$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa File: 3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (raw, json) Hash identifier: 28AwtI6PlstTWzWDAVfpiiifxdaL8P6FvCfZnLUiyFM= Subject key identifier: 08:E6:8F:1A:AE:50:3A:B9:33:8D:51:98:86:A3:B9:95:B9:27:7A:CC Certificate issuer: /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Certificate serial: 26CDBE60B7F9C27233B7A3690B33DC7A96D02DE0 Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa Signing time: Fri 10 Oct 2025 21:00:01 +0000 ROA not before: Fri 10 Oct 2025 20:55:01 +0000 ROA not after: Fri 09 Oct 2026 21:00:01 +0000 asID: 58397 IP address blocks: 103.41.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:cd:be:60:b7:f9:c2:72:33:b7:a3:69:0b:33:dc:7a:96:d0:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE Validity Not Before: Oct 10 20:55:01 2025 GMT Not After : Oct 9 21:00:01 2026 GMT Subject: CN=08E68F1AAE503AB9338D519886A3B995B9277ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ee:17:f1:08:36:d8:e3:36:e1:b8:fe:6a:95: 34:32:cf:22:17:b1:ec:a2:2b:b1:64:40:74:fa:b7: 0c:79:68:b5:80:42:d9:a9:5c:c6:81:51:15:05:59: 3f:42:a1:17:72:74:86:cc:71:28:70:46:f0:e4:ff: 7f:ac:f0:92:6f:7a:1a:cd:f8:63:2d:86:2b:7a:ff: b6:50:35:27:1d:73:0e:22:0f:71:7c:22:d2:22:ad: c9:9e:65:ad:5a:72:f3:e6:a5:c4:cf:37:7c:8c:f3: cf:b8:79:2e:b8:16:d3:02:95:01:23:c9:de:f6:d3: c4:b6:e9:8b:34:db:1a:f4:6a:d5:c4:b3:12:b9:a4: e9:cb:d8:9c:db:94:ad:ce:53:24:d4:fe:86:dd:00: f7:8c:85:d5:55:e6:56:19:ff:33:40:3d:b2:6c:02: 59:64:c9:48:3f:50:1b:7a:7a:38:7b:63:65:bb:43: 29:07:c2:fa:b8:ac:01:9b:42:10:f6:63:fc:9a:d7: 3e:fc:20:5d:68:d8:37:67:6e:50:a3:87:cd:1a:fa: e8:68:47:08:9c:27:f5:54:15:2c:34:4a:7b:38:69: 57:84:2a:09:5a:87:0e:31:a8:b7:6c:73:12:d5:70: dc:4c:b6:46:f4:ba:7a:7d:fc:6b:e3:66:bd:0e:9e: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:8F:1A:AE:50:3A:B9:33:8D:51:98:86:A3:B9:95:B9:27:7A:CC X509v3 Authority Key Identifier: keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.204.0/24 Signature Algorithm: sha256WithRSAEncryption 47:60:4b:6f:b8:53:28:06:2a:63:ff:b2:90:b8:f4:8c:f6:d7: 2d:6c:65:5f:91:7c:03:53:b9:04:51:77:b6:3b:d3:7a:30:0b: 79:a6:af:6c:23:db:a8:c2:2e:09:41:97:a7:39:cd:1a:b3:ad: e0:35:92:c6:1b:86:d6:81:be:f6:cc:00:aa:6b:2c:0c:a1:60: 6c:76:e5:c0:73:58:da:33:74:ff:7c:24:d5:3b:98:e4:93:2d: 11:36:80:29:1e:d8:88:61:3c:cc:2f:9c:7f:e4:68:dc:28:17: bf:e5:82:c2:dc:fe:9a:59:a6:fe:28:ab:53:10:78:34:8b:5b: d9:08:10:0f:eb:48:9c:f0:85:4f:f1:a5:6c:aa:ae:dc:e3:e7: 2b:e0:f1:76:cb:9a:42:b7:43:ba:28:1c:0c:fe:8f:a1:87:8b: 3b:38:97:c7:65:df:84:12:d1:7b:33:5a:ad:5a:32:5d:74:b8: a5:11:e0:dd:63:8e:b3:82:81:9e:fa:41:e5:c5:d0:42:9b:96: f2:52:41:9f:ed:56:4c:18:11:93:c6:7f:31:4c:59:15:b3:de: a5:d8:42:80:a2:ba:23:56:4e:db:4f:99:91:55:2f:16:6c:b2: 34:4e:cb:19:96:7a:ec:06:cc:64:60:fa:58:c9:d5:b1:7a:02: b4:03:38:a5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJs2+YLf5wnIzt6NpCzPcepbQLeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1 Mzg5OThBRTAeFw0yNTEwMTAyMDU1MDFaFw0yNjEwMDkyMTAwMDFaMDMxMTAvBgNV BAMTKDA4RTY4RjFBQUU1MDNBQjkzMzhENTE5ODg2QTNCOTk1QjkyNzdBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87hfxCDbY4zbhuP5qlTQyzyIX seyiK7FkQHT6twx5aLWAQtmpXMaBURUFWT9CoRdydIbMcShwRvDk/3+s8JJvehrN +GMthit6/7ZQNScdcw4iD3F8ItIircmeZa1acvPmpcTPN3yM88+4eS64FtMClQEj yd7208S26Ys02xr0atXEsxK5pOnL2JzblK3OUyTU/obdAPeMhdVV5lYZ/zNAPbJs AllkyUg/UBt6ejh7Y2W7QykHwvq4rAGbQhD2Y/ya1z78IF1o2DdnblCjh80a+uho RwicJ/VUFSw0Sns4aVeEKglahw4xqLdscxLVcNxMtkb0unp9/GvjZr0OnnAfAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCOaPGq5QOrkzjVGYhqO5lbkneswwHwYDVR0j BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5 OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzAzMzJlMzQzMTJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcpzDANBgkqhkiG 9w0BAQsFAAOCAQEAR2BLb7hTKAYqY/+ykLj0jPbXLWxlX5F8A1O5BFF3tjvTejAL eaavbCPbqMIuCUGXpznNGrOt4DWSxhuG1oG+9swAqmssDKFgbHblwHNY2jN0/3wk 1TuY5JMtETaAKR7YiGE8zC+cf+Ro3CgXv+WCwtz+mlmm/iirUxB4NItb2QgQD+tI nPCFT/GlbKqu3OPnK+DxdsuaQrdDuigcDP6PoYeLOziXx2XfhBLRezNarVoyXXS4 pRHg3WOOs4KBnvpB5cXQQpuW8lJBn+1WTBgRk8Z/MUxZFbPepdhCgKK6I1ZO20+Z kVUvFmyyNE7LGZZ67AbMZGD6WMnVsXoCtAM4pQ== -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:51 2025 by rpki-client