$ rpki-client -vvf repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34352e302f32342d3234203d3e20313338383831.roa File: 3130332e35392e34352e302f32342d3234203d3e20313338383831.roa (raw, json) Hash identifier: ks49l0bUoeewZcd0n5gcdfuMxvguTKfe8S7bt2VJxEI= Subject key identifier: C3:A3:3F:72:01:6F:1A:DE:DB:2C:1B:60:4C:A1:72:5B:A1:0C:7E:E4 Certificate issuer: /CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Certificate serial: 32EEA957BBDC63A6B1640FA206905C6A9DE3D3FA Authority key identifier: 9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34352e302f32342d3234203d3e20313338383831.roa Signing time: Tue 30 Sep 2025 10:00:01 +0000 ROA not before: Tue 30 Sep 2025 09:55:01 +0000 ROA not after: Tue 29 Sep 2026 10:00:01 +0000 asID: 138881 IP address blocks: 103.59.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ee:a9:57:bb:dc:63:a6:b1:64:0f:a2:06:90:5c:6a:9d:e3:d3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A5A8760ADE68BFD3428CC06FE6DAC982728AE95 Validity Not Before: Sep 30 09:55:01 2025 GMT Not After : Sep 29 10:00:01 2026 GMT Subject: CN=C3A33F72016F1ADEDB2C1B604CA1725BA10C7EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:d2:59:3a:92:d5:88:14:89:62:4b:d6:8f: 83:ec:4a:7e:b0:3c:c7:41:7e:aa:6a:15:e6:7d:45: 7e:2f:28:9e:5b:e1:47:20:cd:9f:c9:72:30:43:39: 31:a0:ab:a0:30:9e:ea:e1:94:35:e0:0c:6f:79:df: 4c:6b:46:48:14:1d:7f:b0:79:08:a7:40:ff:39:63: 77:8d:d8:cb:fe:1b:5b:1d:67:80:30:14:e9:97:1d: 06:17:92:c8:94:48:94:69:0e:a2:e8:9f:ea:df:a7: 87:f0:28:ca:20:e7:08:3a:3c:96:be:61:8a:8f:64: 3f:d6:43:ab:24:60:b5:1b:b8:5d:ad:83:ba:41:3d: 3e:61:76:77:f7:30:d0:55:54:be:b0:74:20:86:82: 49:4c:b6:4a:8b:8c:71:e1:96:e1:95:42:70:33:d4: 45:3c:c9:4e:a3:79:59:9d:7e:3c:a7:8f:22:7e:c9: 38:06:a1:a8:8c:bf:df:57:a1:19:40:d4:bd:2e:db: 94:c7:63:65:72:22:31:d5:45:d5:a1:2c:6f:ee:e1: fe:f0:fb:01:d3:c2:62:63:c3:08:25:23:3e:32:4d: 8f:e9:77:d7:8d:56:45:92:9b:ca:82:26:f1:42:e9: 17:ea:17:a0:da:82:23:72:05:1c:43:7b:b5:2f:63: a4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A3:3F:72:01:6F:1A:DE:DB:2C:1B:60:4C:A1:72:5B:A1:0C:7E:E4 X509v3 Authority Key Identifier: keyid:9A:5A:87:60:AD:E6:8B:FD:34:28:CC:06:FE:6D:AC:98:27:28:AE:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A5A8760ADE68BFD3428CC06FE6DAC982728AE95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a17598e4-2064-4ecb-98f6-b259a74996a1/0/3130332e35392e34352e302f32342d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.45.