$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa File: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (raw, json) Hash identifier: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s= Subject key identifier: B3:FA:A5:5D:F1:84:17:B3:CD:0A:F6:2C:44:77:BF:38:0D:A2:7F:33 Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 5EBFA3317C185932E965ED82048605AC707610AD Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa Signing time: Thu 18 Sep 2025 15:00:00 +0000 ROA not before: Thu 18 Sep 2025 14:55:00 +0000 ROA not after: Thu 17 Sep 2026 15:00:00 +0000 asID: 150265 IP address blocks: 103.90.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bf:a3:31:7c:18:59:32:e9:65:ed:82:04:86:05:ac:70:76:10:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Sep 18 14:55:00 2025 GMT Not After : Sep 17 15:00:00 2026 GMT Subject: CN=B3FAA55DF18417B3CD0AF62C4477BF380DA27F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:25:f8:e8:51:00:cc:2f:73:8c:5b:c1:6a: 7c:e7:d1:c0:ef:e1:a5:a9:42:f4:c1:2e:31:af:1c: 2c:12:02:45:e2:13:77:a8:26:37:bd:53:82:f4:4a: 34:2d:1d:19:37:88:48:06:a6:68:5f:b7:aa:2a:45: 31:03:70:b1:09:35:41:f5:b3:dc:0f:25:15:a9:77: ef:85:0a:30:6a:a4:ed:13:f7:52:07:9b:27:79:99: 46:5a:e1:7f:e8:ea:57:a0:28:22:18:1b:3b:12:77: aa:92:bd:98:25:a0:76:b3:b8:9f:f0:76:cd:e2:2b: 58:5c:8d:30:94:f3:c0:67:0d:8f:ea:5d:60:9a:a4: be:c2:b4:11:03:dc:0d:39:37:e3:46:c8:44:cd:ba: 03:dd:02:24:a4:e2:d7:8c:64:5c:6b:12:3c:ed:76: aa:d7:75:bc:4c:25:4a:f5:01:e3:23:7e:4e:fa:51: 0c:1d:6b:08:16:e8:51:33:a6:aa:06:f8:b6:b5:15: 47:2f:e5:0b:fa:f1:d4:44:f1:0f:ff:ec:7d:11:74: 95:b2:25:a4:7c:3a:90:a9:ab:23:0f:67:52:80:f9: 73:cf:76:09:3c:9f:39:65:81:88:df:7c:a7:28:1a: e6:c9:ae:89:15:7d:2f:02:a8:a0:89:83:d7:be:01: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FA:A5:5D:F1:84:17:B3:CD:0A:F6:2C:44:77:BF:38:0D:A2:7F:33 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.67.0/24 Signature Algorithm: sha256WithRSAEncryption 18:14:87:12:82:86:9c:e0:9c:c4:59:98:d7:20:06:a1:81:45: 72:46:96:0a:df:1c:5f:71:af:26:19:b0:52:18:4b:fa:c3:56: d6:e7:aa:08:b5:30:3b:ba:16:4e:d9:c3:51:85:0e:c3:0c:ec: 7d:8f:b6:cb:48:ae:2f:a7:20:3b:be:38:56:17:2c:47:52:dd: 47:4f:37:9b:3f:67:03:39:25:34:dd:94:99:b4:56:e9:bf:b6: 20:62:d9:6b:8e:97:00:03:4b:88:ac:8c:b6:f6:5c:57:65:b6: ec:3f:1e:e7:ec:e0:f9:83:28:f4:4e:d5:a7:8a:5c:13:4d:ea: 3f:06:88:2a:a3:44:fa:fd:da:e3:a9:39:ea:b2:03:4c:54:39: a1:9d:3d:07:9f:cc:59:0c:53:e3:ab:d6:a1:d1:7d:43:97:dc: d7:3b:e5:3c:90:05:23:8b:07:4c:bb:71:28:bb:5f:a8:00:ba: bb:48:c7:cf:1e:5a:02:7e:b6:92:09:ed:20:17:67:2b:33:e8: 01:ca:48:5b:e1:8a:7d:89:57:10:62:c8:46:45:f0:ee:d7:c1: 4b:3a:26:1d:f7:05:fa:8e:ff:e5:ab:49:c0:f0:1c:c7:6e:41: 76:a8:30:97:7f:83:f4:9d:3b:86:53:75:02:68:52:cb:c4:63: 53:60:49:b3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXr+jMXwYWTLpZe2CBIYFrHB2EK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNTA5MTgxNDU1MDBaFw0yNjA5MTcxNTAwMDBaMDMxMTAvBgNV BAMTKEIzRkFBNTVERjE4NDE3QjNDRDBBRjYyQzQ0NzdCRjM4MERBMjdGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPiX46FEAzC9zjFvBanzn0cDv 4aWpQvTBLjGvHCwSAkXiE3eoJje9U4L0SjQtHRk3iEgGpmhft6oqRTEDcLEJNUH1 s9wPJRWpd++FCjBqpO0T91IHmyd5mUZa4X/o6legKCIYGzsSd6qSvZgloHazuJ/w ds3iK1hcjTCU88BnDY/qXWCapL7CtBED3A05N+NGyETNugPdAiSk4teMZFxrEjzt dqrXdbxMJUr1AeMjfk76UQwdawgW6FEzpqoG+La1FUcv5Qv68dRE8Q//7H0RdJWy JaR8OpCpqyMPZ1KA+XPPdgk8nzllgYjffKcoGubJrokVfS8CqKCJg9e+AZonAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUs/qlXfGEF7PNCvYsRHe/OA2ifzMwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZjNjNzY5LWNmYjEtNDIwNi05 ZjU0LWMwNTg3ZTYzYmE1Yi8wLzMxMzAzMzJlMzkzMDJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdaQzANBgkqhkiG 9w0BAQsFAAOCAQEAGBSHEoKGnOCcxFmY1yAGoYFFckaWCt8cX3GvJhmwUhhL+sNW 1ueqCLUwO7oWTtnDUYUOwwzsfY+2y0iuL6cgO744VhcsR1LdR083mz9nAzklNN2U mbRW6b+2IGLZa46XAANLiKyMtvZcV2W27D8e5+zg+YMo9E7Vp4pcE03qPwaIKqNE +v3a46k56rIDTFQ5oZ09B5/MWQxT46vWodF9Q5fc1zvlPJAFI4sHTLtxKLtfqAC6 u0jHzx5aAn62kgntIBdnKzPoAcpIW+GKfYlXEGLIRkXw7tfBSzomHfcF+o7/5atJ wPAcx25Bdqgwl3+D9J07hlN1AmhSy8RjU2BJsw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:49 2025 by rpki-client