$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31312e302f32342d3234203d3e203539323733.roa File: 3130332e34372e31312e302f32342d3234203d3e203539323733.roa (raw, json) Hash identifier: FYTnb6URKqil9v4UEaprZL6ZdMktcRy6nGXbNBxOe04= Subject key identifier: FF:3D:2C:A7:04:27:D1:8B:0D:58:85:4C:FE:83:02:13:14:8C:D7:BC Certificate issuer: /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Certificate serial: 7F4E8CCD9693325BC80A35A78D41B343689AD570 Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31312e302f32342d3234203d3e203539323733.roa Signing time: Fri 19 Sep 2025 17:00:01 +0000 ROA not before: Fri 19 Sep 2025 16:55:01 +0000 ROA not after: Fri 18 Sep 2026 17:00:01 +0000 asID: 59273 IP address blocks: 103.47.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4e:8c:cd:96:93:32:5b:c8:0a:35:a7:8d:41:b3:43:68:9a:d5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27 Validity Not Before: Sep 19 16:55:01 2025 GMT Not After : Sep 18 17:00:01 2026 GMT Subject: CN=FF3D2CA70427D18B0D58854CFE830213148CD7BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:e1:b0:42:8b:bd:42:3f:ed:1f:47:3b:ae: 8a:fe:dc:cd:0d:ee:e4:a7:4f:1f:fa:a7:8e:dd:f9: b7:aa:c1:00:f5:a7:06:b4:da:eb:00:cc:b0:7f:ba: 3b:49:08:ed:83:34:04:62:d8:15:4b:e2:e9:c3:69: 48:cf:17:35:02:f8:41:bc:68:13:80:0b:ef:59:68: af:da:18:4e:c0:d6:83:a9:96:25:c9:87:a8:3e:41: be:f9:ed:28:3b:50:48:10:39:ee:ef:37:19:87:73: 6c:19:76:37:e5:d0:3c:d3:c3:ce:52:cc:93:5a:b6: e8:16:af:d5:c9:8d:75:b6:ee:38:b0:f2:6e:d1:c3: e5:e9:16:de:77:f9:fc:6b:4c:36:14:f3:df:4d:8f: d9:ce:29:49:86:1d:25:21:89:48:87:b9:9f:e2:31: a7:ef:19:db:ae:5e:7c:5b:6e:3a:78:d7:65:43:52: fc:b4:4b:a2:1e:6b:ae:78:e2:09:9d:5e:f5:9e:13: 8b:41:56:8d:70:fe:4d:d7:6e:78:f9:71:b4:a9:7a: 6a:87:44:6d:52:82:4e:6f:44:b6:c0:1b:49:3a:df: b4:93:53:68:47:53:52:44:3f:60:30:68:f2:9d:1b: e2:50:ad:40:72:09:f7:bb:49:a0:b8:a7:95:dd:2b: 6f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3D:2C:A7:04:27:D1:8B:0D:58:85:4C:FE:83:02:13:14:8C:D7:BC X509v3 Authority Key Identifier: keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31312e302f32342d3234203d3e203539323733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.11.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:33:aa:1c:bb:f9:f9:0c:8b:50:f5:1f:42:40:fd:84:ce:90: c9:57:b6:f1:48:ca:89:a3:ed:89:ad:24:dd:54:fe:3f:cd:d0: 66:3f:65:f2:20:51:5c:22:d9:b5:d4:ed:ff:26:3d:77:2d:93: 2f:22:fe:7b:e2:66:b7:68:9d:49:78:3d:f5:ec:4d:44:c5:ac: b9:3f:21:82:23:ba:df:42:4c:2d:2d:11:fb:3a:94:fc:72:85: 3d:20:33:55:1f:9f:59:b0:04:cf:45:94:40:07:20:90:f1:21: 83:d6:d8:da:3a:bf:88:6c:e7:2d:de:db:c2:a0:29:b8:47:28: 33:b6:8b:98:de:de:50:60:69:14:d7:66:b6:29:46:15:3b:51: d3:2e:c4:90:9e:aa:9b:1d:c8:1b:bb:75:fd:e5:5f:d6:b6:20: 58:6a:c0:64:b2:83:63:fa:6a:19:bd:fd:d7:04:26:af:9d:47: 24:bf:5b:9d:ec:e8:00:d9:20:72:a2:70:3c:38:0b:32:95:d2: f5:c3:9c:fe:fe:f8:4c:8a:3f:0b:a2:ab:b2:fb:6b:22:6e:37: a5:80:39:27:b9:fc:16:c7:3f:23:ae:a6:73:d8:90:bc:b8:f9: fa:84:c7:cb:ac:37:da:3e:42:41:bc:5e:98:ea:4b:99:e4:7a: 88:8d:9f:e1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUf06MzZaTMlvICjWnjUGzQ2ia1XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG QTI5QUIyNzAeFw0yNTA5MTkxNjU1MDFaFw0yNjA5MTgxNzAwMDFaMDMxMTAvBgNV BAMTKEZGM0QyQ0E3MDQyN0QxOEIwRDU4ODU0Q0ZFODMwMjEzMTQ4Q0Q3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCru+GwQou9Qj/tH0c7ror+3M0N 7uSnTx/6p47d+beqwQD1pwa02usAzLB/ujtJCO2DNARi2BVL4unDaUjPFzUC+EG8 aBOAC+9ZaK/aGE7A1oOpliXJh6g+Qb757Sg7UEgQOe7vNxmHc2wZdjfl0DzTw85S zJNatugWr9XJjXW27jiw8m7Rw+XpFt53+fxrTDYU899Nj9nOKUmGHSUhiUiHuZ/i MafvGduuXnxbbjp412VDUvy0S6Iea6544gmdXvWeE4tBVo1w/k3Xbnj5cbSpemqH RG1Sgk5vRLbAG0k637STU2hHU1JEP2AwaPKdG+JQrUByCfe7SaC4p5XdK29hAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU/z0spwQn0YsNWIVM/oMCExSM17wwHwYDVR0j BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5 QUIyNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1YTcyZWI5LThlNTMtNDQ3Mi1h MzVhLWZlZThiZjBhZjQ2Zi8wLzMxMzAzMzJlMzQzNzJlMzEzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzkzMjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnLwswDQYJKoZIhvcN AQELBQADggEBAC4zqhy7+fkMi1D1H0JA/YTOkMlXtvFIyomj7YmtJN1U/j/N0GY/ ZfIgUVwi2bXU7f8mPXctky8i/nviZrdonUl4PfXsTUTFrLk/IYIjut9CTC0tEfs6 lPxyhT0gM1Ufn1mwBM9FlEAHIJDxIYPW2No6v4hs5y3e28KgKbhHKDO2i5je3lBg aRTXZrYpRhU7UdMuxJCeqpsdyBu7df3lX9a2IFhqwGSyg2P6ahm9/dcEJq+dRyS/ W53s6ADZIHKicDw4CzKV0vXDnP7++EyKPwuiq7L7ayJuN6WAOSe5/BbHPyOupnPY kLy4+fqEx8usN9o+QkG8XpjqS5nkeoiNn+E= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:20 2025 by rpki-client