$ rpki-client -vvf repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa File: 3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa (raw, json) Hash identifier: sCYWRL7NfwNer5aCHfI6ENS759QdNaShp3p44D+zbuc= Subject key identifier: 42:59:9B:1B:27:57:6E:4F:59:10:34:12:E9:64:2F:88:FC:7F:B5:D7 Certificate issuer: /CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Certificate serial: 6CEAB16EFA4B57501F4D1D0104FF0AF9ECC3B36D Authority key identifier: 00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa Signing time: Thu 30 Oct 2025 08:00:00 +0000 ROA not before: Thu 30 Oct 2025 07:55:00 +0000 ROA not after: Thu 29 Oct 2026 08:00:00 +0000 asID: 141934 IP address blocks: 103.166.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ea:b1:6e:fa:4b:57:50:1f:4d:1d:01:04:ff:0a:f9:ec:c3:b3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD Validity Not Before: Oct 30 07:55:00 2025 GMT Not After : Oct 29 08:00:00 2026 GMT Subject: CN=42599B1B27576E4F59103412E9642F88FC7FB5D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7e:1e:7d:7b:3b:b9:09:fc:81:33:0b:4e:54: e5:85:50:a9:8e:a7:36:2e:da:9f:fd:c5:31:0d:04: e2:d5:d4:6c:38:4e:c8:f9:f6:cf:b1:17:74:b5:f4: 00:25:57:22:3a:98:d0:04:2b:01:41:41:18:3c:fe: d3:a2:31:bd:a4:ce:92:a8:42:c9:e5:53:15:cc:76: 8b:a7:80:8f:06:74:a3:31:e3:39:5d:74:6f:15:18: f4:af:34:3b:08:4d:21:49:b1:36:29:0d:0d:91:c9: 0c:36:9b:7b:b7:e9:66:6a:c6:e2:33:3b:bc:b9:88: de:90:02:21:a2:35:5b:3a:12:b7:f4:07:33:77:74: a2:a3:a4:1f:18:9e:06:12:63:84:d9:7f:be:d5:17: e6:43:1f:f5:68:9c:9a:eb:ad:45:f9:54:78:b3:7b: 6e:b9:7e:fc:f4:84:7f:12:ab:9d:eb:92:e0:5c:73: 5c:53:95:db:cb:3e:d5:4b:11:2d:89:75:f6:80:9f: c1:50:28:85:22:2a:49:69:d9:35:65:e8:1d:9d:dc: 4b:92:b3:f2:6d:03:b1:ad:5b:3e:57:d7:32:f8:db: ea:83:77:4b:e7:dc:0a:48:1d:f2:8c:63:67:62:5e: 8f:7f:63:f2:fe:a7:df:df:b0:74:10:20:0f:2d:39: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:59:9B:1B:27:57:6E:4F:59:10:34:12:E9:64:2F:88:FC:7F:B5:D7 X509v3 Authority Key Identifier: keyid:00:F9:E3:D4:39:56:F7:75:3B:34:BD:1A:48:76:FF:9F:8D:1B:BF:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00F9E3D43956F7753B34BD1A4876FF9F8D1BBFBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa415438-ad01-42dc-8c92-151bc8c2721f/0/3130332e3136362e32372e302f32342d3234203d3e20313431393334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.27.0/24 Signature Algorithm: sha256WithRSAEncryption 33:0f:e0:35:cf:a6:99:b9:ef:ca:b6:1f:21:3c:1a:28:21:38: 