$ rpki-client -vvf repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa File: 3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa (raw, json) Hash identifier: er2/SRYpyB8+9olReTVyWZnJn3PBJ1m2O7TeR4n9VJQ= Subject key identifier: 17:53:95:57:77:CF:F6:6A:61:4F:DB:2C:1D:D3:DB:F9:CE:46:9D:49 Certificate issuer: /CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Certificate serial: 1BD5AD119A2EA49746A9FE78AB63693F5AF908FF Authority key identifier: 97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa Signing time: Sun 02 Nov 2025 09:00:01 +0000 ROA not before: Sun 02 Nov 2025 08:55:01 +0000 ROA not after: Sun 01 Nov 2026 09:00:01 +0000 asID: 135439 IP address blocks: 103.214.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 03:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d5:ad:11:9a:2e:a4:97:46:a9:fe:78:ab:63:69:3f:5a:f9:08:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE Validity Not Before: Nov 2 08:55:01 2025 GMT Not After : Nov 1 09:00:01 2026 GMT Subject: CN=1753955777CFF66A614FDB2C1DD3DBF9CE469D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:88:09:97:ad:4b:8b:cc:ff:2a:f4:39:25: 14:25:d4:1a:51:bd:a4:d9:cf:ce:e4:af:2f:fe:8c: 81:33:ca:df:8e:e3:c0:93:0a:85:4a:b4:e5:84:a8: 24:46:4b:17:f0:9c:3e:c0:3b:08:7e:49:8a:5f:9d: bb:d0:12:ce:7d:40:52:16:b6:77:f3:bf:78:c8:4c: d6:23:64:dc:4e:29:e5:09:64:87:ea:20:fb:b3:3b: 1c:c9:84:74:93:1a:1f:50:e8:fe:47:9a:91:7d:bf: 4f:d6:26:31:ce:fa:c8:b6:87:e4:e7:5d:22:5d:fb: 96:bc:d4:b6:53:44:dc:38:c4:41:e5:37:19:0d:50: 2e:8f:6e:27:94:5d:4b:08:f7:d9:3e:15:eb:a2:ec: aa:b0:49:a3:69:3e:7a:53:f3:c2:c7:66:7c:46:ed: 45:89:1d:17:3f:a8:45:5a:95:69:00:8d:d5:9e:b5: 3c:e1:52:80:bf:1f:b3:73:08:f7:8b:d5:b1:34:34: 11:5e:fc:47:95:64:99:fa:d9:ed:1e:66:dd:c5:56: fb:07:eb:89:5c:00:ac:20:c9:74:c0:57:13:d0:99: db:76:65:14:be:a4:31:1c:c3:1d:5c:9c:ce:6d:4c: 7e:d4:40:f1:1d:c3:a7:ba:3e:4d:a8:8e:8b:2f:d9: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:53:95:57:77:CF:F6:6A:61:4F:DB:2C:1D:D3:DB:F9:CE:46:9D:49 X509v3 Authority Key Identifier: keyid:97:9B:32:93:5E:BF:A2:DA:6D:CB:0A:79:DB:39:7F:D7:B4:9D:4E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/979B32935EBFA2DA6DCB0A79DB397FD7B49D4EFE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cde71437-85fc-47af-9687-903bafb2c161/0/3130332e3231342e3233382e302f32342d3234203d3e20313335343339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.238.0/24 Signature Algorithm: sha256WithRSAEncryption 62:9e:66:f1:cb:8a:dc:2b:24:15:bc:19:21:5d:75:e4:4d:8e: