$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32332d3233203d3e20313530353537.roa File: 3130332e39352e32322e302f32332d3233203d3e20313530353537.roa (raw, json) Hash identifier: 7AeF/hZA331ui0AxYNl+UaJERQ0zt8cfqxeWUU2JfUw= Subject key identifier: EC:DA:00:FC:9A:73:60:EB:23:9B:E1:3C:5B:A9:C3:F9:D0:C0:E3:C2 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 7FCA41F79E72E436755692D8956D8D49DC2F0851 Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32332d3233203d3e20313530353537.roa Signing time: Tue 16 Sep 2025 16:00:01 +0000 ROA not before: Tue 16 Sep 2025 15:55:01 +0000 ROA not after: Tue 15 Sep 2026 16:00:01 +0000 asID: 150557 IP address blocks: 103.95.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 11:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ca:41:f7:9e:72:e4:36:75:56:92:d8:95:6d:8d:49:dc:2f:08:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Sep 16 15:55:01 2025 GMT Not After : Sep 15 16:00:01 2026 GMT Subject: CN=ECDA00FC9A7360EB239BE13C5BA9C3F9D0C0E3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:77:37:0a:a7:ad:1e:f7:99:8b:2a:f3:bb: 26:44:f6:5e:af:4a:42:98:38:c9:1c:ff:5a:e7:da: 9b:11:74:ee:2d:ac:13:bc:42:ea:71:60:4c:ae:63: 6a:e6:ca:7d:1e:38:16:98:f0:72:4f:8f:54:a9:a1: 86:04:c1:c2:85:21:41:1a:5c:08:eb:0a:e4:0e:48: 69:ed:59:7a:68:d0:39:35:a4:01:fa:c1:bc:18:1e: bc:d3:c6:a5:34:17:10:01:79:b6:14:27:75:4d:31: 35:7d:35:6a:f8:df:b3:f5:1f:e6:27:6e:7b:ad:06: 20:7e:c4:d9:3f:37:6d:67:de:2e:ce:fb:25:ad:cc: 56:49:bf:2f:43:03:8c:e9:29:c8:56:05:fc:e0:24: ef:39:0a:a7:05:de:57:ea:b9:84:ee:55:66:b5:37: 5b:18:45:c2:07:21:79:cb:87:f9:7b:7a:ba:21:cf: f1:67:3e:a9:8d:dd:43:d4:d0:ee:6a:62:a0:13:6d: 05:ef:c9:44:89:0f:46:e2:2d:7a:0e:65:3e:e7:79: e9:e8:96:9d:49:64:75:9b:29:51:1f:a0:19:16:72: 9a:be:04:f4:36:84:13:da:2d:4a:46:4e:47:bb:2c: 76:bd:1a:53:eb:aa:2a:b9:a8:ff:75:c1:8d:33:36: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DA:00:FC:9A:73:60:EB:23:9B:E1:3C:5B:A9:C3:F9:D0:C0:E3:C2 X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32332d3233203d3e20313530353537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.22.0/23 Signature Algorithm: sha256WithRSAEncryption e4:2c:c5:2a:33:cc:d8:a4:57:53:fb:53:47:04:d0:90:aa:2d: 81:04:4f:ed:fb:b3:e0:4c:b4:8a:1d:e3:db:6d:6d:e9:4b:c0: 07:48:9f:58:97:5b:97:4f:a2:b4:e4:23:6e:78:af:7e:80:f3: eb:16:52:4b:75:98:5f:74:88:7c:05:81:b5:c8:e5:c2:ce:e6: d1:a4:09:1d:37:fe:c2:a3:28:dc:1f:5b:47:e0:34:73:ef:8a: 32:a6:bc:a6:24:6b:ab:49:78:87:d9:2d:90:45:a5:8a:da:dd: 47:c9:ff:6d:48:25:08:e7:21:5d:82:46:bc:93:68:62:80:86: 91:8c:fb:e2:72:03:29:ce:ab:cd:f7:15:69:f8:d6:c6:cd:b8: e4:8d:df:d0:3b:43:d2:2e:90:1a:36:e2:cb:2e:c0:63:f7:71: e3:33:c2:5d:84:51:d1:38:56:4b:5d:17:f6:8e:9a:77:d8:47: 98:c6:e9:b8:d4:6c:ae:22:10:10:ce:b5:f4:db:b5:57:81:66: 88:58:0a:f7:8b:f0:fc:ee:09:9c:19:1a:47:14:49:d6:83:de: cf:ea:67:62:2b:b5:01:1e:ba:29:fb:b5:67:c1:32:eb:d6:c6: 09:18:8a:d0:84:4e:de:1f:16:b8:47:d1:da:b7:f6:b0:39:4c: 77:6e:ab:ed -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUf8pB955y5DZ1VpLYlW2NSdwvCFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTA5MTYxNTU1MDFaFw0yNjA5MTUxNjAwMDFaMDMxMTAvBgNV BAMTKEVDREEwMEZDOUE3MzYwRUIyMzlCRTEzQzVCQTlDM0Y5RDBDMEUzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMnc3CqetHveZiyrzuyZE9l6v SkKYOMkc/1rn2psRdO4trBO8QupxYEyuY2rmyn0eOBaY8HJPj1SpoYYEwcKFIUEa XAjrCuQOSGntWXpo0Dk1pAH6wbwYHrzTxqU0FxABebYUJ3VNMTV9NWr437P1H+Yn bnutBiB+xNk/N21n3i7O+yWtzFZJvy9DA4zpKchWBfzgJO85CqcF3lfquYTuVWa1 N1sYRcIHIXnLh/l7erohz/FnPqmN3UPU0O5qYqATbQXvyUSJD0biLXoOZT7neeno lp1JZHWbKVEfoBkWcpq+BPQ2hBPaLUpGTke7LHa9GlPrqiq5qP91wY0zNhQRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7NoA/JpzYOsjm+E8W6nD+dDA48IwHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZDRmODY5LTRkYjYtNGIwYS1h YWI2LWNkZTQ3YjQ0N2Q3Ny8wLzMxMzAzMzJlMzkzNTJlMzIzMjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMDM1MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdfFjANBgkqhkiG 9w0BAQsFAAOCAQEA5CzFKjPM2KRXU/tTRwTQkKotgQRP7fuz4Ey0ih3j221t6UvA B0ifWJdbl0+itOQjbnivfoDz6xZSS3WYX3SIfAWBtcjlws7m0aQJHTf+wqMo3B9b R+A0c++KMqa8piRrq0l4h9ktkEWlitrdR8n/bUglCOchXYJGvJNoYoCGkYz74nID Kc6rzfcVafjWxs245I3f0DtD0i6QGjbiyy7AY/dx4zPCXYRR0ThWS10X9o6ad9hH mMbpuNRsriIQEM619Nu1V4FmiFgK94vw/O4JnBkaRxRJ1oPez+pnYiu1AR66Kfu1 Z8Ey69bGCRiK0IRO3h8WuEfR2rf2sDlMd26r7Q== -----END CERTIFICATE-----Generated at Fri Nov 7 11:29:07 2025 by rpki-client