$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa File: 3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (raw, json) Hash identifier: +SJaFJQyqBdRsoSnVqf1c6YDNbR+iItpuCQMYo/GJwM= Subject key identifier: 09:26:1E:4A:40:A4:55:4E:B1:58:37:1B:9A:A7:87:D7:4D:92:A9:B9 Certificate issuer: /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Certificate serial: 57CFE2F971493C70900D7E2A3BB8544F1AB9CF10 Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa Signing time: Wed 17 Sep 2025 05:00:01 +0000 ROA not before: Wed 17 Sep 2025 04:55:01 +0000 ROA not after: Wed 16 Sep 2026 05:00:01 +0000 asID: 38148 IP address blocks: 103.30.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cf:e2:f9:71:49:3c:70:90:0d:7e:2a:3b:b8:54:4f:1a:b9:cf:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1 Validity Not Before: Sep 17 04:55:01 2025 GMT Not After : Sep 16 05:00:01 2026 GMT Subject: CN=09261E4A40A4554EB158371B9AA787D74D92A9B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:2a:83:45:e3:7c:4b:dd:1f:16:ad:b7:58:27: cf:bf:ac:09:f2:40:c7:d3:0b:81:15:1d:fb:e9:35: a8:3c:81:de:60:60:0b:f4:ec:56:15:72:fd:f0:f2: 68:0d:8d:31:bb:bb:3a:79:e9:bb:d7:77:7d:6e:e4: 3a:41:34:40:cb:66:7a:14:4d:08:3f:df:97:8b:ba: df:a7:18:94:3b:4f:52:8e:3d:61:eb:8f:40:3c:13: 75:f1:5d:e0:8c:59:3a:f7:e2:e7:ae:e6:4b:1d:2a: 99:9c:11:ff:a3:81:65:b1:6c:1b:88:ba:97:a3:dd: ea:4d:7b:79:40:38:e6:c7:c9:a4:df:08:32:dc:d8: 58:fc:f2:3b:a8:3f:e0:49:72:2e:3d:94:3d:46:c7: fa:f2:be:4d:7b:88:7f:ac:04:d0:f4:18:bf:bf:42: 26:7e:2c:42:48:57:51:96:8a:f5:17:88:7e:92:2f: 7d:cf:77:a5:33:c4:a0:ae:d5:c8:4d:29:2a:98:4a: 47:7a:a3:33:4b:e8:49:b7:49:8e:6d:07:00:c8:5f: 19:e0:11:21:65:80:9e:20:e5:7e:b0:4d:ff:55:76: 2e:98:2d:d5:e9:7f:e9:76:a1:fe:82:ac:cd:c4:f5: 0d:73:c3:06:d1:0b:2c:eb:94:7d:a5:e7:b4:a0:90: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:1E:4A:40:A4:55:4E:B1:58:37:1B:9A:A7:87:D7:4D:92:A9:B9 X509v3 Authority Key Identifier: keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.222.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:22:fc:11:47:7c:11:c5:9a:79:da:df:db:bf:b9:0f:a4:3a: c2:7b:8d:40:90:91:25:14:be:66:64:25:8e:61:e1:3f:65:f8: ce:5f:14:61:e4:73:2d:24:4b:71:e6:d4:c3:92:54:a5:e2:22: a3:44:f2:1f:53:5f:a1:a5:c0:c2:61:5a:c0:c4:cc:84:bb:ae: 22:00:12:30:89:d5:31:d1:63:1b:36:2c:58:79:e7:9d:06:6f: 08:21:3d:28:ca:36:7f:17:c3:cb:25:ed:23:49:92:7b:76:cd: 73:da:b1:d3:6f:ad:8a:85:d7:b9:a9:41:e5:d3:f0:84:bd:c1: 68:7c:fc:cc:ea:d4:7d:da:06:f5:9b:fd:fc:d6:94:f5:46:d1: b8:d3:3b:9d:1a:47:74:17:72:b8:ae:2d:47:6f:3d:19:8f:c6: d3:fd:97:23:64:13:3d:04:85:93:59:3c:77:58:10:fb:0f:9f: 79:b6:61:87:0c:8f:2f:f8:44:6e:dc:25:20:f1:8d:ec:2b:50: 61:94:a1:9e:8c:6e:52:e9:c6:ec:3f:24:4f:ba:1c:f6:06:1c: 4e:64:e3:01:a9:74:f0:51:fa:5d:f3:91:e0:f0:69:a6:20:17: 0b:c8:6e:e5:e0:7f:b0:e9:48:e7:52:ce:11:d0:cc:f7:fd:67: bf:45:1f:a4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUV8/i+XFJPHCQDX4qO7hUTxq5zxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw RUIzODRFMTAeFw0yNTA5MTcwNDU1MDFaFw0yNjA5MTYwNTAwMDFaMDMxMTAvBgNV BAMTKDA5MjYxRTRBNDBBNDU1NEVCMTU4MzcxQjlBQTc4N0Q3NEQ5MkE5QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4KoNF43xL3R8WrbdYJ8+/rAny QMfTC4EVHfvpNag8gd5gYAv07FYVcv3w8mgNjTG7uzp56bvXd31u5DpBNEDLZnoU TQg/35eLut+nGJQ7T1KOPWHrj0A8E3XxXeCMWTr34ueu5ksdKpmcEf+jgWWxbBuI upej3epNe3lAOObHyaTfCDLc2Fj88juoP+BJci49lD1Gx/ryvk17iH+sBND0GL+/ QiZ+LEJIV1GWivUXiH6SL33Pd6UzxKCu1chNKSqYSkd6ozNL6Em3SY5tBwDIXxng ESFlgJ4g5X6wTf9Vdi6YLdXpf+l2of6CrM3E9Q1zwwbRCyzrlH2l57SgkH8XAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUCSYeSkCkVU6xWDcbmqeH102SqbkwHwYDVR0j BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4 NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz ODRFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1OTJjMjc0LTExZGItNDEyNy1i YWJiLWFlYWU5OTI4NGIwMC8wLzMxMzAzMzJlMzMzMDJlMzIzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGce3jANBgkqhkiG 9w0BAQsFAAOCAQEALCL8EUd8EcWaedrf27+5D6Q6wnuNQJCRJRS+ZmQljmHhP2X4 zl8UYeRzLSRLcebUw5JUpeIio0TyH1NfoaXAwmFawMTMhLuuIgASMInVMdFjGzYs WHnnnQZvCCE9KMo2fxfDyyXtI0mSe3bNc9qx02+tioXXualB5dPwhL3BaHz8zOrU fdoG9Zv9/NaU9UbRuNM7nRpHdBdyuK4tR289GY/G0/2XI2QTPQSFk1k8d1gQ+w+f ebZhhwyPL/hEbtwlIPGN7CtQYZShnoxuUunG7D8kT7oc9gYcTmTjAal08FH6XfOR 4PBppiAXC8hu5eB/sOlI51LOEdDM9/1nv0UfpA== -----END CERTIFICATE-----Generated at Tue Oct 21 05:32:25 2025 by rpki-client