a7:77:f4:fd:8f:f1:3e:ce:f6:6d:a8:4f:28:c4:4b:ae:f3:7c: 9a:a1:7f:e7:7e:a8:6f:76:ae:21:56:b4:a3:90:d5:61:52:61: f3:90:98:28:00:fe:12:d0:33:ca:10:2d:e6:81:0e:99:c5:83: d6:9b:db:2c:1f:d0:15:e3:5d:3c:63:a8:a3:0b:82:88:8b:70: 0d:6b:3b:38:b3:f5:5b:dd:8e:de:6e:76:92:1e:a0:3e:74:b5: 0b:be:03:fb:80:7f:40:d0:3c:40:c3:ec:8d:b5:40:dc:7b:c2: a6:ba:fe:56:4a:30:b5:2c:e9:78:7f:d0:74:ba:8f:7f:6a:86: 47:a5:1a:e5:0b:4b:7e:00:31:6c:f1:df:7c:a6:e4:5e:88:d1: f0:84:16:1e:e7:c3:4b:a8:ba:bc:32:53:07:71:bf:b8:d1:80: 16:8e:8f:66:6c:ac:56:67:3a:62:38:b1:8b:5c:ed:51:b6:96: 78:fb:8b:ba:41:41:d4:f3:07:49:19:08:91:26:3a:f6:b7:ba: d7:d5:24:98:27:9d:48:7b:de:c6:cb:08:40:04:e4:01:25:18: 6f:15:5c:3d:8a:2e:d5:24:da:b4:7d:d8:4c:c3:ea:3c:bb:00: 11:19:fb:d7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUG9WtEZoupJdGqf54q2NpP1r5CP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdC NDlENEVGRTAeFw0yNTExMDIwODU1MDFaFw0yNjExMDEwOTAwMDFaMDMxMTAvBgNV BAMTKDE3NTM5NTU3NzdDRkY2NkE2MTRGREIyQzFERDNEQkY5Q0U0NjlENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvIgJl61Li8z/KvQ5JRQl1BpR vaTZz87kry/+jIEzyt+O48CTCoVKtOWEqCRGSxfwnD7AOwh+SYpfnbvQEs59QFIW tnfzv3jITNYjZNxOKeUJZIfqIPuzOxzJhHSTGh9Q6P5HmpF9v0/WJjHO+si2h+Tn XSJd+5a81LZTRNw4xEHlNxkNUC6PbieUXUsI99k+Feui7KqwSaNpPnpT88LHZnxG 7UWJHRc/qEValWkAjdWetTzhUoC/H7NzCPeL1bE0NBFe/EeVZJn62e0eZt3FVvsH 64lcAKwgyXTAVxPQmdt2ZRS+pDEcwx1cnM5tTH7UQPEdw6e6Pk2ojosv2WmHAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUF1OVV3fP9mphT9ssHdPb+c5GnUkwHwYDVR0j BBgwFoAUl5syk16/otptywp52zl/17SdTv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGU3MTQzNy04NWZjLTQ3YWYtOTY4Ny05MDNiYWZiMmMxNjEvMC85NzlCMzI5MzVF QkZBMkRBNkRDQjBBNzlEQjM5N0ZEN0I0OUQ0RUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc5QjMyOTM1RUJGQTJEQTZEQ0IwQTc5REIzOTdGRDdCNDlE NEVGRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NkZTcxNDM3LTg1ZmMtNDdhZi05 Njg3LTkwM2JhZmIyYzE2MS8wLzMxMzAzMzJlMzIzMTM0MmUzMjMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNDMzMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1u4wDQYJ KoZIhvcNAQELBQADggEBAGKeZvHLitwrJBW8GSFddeRNjqd39P2P8T7O9m2oTyjE S67zfJqhf+d+qG92riFWtKOQ1WFSYfOQmCgA/hLQM8oQLeaBDpnFg9ab2ywf0BXj XTxjqKMLgoiLcA1rOziz9Vvdjt5udpIeoD50tQu+A/uAf0DQPEDD7I21QNx7wqa6 /lZKMLUs6Xh/0HS6j39qhkelGuULS34AMWzx33ym5F6I0fCEFh7nw0uourwyUwdx v7jRgBaOj2ZsrFZnOmI4sYtc7VG2lnj7i7pBQdTzB0kZCJEmOva3utfVJJgnnUh7 3sbLCEAE5AElGG8VXD2KLtUk2rR92EzD6jy7ABEZ+9c= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:27 2025 by rpki-client