$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa File: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (raw, json) Hash identifier: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM= Subject key identifier: 60:91:C8:A8:C0:68:1E:94:EE:10:9B:D5:62:6D:29:EC:E2:BF:3A:75 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 3ACD3FA09CE61D6E95176AA2ACCFBE4B8CDAB3F9 Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa Signing time: Mon 06 Oct 2025 05:01:38 +0000 ROA not before: Mon 06 Oct 2025 04:56:38 +0000 ROA not after: Mon 05 Oct 2026 05:01:38 +0000 asID: 150488 IP address blocks: 103.39.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cd:3f:a0:9c:e6:1d:6e:95:17:6a:a2:ac:cf:be:4b:8c:da:b3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Oct 6 04:56:38 2025 GMT Not After : Oct 5 05:01:38 2026 GMT Subject: CN=6091C8A8C0681E94EE109BD5626D29ECE2BF3A75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:46:59:d2:c9:ae:51:15:96:00:ff:bb:01: 8f:e7:ab:b0:81:1e:ea:d1:5e:da:9d:bc:19:5e:f9: 38:6d:6b:4f:40:86:ee:bb:77:8e:83:06:a3:46:6d: f8:af:22:d6:22:90:41:e2:f4:1e:a7:b4:e8:85:52: 71:0f:fb:6c:6b:84:b3:2f:08:6b:13:2c:e2:08:b8: 9a:1c:61:3f:c7:81:8b:c6:ec:94:c1:b5:c5:b0:8a: 6e:f7:56:b3:09:81:ed:c4:0c:ac:e9:3a:98:d6:e5: 2b:b2:b4:0a:6a:62:17:7a:48:c5:91:87:a0:87:34: 1f:a7:1d:ba:5f:78:fa:bf:a8:41:b7:d0:6d:46:e1: b5:f2:3d:d9:f0:0d:a8:15:83:e3:cd:7e:82:12:a7: 57:d6:06:a3:12:1f:75:02:b2:c2:dd:22:97:22:70: a4:5c:e7:3c:d0:49:cb:45:69:81:cb:6a:5c:c8:eb: 00:73:e9:47:12:51:42:83:06:ac:c7:8c:83:15:3a: 57:c1:d6:74:79:7d:9c:73:c1:6e:f6:d0:c7:49:f5: 47:34:16:ff:c7:78:5a:7c:af:b3:b1:0e:7b:53:83: 31:3c:82:00:ed:84:50:95:86:ab:85:cc:7f:b3:62: cb:fc:7d:f9:7e:ca:58:71:12:74:58:e7:cf:bb:ed: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:91:C8:A8:C0:68:1E:94:EE:10:9B:D5:62:6D:29:EC:E2:BF:3A:75 X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/3130332e33392e37322e302f32342d3234203d3e20313530343838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.72.0/24 Signature Algorithm: sha256WithRSAEncryption a0:d7:21:74:6a:12:f9:ce:db:50:2d:bd:bc:14:a6:18:8b:2c: c6:a8:fd:ed:20:0d:6a:5f:2f:39:f2:c2:d9:d3:fb:67:ff:30: e1:4e:aa:c4:eb:cd:46:4b:d1:bc:2e:23:22:52:3a:bc:c9:2d: f7:95:9a:ec:62:7e:5a:e0:2b:8c:73:d5:00:c4:bb:c3:35:f8: 72:b9:dc:af:c9:ed:d7:e1:f8:60:08:b6:84:a3:56:56:8f:22: 8e:8b:76:69:de:df:46:30:d9:04:5b:93:84:ff:96:03:2e:7e: 29:71:fa:54:42:64:f3:d5:70:32:28:33:71:31:81:f3:bd:fa: 02:b3:16:75:2f:e8:7c:e9:91:a4:19:c4:9d:81:34:ee:83:de: 62:c6:4d:2e:d3:7d:18:ce:a0:32:21:d4:7e:b8:33:61:cd:2e: 95:a2:36:d2:12:6e:93:60:41:fc:1e:2c:e8:04:a6:4f:45:5b: 1a:27:e9:b2:a3:f4:ec:5d:ad:e1:97:1b:1c:dd:26:f5:e1:65: f4:8a:bc:16:11:6c:0c:e9:f9:df:a8:6f:0a:60:2a:a7:73:4d: b7:95:99:fa:e4:ac:1a:ec:42:75:59:a1:1f:ba:59:13:5c:ea: 06:5a:cc:fa:ff:19:a4:71:ea:b4:ed:06:4c:1d:60:25:80:f1: 0a:6c:63:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOs0/oJzmHW6VF2qirM++S4zas/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTEwMDYwNDU2MzhaFw0yNjEwMDUwNTAxMzhaMDMxMTAvBgNV BAMTKDYwOTFDOEE4QzA2ODFFOTRFRTEwOUJENTYyNkQyOUVDRTJCRjNBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy9UZZ0smuURWWAP+7AY/nq7CB HurRXtqdvBle+Thta09Ahu67d46DBqNGbfivItYikEHi9B6ntOiFUnEP+2xrhLMv CGsTLOIIuJocYT/HgYvG7JTBtcWwim73VrMJge3EDKzpOpjW5SuytApqYhd6SMWR h6CHNB+nHbpfePq/qEG30G1G4bXyPdnwDagVg+PNfoISp1fWBqMSH3UCssLdIpci cKRc5zzQSctFaYHLalzI6wBz6UcSUUKDBqzHjIMVOlfB1nR5fZxzwW720MdJ9Uc0 Fv/HeFp8r7OxDntTgzE8ggDthFCVhquFzH+zYsv8ffl+ylhxEnRY58+77S27AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUYJHIqMBoHpTuEJvVYm0p7OK/OnUwHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwYzczYWY1LWEyYzAtNDI0ZC04 NjJlLTExMmM1OGI3MjcwZS8wLzMxMzAzMzJlMzMzOTJlMzczMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcnSDANBgkqhkiG 9w0BAQsFAAOCAQEAoNchdGoS+c7bUC29vBSmGIssxqj97SANal8vOfLC2dP7Z/8w 4U6qxOvNRkvRvC4jIlI6vMkt95Wa7GJ+WuArjHPVAMS7wzX4crncr8nt1+H4YAi2 hKNWVo8ijot2ad7fRjDZBFuThP+WAy5+KXH6VEJk89VwMigzcTGB8736ArMWdS/o fOmRpBnEnYE07oPeYsZNLtN9GM6gMiHUfrgzYc0ulaI20hJuk2BB/B4s6ASmT0Vb GifpsqP07F2t4ZcbHN0m9eFl9Iq8FhFsDOn536hvCmAqp3NNt5WZ+uSsGuxCdVmh H7pZE1zqBlrM+v8ZpHHqtO0GTB1gJYDxCmxj/w== -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:26 2025 by rpki-client