$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa File: 3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa (raw, json) Hash identifier: Ox4ZTFR07e7JY/PWDRkVjaGrsYWVREjNDM/zRhbDUOE= Subject key identifier: 28:DD:64:48:5D:82:4C:DE:AE:21:1C:79:50:F9:74:0E:B0:34:EE:42 Certificate issuer: /CN=27992B841C717A90B3FDBD81B476F3FF9045212D Certificate serial: 4FA575A21AD41604CE8C85E992AEB44DBF6D3781 Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa Signing time: Sun 26 Oct 2025 09:00:00 +0000 ROA not before: Sun 26 Oct 2025 08:55:00 +0000 ROA not after: Sun 25 Oct 2026 09:00:00 +0000 asID: 150489 IP address blocks: 103.55.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a5:75:a2:1a:d4:16:04:ce:8c:85:e9:92:ae:b4:4d:bf:6d:37:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D Validity Not Before: Oct 26 08:55:00 2025 GMT Not After : Oct 25 09:00:00 2026 GMT Subject: CN=28DD64485D824CDEAE211C7950F9740EB034EE42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ec:79:5b:4a:45:4f:e9:df:5a:c3:2f:25:c0: 18:1c:81:b2:54:10:11:f1:cf:4e:81:33:8e:06:33: 9c:4a:f7:4a:6e:49:2a:4e:5f:06:9b:6c:eb:a9:3e: fa:ab:da:af:a0:8c:79:c2:69:ba:04:ff:c8:46:1b: 2e:8d:bb:9d:fb:60:da:78:ba:32:18:c9:f5:b9:52: 87:1e:02:c5:ac:06:65:c3:1a:6f:59:cc:e5:7d:0d: 68:f2:61:b9:5a:cb:ed:65:5e:46:3e:5f:56:8f:64: 78:97:59:c7:fe:29:0f:75:3e:f0:3c:f4:27:55:6d: 04:a5:dc:d7:de:f0:4f:9b:6d:be:70:30:20:ba:80: e8:bb:e9:6b:13:19:5b:38:65:3a:0e:3d:b9:2f:0c: a8:0e:27:7f:2f:6f:25:3e:69:62:9d:0e:61:0d:f9: 3a:f6:3a:e0:c8:2e:6c:e5:5f:71:f2:ff:10:dc:2b: a9:ea:97:f4:36:b8:b1:12:a8:0e:9a:94:ac:9d:9f: e6:71:a2:6f:0b:61:0f:f7:e7:0d:8d:54:16:6e:2c: b9:1c:92:69:85:38:d0:26:6b:a5:b9:d7:dc:34:7d: d5:1a:ee:f1:ee:0d:f8:cf:68:86:fa:8a:45:03:1a: 2d:5e:fa:a2:85:9f:93:f4:50:b0:e9:72:76:c6:b7: fc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DD:64:48:5D:82:4C:DE:AE:21:1C:79:50:F9:74:0E:B0:34:EE:42 X509v3 Authority Key Identifier: keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313530343839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.226.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:7e:0b:91:0e:e3:31:8c:0d:1b:5a:4b:89:8c:7e:f9:d6:37: a5:eb:a1:04:ce:09:1a:82:15:ba:21:ba:30:c8:d5:23:e9:c1: dc:2b:d9:62:fd:ee:1c:e6:e2:ad:4d:ce:53:49:74:96:04:33: bc:8f:08:2c:d2:e9:b6:85:b3:3e:79:0e:6a:b1:eb:ed:28:34: b8:db:65:6e:79:01:53:b2:cd:c2:fb:b4:5c:a0:d9:e7:3d:74: c8:2f:9f:2e:2b:f8:43:89:f9:41:4d:5b:46:ae:92:1c:ae:3b: 10:c6:fc:61:03:20:cc:e2:50:09:ab:0f:2d:4b:bd:2e:4b:fb: c6:4c:bb:aa:e6:44:bc:62:e8:e6:fb:bc:f9:d4:fb:33:63:29: 03:a1:f8:62:71:de:82:2b:d0:8f:cf:b4:23:db:d2:eb:c3:cc: 91:59:37:51:53:7d:90:dc:98:e2:dc:59:42:9e:61:f0:f1:56: f8:2e:fd:b7:a3:11:d7:f0:97:a2:9f:03:fb:fb:8d:31:a0:d5: 1c:4b:5b:50:83:e9:b5:a0:d4:d6:d8:91:f5:c0:35:d3:4f:ec: 30:56:4f:d0:fc:cc:06:fa:d0:3a:3b:fd:f5:0a:f7:64:a8:ac: 7b:5c:28:80:b1:88:8f:c9:12:81:2d:46:b1:fc:e9:7d:01:b8: 05:33:c6:5c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT6V1ohrUFgTOjIXpkq60Tb9tN4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5 MDQ1MjEyRDAeFw0yNTEwMjYwODU1MDBaFw0yNjEwMjUwOTAwMDBaMDMxMTAvBgNV BAMTKDI4REQ2NDQ4NUQ4MjRDREVBRTIxMUM3OTUwRjk3NDBFQjAzNEVFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE7HlbSkVP6d9awy8lwBgcgbJU EBHxz06BM44GM5xK90puSSpOXwabbOupPvqr2q+gjHnCaboE/8hGGy6Nu537YNp4 ujIYyfW5UoceAsWsBmXDGm9ZzOV9DWjyYblay+1lXkY+X1aPZHiXWcf+KQ91PvA8 9CdVbQSl3Nfe8E+bbb5wMCC6gOi76WsTGVs4ZToOPbkvDKgOJ38vbyU+aWKdDmEN +Tr2OuDILmzlX3Hy/xDcK6nql/Q2uLESqA6alKydn+Zxom8LYQ/35w2NVBZuLLkc kmmFONAma6W519w0fdUa7vHuDfjPaIb6ikUDGi1e+qKFn5P0ULDpcnbGt/w5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUKN1kSF2CTN6uIRx5UPl0DrA07kIwHwYDVR0j BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1 MjEyRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZTNkZDk1LTJhODUtNDM5ZS04 NGYyLTk3MmEyM2UzMjcxZS8wLzMxMzAzMzJlMzUzNTJlMzIzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzfiMA0GCSqG SIb3DQEBCwUAA4IBAQA+fguRDuMxjA0bWkuJjH751jel66EEzgkaghW6IbowyNUj 6cHcK9li/e4c5uKtTc5TSXSWBDO8jwgs0um2hbM+eQ5qsevtKDS422VueQFTss3C +7RcoNnnPXTIL58uK/hDiflBTVtGrpIcrjsQxvxhAyDM4lAJqw8tS70uS/vGTLuq 5kS8Yujm+7z51PszYykDofhicd6CK9CPz7Qj29Lrw8yRWTdRU32Q3Jji3FlCnmHw 8Vb4Lv23oxHX8JeinwP7+40xoNUcS1tQg+m1oNTW2JH1wDXTT+wwVk/Q/MwG+tA6 O/31CvdkqKx7XCiAsYiPyRKBLUax/Ol9AbgFM8Zc -----END CERTIFICATE-----Generated at Thu Nov 6 01:51:00 2025 by rpki-client