$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e312e302f32342d3234203d3e203138303539.roa File: 3130332e342e312e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: OjYgxwWbPVt7kSduTX5J3JzMfRdhXNqku6OQsvDQVFw= Subject key identifier: C1:DC:38:5F:95:02:C7:D6:8E:7F:10:A9:93:D1:59:72:79:EA:F8:08 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 724FDC9DBD73342DEF36B4CC92C6053B9E3062D1 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e312e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 03:00:01 +0000 ROA not before: Fri 26 Sep 2025 02:55:01 +0000 ROA not after: Fri 25 Sep 2026 03:00:01 +0000 asID: 18059 IP address blocks: 103.4.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4f:dc:9d:bd:73:34:2d:ef:36:b4:cc:92:c6:05:3b:9e:30:62:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 02:55:01 2025 GMT Not After : Sep 25 03:00:01 2026 GMT Subject: CN=C1DC385F9502C7D68E7F10A993D1597279EAF808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:f8:a0:01:3c:d6:2d:c2:a6:0b:e9:ff:ec: 74:94:c7:48:44:23:95:a7:b9:1f:f3:08:1e:da:b4: 22:62:f9:5d:48:f7:dd:e1:6c:b8:c2:8d:6f:32:51: 4e:34:9f:7e:0c:d8:2d:6c:58:df:4f:78:22:8a:69: e1:10:f6:b8:54:ad:8c:36:75:62:d3:50:32:0d:fc: 3a:ab:ad:d9:06:77:1c:c4:3f:84:b2:49:12:2d:01: 28:d8:25:39:fc:6f:2d:29:5f:0a:04:7e:5a:14:9f: 34:39:70:48:b9:db:96:03:ff:3f:ea:ec:ac:3e:fd: cc:a3:aa:7a:47:c4:fe:40:b1:53:35:ad:8b:e0:fc: 3e:a9:b8:fb:de:09:45:ea:bf:e2:50:11:51:a2:6f: dd:5a:0f:7b:42:79:e4:0f:29:c2:7d:a1:7a:24:3a: bf:7b:ac:4a:c1:dd:c7:4d:d9:1c:cd:9e:f1:1c:bc: f4:c8:01:ac:2f:35:7f:7c:18:ee:b8:02:33:64:eb: 7b:c1:60:c9:7f:0e:cf:de:89:02:2c:59:13:95:de: 58:d9:16:ae:0a:fb:0f:8a:37:0f:74:ec:6f:3d:89: 88:e7:93:2e:a7:c1:5c:8c:36:f9:8c:86:e8:6e:ec: c7:30:37:e5:c4:10:90:14:a7:9b:50:d0:a4:2a:f8: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DC:38:5F:95:02:C7:D6:8E:7F:10:A9:93:D1:59:72:79:EA:F8:08 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e312e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.1.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ce:c4:e1:be:b4:a2:0e:58:eb:17:ef:f3:a4:9b:a8:77:7b: 77:0c:b6:48:d0:0e:2d:7d:af:8d:3b:52:bf:b4:b5:d3:a5:b9: e9:b9:89:af:4e:22:66:40:18:34:4a:01:e5:52:1b:8f:d3:7d: f5:4a:1d:45:1e:1b:8f:c3:42:51:5e:84:ba:29:f8:45:d1:a0: 9a:b1:21:8b:6d:bf:fe:fc:c4:95:c3:e2:a5:28:54:be:0e:c8: b2:48:0d:f7:91:9d:da:03:12:21:bc:b3:99:3b:87:fe:86:41: b8:63:9d:ee:b3:23:fe:d2:04:78:3f:7d:0f:e6:c7:f3:9c:01: e1:77:12:73:b4:49:3a:03:96:6d:11:61:31:c8:75:74:9c:a8: 69:c5:dc:13:06:a7:41:50:f6:08:48:57:97:d3:cb:29:dd:9a: 7a:4c:8e:22:a3:12:b9:42:5d:99:a1:36:59:c9:5d:5b:62:2a: 81:88:99:28:07:92:2c:fc:04:1e:d6:73:c3:25:ba:78:ba:20: 36:7b:f8:08:04:c7:de:74:d3:36:91:2d:78:d1:b5:87:c9:f0: 5a:00:fa:0c:21:ca:76:9d:cb:f5:0f:8c:45:76:be:69:01:f4: c7:2a:82:1e:e4:b7:f5:4a:a3:c3:22:bb:5c:82:b6:e2:a6:d4: 55:3c:71:8f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgIUck/cnb1zNC3vNrTMksYFO54wYtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwMjU1MDFaFw0yNjA5MjUwMzAwMDFaMDMxMTAvBgNV BAMTKEMxREMzODVGOTUwMkM3RDY4RTdGMTBBOTkzRDE1OTcyNzlFQUY4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5PigATzWLcKmC+n/7HSUx0hE I5WnuR/zCB7atCJi+V1I993hbLjCjW8yUU40n34M2C1sWN9PeCKKaeEQ9rhUrYw2 dWLTUDIN/DqrrdkGdxzEP4SySRItASjYJTn8by0pXwoEfloUnzQ5cEi525YD/z/q 7Kw+/cyjqnpHxP5AsVM1rYvg/D6puPveCUXqv+JQEVGib91aD3tCeeQPKcJ9oXok Or97rErB3cdN2RzNnvEcvPTIAawvNX98GO64AjNk63vBYMl/Ds/eiQIsWROV3ljZ Fq4K+w+KNw907G89iYjnky6nwVyMNvmMhuhu7McwN+XEEJAUp5tQ0KQq+M+PAgMB AAGjggIrMIICJzAdBgNVHQ4EFgQUwdw4X5UCx9aOfxCpk9FZcnnq+AgwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI4MzY3NjMtMTJiNi00ZDhmLWFk MGItNGNkNWI2MTk1OWVmLzAvMzEzMDMzMmUzNDJlMzEyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZwQBMA0GCSqGSIb3DQEBCwUA A4IBAQCYzsThvrSiDljrF+/zpJuod3t3DLZI0A4tfa+NO1K/tLXTpbnpuYmvTiJm QBg0SgHlUhuP0331Sh1FHhuPw0JRXoS6KfhF0aCasSGLbb/+/MSVw+KlKFS+Dsiy SA33kZ3aAxIhvLOZO4f+hkG4Y53usyP+0gR4P30P5sfznAHhdxJztEk6A5ZtEWEx yHV0nKhpxdwTBqdBUPYISFeX08sp3Zp6TI4ioxK5Ql2ZoTZZyV1bYiqBiJkoB5Is /AQe1nPDJbp4uiA2e/gIBMfedNM2kS140bWHyfBaAPoMIcp2ncv1D4xFdr5pAfTH KoIe5Lf1SqPDIrtcgrbiptRVPHGP -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:49 2025 by rpki-client