$ rpki-client -vvf repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa File: 3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa (raw, json) Hash identifier: kXJhf8bjfIsjZr7MyRalHajFn6WxrxEgkOVjsPKw9mY= Subject key identifier: 76:41:4A:E0:86:2F:13:00:2B:79:3A:46:54:C1:7B:47:5A:AF:74:2B Certificate issuer: /CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Certificate serial: 0C9BFA7B019CA6DCAE14A6352F12BD250F6BD85D Authority key identifier: 9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa Signing time: Wed 24 Sep 2025 10:00:01 +0000 ROA not before: Wed 24 Sep 2025 09:55:01 +0000 ROA not after: Wed 23 Sep 2026 10:00:01 +0000 asID: 141652 IP address blocks: 103.162.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9b:fa:7b:01:9c:a6:dc:ae:14:a6:35:2f:12:bd:25:0f:6b:d8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E106F95CC461B5B1F487A53F6B2D5A36F627004 Validity Not Before: Sep 24 09:55:01 2025 GMT Not After : Sep 23 10:00:01 2026 GMT Subject: CN=76414AE0862F13002B793A4654C17B475AAF742B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:03:c2:d4:41:49:05:b2:41:dc:c6:87:4a: 82:af:c4:aa:5e:c0:a4:3c:5e:4e:a4:3d:82:d5:89: 4a:da:d8:37:0e:b8:7a:4d:e9:1c:95:8e:f2:49:ca: a1:b9:a4:c1:b9:9a:67:ba:61:68:ef:89:54:fd:79: a6:8d:12:73:39:c5:89:23:99:36:3d:b8:47:b5:2d: 6e:d9:44:d9:37:54:42:22:1c:97:32:01:ef:07:3f: ef:9c:87:2c:37:4d:e2:1d:22:3e:8f:58:4d:4f:8d: 1c:6e:1a:3f:5e:ec:ea:cd:f4:13:9e:22:9f:5d:bd: b0:46:a7:17:ce:c6:18:1c:47:f4:54:d5:6b:aa:42: 8b:13:d6:b7:00:c0:88:b5:a4:e3:c9:40:7a:6d:f8: 6c:a4:86:70:44:9e:64:99:e5:17:e9:98:1f:69:82: 69:1a:16:a8:f7:c3:e8:1c:97:8f:2c:b6:f5:fa:0f: a6:03:14:85:f8:fb:5a:9c:19:26:ed:ee:c9:39:2b: af:41:65:5d:80:cf:cc:bd:6c:a3:41:5d:29:4b:22: db:d3:0a:c4:9b:91:48:dc:d0:1c:7b:3d:01:50:6e: ba:cd:89:87:56:25:ef:b7:8e:d1:e3:cb:56:dd:df: ba:fd:c4:a3:65:dc:16:40:06:bb:1a:f6:b3:0e:81: 0c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:41:4A:E0:86:2F:13:00:2B:79:3A:46:54:C1:7B:47:5A:AF:74:2B X509v3 Authority Key Identifier: keyid:9E:10:6F:95:CC:46:1B:5B:1F:48:7A:53:F6:B2:D5:A3:6F:62:70:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/9E106F95CC461B5B1F487A53F6B2D5A36F627004.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E106F95CC461B5B1F487A53F6B2D5A36F627004.