$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa File: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (raw, json) Hash identifier: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo= Subject key identifier: E4:32:7C:12:B1:E2:8F:FB:00:02:91:88:D0:50:BB:37:55:EE:1B:5F Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 0D25F0904D756DFB0FF76EBC65EE221FA30FCA91 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa Signing time: Thu 09 Oct 2025 10:00:00 +0000 ROA not before: Thu 09 Oct 2025 09:55:00 +0000 ROA not after: Thu 08 Oct 2026 10:00:00 +0000 asID: 142307 IP address blocks: 103.168.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:25:f0:90:4d:75:6d:fb:0f:f7:6e:bc:65:ee:22:1f:a3:0f:ca:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Oct 9 09:55:00 2025 GMT Not After : Oct 8 10:00:00 2026 GMT Subject: CN=E4327C12B1E28FFB00029188D050BB3755EE1B5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:0a:cc:bb:07:12:be:ce:49:64:ab:06:cb: a3:7a:68:fd:aa:24:a8:6f:47:eb:70:b2:bb:5c:b6: 6c:e9:47:0e:44:ac:fe:d3:4b:80:e1:29:5e:92:79: cd:ad:5a:67:2b:96:3f:5e:42:92:d1:76:cf:e0:20: 66:3e:26:63:57:43:36:b8:75:e0:65:b5:9b:5a:b2: bf:ad:1d:96:5a:f7:3d:a4:ed:8b:b1:53:ed:be:cf: c3:a6:96:13:bc:38:2d:dc:06:97:f3:87:e1:da:d3: d5:09:37:93:0b:6b:6d:67:5c:79:ba:eb:a9:9e:78: c9:cf:07:5f:9e:28:3a:f6:bd:c0:8e:de:7c:4f:df: dd:9b:87:de:08:f0:0c:50:3f:83:f9:9e:15:af:5b: eb:ef:8c:dc:68:4d:1b:9c:46:eb:cd:e8:4f:48:b4: dd:c3:98:2c:fe:a1:54:23:d4:27:da:61:b9:94:ab: b1:a2:0e:b7:cd:61:38:33:0c:e7:3c:d0:16:8b:4c: 27:d8:b8:da:63:5d:b7:b4:8b:9f:61:fe:17:20:5e: 12:64:7c:02:04:99:97:da:90:8f:0f:30:1a:dd:4e: bf:27:03:d5:4f:e9:64:e0:9e:1f:34:a7:d3:a6:d8: f2:62:ce:eb:15:39:b3:57:2b:96:06:96:27:a5:83: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:32:7C:12:B1:E2:8F:FB:00:02:91:88:D0:50:BB:37:55:EE:1B:5F X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.44.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:1f:e7:28:cd:47:fe:2c:b9:e1:c5:f5:0f:ed:10:3a:e2:7c: 77:51:92:81:ab:7e:5b:4b:c7:b9:09:98:d9:22:76:a4:92:5f: e9:86:b7:3c:b1:fb:4a:ff:3f:4a:87:e9:bc:57:09:8b:38:bd: 80:a7:d6:34:6a:13:af:33:f7:59:f8:a6:83:42:fc:d5:5b:de: ce:a4:82:92:00:7f:fe:d9:82:d0:f6:2c:41:ef:1e:c8:e6:7b: 92:44:8b:b8:3b:97:57:2c:8b:70:05:f3:f7:9b:93:46:4f:5b: 88:3b:cb:3c:93:b5:5f:83:41:33:29:1b:aa:1d:10:4f:9c:00: 92:92:84:81:de:9b:d1:56:dd:53:b2:04:b6:0a:09:ee:f7:10: dc:9d:40:83:d6:9c:30:16:07:13:d6:b7:4e:a2:56:8e:ff:ad: c3:c8:9e:bd:46:5d:ee:14:a0:e2:99:a1:3c:c0:5c:c8:4b:ba: b5:97:f8:d6:f1:e7:ea:9b:89:ed:3b:1e:29:b0:3d:c4:13:e1: ea:88:2c:a5:fb:fa:78:4e:20:71:c5:ef:9a:2f:6e:17:60:f9: ad:72:95:bc:bb:64:8a:cf:18:8d:9d:c6:81:00:3c:04:a7:b1: e6:d7:be:2d:96:63:dd:7b:e5:bb:13:2c:69:69:0c:a1:45:29: f2:84:7c:b0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDSXwkE11bfsP9268Ze4iH6MPypEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTEwMDkwOTU1MDBaFw0yNjEwMDgxMDAwMDBaMDMxMTAvBgNV BAMTKEU0MzI3QzEyQjFFMjhGRkIwMDAyOTE4OEQwNTBCQjM3NTVFRTFCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWwrMuwcSvs5JZKsGy6N6aP2q JKhvR+twsrtctmzpRw5ErP7TS4DhKV6Sec2tWmcrlj9eQpLRds/gIGY+JmNXQza4 deBltZtasr+tHZZa9z2k7YuxU+2+z8OmlhO8OC3cBpfzh+Ha09UJN5MLa21nXHm6 66meeMnPB1+eKDr2vcCO3nxP392bh94I8AxQP4P5nhWvW+vvjNxoTRucRuvN6E9I tN3DmCz+oVQj1CfaYbmUq7GiDrfNYTgzDOc80BaLTCfYuNpjXbe0i59h/hcgXhJk fAIEmZfakI8PMBrdTr8nA9VP6WTgnh80p9Om2PJizusVObNXK5YGlielg1j7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5DJ8ErHij/sAApGI0FC7N1XuG18wHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZjIwYjJlLWE3YTgtNDJmZC05 MmY4LTk0OTYyMzNiMmM5ZS8wLzMxMzAzMzJlMzEzNjM4MmUzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6gsMA0GCSqG SIb3DQEBCwUAA4IBAQAfH+cozUf+LLnhxfUP7RA64nx3UZKBq35bS8e5CZjZInak kl/phrc8sftK/z9Kh+m8VwmLOL2Ap9Y0ahOvM/dZ+KaDQvzVW97OpIKSAH/+2YLQ 9ixB7x7I5nuSRIu4O5dXLItwBfP3m5NGT1uIO8s8k7Vfg0EzKRuqHRBPnACSkoSB 3pvRVt1TsgS2Cgnu9xDcnUCD1pwwFgcT1rdOolaO/63DyJ69Rl3uFKDimaE8wFzI S7q1l/jW8efqm4ntOx4psD3EE+HqiCyl+/p4TiBxxe+aL24XYPmtcpW8u2SKzxiN ncaBADwEp7Hm174tlmPde+W7EyxpaQyhRSnyhHyw -----END CERTIFICATE-----Generated at Mon Oct 20 20:34:35 2025 by rpki-client