$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa File: 3130332e342e302e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: AoVXqb4CYA9RaJx3YFIXy04A6Se9ODobwgTaen52tXE= Subject key identifier: 8E:9B:F6:7B:D9:27:DE:BF:54:46:8F:B9:BB:40:2F:48:13:A1:34:17 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 4526FAEAFA41486BB0533696698C2B2109D05E16 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 03:00:01 +0000 ROA not before: Fri 26 Sep 2025 02:55:01 +0000 ROA not after: Fri 25 Sep 2026 03:00:01 +0000 asID: 18059 IP address blocks: 103.4.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:26:fa:ea:fa:41:48:6b:b0:53:36:96:69:8c:2b:21:09:d0:5e:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 02:55:01 2025 GMT Not After : Sep 25 03:00:01 2026 GMT Subject: CN=8E9BF67BD927DEBF54468FB9BB402F4813A13417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:cc:6e:91:aa:9f:bf:cf:11:5e:0c:13:89: ca:a5:b6:8f:12:ff:2e:91:35:08:78:81:ae:30:1d: 91:d6:11:6d:f7:18:52:4b:31:9e:e2:d5:45:8e:10: 50:e3:ac:b8:7c:87:d8:6b:83:9f:16:15:2f:f9:7c: b7:3d:5b:27:86:a3:d9:80:d0:15:2b:f0:4f:31:1b: 31:cf:51:50:2a:70:a5:49:91:c0:a8:6d:97:75:5e: 1c:97:5a:82:83:9b:33:53:b3:e3:89:b6:04:df:ed: d1:f3:d2:fd:ea:70:7a:51:7d:99:43:80:62:bb:9e: ce:d2:8f:76:d7:0b:0e:90:e7:c4:06:2a:a8:ee:2c: 99:e8:a7:e9:98:5f:24:f7:90:d1:0a:82:c5:99:ca: 40:52:a8:4a:9f:3d:42:de:8f:f1:bf:3b:82:1a:0d: 9a:bd:33:4f:e1:71:1c:e5:ee:cb:28:d5:38:c0:6f: 18:70:cc:5b:3e:75:51:13:24:1c:5e:14:0e:13:41: 15:84:99:a4:95:fa:9c:7f:ed:85:2d:04:29:99:36: b5:ee:97:80:db:1f:40:9b:6e:75:aa:5f:e4:46:98: 74:6d:3a:1d:48:b4:20:63:13:3c:4e:09:5e:c4:b1: 21:7e:91:1e:22:a0:64:87:f3:a4:f0:ce:f6:b4:dd: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9B:F6:7B:D9:27:DE:BF:54:46:8F:B9:BB:40:2F:48:13:A1:34:17 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.0.0/24 Signature Algorithm: sha256WithRSAEncryption 79:03:02:47:54:2c:d3:ac:ee:bb:32:7b:c5:9e:7c:a7:00:82: 3f:33:25:3c:ee:9a:2c:c2:60:f6:75:2f:0c:99:40:d5:01:81: b9:a9:fb:a8:ea:d4:ef:3a:c9:04:84:c0:36:b0:48:dd:27:d9: 3b:72:24:ca:22:89:09:7b:4c:32:55:eb:7c:a6:2b:6a:1e:96: 77:a0:5f:11:3c:b2:ce:ad:21:e9:e1:e8:91:49:ca:55:90:9f: 8e:ef:ed:32:bf:0f:b9:84:f0:87:ec:eb:eb:fe:a4:e3:c3:c9: 4d:cc:2b:73:fa:99:23:0f:2c:84:38:5e:7b:6a:11:05:d8:39: c0:cf:ad:f9:25:4d:03:70:c2:de:7d:cb:c7:95:e4:ea:73:8a: 64:71:f9:cf:9c:be:a0:0e:e3:6a:ea:47:39:e3:51:47:d1:9f: 78:89:08:26:a3:cd:91:4a:be:1b:cd:e5:fa:d3:a4:62:2c:ae: 9b:dc:8e:08:3c:38:e7:b3:bb:65:2c:c5:93:6e:5f:de:dd:b3: ae:9a:56:39:f4:0d:98:56:5d:50:22:bb:5a:bc:41:67:d0:67: aa:42:de:00:b3:71:74:4a:a5:00:17:2b:cc:5e:da:ba:7d:22: 0e:ba:00:ee:4e:f2:bc:d3:76:0d:01:5f:c7:0c:fa:73:ca:70: e8:f9:a0:d0 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIURSb66vpBSGuwUzaWaYwrIQnQXhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMjU1MDFaFw0yNjA5MjUwMzAwMDFaMDMxMTAvBgNV BAMTKDhFOUJGNjdCRDkyN0RFQkY1NDQ2OEZCOUJCNDAyRjQ4MTNBMTM0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZsxukaqfv88RXgwTicqlto8S /y6RNQh4ga4wHZHWEW33GFJLMZ7i1UWOEFDjrLh8h9hrg58WFS/5fLc9WyeGo9mA 0BUr8E8xGzHPUVAqcKVJkcCobZd1XhyXWoKDmzNTs+OJtgTf7dHz0v3qcHpRfZlD gGK7ns7Sj3bXCw6Q58QGKqjuLJnop+mYXyT3kNEKgsWZykBSqEqfPULej/G/O4Ia DZq9M0/hcRzl7sso1TjAbxhwzFs+dVETJBxeFA4TQRWEmaSV+px/7YUtBCmZNrXu l4DbH0CbbnWqX+RGmHRtOh1ItCBjEzxOCV7EsSF+kR4ioGSH86Twzva03ZVdAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUjpv2e9kn3r9URo+5u0AvSBOhNBcwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI4MzY3NjMtMTJiNi00ZDhmLWFk MGItNGNkNWI2MTk1OWVmLzAvMzEzMDMzMmUzNDJlMzAyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwQAMA0GCSqGSIb3DQEBCwUA A4IBAQB5AwJHVCzTrO67MnvFnnynAII/MyU87poswmD2dS8MmUDVAYG5qfuo6tTv OskEhMA2sEjdJ9k7ciTKIokJe0wyVet8pitqHpZ3oF8RPLLOrSHp4eiRScpVkJ+O 7+0yvw+5hPCH7Ovr/qTjw8lNzCtz+pkjDyyEOF57ahEF2DnAz635JU0DcMLefcvH leTqc4pkcfnPnL6gDuNq6kc541FH0Z94iQgmo82RSr4bzeX606RiLK6b3I4IPDjn s7tlLMWTbl/e3bOumlY59A2YVl1QIrtavEFn0GeqQt4As3F0SqUAFyvMXtq6fSIO ugDuTvK803YNAV/HDPpzynDo+aDQ -----END CERTIFICATE-----Generated at Tue Nov 4 16:40:17 2025 by rpki-client