$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e372e302f32342d3234203d3e20313336313237.roa File: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (raw, json) Hash identifier: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno= Subject key identifier: FE:CD:68:31:29:A3:32:5B:D2:6B:B9:D3:14:B2:E9:8F:53:C0:74:36 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 7997FACECBC7F999CE861334B928726721F9CA73 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e372e302f32342d3234203d3e20313336313237.roa Signing time: Fri 19 Sep 2025 04:03:25 +0000 ROA not before: Fri 19 Sep 2025 03:58:25 +0000 ROA not after: Fri 18 Sep 2026 04:03:25 +0000 asID: 136127 IP address blocks: 103.97.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:97:fa:ce:cb:c7:f9:99:ce:86:13:34:b9:28:72:67:21:f9:ca:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Sep 19 03:58:25 2025 GMT Not After : Sep 18 04:03:25 2026 GMT Subject: CN=FECD683129A3325BD26BB9D314B2E98F53C07436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:6c:45:e3:b6:dd:09:1d:9b:ac:b2:9d:c4: 79:d7:e1:ed:19:aa:d8:76:5b:9d:f1:4d:28:7e:14: 0f:42:95:16:32:f9:5a:d8:8b:4d:03:26:6f:83:54: ee:84:3a:3e:4f:f7:bd:86:64:f5:61:33:15:c7:b1: c4:da:ba:37:cc:5d:1e:39:74:0f:a0:42:76:df:09: 86:4d:46:ce:a9:17:e9:b2:b8:8b:a8:d1:64:c0:5e: 46:88:dd:a9:9a:7d:80:9c:0d:3d:73:e9:f8:bb:ac: dd:33:e8:38:76:3b:30:80:38:93:f8:4e:40:9f:95: df:c3:fb:05:99:48:70:3b:25:0f:68:cd:7f:ab:5d: c1:0d:35:31:ea:70:b2:60:70:5e:51:99:fe:fb:f5: ce:4b:58:e0:bd:76:6a:4e:5b:9b:c7:ae:d3:4e:7a: a1:a6:31:a3:29:f2:1a:65:7c:e6:4b:55:a4:88:31: 13:f8:41:0c:38:c0:b1:2c:7c:4e:d2:e5:14:70:13: e2:a0:8f:60:43:0e:71:35:c0:4b:19:31:ca:6a:5d: ae:20:ef:19:61:97:15:27:53:86:02:75:81:95:91: a3:bc:d0:62:db:3f:c3:b8:df:8c:43:c4:df:5a:9f: f5:87:11:14:7c:30:fb:c9:77:a0:23:db:72:9e:8f: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CD:68:31:29:A3:32:5B:D2:6B:B9:D3:14:B2:E9:8F:53:C0:74:36 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e372e302f32342d3234203d3e20313336313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.7.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:7b:46:ee:fe:8c:79:d1:37:70:78:8d:a5:ba:12:e4:c1:95: 27:3a:44:a6:86:2b:3a:cc:c4:a9:a4:d6:7e:6d:6c:0a:60:0a: 39:f8:ac:5e:a6:ea:da:1f:0d:f6:e1:cc:5c:45:a6:e9:a7:b1: 88:b8:dd:a5:1d:fe:2e:f9:c9:57:09:db:7f:2f:fe:ef:18:5c: 80:2b:b0:27:ea:60:24:d4:96:61:4d:85:52:2f:74:ef:c1:f3: fd:48:d6:7a:31:5c:30:a0:db:4a:7c:7c:f5:5d:09:3a:70:9a: 62:d7:53:49:f8:c3:df:ec:93:ef:d1:86:50:41:58:8b:65:92: 55:e0:ed:cb:39:a5:6c:32:ce:b1:b0:24:dc:08:9c:4b:f2:48: 81:cd:b8:76:23:23:48:fb:c3:82:40:28:9f:1f:13:b4:21:18: ab:e8:5b:00:cd:64:d6:83:ff:88:32:c6:48:fe:a6:42:d7:15: a6:2a:26:8a:b1:69:fa:47:ef:49:85:cd:21:e3:87:e8:7d:99: 19:49:80:b9:c2:72:57:41:37:d3:8d:1f:45:4a:18:c8:e8:d6: 3a:29:40:f8:b2:01:2c:dd:4c:c2:8b:d9:47:da:de:6f:2b:8d: fb:00:a4:93:c5:19:41:37:48:ea:c8:c2:2b:89:d4:1e:31:9a: 17:ee:29:13 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUeZf6zsvH+ZnOhhM0uShyZyH5ynMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTA5MTkwMzU4MjVaFw0yNjA5MTgwNDAzMjVaMDMxMTAvBgNV BAMTKEZFQ0Q2ODMxMjlBMzMyNUJEMjZCQjlEMzE0QjJFOThGNTNDMDc0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg5mxF47bdCR2brLKdxHnX4e0Z qth2W53xTSh+FA9ClRYy+VrYi00DJm+DVO6EOj5P972GZPVhMxXHscTaujfMXR45 dA+gQnbfCYZNRs6pF+myuIuo0WTAXkaI3amafYCcDT1z6fi7rN0z6Dh2OzCAOJP4 TkCfld/D+wWZSHA7JQ9ozX+rXcENNTHqcLJgcF5Rmf779c5LWOC9dmpOW5vHrtNO eqGmMaMp8hplfOZLVaSIMRP4QQw4wLEsfE7S5RRwE+Kgj2BDDnE1wEsZMcpqXa4g 7xlhlxUnU4YCdYGVkaO80GLbP8O434xDxN9an/WHERR8MPvJd6Aj23KejwU9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU/s1oMSmjMlvSa7nTFLLpj1PAdDYwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0YjI3MzAzLTllM2QtNGQ0Mi1h ZjI1LTZhMGYxMTgwOGYyNy8wLzMxMzAzMzJlMzkzNzJlMzcyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzYzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnYQcwDQYJKoZIhvcN AQELBQADggEBAGt7Ru7+jHnRN3B4jaW6EuTBlSc6RKaGKzrMxKmk1n5tbApgCjn4 rF6m6tofDfbhzFxFpumnsYi43aUd/i75yVcJ238v/u8YXIArsCfqYCTUlmFNhVIv dO/B8/1I1noxXDCg20p8fPVdCTpwmmLXU0n4w9/sk+/RhlBBWItlklXg7cs5pWwy zrGwJNwInEvySIHNuHYjI0j7w4JAKJ8fE7QhGKvoWwDNZNaD/4gyxkj+pkLXFaYq JoqxafpH70mFzSHjh+h9mRlJgLnCcldBN9ONH0VKGMjo1jopQPiyASzdTMKL2Ufa 3m8rjfsApJPFGUE3SOrIwiuJ1B4xmhfuKRM= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:57 2025 by rpki-client