$ rpki-client -vvf repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa File: 3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa (raw, json) Hash identifier: NI7opR0A7S7kCuIeE9SGtTIr4seOauTv5NKnbC+c5S8= Subject key identifier: 64:87:37:3D:8A:A7:19:77:F6:4D:0F:51:79:CC:AF:A6:C8:71:50:CA Certificate issuer: /CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Certificate serial: 12668FEECFFB450959286B02EE43EBE2DDFE113B Authority key identifier: 10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa Signing time: Wed 24 Sep 2025 04:00:00 +0000 ROA not before: Wed 24 Sep 2025 03:55:00 +0000 ROA not after: Wed 23 Sep 2026 04:00:00 +0000 asID: 150470 IP address blocks: 103.51.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:66:8f:ee:cf:fb:45:09:59:28:6b:02:ee:43:eb:e2:dd:fe:11:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104C4FCF888F3C86B8C128D81C5B95FE5389BB59 Validity Not Before: Sep 24 03:55:00 2025 GMT Not After : Sep 23 04:00:00 2026 GMT Subject: CN=6487373D8AA71977F64D0F5179CCAFA6C87150CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:4c:22:d1:6c:56:8b:74:e1:00:16:a1:f3: a5:37:6b:16:81:87:f9:e2:5b:5b:fc:ce:c6:e0:84: 42:0e:6a:26:98:1c:6d:83:bc:f7:71:f3:ee:51:57: d6:0e:be:ff:64:69:ee:16:56:61:46:aa:9f:fd:a6: 09:e6:3b:d9:d7:9e:34:64:45:19:ba:22:1e:c4:c6: 9d:4a:0a:79:2b:48:72:bc:20:71:d4:76:24:8e:01: a2:98:65:b4:86:4d:d9:35:7b:45:cc:70:73:18:5f: 60:2c:00:a7:c1:f9:8e:99:e7:be:e3:a4:14:b7:e0: db:42:08:a3:4c:fe:79:c9:44:51:7c:09:be:ba:f0: 1c:41:de:49:bd:57:02:7a:dd:0e:1f:5d:3b:24:6d: 02:aa:f9:7d:65:73:46:3a:0e:49:56:30:f1:14:92: a8:1f:20:1e:fa:19:6c:b6:14:20:39:fb:2c:6d:a0: fa:e3:8f:59:7f:7a:29:01:73:04:35:3b:fd:a2:2d: 5b:ae:87:1b:0c:20:00:db:4c:7e:ea:74:f8:25:8a: 84:c0:dc:74:4c:b6:ff:2b:7a:b3:8e:1d:db:b9:c0: 2d:01:93:88:ac:96:97:0e:1e:3d:2e:56:34:22:d2: fb:47:f0:fb:9b:ee:d7:c0:d4:d3:72:8e:bd:0f:23: c9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:87:37:3D:8A:A7:19:77:F6:4D:0F:51:79:CC:AF:A6:C8:71:50:CA X509v3 Authority Key Identifier: keyid:10:4C:4F:CF:88:8F:3C:86:B8:C1:28:D8:1C:5B:95:FE:53:89:BB:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104C4FCF888F3C86B8C128D81C5B95FE5389BB59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/328eec5b-5324-4422-a32f-9b1dced3759f/0/3130332e35312e3132322e302f32332d3233203d3e20313530343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.51.122.