$ rpki-client -vvf repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa File: 3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (raw, json) Hash identifier: o++ze4Phjg1umrR/hXTKNbdGbb6WGQVR25QY7sQRXiQ= Subject key identifier: FF:D6:D5:91:EA:97:4D:6A:B0:48:68:B4:76:2B:3F:5D:68:D9:60:47 Certificate issuer: /CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Certificate serial: 61FB6946489E2F02A3A3A89C1DF2525765899355 Authority key identifier: 92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject info access: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa Signing time: Wed 15 Oct 2025 10:02:24 +0000 ROA not before: Wed 15 Oct 2025 09:57:24 +0000 ROA not after: Wed 14 Oct 2026 10:02:24 +0000 asID: 149758 IP address blocks: 103.189.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fb:69:46:48:9e:2f:02:a3:a3:a8:9c:1d:f2:52:57:65:89:93:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=923816C042C964B6465A7BA06B2D44BDAF28D827 Validity Not Before: Oct 15 09:57:24 2025 GMT Not After : Oct 14 10:02:24 2026 GMT Subject: CN=FFD6D591EA974D6AB04868B4762B3F5D68D96047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:84:a4:81:ea:8d:63:86:b8:f5:ca:33:e5: c8:76:e8:97:5d:39:a8:b3:32:69:fb:0b:1c:a4:51: d1:2f:d6:5b:ee:e2:9f:42:2e:06:1f:ef:68:2e:44: d6:d0:3e:ff:5d:30:51:7b:0a:c0:b4:71:9d:b0:d9: ed:f0:a1:55:e9:7c:99:1d:06:8c:f1:02:a6:bf:f0: 29:57:8d:04:c6:d1:06:ee:21:61:42:f0:04:ca:2e: 58:3c:69:18:e3:a3:48:12:36:4e:06:dd:52:53:91: ad:8b:39:1d:c4:f9:8a:75:63:73:29:89:2d:76:59: 62:b9:47:46:90:5a:bf:f3:5c:ce:e6:1c:ed:6f:aa: 4f:88:9c:2b:7c:de:9b:df:11:30:b0:6a:8d:76:c8: 4a:bc:83:90:16:17:9f:0a:f8:3e:35:56:5c:02:13: 1c:06:ab:f5:5c:4e:48:1e:28:22:f2:29:02:a9:2e: 92:37:12:85:78:8e:e8:7f:38:79:21:9f:06:ea:42: dd:e6:b8:ca:d0:78:49:90:a2:7d:c7:87:89:37:4e: a8:03:ad:c4:16:cb:5b:96:cf:06:ed:a4:a8:a3:4d: 3e:47:c3:dc:74:7b:e3:32:c5:97:d8:2e:2f:16:1f: eb:3c:e6:16:b7:79:39:32:6c:a2:b4:72:1d:c3:36: 69:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:D5:91:EA:97:4D:6A:B0:48:68:B4:76:2B:3F:5D:68:D9:60:47 X509v3 Authority Key Identifier: keyid:92:38:16:C0:42:C9:64:B6:46:5A:7B:A0:6B:2D:44:BD:AF:28:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/923816C042C964B6465A7BA06B2D44BDAF28D827.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923816C042C964B6465A7BA06B2D44BDAF28D827.