$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa File: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (raw, json) Hash identifier: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM= Subject key identifier: F4:F4:0F:C8:E1:DE:36:3C:92:4E:9A:43:F7:15:AA:AB:46:04:13:37 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 2B712784388AD0D9D8865F3561F17978045EABF0 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa Signing time: Tue 09 Sep 2025 15:00:01 +0000 ROA not before: Tue 09 Sep 2025 14:55:01 +0000 ROA not after: Tue 08 Sep 2026 15:00:01 +0000 asID: 150228 IP address blocks: 103.17.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:27:84:38:8a:d0:d9:d8:86:5f:35:61:f1:79:78:04:5e:ab:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Sep 9 14:55:01 2025 GMT Not After : Sep 8 15:00:01 2026 GMT Subject: CN=F4F40FC8E1DE363C924E9A43F715AAAB46041337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:92:6a:6e:53:2f:01:02:a6:85:9a:4e:a9: 70:90:51:08:72:a9:7d:96:10:e9:ea:de:8b:d9:f7: d5:d4:f8:55:71:55:51:18:f3:d9:b9:34:bf:6b:33: 52:32:70:e4:56:fa:6a:ba:c9:c0:32:a2:04:cc:1a: cb:82:00:55:d2:30:69:82:29:fc:32:0d:1d:ac:16: 05:93:5f:33:b6:71:d8:34:c0:92:7f:5d:d1:82:39: 00:0e:31:94:90:0d:4b:0d:7e:ad:52:78:29:00:cb: fd:2e:c7:98:b4:df:f0:c0:df:d1:c2:11:50:49:de: 5c:17:6e:68:97:dd:e3:5e:89:15:45:08:f8:ff:69: ea:6b:da:b0:a7:cc:53:d5:f9:62:a7:5e:ad:6b:b0: 1e:3a:7b:bc:ab:b9:8d:c4:bd:1b:25:d3:66:c0:7b: 46:57:4f:5a:00:65:3b:eb:a4:3e:b5:61:15:89:b8: cc:03:f5:76:f7:c2:a0:2f:35:f5:d6:fb:46:06:6d: 39:f2:56:11:84:e4:dd:56:ea:23:b9:ce:f1:1b:86: 75:fc:a5:10:81:33:23:1f:29:50:6f:e1:01:0a:97: 3d:4c:c3:26:92:d5:45:9c:3a:82:c1:fd:81:16:8e: 30:88:03:60:9a:b8:ab:b8:cb:e5:4b:00:39:f9:1b: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F4:0F:C8:E1:DE:36:3C:92:4E:9A:43:F7:15:AA:AB:46:04:13:37 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/3130332e31372e33322e302f32342d3234203d3e20313530323238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.32.0/24 Signature Algorithm: sha256WithRSAEncryption 72:ac:51:d0:a4:7b:9c:a9:2a:9f:d7:cb:b3:f2:39:55:40:8f: 92:e6:af:b2:5a:40:ec:f1:34:3a:b6:ee:8b:2e:db:7a:ef:9b: 86:dc:da:c2:85:51:7b:c3:c7:f2:bd:f9:82:97:9e:96:ef:30: e7:2f:97:d5:34:d8:ac:fe:8a:bd:f1:66:c2:f4:d5:a3:a4:fa: e7:3e:86:ec:4f:4a:43:cb:56:f1:d5:08:31:f3:b8:c9:ea:c7: b9:00:22:7a:67:83:23:d9:4a:3f:92:9b:47:0c:16:ef:aa:a9: f5:7e:ab:a6:e3:af:d4:51:5a:e3:9e:7f:1c:17:05:91:2e:f8: 61:85:1a:a1:5e:10:40:8a:81:18:bf:b3:d7:2e:4b:54:b4:38: cb:0d:4a:a1:b7:5a:7d:d5:77:8e:07:33:ae:dd:88:9c:c2:ff: 5d:fa:e3:5f:4b:10:70:e5:61:48:21:19:9a:0d:a0:0d:8d:d6: 3a:be:45:e3:2a:a8:72:b0:8c:75:e4:fc:2a:c6:5f:0d:12:cf: 8b:1f:18:9e:f1:47:c7:e2:ea:29:48:d6:9d:84:bc:43:31:00: 98:85:64:14:d3:e3:88:f8:68:70:5b:c8:58:21:32:42:fb:70: 14:5e:7c:f5:5f:d9:5e:ab:f5:f3:4b:94:3e:dd:fd:f0:e3:77: a5:8b:37:b8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK3EnhDiK0NnYhl81YfF5eAReq/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNTA5MDkxNDU1MDFaFw0yNjA5MDgxNTAwMDFaMDMxMTAvBgNV BAMTKEY0RjQwRkM4RTFERTM2M0M5MjRFOUE0M0Y3MTVBQUFCNDYwNDEzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94JJqblMvAQKmhZpOqXCQUQhy qX2WEOnq3ovZ99XU+FVxVVEY89m5NL9rM1IycORW+mq6ycAyogTMGsuCAFXSMGmC KfwyDR2sFgWTXzO2cdg0wJJ/XdGCOQAOMZSQDUsNfq1SeCkAy/0ux5i03/DA39HC EVBJ3lwXbmiX3eNeiRVFCPj/aepr2rCnzFPV+WKnXq1rsB46e7yruY3EvRsl02bA e0ZXT1oAZTvrpD61YRWJuMwD9Xb3wqAvNfXW+0YGbTnyVhGE5N1W6iO5zvEbhnX8 pRCBMyMfKVBv4QEKlz1MwyaS1UWcOoLB/YEWjjCIA2CauKu4y+VLADn5G7oNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9PQPyOHeNjySTppD9xWqq0YEEzcwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiOTA1NzY2LTQ0MGUtNGJjYi1h ZTcyLTNlNzg4MzFjZTlkYy8wLzMxMzAzMzJlMzEzNzJlMzMzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcRIDANBgkqhkiG 9w0BAQsFAAOCAQEAcqxR0KR7nKkqn9fLs/I5VUCPkuavslpA7PE0Orbuiy7beu+b htzawoVRe8PH8r35gpeelu8w5y+X1TTYrP6KvfFmwvTVo6T65z6G7E9KQ8tW8dUI MfO4yerHuQAiemeDI9lKP5KbRwwW76qp9X6rpuOv1FFa455/HBcFkS74YYUaoV4Q QIqBGL+z1y5LVLQ4yw1KobdafdV3jgczrt2InML/XfrjX0sQcOVhSCEZmg2gDY3W Or5F4yqocrCMdeT8KsZfDRLPix8YnvFHx+LqKUjWnYS8QzEAmIVkFNPjiPhocFvI WCEyQvtwFF589V/ZXqv180uUPt398ON3pYs3uA== -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:32 2025 by rpki-client