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ad73895-c84c-464f-9b4f-8d30306b9727/0/3130332e3136322e3131322e302f32332d3234203d3e20313431363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.112.0/23 Signature Algorithm: sha256WithRSAEncryption 59:ed:9b:aa:53:aa:7a:0c:e6:12:e6:4a:5a:51:27:b9:23:de: b4:48:41:65:9c:45:c2:cb:6e:46:44:49:3a:60:65:39:b5:42: c3:fd:09:bf:ae:c3:4c:10:1e:c9:4c:61:94:be:1b:0b:05:ab: 1b:3b:fb:94:aa:1d:b0:3b:62:ce:c3:f8:67:a0:ab:f4:9a:3d: 82:d9:14:a7:4e:a6:fd:e4:9d:a2:55:62:76:c4:ad:d9:1f:7d: 03:10:6c:26:dd:58:0e:bf:4e:13:b7:33:56:8c:74:84:26:78: ef:7d:4a:e7:c9:5f:56:19:ef:45:22:f1:f4:12:14:65:08:d7: 95:d3:da:2b:d6:a5:26:42:c5:c7:46:da:0b:aa:ca:b1:c7:e4: f9:bf:6d:b2:7f:bf:1a:fb:45:c1:25:6f:3d:03:8c:a2:96:f8: 6f:84:dd:b1:18:3c:7a:8c:75:a9:c0:30:c5:b4:c5:b6:0f:4b: 97:8d:f4:fa:57:77:90:8d:7e:92:9e:f0:33:f0:a9:ca:18:21: 25:8c:96:4c:8b:b9:0b:c6:1c:3f:6f:11:0f:55:b4:e5:51:a5: 92:30:1a:c4:1b:c6:0b:e6:be:f6:d5:f9:77:a6:de:89:0b:97: a9:74:5c:a3:37:9c:d2:10:18:17:c5:99:96:12:82:c7:ae:6e: dc:6a:47:c2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDJv6ewGcptyuFKY1LxK9JQ9r2F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2 RjYyNzAwNDAeFw0yNTA5MjQwOTU1MDFaFw0yNjA5MjMxMDAwMDFaMDMxMTAvBgNV BAMTKDc2NDE0QUUwODYyRjEzMDAyQjc5M0E0NjU0QzE3QjQ3NUFBRjc0MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KAPC1EFJBbJB3MaHSoKvxKpe wKQ8Xk6kPYLViUra2DcOuHpN6RyVjvJJyqG5pMG5mme6YWjviVT9eaaNEnM5xYkj mTY9uEe1LW7ZRNk3VEIiHJcyAe8HP++chyw3TeIdIj6PWE1PjRxuGj9e7OrN9BOe Ip9dvbBGpxfOxhgcR/RU1WuqQosT1rcAwIi1pOPJQHpt+GykhnBEnmSZ5RfpmB9p gmkaFqj3w+gcl48stvX6D6YDFIX4+1qcGSbt7sk5K69BZV2Az8y9bKNBXSlLItvT CsSbkUjc0Bx7PQFQbrrNiYdWJe+3jtHjy1bd37r9xKNl3BZABrsa9rMOgQzFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUdkFK4IYvEwAreTpGVMF7R1qvdCswHwYDVR0j BBgwFoAUnhBvlcxGG1sfSHpT9rLVo29icAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWQ3Mzg5NS1jODRjLTQ2NGYtOWI0Zi04ZDMwMzA2Yjk3MjcvMC85RTEwNkY5NUND NDYxQjVCMUY0ODdBNTNGNkIyRDVBMzZGNjI3MDA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUUxMDZGOTVDQzQ2MUI1QjFGNDg3QTUzRjZCMkQ1QTM2RjYy NzAwNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhZDczODk1LWM4NGMtNDY0Zi05 YjRmLThkMzAzMDZiOTcyNy8wLzMxMzAzMzJlMzEzNjMyMmUzMTMxMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM1MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnonAwDQYJ KoZIhvcNAQELBQADggEBAFntm6pTqnoM5hLmSlpRJ7kj3rRIQWWcRcLLbkZESTpg ZTm1QsP9Cb+uw0wQHslMYZS+GwsFqxs7+5SqHbA7Ys7D+Gegq/SaPYLZFKdOpv3k naJVYnbErdkffQMQbCbdWA6/ThO3M1aMdIQmeO99SufJX1YZ70Ui8fQSFGUI15XT 2ivWpSZCxcdG2guqyrHH5Pm/bbJ/vxr7RcElbz0DjKKW+G+E3bEYPHqMdanAMMW0 xbYPS5eN9PpXd5CNfpKe8DPwqcoYISWMlkyLuQvGHD9vEQ9VtOVRpZIwGsQbxgvm vvbV+Xem3okLl6l0XKM3nNIQGBfFmZYSgseubtxqR8I= -----END CERTIFICATE-----Generated at Mon Oct 20 17:43:52 2025 by rpki-client