$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa File: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (raw, json) Hash identifier: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y= Subject key identifier: 61:EB:AE:75:01:0F:54:69:58:DC:FD:5C:84:48:D1:85:5B:78:3C:B7 Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 7E0AE9B0437825D23A97085BB01870FB3F7A314B Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa Signing time: Fri 12 Sep 2025 08:00:00 +0000 ROA not before: Fri 12 Sep 2025 07:55:00 +0000 ROA not after: Fri 11 Sep 2026 08:00:00 +0000 asID: 46047 IP address blocks: 103.225.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0a:e9:b0:43:78:25:d2:3a:97:08:5b:b0:18:70:fb:3f:7a:31:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Sep 12 07:55:00 2025 GMT Not After : Sep 11 08:00:00 2026 GMT Subject: CN=61EBAE75010F546958DCFD5C8448D1855B783CB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:4a:0d:a5:db:75:9a:17:d1:14:e1:0a:b2: a0:ea:88:60:3e:94:f1:d3:89:35:bd:1b:c7:21:ea: 70:ee:fd:e6:d6:7d:29:b8:d6:7d:54:42:ee:a3:c4: ca:73:07:e0:ec:a3:99:4c:28:20:9b:6c:6c:72:96: 5b:81:4e:44:1f:05:ea:20:40:ac:4f:c7:f6:cf:4f: e7:1d:1b:b9:26:1f:43:ce:28:de:8d:26:0d:bf:8a: 88:0f:a4:5b:d5:ea:e9:26:1e:ff:f8:b3:73:f2:63: fa:7c:17:29:e3:af:f0:53:c8:28:83:31:82:ce:71: 4c:89:00:f0:73:e4:65:2c:c6:0a:1a:d5:72:75:42: a6:e6:55:01:be:b1:1e:bc:50:f9:ca:3a:3f:91:59: d5:04:80:f5:24:c8:8f:76:a1:ca:e3:f8:d3:e0:8b: 6c:9b:cc:e2:d4:af:c7:4b:c3:30:bc:34:22:82:43: 14:a1:a4:fb:5c:26:0f:f6:97:62:cd:72:9d:23:a1: 3f:77:e0:88:31:74:3c:ca:35:f8:35:b7:4b:97:81: 80:b7:d0:7c:dc:80:10:b0:96:6d:ea:9e:cc:8d:9f: a7:6a:72:16:44:06:50:e0:1d:6f:2e:45:96:58:11: 1e:07:be:94:27:8b:76:2c:99:43:44:7b:c9:37:fa: d5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EB:AE:75:01:0F:54:69:58:DC:FD:5C:84:48:D1:85:5B:78:3C:B7 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.170.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:75:aa:3d:d5:0b:85:66:0e:a2:fe:82:de:58:5e:9f:a3:73: 35:01:1f:00:45:29:16:71:8a:05:be:47:95:5d:32:eb:79:1f: 0c:9f:84:c8:bb:c6:ad:4f:ba:75:e9:b0:eb:02:18:6b:96:9b: 5c:03:bb:01:5a:7c:97:49:07:94:b9:db:8b:46:55:39:e6:43: 7a:5a:82:b8:6e:ea:be:d6:dc:ff:b0:21:0a:3a:d0:f3:d9:d3: 2c:37:a8:d3:07:d9:03:e3:3c:ac:80:d1:c6:3a:98:59:57:fb: 67:c1:41:d6:be:19:67:74:01:ad:3e:53:24:ff:c3:0a:22:d9: 48:da:d3:f0:e7:7d:a4:fa:e3:38:27:77:ae:4e:fb:5e:ee:54: 6c:e5:9c:72:23:39:92:28:bb:68:78:d6:59:5f:32:d2:b4:f7: c5:6b:73:54:92:b0:8c:fe:f0:af:2f:d4:b5:05:b3:1f:18:c4: 2c:5b:ef:d4:a0:89:8d:01:22:09:d4:62:ae:3a:7c:95:03:3b: d5:d8:82:6a:de:cd:01:0d:bb:28:da:cc:34:41:4a:d8:f6:5c: 1c:c5:38:cf:a1:ed:b1:da:0b:e9:45:37:d5:5e:5b:d3:65:55: 2e:91:be:96:d8:e4:03:ec:1b:79:d9:30:13:d2:0e:65:86:c6: 9c:b1:b8:f6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfgrpsEN4JdI6lwhbsBhw+z96MUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA5MTIwNzU1MDBaFw0yNjA5MTEwODAwMDBaMDMxMTAvBgNV BAMTKDYxRUJBRTc1MDEwRjU0Njk1OERDRkQ1Qzg0NDhEMTg1NUI3ODNDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3UoNpdt1mhfRFOEKsqDqiGA+ lPHTiTW9G8ch6nDu/ebWfSm41n1UQu6jxMpzB+Dso5lMKCCbbGxylluBTkQfBeog QKxPx/bPT+cdG7kmH0POKN6NJg2/iogPpFvV6ukmHv/4s3PyY/p8Fynjr/BTyCiD MYLOcUyJAPBz5GUsxgoa1XJ1QqbmVQG+sR68UPnKOj+RWdUEgPUkyI92ocrj+NPg i2ybzOLUr8dLwzC8NCKCQxShpPtcJg/2l2LNcp0joT934IgxdDzKNfg1t0uXgYC3 0HzcgBCwlm3qnsyNn6dqchZEBlDgHW8uRZZYER4HvpQni3YsmUNEe8k3+tV5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYeuudQEPVGlY3P1chEjRhVt4PLcwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMTI5Yzk0LWM1YTYtNGRkNC1i MzRhLTdlMzUzZGU2Y2U4MS8wLzMxMzAzMzJlMzIzMjM1MmUzMTM3MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+GqMA0GCSqG SIb3DQEBCwUAA4IBAQBudao91QuFZg6i/oLeWF6fo3M1AR8ARSkWcYoFvkeVXTLr eR8Mn4TIu8atT7p16bDrAhhrlptcA7sBWnyXSQeUuduLRlU55kN6WoK4buq+1tz/ sCEKOtDz2dMsN6jTB9kD4zysgNHGOphZV/tnwUHWvhlndAGtPlMk/8MKItlI2tPw 532k+uM4J3euTvte7lRs5ZxyIzmSKLtoeNZZXzLStPfFa3NUkrCM/vCvL9S1BbMf GMQsW+/UoImNASIJ1GKuOnyVAzvV2IJq3s0BDbso2sw0QUrY9lwcxTjPoe2x2gvp RTfVXlvTZVUukb6W2OQD7Bt52TAT0g5lhsacsbj2 -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:48 2025 by rpki-client