$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa File: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (raw, json) Hash identifier: oYJ/bJTCwN/+BegUT28xw/nhCI6ZgY0zlwjKdKcCdiQ= Subject key identifier: 2C:73:E0:99:47:72:24:85:9C:74:F6:2D:BB:DD:A0:09:57:7A:3E:68 Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 5DA867DBC65CB35F26C66847DB3796ECAC7C5CDA Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa Signing time: Tue 26 Aug 2025 08:00:00 +0000 ROA not before: Tue 26 Aug 2025 07:55:00 +0000 ROA not after: Tue 25 Aug 2026 08:00:00 +0000 asID: 141058 IP address blocks: 103.36.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a8:67:db:c6:5c:b3:5f:26:c6:68:47:db:37:96:ec:ac:7c:5c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Aug 26 07:55:00 2025 GMT Not After : Aug 25 08:00:00 2026 GMT Subject: CN=2C73E099477224859C74F62DBBDDA009577A3E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:42:78:04:82:77:c1:65:14:4a:74:7f:ba:47: 84:e4:7d:d3:43:2c:5a:be:dc:63:e0:11:44:13:c5: e8:ea:bf:29:48:b6:f5:38:46:8a:0a:22:c3:f9:62: c9:74:15:a7:b7:d2:99:25:11:89:36:70:83:07:e9: 3c:81:38:17:85:c6:8c:24:fa:a3:9a:d7:e7:bd:fb: 6f:c1:ce:e9:79:fb:59:74:cd:3b:1b:7b:0b:bf:b1: 4a:c7:07:9c:5f:19:fb:af:cb:af:f4:8b:0b:75:78: ff:f4:6a:67:01:bc:6f:e0:67:85:b5:7b:02:d2:7e: fc:1d:d1:f1:65:92:3f:43:45:4c:4d:1e:78:11:57: 44:b2:9f:84:f5:78:79:c6:79:62:0c:25:f9:2e:9e: 54:e6:60:a7:50:b8:a3:65:11:25:3d:7f:44:fc:af: 06:65:07:62:40:a3:41:93:83:e6:a4:02:3e:e3:25: 60:8b:a9:2f:cb:fa:a3:13:35:73:c3:94:30:71:33: ff:a7:9d:42:f3:83:6e:37:fe:b8:f6:f3:19:51:15: d8:de:b8:53:4d:b0:cb:a1:5b:94:56:d8:27:6e:1f: 2f:8d:74:d7:26:ce:04:53:12:ae:45:60:f4:72:73: 77:f0:b2:86:d4:0f:80:4e:a2:20:79:14:21:3f:71: 24:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:73:E0:99:47:72:24:85:9C:74:F6:2D:BB:DD:A0:09:57:7A:3E:68 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.250.0/24 Signature Algorithm: sha256WithRSAEncryption 20:28:f9:dd:ec:2f:43:8d:44:2a:c7:8b:db:f9:5b:1a:46:5b: 61:68:a0:e7:fb:d9:a5:74:79:42:a0:9a:39:0f:1e:e9:ba:13: 4f:58:f3:98:6f:ba:bb:71:25:77:c4:eb:73:a1:a6:05:76:b7: a1:ee:35:ff:d0:d0:ef:d5:28:04:72:77:04:b3:65:a4:91:c1: 2e:a7:24:fb:78:0f:bc:c6:9c:84:7a:7d:30:27:af:d6:a6:98: 02:6a:5a:5b:55:c2:61:f0:d1:f7:7e:27:7c:2f:6e:7f:3a:9b: 7f:52:00:3b:1a:11:6d:21:ce:a6:5e:32:04:7c:fc:13:d8:0e: cd:e8:5a:af:59:13:38:bb:cf:d3:0b:46:fa:56:ed:f0:98:7d: 51:8c:81:7b:22:94:15:2a:f9:1e:a3:35:36:4f:cd:f7:ee:00: 44:42:7d:8d:db:fd:8e:d7:49:a2:26:fb:98:f9:88:b4:f6:66: 14:f9:50:0e:02:f4:58:85:c8:89:a8:ba:b5:8f:eb:08:50:07: 56:0d:75:93:d6:52:ac:7d:af:4f:b8:42:ec:76:c9:a6:09:b9: d2:da:1b:bf:00:9f:d0:ef:81:6e:5d:44:cb:74:f5:3a:38:30: 9d:52:56:aa:d8:9c:82:4e:ca:eb:df:1e:29:a6:2c:a8:a7:05: 89:1f:fa:60 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXahn28Zcs18mxmhH2zeW7Kx8XNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTA4MjYwNzU1MDBaFw0yNjA4MjUwODAwMDBaMDMxMTAvBgNV BAMTKDJDNzNFMDk5NDc3MjI0ODU5Qzc0RjYyREJCRERBMDA5NTc3QTNFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5QngEgnfBZRRKdH+6R4TkfdND LFq+3GPgEUQTxejqvylItvU4RooKIsP5Ysl0Fae30pklEYk2cIMH6TyBOBeFxowk +qOa1+e9+2/Bzul5+1l0zTsbewu/sUrHB5xfGfuvy6/0iwt1eP/0amcBvG/gZ4W1 ewLSfvwd0fFlkj9DRUxNHngRV0Syn4T1eHnGeWIMJfkunlTmYKdQuKNlESU9f0T8 rwZlB2JAo0GTg+akAj7jJWCLqS/L+qMTNXPDlDBxM/+nnULzg243/rj28xlRFdje uFNNsMuhW5RW2CduHy+NdNcmzgRTEq5FYPRyc3fwsobUD4BOoiB5FCE/cSSpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULHPgmUdyJIWcdPYtu92gCVd6PmgwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjg1OGY2LWRlMjAtNDEyMS1i Y2VhLTkwNzZlZGNjYzA5Ny8wLzMxMzAzMzJlMzMzNjJlMzIzNTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyT6MA0GCSqG SIb3DQEBCwUAA4IBAQAgKPnd7C9DjUQqx4vb+VsaRlthaKDn+9mldHlCoJo5Dx7p uhNPWPOYb7q7cSV3xOtzoaYFdreh7jX/0NDv1SgEcncEs2WkkcEupyT7eA+8xpyE en0wJ6/WppgCalpbVcJh8NH3fid8L25/Opt/UgA7GhFtIc6mXjIEfPwT2A7N6Fqv WRM4u8/TC0b6Vu3wmH1RjIF7IpQVKvkeozU2T8337gBEQn2N2/2O10miJvuY+Yi0 9mYU+VAOAvRYhciJqLq1j+sIUAdWDXWT1lKsfa9PuELsdsmmCbnS2hu/AJ/Q74Fu XUTLdPU6ODCdUlaq2JyCTsrr3x4ppiyopwWJH/pg -----END CERTIFICATE-----Generated at Tue Oct 21 00:08:29 2025 by rpki-client