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:8d:db:85:e2:89:1f:f2:25:e7:5c:2e:97:35:7e:07:13:0e: 37:2d:ca:f3:23:fb:a8:ed:52:35:2d:d1:a3:45:10:c7:c6:3b: 9f:61:0d:21:6e:34:89:96:39:b3:1a:e4:1e:45:28:b4:a8:1f: 63:0a:90:29:07:17:0c:fe:7b:43:38:2f:3d:35:ca:23:81:bb: 82:fd:8b:2b:48:21:ae:05:81:80:7b:b8:a0:d1:72:5f:d7:19: 27:74:a0:f5:8a:b4:03:4b:1f:d6:bd:ec:2c:69:75:d9:9d:28: e7:8a:6b:13:b5:53:0e:6f:f2:20:6d:cc:37:ef:d4:3d:f3:b2: 71:15:fb:44:c6:a0:5e:f3:69:c6:2a:97:5e:96:08:12:0c:02: f6:bd:f1:ef:58:2c:10:32:de:7f:73:b9:31:08:4c:b2:9a:e3: 7f:1b:06:a3:0f:f2:cb:42:bd:bb:af:20:5b:cd:cd:53:0d:10: 87:3b:53:36:64:42:3e:7d:81:ba:aa:1f:38:50:6f:90:3b:55: 5e:22:36:28:13:6d:d0:b2:39:58:32:84:f4:97:50:11:c1:17: df:38:86:53:fb:d1:ca:cc:34:25:9a:5d:ca:07:d9:82:ac:3e: 70:53:81:c4:6e:92:3d:59:60:8e:9a:96:f9:9c:4c:3c:e3:39: 61:23:11:53 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMu6pV7vcY6axZA+iBpBcap3j0/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgy NzI4QUU5NTAeFw0yNTA5MzAwOTU1MDFaFw0yNjA5MjkxMDAwMDFaMDMxMTAvBgNV BAMTKEMzQTMzRjcyMDE2RjFBREVEQjJDMUI2MDRDQTE3MjVCQTEwQzdFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQV9JZOpLViBSJYkvWj4PsSn6w PMdBfqpqFeZ9RX4vKJ5b4UcgzZ/JcjBDOTGgq6AwnurhlDXgDG9530xrRkgUHX+w eQinQP85Y3eN2Mv+G1sdZ4AwFOmXHQYXksiUSJRpDqLon+rfp4fwKMog5wg6PJa+ YYqPZD/WQ6skYLUbuF2tg7pBPT5hdnf3MNBVVL6wdCCGgklMtkqLjHHhluGVQnAz 1EU8yU6jeVmdfjynjyJ+yTgGoaiMv99XoRlA1L0u25THY2VyIjHVRdWhLG/u4f7w +wHTwmJjwwglIz4yTY/pd9eNVkWSm8qCJvFC6RfqF6DagiNyBRxDe7UvY6T7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUw6M/cgFvGt7bLBtgTKFyW6EMfuQwHwYDVR0j BBgwFoAUmlqHYK3mi/00KMwG/m2smCcorpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTc1OThlNC0yMDY0LTRlY2ItOThmNi1iMjU5YTc0OTk2YTEvMC85QTVBODc2MEFE RTY4QkZEMzQyOENDMDZGRTZEQUM5ODI3MjhBRTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE1QTg3NjBBREU2OEJGRDM0MjhDQzA2RkU2REFDOTgyNzI4 QUU5NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNzU5OGU0LTIwNjQtNGVjYi05 OGY2LWIyNTlhNzQ5OTZhMS8wLzMxMzAzMzJlMzUzOTJlMzQzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzODM4MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc7LTANBgkqhkiG 9w0BAQsFAAOCAQEAfI3bheKJH/Il51wulzV+BxMONy3K8yP7qO1SNS3Ro0UQx8Y7 n2ENIW40iZY5sxrkHkUotKgfYwqQKQcXDP57QzgvPTXKI4G7gv2LK0ghrgWBgHu4 oNFyX9cZJ3Sg9Yq0A0sf1r3sLGl12Z0o54prE7VTDm/yIG3MN+/UPfOycRX7RMag XvNpxiqXXpYIEgwC9r3x71gsEDLef3O5MQhMsprjfxsGow/yy0K9u68gW83NUw0Q hztTNmRCPn2BuqofOFBvkDtVXiI2KBNt0LI5WDKE9JdQEcEX3ziGU/vRysw0JZpd ygfZgqw+cFOBxG6SPVlgjpqW+ZxMPOM5YSMRUw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:55:34 2025 by rpki-client