$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa File: 3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa (raw, json) Hash identifier: LJVWK744DaCLalz0/Sl7Gt/PYQWV0FOVmOX8NAlnD4I= Subject key identifier: 3F:FF:C4:11:75:BD:2B:18:C2:DB:17:3C:68:91:91:59:06:02:37:C1 Certificate issuer: /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Certificate serial: 2E487321A8845893529478081B293810B0310ABC Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa Signing time: Fri 19 Sep 2025 10:00:01 +0000 ROA not before: Fri 19 Sep 2025 09:55:01 +0000 ROA not after: Fri 18 Sep 2026 10:00:01 +0000 asID: 149881 IP address blocks: 103.189.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:48:73:21:a8:84:58:93:52:94:78:08:1b:29:38:10:b0:31:0a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Validity Not Before: Sep 19 09:55:01 2025 GMT Not After : Sep 18 10:00:01 2026 GMT Subject: CN=3FFFC41175BD2B18C2DB173C68919159060237C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:8b:4d:92:ff:45:5a:28:1a:8c:36:83:10: 5f:c6:d5:76:35:01:a2:dd:a7:f6:5d:56:63:3b:85: d4:24:ba:11:e3:72:20:8c:d8:17:f7:33:e0:f2:69: 08:3d:d0:ce:54:fe:10:46:1f:da:39:95:b4:a2:c1: 32:48:a5:e6:97:70:c6:40:d5:2e:f8:ed:6d:d8:9b: f1:df:12:b6:51:21:8e:5b:18:70:4b:4d:4f:b7:e5: 20:46:3e:2e:93:d8:80:bc:bd:f2:00:f2:8d:93:85: 79:99:71:49:cf:ea:64:7c:56:85:db:b3:4b:9e:67: cb:e9:ce:f3:1d:16:fe:d4:13:d2:71:24:36:d5:04: bd:eb:0f:e3:ce:dc:19:38:0e:ef:82:58:c8:2c:b3: 0c:7a:ed:ed:94:2f:29:58:f5:91:86:9f:c7:65:25: a3:f0:2a:44:91:84:84:74:0f:ac:a0:db:1d:d8:c2: 37:30:8b:e6:d8:79:09:4b:d9:13:f5:1a:48:db:e2: 13:39:45:0f:b0:01:40:50:59:7e:04:57:6e:0a:b2: af:dc:a5:c1:51:1c:ea:b7:68:eb:11:c7:8c:ed:ca: d5:e8:0a:57:a8:c8:94:ed:cd:b0:94:df:cc:5b:71: de:b7:a7:64:b3:76:34:3f:e9:b3:e4:35:23:e9:1e: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FF:C4:11:75:BD:2B:18:C2:DB:17:3C:68:91:91:59:06:02:37:C1 X509v3 Authority Key Identifier: keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/3130332e3138392e3232322e302f32342d3234203d3e20313439383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.222.0/24 Signature Algorithm: sha256WithRSAEncryption 26:23:5b:9b:c5:1b:07:1a:51:ae:00:38:24:09:97:22:f7:49: 5c:24:7c:ee:08:b5:d8:f9:7a:99:b9:b3:be:02:79:13:f6:d6: b4:8d:bc:9b:57:82:1a:57:e9:1d:96:1a:52:f9:56:c9:f7:36: 45:54:6e:79:7c:81:15:40:ba:15:c1:04:03:14:da:ca:36:2f: d6:13:6f:ef:20:fd:5a:6e:4c:c8:46:d8:ca:23:c6:39:c3:67: 93:ea:e6:24:50:de:b5:5f:f9:05:ad:d5:b0:00:6d:0c:32:40: dd:ed:8c:2d:b7:5d:52:aa:5c:b8:b9:84:87:6b:33:52:0b:13: a9:0e:41:c1:fd:b7:23:dd:07:57:a1:7a:bd:38:16:4c:07:5d: 74:a0:db:67:a8:f1:50:30:db:8a:26:4b:13:3b:4c:f2:05:89: f6:03:c1:25:6d:8c:8d:c5:2e:54:9a:78:f1:e8:d5:93:bf:8b: d1:c8:12:ac:ad:fa:05:1c:44:25:5a:2a:4c:c1:22:34:84:17: 70:ec:3e:54:f2:b2:13:70:0b:a2:a5:41:81:8f:ab:1c:1d:f8: 42:3e:fe:f2:3c:c1:53:01:21:13:c9:48:c3:36:fa:16:08:6d: 8d:f3:eb:f5:fd:3d:f0:22:d0:79:54:a4:b4:37:00:3c:e3:1c: 8d:de:70:75 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULkhzIaiEWJNSlHgIGyk4ELAxCrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIz NEEwRjFCMjAeFw0yNTA5MTkwOTU1MDFaFw0yNjA5MTgxMDAwMDFaMDMxMTAvBgNV BAMTKDNGRkZDNDExNzVCRDJCMThDMkRCMTczQzY4OTE5MTU5MDYwMjM3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhuYtNkv9FWigajDaDEF/G1XY1 AaLdp/ZdVmM7hdQkuhHjciCM2Bf3M+DyaQg90M5U/hBGH9o5lbSiwTJIpeaXcMZA 1S747W3Ym/HfErZRIY5bGHBLTU+35SBGPi6T2IC8vfIA8o2ThXmZcUnP6mR8VoXb s0ueZ8vpzvMdFv7UE9JxJDbVBL3rD+PO3Bk4Du+CWMgsswx67e2ULylY9ZGGn8dl JaPwKkSRhIR0D6yg2x3Ywjcwi+bYeQlL2RP1Gkjb4hM5RQ+wAUBQWX4EV24Ksq/c pcFRHOq3aOsRx4ztytXoCleoyJTtzbCU38xbcd63p2SzdjQ/6bPkNSPpHmyFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUP//EEXW9KxjC2xc8aJGRWQYCN8EwHwYDVR0j BBgwFoAU4f5po0IWwk0YcPXO06QwkjSg8bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMC9FMUZFNjlBMzQy MTZDMjREMTg3MEY1Q0VEM0E0MzA5MjM0QTBGMUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFGRTY5QTM0MjE2QzI0RDE4NzBGNUNFRDNBNDMwOTIzNEEw RjFCMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4OGUzYTE3LTFjOTEtNDc5My04 M2M0LTIxMWQ0MjEwYWVhOC8wLzMxMzAzMzJlMzEzODM5MmUzMjMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvd4wDQYJ KoZIhvcNAQELBQADggEBACYjW5vFGwcaUa4AOCQJlyL3SVwkfO4Itdj5epm5s74C eRP21rSNvJtXghpX6R2WGlL5Vsn3NkVUbnl8gRVAuhXBBAMU2so2L9YTb+8g/Vpu TMhG2MojxjnDZ5Pq5iRQ3rVf+QWt1bAAbQwyQN3tjC23XVKqXLi5hIdrM1ILE6kO QcH9tyPdB1eher04FkwHXXSg22eo8VAw24omSxM7TPIFifYDwSVtjI3FLlSaePHo 1ZO/i9HIEqyt+gUcRCVaKkzBIjSEF3DsPlTyshNwC6KlQYGPqxwd+EI+/vI8wVMB IRPJSMM2+hYIbY3z6/X9PfAi0HlUpLQ3ADzjHI3ecHU= -----END CERTIFICATE-----Generated at Tue Oct 21 01:37:26 2025 by rpki-client