$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37392e302f32342d3234203d3e203436303233.roa File: 3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (raw, json) Hash identifier: aO0x+zXgbPOIjgzHxX0fAcf+6eJJ6z747uBT9dWocuM= Subject key identifier: 81:44:51:6E:A0:C9:A4:FB:E5:92:CD:80:1D:41:D1:4F:77:A9:EB:04 Certificate issuer: /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Certificate serial: 7D583D86B57343CC9BF1C0AF994EFB4004194E48 Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37392e302f32342d3234203d3e203436303233.roa Signing time: Tue 07 Oct 2025 09:00:00 +0000 ROA not before: Tue 07 Oct 2025 08:55:00 +0000 ROA not after: Tue 06 Oct 2026 09:00:00 +0000 asID: 46023 IP address blocks: 103.106.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:58:3d:86:b5:73:43:cc:9b:f1:c0:af:99:4e:fb:40:04:19:4e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B Validity Not Before: Oct 7 08:55:00 2025 GMT Not After : Oct 6 09:00:00 2026 GMT Subject: CN=8144516EA0C9A4FBE592CD801D41D14F77A9EB04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:39:43:c1:e9:36:00:e9:ca:10:9f:fc:44: ef:d6:44:7c:13:64:48:0c:fc:7a:6b:88:47:63:08: 99:b8:d8:da:2a:ed:17:92:10:af:c9:18:97:58:d7: b8:43:b4:eb:94:ce:c4:c9:81:b5:41:3a:c4:e9:7d: 9a:5f:d6:a7:de:c1:8b:00:ab:c5:3b:49:c2:e9:5e: 16:64:17:2d:b7:7d:25:46:f2:79:c2:f8:50:db:db: ba:a0:ca:42:fb:19:0b:41:a3:ca:73:a5:f4:c0:05: d5:ed:5a:90:d3:51:0f:40:83:7e:25:01:da:12:96: 64:cb:37:d1:4f:27:e9:a1:5e:3e:ac:42:fe:50:0a: c2:33:bb:94:4b:f2:a4:b8:95:30:e3:64:58:2e:3e: 68:d7:54:62:a5:68:cd:ea:a3:97:88:d7:3c:20:fc: f5:86:92:3f:14:ca:0f:00:50:6f:15:7b:19:35:de: 50:d0:e4:5a:d5:70:ac:fc:95:b4:0a:f5:cf:bf:e1: 2b:a1:cd:cf:aa:ec:8d:cb:35:8a:07:cb:ba:8a:e9: 99:50:74:68:3f:a5:c2:7a:82:af:de:3c:3d:8f:4b: f0:22:de:ce:5b:40:d6:ce:8f:e6:f8:81:c9:b4:3a: 27:55:37:64:c6:f2:4b:cf:6f:d6:da:e3:62:3d:4e: ec:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:44:51:6E:A0:C9:A4:FB:E5:92:CD:80:1D:41:D1:4F:77:A9:EB:04 X509v3 Authority Key Identifier: keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37392e302f32342d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.79.0/24 Signature Algorithm: sha256WithRSAEncryption 72:7e:f4:db:20:0a:77:a0:75:60:94:ff:89:93:dd:a7:1d:ff: 58:e0:86:32:45:04:62:5f:e3:b9:09:4b:d5:31:1a:a4:e4:3a: b6:54:b4:7b:0b:6e:75:b2:ca:2f:32:d2:57:35:2c:10:e7:8d: 33:a8:a1:b2:17:cb:c5:82:52:41:c5:65:7a:55:5d:61:df:51: 80:71:0e:55:f6:de:19:9e:e4:6e:b7:51:fc:be:75:27:8b:72: cd:2d:df:37:69:d1:84:cd:dc:97:d4:e5:d0:c1:fe:d5:86:7b: 75:18:8c:0b:20:46:4a:5a:80:36:2e:98:ba:63:1e:9b:67:a1: 5a:a2:8b:2f:e1:4c:97:93:dc:53:7f:43:4d:ee:5f:84:b9:f4: 4d:9b:b4:06:4a:61:97:9c:91:f3:30:83:eb:d4:f4:40:bb:f8: 35:02:ce:6c:23:69:53:7e:51:12:f3:b2:da:4f:83:b3:90:24: bc:ec:c8:ac:7e:91:b8:74:94:19:c3:aa:fb:2e:d4:c5:f8:f9: a1:d5:4c:08:35:4b:11:eb:67:25:12:36:35:b8:a0:00:43:b2: 89:ee:66:ad:85:ec:de:58:df:c5:ce:fd:7a:f9:06:44:ee:36: 94:05:b8:05:c3:bc:d4:cb:b4:1e:7a:54:b6:1c:9e:cb:bd:8d: 2c:cc:02:c5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfVg9hrVzQ8yb8cCvmU77QAQZTkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEy RjQ0RjE1QjAeFw0yNTEwMDcwODU1MDBaFw0yNjEwMDYwOTAwMDBaMDMxMTAvBgNV BAMTKDgxNDQ1MTZFQTBDOUE0RkJFNTkyQ0Q4MDFENDFEMTRGNzdBOUVCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3jlDwek2AOnKEJ/8RO/WRHwT ZEgM/HpriEdjCJm42Noq7ReSEK/JGJdY17hDtOuUzsTJgbVBOsTpfZpf1qfewYsA q8U7ScLpXhZkFy23fSVG8nnC+FDb27qgykL7GQtBo8pzpfTABdXtWpDTUQ9Ag34l AdoSlmTLN9FPJ+mhXj6sQv5QCsIzu5RL8qS4lTDjZFguPmjXVGKlaM3qo5eI1zwg /PWGkj8Uyg8AUG8Vexk13lDQ5FrVcKz8lbQK9c+/4Suhzc+q7I3LNYoHy7qK6ZlQ dGg/pcJ6gq/ePD2PS/Ai3s5bQNbOj+b4gcm0OidVN2TG8kvPb9ba42I9Tuw5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgURRbqDJpPvlks2AHUHRT3ep6wQwHwYDVR0j BBgwFoAUIfXhUro+JVYepNLimGVGQS9E8VswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2RkNjEzNS01NDhjLTQ4ODEtYWY3OC05M2FmOWYyYTI1MTYvMC8yMUY1RTE1MkJB M0UyNTU2MUVBNEQyRTI5ODY1NDY0MTJGNDRGMTVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGNUUxNTJCQTNFMjU1NjFFQTREMkUyOTg2NTQ2NDEyRjQ0 RjE1Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZGQ2MTM1LTU0OGMtNDg4MS1h Zjc4LTkzYWY5ZjJhMjUxNi8wLzMxMzAzMzJlMzEzMDM2MmUzNzM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdqTzANBgkqhkiG 9w0BAQsFAAOCAQEAcn702yAKd6B1YJT/iZPdpx3/WOCGMkUEYl/juQlL1TEapOQ6 tlS0ewtudbLKLzLSVzUsEOeNM6ihshfLxYJSQcVlelVdYd9RgHEOVfbeGZ7kbrdR /L51J4tyzS3fN2nRhM3cl9Tl0MH+1YZ7dRiMCyBGSlqANi6YumMem2ehWqKLL+FM l5PcU39DTe5fhLn0TZu0Bkphl5yR8zCD69T0QLv4NQLObCNpU35REvOy2k+Ds5Ak vOzIrH6RuHSUGcOq+y7Uxfj5odVMCDVLEetnJRI2NbigAEOyie5mrYXs3ljfxc79 evkGRO42lAW4BcO81Mu0HnpUthyey72NLMwCxQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:17 2025 by rpki-client