82:d7:9b:63:31:c6:20:9c:40:58:79:bf:1d:f7:0b:f0:46:88: ca:dc:18:a7:79:30:b4:79:ed:dc:fb:be:ed:87:0b:c5:70:57: 1c:f4:b6:00:c6:81:4d:dd:6c:5d:6c:df:70:9e:83:a4:29:56: 94:57:66:54:6a:01:6d:21:51:af:a0:8b:b9:b2:70:96:fe:fb: e2:24:03:3d:35:90:0e:ea:11:ab:01:97:ca:3d:8b:8a:95:1d: b1:05:72:ed:e0:bb:b5:f4:bd:96:ba:c6:41:5c:f3:ee:55:26: 4e:9a:cc:07:e5:1d:af:8f:f7:45:1d:86:39:5b:e1:ec:1e:9d: 17:58:bb:b9:e7:dd:7e:1d:06:b5:d5:37:e1:a1:7b:3f:59:b6: ae:05:b2:69:9e:a1:24:f1:02:94:91:79:38:c2:ae:28:73:f9: f5:52:ea:5b:ee:66:5d:21:83:09:c0:ce:69:1d:c3:83:aa:de: d4:31:95:35:72:d7:b2:4c:7a:4c:cd:dd:4a:ae:da:cb:83:49: 7a:e9:25:c4:7c:0c:71:6f:0e:c5:b8:f6:6d:b5:dc:56:72:80: e4:ea:d4:f5:95:e0:1b:c8:1a:2e:cc:26:98:02:7a:8b:f6:52: df:fb:30:00 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbOqxbvpLV1AfTR0BBP8K+ezDs20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4 RDFCQkZCRDAeFw0yNTEwMzAwNzU1MDBaFw0yNjEwMjkwODAwMDBaMDMxMTAvBgNV BAMTKDQyNTk5QjFCMjc1NzZFNEY1OTEwMzQxMkU5NjQyRjg4RkM3RkI1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWfh59ezu5CfyBMwtOVOWFUKmO pzYu2p/9xTENBOLV1Gw4Tsj59s+xF3S19AAlVyI6mNAEKwFBQRg8/tOiMb2kzpKo QsnlUxXMdoungI8GdKMx4zlddG8VGPSvNDsITSFJsTYpDQ2RyQw2m3u36WZqxuIz O7y5iN6QAiGiNVs6Erf0BzN3dKKjpB8YngYSY4TZf77VF+ZDH/VonJrrrUX5VHiz e265fvz0hH8Sq53rkuBcc1xTldvLPtVLES2JdfaAn8FQKIUiKklp2TVl6B2d3EuS s/JtA7GtWz5X1zL42+qDd0vn3ApIHfKMY2diXo9/Y/L+p9/fsHQQIA8tOZNfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQlmbGydXbk9ZEDQS6WQviPx/tdcwHwYDVR0j BBgwFoAUAPnj1DlW93U7NL0aSHb/n40bv70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTQxNTQzOC1hZDAxLTQyZGMtOGM5Mi0xNTFiYzhjMjcyMWYvMC8wMEY5RTNENDM5 NTZGNzc1M0IzNEJEMUE0ODc2RkY5RjhEMUJCRkJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBGOUUzRDQzOTU2Rjc3NTNCMzRCRDFBNDg3NkZGOUY4RDFC QkZCRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhNDE1NDM4LWFkMDEtNDJkYy04 YzkyLTE1MWJjOGMyNzIxZi8wLzMxMzAzMzJlMzEzNjM2MmUzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6YbMA0GCSqG SIb3DQEBCwUAA4IBAQAzD+A1z6aZue/Kth8hPBooITiC15tjMcYgnEBYeb8d9wvw RojK3BineTC0ee3c+77thwvFcFcc9LYAxoFN3WxdbN9wnoOkKVaUV2ZUagFtIVGv oIu5snCW/vviJAM9NZAO6hGrAZfKPYuKlR2xBXLt4Lu19L2WusZBXPPuVSZOmswH 5R2vj/dFHYY5W+HsHp0XWLu5591+HQa11TfhoXs/WbauBbJpnqEk8QKUkXk4wq4o c/n1Uupb7mZdIYMJwM5pHcODqt7UMZU1cteyTHpMzd1KrtrLg0l66SXEfAxxbw7F uPZttdxWcoDk6tT1leAbyBouzCaYAnqL9lLf+zAA -----END CERTIFICATE-----Generated at Tue Nov 4 07:41:07 2025 by rpki-client