$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa File: 3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (raw, json) Hash identifier: zJ4dPhpKTwfxjBM9r05t0oUe6ezn1Aa8OjhsYGhldqw= Subject key identifier: 89:E7:E4:D9:F5:B1:16:40:02:99:10:04:FA:F8:9C:95:25:41:C7:37 Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 5B605926735228FA081714ADA1A3EA107AF8E073 Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa Signing time: Sun 26 Oct 2025 08:00:00 +0000 ROA not before: Sun 26 Oct 2025 07:55:00 +0000 ROA not after: Sun 25 Oct 2026 08:00:00 +0000 asID: 134658 IP address blocks: 103.55.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:60:59:26:73:52:28:fa:08:17:14:ad:a1:a3:ea:10:7a:f8:e0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Oct 26 07:55:00 2025 GMT Not After : Oct 25 08:00:00 2026 GMT Subject: CN=89E7E4D9F5B1164002991004FAF89C952541C737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5d:5d:44:0b:00:6b:36:e7:f6:91:46:1e:2d: a3:41:9c:2f:19:3a:77:d8:5d:6c:73:94:c4:c8:3d: 0f:33:22:13:b3:c4:18:de:47:3b:1e:2c:4b:37:9b: 42:8c:05:c3:ed:eb:1b:63:52:ae:b5:1d:cd:14:ee: c6:e9:29:02:61:38:d9:19:a8:64:a5:2d:69:87:be: 49:a4:6f:33:ec:9b:44:95:63:dd:ea:05:06:40:ca: 9b:42:94:6c:f2:e1:c9:0b:51:8e:61:be:ed:6d:7a: 5e:51:47:78:51:85:f3:2b:89:7b:78:9b:62:3c:ce: 80:49:87:2e:86:1e:f3:5e:43:9a:30:98:44:af:10: 84:79:4c:11:1b:73:7a:47:de:26:5d:de:2d:67:c5: 23:e1:f5:58:b8:49:2c:29:79:46:cf:ca:59:ed:58: 14:96:fb:c3:03:29:a7:17:37:ee:ec:04:5d:7f:c4: 2a:47:b9:0a:c9:64:a6:17:83:9c:1c:d8:e7:d5:0f: f8:fc:19:e8:1c:43:6d:d9:b0:a7:fe:42:57:9d:47: 29:9a:c9:fc:bc:30:fb:15:5b:1f:01:15:7e:22:8d: 1d:20:b4:97:52:9a:75:ea:93:e6:f4:68:4e:5f:39: 19:e6:2b:41:67:23:d4:4a:41:4f:0a:c3:40:63:d8: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E7:E4:D9:F5:B1:16:40:02:99:10:04:FA:F8:9C:95:25:41:C7:37 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.226.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b1:9c:0b:be:b6:a4:fe:b2:e3:ef:72:1f:38:ba:f0:26:1a: 1a:44:17:b0:f1:38:ba:df:4a:3d:52:aa:46:e8:e4:50:58:50: 85:8b:e1:f0:85:65:d4:ea:6e:49:81:81:41:f2:71:92:f7:d2: 69:98:66:0e:03:37:af:f7:ad:6f:1d:93:29:42:06:ec:cc:3b: aa:6c:98:36:ff:9d:09:7c:a8:c7:52:ab:0b:6e:b8:0e:6b:42: b9:17:38:6c:c7:dd:6d:61:2d:ab:e4:bf:e5:49:f8:43:18:85: db:50:33:78:58:5a:90:a8:ac:7f:18:2f:e0:f2:b2:b6:86:29: c8:40:77:af:33:09:82:2e:ef:a8:be:cc:20:32:80:49:77:80: c7:ff:7c:79:9b:6d:4a:a6:5e:8e:42:c7:92:39:89:a2:66:1c: a2:8c:0d:bb:3f:fe:62:1f:08:ae:6f:ef:30:da:b7:34:54:e7: f9:b2:76:13:f2:e9:58:1f:7d:af:68:ba:7e:3e:c7:c3:46:da: 16:8f:a7:41:cd:e0:ee:7a:71:19:72:ce:a7:0b:41:8a:32:68: 18:19:d5:b2:12:fb:27:12:d7:cd:56:66:76:3f:d5:15:9f:b2: 66:c5:33:e2:cc:e2:4d:ac:bb:04:fa:63:7b:17:90:45:10:5c: 0d:b1:63:56 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUW2BZJnNSKPoIFxStoaPqEHr44HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTEwMjYwNzU1MDBaFw0yNjEwMjUwODAwMDBaMDMxMTAvBgNV BAMTKDg5RTdFNEQ5RjVCMTE2NDAwMjk5MTAwNEZBRjg5Qzk1MjU0MUM3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdXV1ECwBrNuf2kUYeLaNBnC8Z OnfYXWxzlMTIPQ8zIhOzxBjeRzseLEs3m0KMBcPt6xtjUq61Hc0U7sbpKQJhONkZ qGSlLWmHvkmkbzPsm0SVY93qBQZAyptClGzy4ckLUY5hvu1tel5RR3hRhfMriXt4 m2I8zoBJhy6GHvNeQ5owmESvEIR5TBEbc3pH3iZd3i1nxSPh9Vi4SSwpeUbPylnt WBSW+8MDKacXN+7sBF1/xCpHuQrJZKYXg5wc2OfVD/j8GegcQ23ZsKf+QledRyma yfy8MPsVWx8BFX4ijR0gtJdSmnXqk+b0aE5fORnmK0FnI9RKQU8Kw0Bj2NVJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiefk2fWxFkACmRAE+viclSVBxzcwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZTNkZDk1LTJhODUtNDM5ZS04 NGYyLTk3MmEyM2UzMjcxZS8wLzMxMzAzMzJlMzUzNTJlMzIzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzfiMA0GCSqG SIb3DQEBCwUAA4IBAQCSsZwLvrak/rLj73IfOLrwJhoaRBew8Ti630o9UqpG6ORQ WFCFi+HwhWXU6m5JgYFB8nGS99JpmGYOAzev961vHZMpQgbszDuqbJg2/50JfKjH UqsLbrgOa0K5Fzhsx91tYS2r5L/lSfhDGIXbUDN4WFqQqKx/GC/g8rK2hinIQHev MwmCLu+ovswgMoBJd4DH/3x5m21Kpl6OQseSOYmiZhyijA27P/5iHwiub+8w2rc0 VOf5snYT8ulYH32vaLp+PsfDRtoWj6dBzeDuenEZcs6nC0GKMmgYGdWyEvsnEtfN VmZ2P9UVn7JmxTPizOJNrLsE+mN7F5BFEFwNsWNW -----END CERTIFICATE-----Generated at Wed Nov 5 20:48:15 2025 by rpki-client