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:e4:a8:f5:d2:cf:07:b7:65:4e:da:39:61:fa:4e:53:27:81: 8a:ee:6d:fc:05:41:a4:c8:29:e7:3e:07:d8:55:a2:3c:5e:1b: 10:06:26:6c:ad:ad:cc:b8:c7:e4:51:ad:78:0d:26:97:01:ed: dc:19:f5:83:10:ef:f1:b3:77:c8:17:82:7a:34:81:69:2c:a5: bb:33:5e:07:07:be:3f:fd:f0:5a:6e:40:46:89:94:3a:7d:9b: bc:ac:4b:a2:44:74:84:51:4e:6c:4a:f8:d5:23:86:fa:f5:2c: b2:db:92:0c:20:cb:ca:5b:1d:fd:c4:8e:0a:cc:50:7e:21:c3: d5:08:0f:53:02:e1:ee:e3:9e:ee:d3:94:b6:e4:68:0b:f4:ea: a3:14:79:68:a9:cc:66:f0:29:4d:34:b1:55:22:43:c6:de:64: b2:16:49:12:89:27:02:7a:ec:52:d4:35:c5:47:76:e1:a3:23: 18:71:71:ef:c8:57:96:5b:8d:bb:96:f8:32:3d:32:2a:f8:e5: 82:9b:1e:67:1f:8c:46:02:d7:ca:95:f0:0c:32:f8:fc:8f:9e: 62:ad:10:82:2d:c1:55:7a:1c:02:b2:7a:25:73:aa:6a:4a:6c: b0:6a:7e:4f:1a:f7:77:6a:62:be:ff:ac:29:1e:59:63:e7:63: be:ec:77:5d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEmaP7s/7RQlZKGsC7kPr4t3+ETswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1 Mzg5QkI1OTAeFw0yNTA5MjQwMzU1MDBaFw0yNjA5MjMwNDAwMDBaMDMxMTAvBgNV BAMTKDY0ODczNzNEOEFBNzE5NzdGNjREMEY1MTc5Q0NBRkE2Qzg3MTUwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv0wi0WxWi3ThABah86U3axaB h/niW1v8zsbghEIOaiaYHG2DvPdx8+5RV9YOvv9kae4WVmFGqp/9pgnmO9nXnjRk RRm6Ih7Exp1KCnkrSHK8IHHUdiSOAaKYZbSGTdk1e0XMcHMYX2AsAKfB+Y6Z577j pBS34NtCCKNM/nnJRFF8Cb668BxB3km9VwJ63Q4fXTskbQKq+X1lc0Y6DklWMPEU kqgfIB76GWy2FCA5+yxtoPrjj1l/eikBcwQ1O/2iLVuuhxsMIADbTH7qdPglioTA 3HRMtv8rerOOHdu5wC0Bk4islpcOHj0uVjQi0vtH8Pub7tfA1NNyjr0PI8ldAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZIc3PYqnGXf2TQ9RecyvpshxUMowHwYDVR0j BBgwFoAUEExPz4iPPIa4wSjYHFuV/lOJu1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjhlZWM1Yi01MzI0LTQ0MjItYTMyZi05YjFkY2VkMzc1OWYvMC8xMDRDNEZDRjg4 OEYzQzg2QjhDMTI4RDgxQzVCOTVGRTUzODlCQjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0QzRGQ0Y4ODhGM0M4NkI4QzEyOEQ4MUM1Qjk1RkU1Mzg5 QkI1OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyOGVlYzViLTUzMjQtNDQyMi1h MzJmLTliMWRjZWQzNzU5Zi8wLzMxMzAzMzJlMzUzMTJlMzEzMjMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMwMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZzN6MA0GCSqG SIb3DQEBCwUAA4IBAQA65Kj10s8Ht2VO2jlh+k5TJ4GK7m38BUGkyCnnPgfYVaI8 XhsQBiZsra3MuMfkUa14DSaXAe3cGfWDEO/xs3fIF4J6NIFpLKW7M14HB74//fBa bkBGiZQ6fZu8rEuiRHSEUU5sSvjVI4b69Syy25IMIMvKWx39xI4KzFB+IcPVCA9T AuHu457u05S25GgL9OqjFHloqcxm8ClNNLFVIkPG3mSyFkkSiScCeuxS1DXFR3bh oyMYcXHvyFeWW427lvgyPTIq+OWCmx5nH4xGAtfKlfAMMvj8j55irRCCLcFVehwC snolc6pqSmywan5PGvd3amK+/6wpHllj52O+7Hdd -----END CERTIFICATE-----Generated at Tue Oct 21 01:42:28 2025 by rpki-client