f5:94:a2:27:0c:fd:c0: 80:f7:e1:33:31:43:02:44:60:b7:f5:7c:2e:40:17:bb:9e:fd: bd:c7:fd:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVcZXaaI8XFLOqqNddTw/gW3eT9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMw NjI0MDc1MTAeFw0yNTA5MDYwMzU3MjZaFw0yNjA5MDUwNDAyMjZaMDMxMTAvBgNV BAMTKEU5QzFEQTRGOTBGODI4RDJEREEyOUNDNUY3N0M3RDY1OUU2Q0E5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDysa36Q/qQZqp1v/ZV84Nq44JM cwZE+HBzMmjgMDNd+lkjX/5hcPAcrIT/5E+P2dDOG5UNfvtO+gisnvEBgNUq2mGi oSo4q9RiHuZ+wodm/HuukIv9WZbaj5ULlVZRlcEAGFqsWq76G24QzFDxFoxf1U4r Xe/3U8/15yndrek6wR/IG6eCW2wtaizckJuyoU+CriyB0zVzjOXMeuARua7hEJXd hC4ddmjSZ6VJguwMVG3jG29ZpimVoXfZ6DawhSpPAvIOW+WF7bhYAs+L9K+kuxmx vJBkeAHUgwA5lbHyyYvjzJnGQkT/gTsZc2F94Mk5AP1gRppZd1a0MMH4lG/VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6cHaT5D4KNLdopzF93x9ZZ5sqQ4wHwYDVR0j BBgwFoAU+PKiyIXUd952pbLnXWmdXAYkB1EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMC9GOEYyQTJDODg1 RDQ3N0RFNzZBNUIyRTc1RDY5OUQ1QzA2MjQwNzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhGMkEyQzg4NUQ0NzdERTc2QTVCMkU3NUQ2OTlENUMwNjI0 MDc1MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1OWU1NjU4LWFiMTAtNDI5Ny05 MmY0LWY2YTI2NjNlNTRjMC8wLzMxMzAzMzJlMzEzNjMwMmUzOTM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6BeMA0GCSqG SIb3DQEBCwUAA4IBAQCsTTct8brgxVGcEWF1x7SEAYrFakao2gx92AJE+G60Idx7 bUn+dkluTks7PoUDoryjgVr+7oY9WT18FIGI5HiZxdYrfpnINb4bmQzS+g8y6TKz Cw4Z2XyChWO5t7fTmLsgxu1X1YBVeDkChiCOt2PltmVbRYYvGVyggeGLTn10Kibc Pb1z5YUBqNMB3mX9vz5qS/AE8KfrW0VtW3KIXMXQfzBZRlr00Si8YL2TjAKszeZs i+SXd35HO5Qe29krvq0GmbrTBDcs0mrwyB2qnHYot0+zPIxBtzWSVCzfw9zr2WJx VPWUoicM/cCA9+EzMUMCRGC39XwuQBe7nv29x/0S -----END CERTIFICATE-----Generated at Wed Nov 5 16:08:52 2025 by rpki-client