$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa File: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (raw, json) Hash identifier: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY= Subject key identifier: 61:D9:5C:07:04:87:D9:07:68:67:2D:34:06:C2:7D:55:6F:04:F2:8D Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 49F5CA53DC1855CED7295F78746147D8CF0A2DA4 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa Signing time: Wed 15 Oct 2025 12:14:18 +0000 ROA not before: Wed 15 Oct 2025 12:09:18 +0000 ROA not after: Wed 14 Oct 2026 12:14:18 +0000 asID: 140396 IP address blocks: 103.161.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f5:ca:53:dc:18:55:ce:d7:29:5f:78:74:61:47:d8:cf:0a:2d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Oct 15 12:09:18 2025 GMT Not After : Oct 14 12:14:18 2026 GMT Subject: CN=61D95C070487D90768672D3406C27D556F04F28D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a7:dd:3c:1a:37:2c:99:2d:35:7e:73:e5:04: e9:45:1b:6b:b8:30:26:e0:55:91:17:07:95:52:f2: 7a:74:ac:2e:8c:2d:6c:e8:b0:ba:9c:08:55:85:fe: 22:d4:51:5a:ef:14:84:75:73:1e:4f:74:ee:73:30: b9:fc:3a:3b:c1:24:27:b5:4a:10:33:13:48:84:12: 41:a1:a7:25:0d:9e:e0:2a:6d:dd:af:c3:43:d0:d1: dc:ed:e0:d9:88:61:e8:da:81:b2:46:d4:36:59:1a: d1:3a:b6:97:3d:e8:24:e3:70:5d:e4:5b:79:87:cd: f8:51:c1:fa:cb:ff:a5:5f:8e:81:19:62:26:f6:d5: 51:d8:63:9c:6f:c0:19:7e:65:c2:c0:84:1b:7f:b4: 19:4e:3f:5b:4a:fd:f9:be:ca:cb:96:1a:26:d6:ff: 01:82:04:8e:ae:39:71:9d:d1:1d:1d:dd:d4:68:53: 78:26:d1:8e:2e:b9:ec:3d:13:e0:8f:a5:3b:e6:9b: 2c:ba:fb:9b:4a:1f:7d:1f:9f:08:b0:ef:c9:da:62: 9c:ed:19:5a:fa:6a:da:90:23:c6:b3:f0:7b:a0:18: 66:c8:c8:23:4a:29:83:52:40:52:e1:a5:8a:2a:58: 62:b6:cd:5e:b4:bc:fa:df:02:8d:29:e7:f8:e7:40: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D9:5C:07:04:87:D9:07:68:67:2D:34:06:C2:7D:55:6F:04:F2:8D X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.73.0/24 Signature Algorithm: sha256WithRSAEncryption 73:b5:ea:5d:23:09:a3:40:5d:51:2c:0f:f1:67:e5:be:a8:49: 54:71:31:d8:09:4a:65:38:c4:23:e1:00:32:2b:7e:9c:f0:bf: ed:62:85:cb:8d:1a:0c:be:6b:86:69:37:83:fa:cd:af:e3:7b: 96:d0:9d:81:4b:17:1a:5f:b0:77:44:30:20:d1:3e:62:c0:02: c3:b5:5e:83:5b:62:af:c9:31:f6:32:a6:dc:99:cd:68:99:bd: bb:e5:91:96:79:b9:77:50:b6:da:40:bf:91:b7:ae:14:e3:61: 17:b7:5a:4a:81:6e:98:4b:15:dc:79:7e:56:2c:98:b4:c3:33: 5d:8a:65:14:64:56:62:20:2b:66:49:2d:41:1b:d3:fe:4b:cd: 78:b8:9a:98:b0:3c:f6:9d:dd:11:37:2b:c6:77:32:d5:d2:08: 41:e0:55:62:85:bc:17:8a:d7:e4:7a:fe:b4:84:bf:26:57:a7: 34:41:02:6e:bf:97:33:f0:8a:bd:92:03:13:fa:c7:49:b5:b2: 72:fa:8a:f6:56:ea:d6:8d:47:a5:76:93:24:06:11:30:c5:71: c1:a0:0e:74:9e:23:2e:ed:af:86:11:d3:2d:cc:33:c7:ab:46: 7e:51:ba:d1:51:fa:1b:c4:82:7d:3b:f8:9e:13:41:c4:42:93: 3c:bb:c5:40 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSfXKU9wYVc7XKV94dGFH2M8KLaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTEwMTUxMjA5MThaFw0yNjEwMTQxMjE0MThaMDMxMTAvBgNV BAMTKDYxRDk1QzA3MDQ4N0Q5MDc2ODY3MkQzNDA2QzI3RDU1NkYwNEYyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYp908GjcsmS01fnPlBOlFG2u4 MCbgVZEXB5VS8np0rC6MLWzosLqcCFWF/iLUUVrvFIR1cx5PdO5zMLn8OjvBJCe1 ShAzE0iEEkGhpyUNnuAqbd2vw0PQ0dzt4NmIYejagbJG1DZZGtE6tpc96CTjcF3k W3mHzfhRwfrL/6VfjoEZYib21VHYY5xvwBl+ZcLAhBt/tBlOP1tK/fm+ysuWGibW /wGCBI6uOXGd0R0d3dRoU3gm0Y4uuew9E+CPpTvmmyy6+5tKH30fnwiw78naYpzt GVr6atqQI8az8HugGGbIyCNKKYNSQFLhpYoqWGK2zV60vPrfAo0p5/jnQMWJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYdlcBwSH2QdoZy00BsJ9VW8E8o0wHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllYmU3YWQ4LWUxNWMtNDAxNC1i ZmIzLWJlNjliN2Q1ZGU4OC8wLzMxMzAzMzJlMzEzNjMxMmUzNzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzMzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6FJMA0GCSqG SIb3DQEBCwUAA4IBAQBztepdIwmjQF1RLA/xZ+W+qElUcTHYCUplOMQj4QAyK36c 8L/tYoXLjRoMvmuGaTeD+s2v43uW0J2BSxcaX7B3RDAg0T5iwALDtV6DW2KvyTH2 Mqbcmc1omb275ZGWebl3ULbaQL+Rt64U42EXt1pKgW6YSxXceX5WLJi0wzNdimUU ZFZiICtmSS1BG9P+S814uJqYsDz2nd0RNyvGdzLV0ghB4FVihbwXitfkev60hL8m V6c0QQJuv5cz8Iq9kgMT+sdJtbJy+or2VurWjUeldpMkBhEwxXHBoA50niMu7a+G EdMtzDPHq0Z+UbrRUfobxIJ9O/ieE0HEQpM8u8VA -----END CERTIFICATE-----Generated at Mon Oct 20 20:26:35 2025 by rpki-client