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.58.0/23 Signature Algorithm: sha256WithRSAEncryption c1:d1:8b:c2:a5:75:84:33:a8:27:70:8b:5b:0f:b7:41:62:42: d1:94:e3:0e:46:51:cc:cf:a1:8e:4f:d0:c4:25:cb:d6:8c:f7: 10:d4:c3:70:95:bb:d6:8a:05:6c:92:22:08:a4:2c:17:14:93: eb:54:89:4e:fc:37:a1:ba:b5:4c:f9:07:d0:eb:d1:5a:4e:62: 21:f0:75:4d:75:94:6b:59:d4:be:54:08:4f:4c:5d:43:59:8c: e2:a6:e8:9a:f4:bf:e7:b7:3b:c5:fd:52:46:1a:19:c6:06:a2: 5a:a9:56:ce:64:ca:d7:62:92:a1:55:2e:c8:21:33:a6:39:cd: 50:92:71:f0:68:8f:0d:14:07:9c:ff:c6:b1:6f:35:b9:b1:e0: 8e:83:68:ac:fb:36:0e:76:c4:f5:eb:95:90:a2:24:86:32:96: c0:d0:7e:32:33:67:0e:d3:1e:59:cf:b8:31:f0:46:d4:53:9a: 87:ac:86:e5:9d:b3:98:a4:24:c3:d8:ef:ad:e7:78:8c:68:58: 62:ab:68:82:61:f2:2d:4d:3b:68:00:a3:99:92:5e:6f:a9:6c: 4b:4e:2b:b1:3a:66:c7:48:b5:13:b8:5b:3d:d2:ad:9e:9a:47: 87:64:ab:51:77:ec:1f:d2:58:93:b6:d6:ce:13:6e:a6:c7:0b: bf:c0:df:af -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYftpRkieLwKjo6icHfJSV2WJk1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRB RjI4RDgyNzAeFw0yNTEwMTUwOTU3MjRaFw0yNjEwMTQxMDAyMjRaMDMxMTAvBgNV BAMTKEZGRDZENTkxRUE5NzRENkFCMDQ4NjhCNDc2MkIzRjVENjhEOTYwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyISkgeqNY4a49coz5ch26Jdd OaizMmn7CxykUdEv1lvu4p9CLgYf72guRNbQPv9dMFF7CsC0cZ2w2e3woVXpfJkd BozxAqa/8ClXjQTG0QbuIWFC8ATKLlg8aRjjo0gSNk4G3VJTka2LOR3E+Yp1Y3Mp iS12WWK5R0aQWr/zXM7mHO1vqk+InCt83pvfETCwao12yEq8g5AWF58K+D41VlwC ExwGq/VcTkgeKCLyKQKpLpI3EoV4juh/OHkhnwbqQt3muMrQeEmQon3Hh4k3TqgD rcQWy1uWzwbtpKijTT5Hw9x0e+MyxZfYLi8WH+s85ha3eTkybKK0ch3DNmlXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/9bVkeqXTWqwSGi0dis/XWjZYEcwHwYDVR0j BBgwFoAUkjgWwELJZLZGWnugay1Eva8o2CcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzdkZmI4OC1mYjUwLTQ4ZDEtYjkwZC1lNTI1MTAyZjRmNWUvMC85MjM4MTZDMDQy Qzk2NEI2NDY1QTdCQTA2QjJENDRCREFGMjhEODI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTIzODE2QzA0MkM5NjRCNjQ2NUE3QkEwNkIyRDQ0QkRBRjI4 RDgyNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzN2RmYjg4LWZiNTAtNDhkMS1i OTBkLWU1MjUxMDJmNGY1ZS8wLzMxMzAzMzJlMzEzODM5MmUzNTM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ706MA0GCSqG SIb3DQEBCwUAA4IBAQDB0YvCpXWEM6gncItbD7dBYkLRlOMORlHMz6GOT9DEJcvW jPcQ1MNwlbvWigVskiIIpCwXFJPrVIlO/DehurVM+QfQ69FaTmIh8HVNdZRrWdS+ VAhPTF1DWYzipuia9L/ntzvF/VJGGhnGBqJaqVbOZMrXYpKhVS7IITOmOc1QknHw aI8NFAec/8axbzW5seCOg2is+zYOdsT165WQoiSGMpbA0H4yM2cO0x5Zz7gx8EbU U5qHrIblnbOYpCTD2O+t53iMaFhiq2iCYfItTTtoAKOZkl5vqWxLTiuxOmbHSLUT uFs90q2emkeHZKtRd+wf0liTttbOE26mxwu/wN+v -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:59 2025 by rpki-client