$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa File: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (raw, json) Hash identifier: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8= Subject key identifier: AB:8E:6C:78:71:69:EF:01:8C:F1:73:3B:65:75:FB:18:F2:97:4D:11 Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 371621B28952A45BADDA199D02E56967F9F61701 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa Signing time: Mon 22 Sep 2025 11:52:11 +0000 ROA not before: Mon 22 Sep 2025 11:47:11 +0000 ROA not after: Mon 21 Sep 2026 11:52:11 +0000 asID: 141887 IP address blocks: 103.163.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:16:21:b2:89:52:a4:5b:ad:da:19:9d:02:e5:69:67:f9:f6:17:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Sep 22 11:47:11 2025 GMT Not After : Sep 21 11:52:11 2026 GMT Subject: CN=AB8E6C787169EF018CF1733B6575FB18F2974D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:5e:ff:0b:5d:00:68:f5:3f:52:c4:05:1a: 6e:35:5e:ac:b1:fe:77:2b:d6:36:22:fd:68:f4:8a: 64:eb:ed:70:77:46:1e:16:f0:fc:e2:a0:11:67:c1: bc:0e:9b:27:bd:81:31:df:07:61:72:6f:ff:2c:b0: a1:9a:5b:09:b0:c7:ac:20:af:6e:85:b7:d8:03:07: aa:9b:61:44:00:c3:39:26:89:af:03:92:f8:49:fe: 62:ce:25:dc:d0:b0:b2:08:36:f5:89:be:db:e5:a0: d2:f5:42:f3:a2:84:53:31:35:5a:24:26:5f:43:aa: bb:8e:79:f1:73:51:82:a3:cc:5d:79:e6:6a:70:ee: 0d:86:f9:05:3a:f8:b5:a8:19:29:67:37:90:7b:04: 2f:5e:34:45:ed:55:a1:63:4f:b9:04:2c:56:4e:35: ef:61:62:d4:de:6a:bd:63:e8:49:8f:a9:e3:f2:77: 97:e7:5a:d8:60:a1:93:6e:5a:8d:b3:ba:a8:e5:11: 61:b3:a8:91:8d:57:10:ca:1c:80:88:dc:64:0d:93: fe:05:18:9a:43:e0:13:bf:b0:4c:02:61:63:15:f5: 62:ce:f9:12:8b:51:2b:5e:39:40:08:0a:26:04:84: 9b:5b:59:82:e3:f5:43:30:b1:46:e2:da:70:ca:46: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8E:6C:78:71:69:EF:01:8C:F1:73:3B:65:75:FB:18:F2:97:4D:11 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.241.0/24 Signature Algorithm: sha256WithRSAEncryption de:4b:43:82:f0:da:49:b3:1a:cd:31:0f:3b:0f:a5:00:10:8c: b9:24:bc:07:70:62:6c:93:26:db:5c:79:20:42:b2:00:64:da: ad:da:9d:91:d8:d3:af:e2:ba:65:b6:6c:52:53:30:a1:fb:ae: 9b:a6:0c:ba:2e:05:e7:4d:2b:bd:1d:b1:1b:0f:31:66:77:fb: 81:03:d1:79:39:0a:f9:11:47:75:a6:09:95:39:36:6e:00:45: 66:79:a2:58:46:18:e2:f2:9c:f3:f2:49:a7:59:e9:a5:7a:cc: 13:0b:a5:57:f1:29:cf:83:53:6e:7b:68:bf:ac:11:87:c1:69: da:ca:02:10:cd:e4:eb:2a:68:02:a4:99:cc:ce:3d:0d:b3:25: 43:02:cf:e2:6c:b8:f3:78:cd:a3:1a:ea:a7:41:c9:58:fc:d6: 10:4d:25:48:a2:f3:f5:b1:23:4b:16:71:7b:71:7d:59:e5:76: 43:16:68:57:81:0b:f9:57:2e:89:13:48:66:16:55:cb:f8:1c: 27:4b:91:86:c7:6e:53:37:6b:c7:43:6e:d0:ce:e3:95:19:01: bd:71:c8:cd:f9:05:81:5d:1e:65:7d:e5:05:72:57:3f:04:df: 7e:ee:80:06:3b:7e:77:48:61:03:bf:8f:8c:a8:97:3e:e1:ac: 34:78:b9:0c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNxYhsolSpFut2hmdAuVpZ/n2FwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTA5MjIxMTQ3MTFaFw0yNjA5MjExMTUyMTFaMDMxMTAvBgNV BAMTKEFCOEU2Qzc4NzE2OUVGMDE4Q0YxNzMzQjY1NzVGQjE4RjI5NzREMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFV7/C10AaPU/UsQFGm41Xqyx /ncr1jYi/Wj0imTr7XB3Rh4W8PzioBFnwbwOmye9gTHfB2Fyb/8ssKGaWwmwx6wg r26Ft9gDB6qbYUQAwzkmia8DkvhJ/mLOJdzQsLIINvWJvtvloNL1QvOihFMxNVok Jl9DqruOefFzUYKjzF155mpw7g2G+QU6+LWoGSlnN5B7BC9eNEXtVaFjT7kELFZO Ne9hYtTear1j6EmPqePyd5fnWthgoZNuWo2zuqjlEWGzqJGNVxDKHICI3GQNk/4F GJpD4BO/sEwCYWMV9WLO+RKLUSteOUAICiYEhJtbWYLj9UMwsUbi2nDKRuXPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUq45seHFp7wGM8XM7ZXX7GPKXTREwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjNWI3ODVkLTgzMDMtNDVjNS05 YTU4LWVjMTI4ODc0MDg2Ni8wLzMxMzAzMzJlMzEzNjMzMmUzMjM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzODM4Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABno/EwDQYJ KoZIhvcNAQELBQADggEBAN5LQ4Lw2kmzGs0xDzsPpQAQjLkkvAdwYmyTJttceSBC sgBk2q3anZHY06/iumW2bFJTMKH7rpumDLouBedNK70dsRsPMWZ3+4ED0Xk5CvkR R3WmCZU5Nm4ARWZ5olhGGOLynPPySadZ6aV6zBMLpVfxKc+DU257aL+sEYfBadrK AhDN5OsqaAKkmczOPQ2zJUMCz+JsuPN4zaMa6qdByVj81hBNJUii8/WxI0sWcXtx fVnldkMWaFeBC/lXLokTSGYWVcv4HCdLkYbHblM3a8dDbtDO45UZAb1xyM35BYFd HmV95QVyVz8E337ugAY7fndIYQO/j4yolz7hrDR4uQw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:55:25 2025 by rpki-client