$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa File: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (raw, json) Hash identifier: jCMcTRKT9AZJevifSXh6jid95wyd/fIpOWD7LnrfE5Y= Subject key identifier: B6:0D:C5:ED:B0:0F:BA:68:78:9F:AD:9C:9E:F2:15:58:8E:9A:61:95 Certificate issuer: /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Certificate serial: 493974C0018176D90D4BFFC45AEB049F9A67091B Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa Signing time: Thu 02 Oct 2025 04:00:00 +0000 ROA not before: Thu 02 Oct 2025 03:55:00 +0000 ROA not after: Thu 01 Oct 2026 04:00:00 +0000 asID: 136085 IP address blocks: 103.87.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:39:74:c0:01:81:76:d9:0d:4b:ff:c4:5a:eb:04:9f:9a:67:09:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A Validity Not Before: Oct 2 03:55:00 2025 GMT Not After : Oct 1 04:00:00 2026 GMT Subject: CN=B60DC5EDB00FBA68789FAD9C9EF215588E9A6195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:0f:ac:71:4c:84:26:6c:84:32:0a:3e:66: d0:6c:90:18:5b:02:ac:81:2a:83:88:1a:34:ba:c6: 8a:fe:1f:47:95:ff:86:e7:8a:91:02:fa:a5:d7:66: 09:7e:8a:c7:26:23:6a:ae:29:4c:52:06:7a:84:a5: 32:04:7c:d9:bc:cf:a8:d4:45:78:bb:5a:16:36:a4: 0c:ef:3b:4e:b9:6b:8b:73:5d:56:56:aa:4c:8f:5c: 93:5c:9e:eb:67:0f:51:c4:2f:79:6d:5d:39:59:90: 8c:2a:5f:b5:86:85:55:dd:1b:9a:8b:c7:9a:83:d3: 95:2d:3c:65:e0:76:4a:19:7b:b7:25:6c:5f:e8:5f: a8:b6:0c:e1:3c:35:9a:5f:ad:ba:fe:c5:48:a7:0f: 82:ab:eb:2c:d5:79:49:48:0a:69:80:44:17:52:2c: fa:3a:99:5b:55:dd:69:06:cb:a4:14:88:aa:be:57: cd:64:e5:6a:73:15:92:3e:b6:9e:12:ea:de:13:97: 4f:4d:b7:72:eb:90:fc:f7:fd:dc:e3:3e:b5:08:4b: ab:4e:24:07:84:b4:a8:49:aa:5b:66:d4:f5:7d:9a: 07:45:43:f2:92:a4:1a:c1:68:73:07:85:29:00:78: 97:bc:92:da:07:75:58:14:94:a4:07:1b:73:df:97: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0D:C5:ED:B0:0F:BA:68:78:9F:AD:9C:9E:F2:15:58:8E:9A:61:95 X509v3 Authority Key Identifier: keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31372e302f32342d3234203d3e20313336303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.87.17.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:a8:eb:c4:ea:47:da:9e:37:68:86:20:f1:a1:18:ef:79:2d: f9:ed:24:cf:4a:1c:04:2c:8a:92:dc:9e:08:a5:f1:af:08:60: ec:67:31:cb:16:cd:fe:f5:88:f0:1d:45:b8:ac:23:ab:c9:ae: bc:ae:51:b2:c6:94:7a:3d:ab:14:56:c5:d9:3d:74:b2:d7:80: 00:44:1f:59:c6:6e:c0:d6:d1:e1:38:72:4c:b0:dc:9f:a0:f1: f8:4b:90:18:7d:70:9f:66:50:fd:2b:2f:d2:fc:01:ee:84:be: ba:d7:bb:82:2f:3c:f5:76:5e:41:15:2e:61:8b:f0:23:64:fd: 18:7c:d2:0f:b0:69:11:3a:88:24:62:39:06:15:f0:dc:7f:07: 42:49:9a:f7:18:fe:9a:6a:b6:72:c5:ba:5e:95:8e:80:0f:6a: d0:03:46:9f:e4:11:1e:84:81:34:5e:db:1d:78:6e:24:2b:83: 26:8d:a3:d1:75:2c:99:03:35:c5:6b:0a:d5:38:cd:54:32:e9: 9d:ad:c3:cf:34:68:e2:6a:b0:c3:2f:b6:7f:b4:c7:07:58:c0: b3:1c:86:69:5f:0f:ae:d0:77:4a:34:60:76:a0:2e:3c:57:67: ad:e9:64:cb:c1:71:c4:68:b1:7a:ba:51:85:59:1c:2e:14:f1: 50:9c:ef:64 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSTl0wAGBdtkNS//EWusEn5pnCRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0RE QzM0RUE2QTAeFw0yNTEwMDIwMzU1MDBaFw0yNjEwMDEwNDAwMDBaMDMxMTAvBgNV BAMTKEI2MERDNUVEQjAwRkJBNjg3ODlGQUQ5QzlFRjIxNTU4OEU5QTYxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAQ+scUyEJmyEMgo+ZtBskBhb AqyBKoOIGjS6xor+H0eV/4bnipEC+qXXZgl+iscmI2quKUxSBnqEpTIEfNm8z6jU RXi7WhY2pAzvO065a4tzXVZWqkyPXJNcnutnD1HEL3ltXTlZkIwqX7WGhVXdG5qL x5qD05UtPGXgdkoZe7clbF/oX6i2DOE8NZpfrbr+xUinD4Kr6yzVeUlICmmARBdS LPo6mVtV3WkGy6QUiKq+V81k5WpzFZI+tp4S6t4Tl09Nt3LrkPz3/dzjPrUIS6tO JAeEtKhJqltm1PV9mgdFQ/KSpBrBaHMHhSkAeJe8ktoHdVgUlKQHG3PflwldAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUtg3F7bAPumh4n62cnvIVWI6aYZUwHwYDVR0j BBgwFoAUSFALAMYdobDsRITgeR27zdw06mowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YzI3ODc0Ny02YWM3LTRmODctOWIyYi0yMTM1OTI5NGYwMzQvMC80ODUwMEIwMEM2 MURBMUIwRUM0NDg0RTA3OTFEQkJDRERDMzRFQTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1MDBCMDBDNjFEQTFCMEVDNDQ4NEUwNzkxREJCQ0REQzM0 RUE2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjMjc4NzQ3LTZhYzctNGY4Ny05 YjJiLTIxMzU5Mjk0ZjAzNC8wLzMxMzAzMzJlMzgzNzJlMzEzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdXETANBgkqhkiG 9w0BAQsFAAOCAQEAbqjrxOpH2p43aIYg8aEY73kt+e0kz0ocBCyKktyeCKXxrwhg 7GcxyxbN/vWI8B1FuKwjq8muvK5RssaUej2rFFbF2T10steAAEQfWcZuwNbR4Thy TLDcn6Dx+EuQGH1wn2ZQ/Ssv0vwB7oS+ute7gi889XZeQRUuYYvwI2T9GHzSD7Bp ETqIJGI5BhXw3H8HQkma9xj+mmq2csW6XpWOgA9q0ANGn+QRHoSBNF7bHXhuJCuD Jo2j0XUsmQM1xWsK1TjNVDLpna3DzzRo4mqwwy+2f7THB1jAsxyGaV8PrtB3SjRg dqAuPFdnrelky8FxxGixerpRhVkcLhTxUJzvZA== -----END CERTIFICATE-----Generated at Tue Oct 21 00:25:53 2025 by rpki-client