$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa File: 3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa (raw, json) Hash identifier: DY64pprFnHFOaGNLsgUuWKWN2nPg3FOgN/Io+biTvOM= Subject key identifier: 30:36:57:94:D5:AA:02:63:E3:7D:0A:43:68:EE:DA:5C:FF:81:6C:5A Certificate issuer: /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Certificate serial: 2545E5FF9EE38A2E4ACD9424162D604473E3599E Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa Signing time: Mon 20 Oct 2025 04:00:02 +0000 ROA not before: Mon 20 Oct 2025 03:55:02 +0000 ROA not after: Mon 19 Oct 2026 04:00:02 +0000 asID: 132829 IP address blocks: 103.134.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:45:e5:ff:9e:e3:8a:2e:4a:cd:94:24:16:2d:60:44:73:e3:59:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA Validity Not Before: Oct 20 03:55:02 2025 GMT Not After : Oct 19 04:00:02 2026 GMT Subject: CN=30365794D5AA0263E37D0A4368EEDA5CFF816C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ce:48:42:12:87:c8:ef:92:88:36:aa:3b:bb: 0f:f7:83:eb:e2:87:d9:ce:0b:92:1e:45:be:27:ff: 7f:73:b6:b6:5d:39:df:32:f8:52:62:8b:15:89:59: b9:dc:87:0e:e8:16:8d:44:a0:55:16:cd:42:05:24: 9d:09:c4:fa:81:f5:d5:ce:37:e6:a4:c5:b1:35:2d: 8e:ea:bb:25:34:af:4d:89:e9:00:b1:f3:9b:5b:c8: df:f4:56:cf:85:13:17:03:66:4c:46:c7:87:7a:40: 4e:20:52:c7:79:69:2e:0d:a4:73:c8:4c:c0:f2:76: 2c:87:03:53:1d:f0:71:38:e9:f7:97:2c:df:ac:45: 25:02:e2:84:34:42:12:26:90:4e:3e:b0:76:e4:7a: 85:73:a8:29:86:ee:b8:75:a0:bb:ca:c1:0f:02:5f: 52:ca:23:d9:fa:7d:01:62:2e:9d:c8:9b:6c:82:76: 83:6d:c6:22:36:9b:f2:ef:43:35:a8:15:57:d1:41: ab:58:e7:62:da:25:f8:64:2a:98:75:d8:36:7c:54: 54:97:08:67:3c:8b:24:c2:0a:f4:ac:f7:9a:99:e3: b2:5a:61:31:52:7d:ad:25:e3:20:10:22:e3:b4:34: bf:67:5a:f9:d1:ce:77:c8:eb:82:f2:45:b1:ec:8e: 87:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:57:94:D5:AA:02:63:E3:7D:0A:43:68:EE:DA:5C:FF:81:6C:5A X509v3 Authority Key Identifier: keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e34392e302f32342d3234203d3e20313332383239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.49.0/24 Signature Algorithm: sha256WithRSAEncryption d0:27:e9:0b:39:f5:c2:39:b3:3d:58:91:13:5c:64:91:4b:ee: e3:1a:7b:24:78:35:f6:71:95:4f:07:38:28:55:f5:43:d6:45: 8f:3a:20:5d:cd:7b:f1:03:3d:e0:b5:b8:7f:a3:17:e1:87:06: b0:b4:07:eb:8d:f8:7c:d4:ae:79:82:ef:70:05:43:d2:af:9a: 0a:02:f9:55:7f:21:ec:93:b1:e8:cf:3c:be:81:61:2b:48:49: 49:7b:57:82:5f:29:31:13:73:76:39:62:99:a3:1f:0b:be:58: bf:4f:13:b5:6d:75:d3:1a:19:ef:0f:a5:de:c4:ae:05:97:03: d5:03:de:cf:f3:ae:fc:25:ea:45:71:a9:ca:50:b9:26:13:75: 3b:e7:ed:c3:4b:1c:91:16:dc:e7:43:67:25:10:be:04:4c:b0: 26:7b:c1:6e:5c:b0:fa:a9:68:80:65:28:8f:80:45:96:c7:ee: b4:a5:8a:77:7e:4f:bd:39:56:37:49:f3:f4:e5:c0:12:89:a7: e0:02:ec:37:6a:28:51:74:bf:c7:db:60:13:79:94:ed:0b:42: 4c:45:aa:6b:2a:42:83:31:5c:cc:ec:93:be:8a:c9:35:dd:1f: 1e:08:f0:dd:84:58:23:c1:d4:f2:b5:23:d3:39:21:50:f8:64: 54:2b:0a:f5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJUXl/57jii5KzZQkFi1gRHPjWZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0 NDRERjJFQTAeFw0yNTEwMjAwMzU1MDJaFw0yNjEwMTkwNDAwMDJaMDMxMTAvBgNV BAMTKDMwMzY1Nzk0RDVBQTAyNjNFMzdEMEE0MzY4RUVEQTVDRkY4MTZDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEzkhCEofI75KINqo7uw/3g+vi h9nOC5IeRb4n/39ztrZdOd8y+FJiixWJWbnchw7oFo1EoFUWzUIFJJ0JxPqB9dXO N+akxbE1LY7quyU0r02J6QCx85tbyN/0Vs+FExcDZkxGx4d6QE4gUsd5aS4NpHPI TMDydiyHA1Md8HE46feXLN+sRSUC4oQ0QhImkE4+sHbkeoVzqCmG7rh1oLvKwQ8C X1LKI9n6fQFiLp3Im2yCdoNtxiI2m/LvQzWoFVfRQatY52LaJfhkKph12DZ8VFSX CGc8iyTCCvSs95qZ47JaYTFSfa0l4yAQIuO0NL9nWvnRznfI64LyRbHsjoepAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMDZXlNWqAmPjfQpDaO7aXP+BbFowHwYDVR0j BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE RjJFQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05 Y2VhLWMxNmU5OGE4YjVlMC8wLzMxMzAzMzJlMzEzMzM0MmUzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzgzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4YxMA0GCSqG SIb3DQEBCwUAA4IBAQDQJ+kLOfXCObM9WJETXGSRS+7jGnskeDX2cZVPBzgoVfVD 1kWPOiBdzXvxAz3gtbh/oxfhhwawtAfrjfh81K55gu9wBUPSr5oKAvlVfyHsk7Ho zzy+gWErSElJe1eCXykxE3N2OWKZox8Lvli/TxO1bXXTGhnvD6XexK4FlwPVA97P 8678JepFcanKULkmE3U75+3DSxyRFtznQ2clEL4ETLAme8FuXLD6qWiAZSiPgEWW x+60pYp3fk+9OVY3SfP05cASiafgAuw3aihRdL/H22ATeZTtC0JMRaprKkKDMVzM 7JO+isk13R8eCPDdhFgjwdTytSPTOSFQ+GRUKwr1 -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:06 2025 by rpki-client