$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa File: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (raw, json) Hash identifier: XKb8rxYeYuD4PKUeGTZQ0dDYWCAE/hKgR+dYvEQGg4I= Subject key identifier: 94:76:81:2F:60:5A:D2:96:68:D8:E0:49:5B:79:0E:42:26:8C:75:A9 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 6FF5368B315BB37234990F2115D0D253C35E6550 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa Signing time: Mon 03 Nov 2025 06:02:27 +0000 ROA not before: Mon 03 Nov 2025 05:57:27 +0000 ROA not after: Mon 02 Nov 2026 06:02:27 +0000 asID: 149887 IP address blocks: 103.186.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 17:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f5:36:8b:31:5b:b3:72:34:99:0f:21:15:d0:d2:53:c3:5e:65:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Nov 3 05:57:27 2025 GMT Not After : Nov 2 06:02:27 2026 GMT Subject: CN=9476812F605AD29668D8E0495B790E42268C75A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:e9:51:56:dc:a4:9c:55:34:53:1e:2a:90: f0:b8:dc:01:98:63:4c:d6:70:3e:8d:55:30:d1:99: 4d:9f:02:cb:20:ee:8e:db:74:f2:e7:44:21:9b:5e: 94:32:e7:7c:cf:97:61:43:92:12:d9:de:b4:a5:f5: 20:ff:89:87:12:7d:f9:03:11:4a:00:0d:ee:a5:ad: 42:91:68:66:26:0a:da:f7:09:39:e9:b4:1e:49:7e: fe:bc:57:f1:8a:17:10:1e:3d:3d:ec:16:be:02:2d: 08:49:37:50:f9:03:80:7b:a9:9c:12:44:60:4f:67: 56:b3:87:0c:35:03:9b:9c:b4:c6:5d:bc:5f:5a:bc: 4f:48:cc:f2:76:4a:ff:81:6c:d5:87:d0:46:72:e5: 2d:50:bd:38:65:8f:3f:5e:26:2b:e6:cd:4d:c3:a7: bf:4a:d4:1a:31:f8:03:ae:9e:6e:b9:be:0e:9a:4f: a5:eb:8e:13:dc:82:9d:49:cc:76:11:4a:ff:30:ce: dd:a4:ba:ed:0c:69:37:ad:b4:89:dd:15:eb:57:d0: e8:6d:04:5f:11:a3:b0:2e:3d:d2:55:58:5a:76:23: 86:52:fa:e6:08:9b:e1:05:20:06:2f:fa:0a:c5:fa: b9:28:0d:ae:89:b4:2b:ba:e1:71:cb:a5:17:96:14: 68:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:76:81:2F:60:5A:D2:96:68:D8:E0:49:5B:79:0E:42:26:8C:75:A9 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.2.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:e2:a2:20:9a:52:46:75:2e:ca:dd:9a:c2:80:59:e8:85:e1: d8:9f:ba:7f:5c:6f:b0:d7:9e:59:0d:84:36:e5:13:cb:92:5d: 8c:ca:f6:62:4f:04:c5:dd:b1:2a:5d:e8:b8:42:1b:d7:47:d8: 1f:f5:e5:79:b4:5f:ae:e1:69:a9:8b:b6:1c:85:d8:78:75:b6: 76:b6:df:14:f7:13:b8:df:04:cc:ef:b8:b3:b9:fc:d1:5d:b5: 30:8b:20:a9:cb:49:e8:0b:eb:a7:87:cb:0e:af:51:fd:29:c9: 71:f5:34:7a:dd:11:20:f7:d9:ee:71:d9:31:d9:83:f8:d9:a7: 2f:ec:de:a7:03:3f:6b:8d:a0:25:87:8e:ba:92:cb:85:af:89: 42:37:1f:13:3a:2f:60:5b:56:26:77:ad:62:6a:3c:29:fb:10: c4:26:ca:55:3c:fc:f8:d3:a7:5c:bc:4b:19:8d:c9:31:ef:fa: 36:f6:5a:d5:2b:79:2f:f2:33:fb:7e:6d:08:4e:92:71:50:f2: eb:e5:a0:52:c7:98:98:c5:50:d4:ff:eb:25:d2:97:2d:dd:a2: f0:9e:4e:3f:96:ae:80:7a:5e:0d:d7:91:b9:46:f9:3e:d6:68: 27:b6:2d:7f:24:c6:8c:94:cd:7e:a0:b3:dd:5d:bb:ba:10:d2: 3e:0c:eb:29 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUb/U2izFbs3I0mQ8hFdDSU8NeZVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTExMDMwNTU3MjdaFw0yNjExMDIwNjAyMjdaMDMxMTAvBgNV BAMTKDk0NzY4MTJGNjA1QUQyOTY2OEQ4RTA0OTVCNzkwRTQyMjY4Qzc1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtx+lRVtyknFU0Ux4qkPC43AGY Y0zWcD6NVTDRmU2fAssg7o7bdPLnRCGbXpQy53zPl2FDkhLZ3rSl9SD/iYcSffkD EUoADe6lrUKRaGYmCtr3CTnptB5Jfv68V/GKFxAePT3sFr4CLQhJN1D5A4B7qZwS RGBPZ1azhww1A5uctMZdvF9avE9IzPJ2Sv+BbNWH0EZy5S1QvThljz9eJivmzU3D p79K1Box+AOunm65vg6aT6XrjhPcgp1JzHYRSv8wzt2kuu0MaTettIndFetX0Oht BF8Ro7AuPdJVWFp2I4ZS+uYIm+EFIAYv+grF+rkoDa6JtCu64XHLpReWFGhlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUlHaBL2Ba0pZo2OBJW3kOQiaMdakwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q0ZjZkODZiLWUzZGYtNGUyZi05 MzZmLWVkOWI5NjM1MDNhMS8wLzMxMzAzMzJlMzEzODM2MmUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGe6AjANBgkqhkiG 9w0BAQsFAAOCAQEAfOKiIJpSRnUuyt2awoBZ6IXh2J+6f1xvsNeeWQ2ENuUTy5Jd jMr2Yk8Exd2xKl3ouEIb10fYH/XlebRfruFpqYu2HIXYeHW2drbfFPcTuN8EzO+4 s7n80V21MIsgqctJ6Avrp4fLDq9R/SnJcfU0et0RIPfZ7nHZMdmD+NmnL+zepwM/ a42gJYeOupLLha+JQjcfEzovYFtWJnetYmo8KfsQxCbKVTz8+NOnXLxLGY3JMe/6 NvZa1St5L/Iz+35tCE6ScVDy6+WgUseYmMVQ1P/rJdKXLd2i8J5OP5augHpeDdeR uUb5PtZoJ7YtfyTGjJTNfqCz3V27uhDSPgzrKQ== -----END CERTIFICATE-----Generated at Thu Nov 6 01:07:04 2025 by rpki-client