$ rpki-client -vvf repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa File: 3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (raw, json) Hash identifier: 6bqd3P1jvnQnjsCjRtIIfzvZLlg5nv5q33H6TglsIt4= Subject key identifier: 2A:ED:91:DC:80:EC:C6:F9:4A:ED:E0:73:48:F4:C2:BB:2A:DB:03:AF Certificate issuer: /CN=690E7BC726C787991D438BDDB48990A7A17D8D15 Certificate serial: 321F8F5DC148F327FD27368C880E3BE3FC268D3F Authority key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa Signing time: Wed 10 Sep 2025 11:01:33 +0000 ROA not before: Wed 10 Sep 2025 10:56:33 +0000 ROA not after: Wed 09 Sep 2026 11:01:33 +0000 asID: 18103 IP address blocks: 103.26.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1f:8f:5d:c1:48:f3:27:fd:27:36:8c:88:0e:3b:e3:fc:26:8d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690E7BC726C787991D438BDDB48990A7A17D8D15 Validity Not Before: Sep 10 10:56:33 2025 GMT Not After : Sep 9 11:01:33 2026 GMT Subject: CN=2AED91DC80ECC6F94AEDE07348F4C2BB2ADB03AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a4:ec:74:6b:a9:ad:46:33:29:96:f8:21:3f: d0:13:f5:a8:d0:fd:d2:82:5b:8a:11:24:41:03:19: 9c:48:98:96:3e:8b:1b:83:3b:e9:ae:6c:c4:59:30: bf:23:bf:5c:f0:d6:88:06:f1:69:af:43:ba:e6:47: 6b:d7:d8:9b:ec:0c:e9:6d:4b:09:d8:fb:6c:0a:83: bd:12:7a:8c:6c:81:ed:e7:ec:4f:76:10:d7:fa:ed: 41:3b:a7:47:fb:d0:af:3a:23:02:09:fe:4b:f2:da: 4c:82:d3:bb:43:10:3c:42:35:4c:05:11:84:08:a6: 44:62:50:19:cd:e9:44:a6:e3:e9:f0:79:65:ed:bb: 0b:5e:2f:63:88:a6:e7:41:2b:82:de:cc:d9:61:26: ef:5c:f1:99:e6:a8:d1:f8:3e:82:fe:42:c1:76:a8: 4f:dc:5b:18:2a:87:1b:f9:9c:24:a9:13:8b:bb:43: 5a:32:99:e6:50:54:33:5d:91:d5:85:8c:ac:71:45: 08:bd:84:fc:b9:20:50:37:56:6c:ef:ba:ef:9d:91: 30:99:cf:44:78:c1:23:9d:8e:e0:9a:4c:46:69:ba: 74:d5:35:de:00:4d:f9:61:1d:42:1e:29:fe:22:27: 66:d4:3a:2c:f5:b9:63:e6:7e:58:47:cb:8f:ee:2f: 88:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:ED:91:DC:80:EC:C6:F9:4A:ED:E0:73:48:F4:C2:BB:2A:DB:03:AF X509v3 Authority Key Identifier: keyid:69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.208.0/22 Signature Algorithm: sha256WithRSAEncryption 19:56:e0:97:53:af:b2:3c:e8:af:89:f1:e6:1f:04:45:75:73: 82:ad:da:ca:f4:3c:67:d8:e2:eb:b5:c7:ce:75:33:5c:ef:30: 30:c8:82:27:cf:ca:73:d1:20:a3:f8:ce:ab:fd:1f:04:89:8c: cc:ef:7c:67:13:73:05:a5:e0:0a:72:8c:31:83:de:d6:b2:d0: 10:90:a7:0c:45:81:75:41:a5:75:22:17:2b:ee:81:d4:5f:b2: 73:bb:46:d2:ca:17:1b:80:34:18:95:27:f6:fd:a9:58:3b:3d: 02:f2:25:55:6c:04:76:63:f7:8d:18:24:6a:0c:cd:1b:36:9f: fa:46:23:79:05:28:fb:e5:e1:7d:39:45:db:b8:65:59:b8:8f: 2e:77:72:86:15:67:aa:ba:f1:91:76:5b:98:e1:6a:4e:1e:05: bb:48:8f:3a:29:13:68:87:01:7a:6a:27:1f:60:9d:0c:9b:c0: 2a:87:51:c8:45:4b:f1:72:e9:e2:1c:d5:c5:84:d5:e5:a6:e0: 3b:ce:0a:5f:d9:7d:4e:1f:88:c8:ab:d2:bb:7d:0f:4f:d9:98: 62:5d:83:b9:34:5c:e3:33:af:2d:dd:c6:76:f0:07:78:87:6b: b4:91:ee:89:20:16:59:aa:43:5b:9b:5a:cb:10:09:fe:31:0f: 88:42:dd:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMh+PXcFI8yf9JzaMiA474/wmjT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjkwRTdCQzcyNkM3ODc5OTFENDM4QkREQjQ4OTkwQTdB MTdEOEQxNTAeFw0yNTA5MTAxMDU2MzNaFw0yNjA5MDkxMTAxMzNaMDMxMTAvBgNV BAMTKDJBRUQ5MURDODBFQ0M2Rjk0QUVERTA3MzQ4RjRDMkJCMkFEQjAzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDypOx0a6mtRjMplvghP9AT9ajQ /dKCW4oRJEEDGZxImJY+ixuDO+mubMRZML8jv1zw1ogG8WmvQ7rmR2vX2JvsDOlt SwnY+2wKg70Seoxsge3n7E92ENf67UE7p0f70K86IwIJ/kvy2kyC07tDEDxCNUwF EYQIpkRiUBnN6USm4+nweWXtuwteL2OIpudBK4LezNlhJu9c8ZnmqNH4PoL+QsF2 qE/cWxgqhxv5nCSpE4u7Q1oymeZQVDNdkdWFjKxxRQi9hPy5IFA3Vmzvuu+dkTCZ z0R4wSOdjuCaTEZpunTVNd4ATflhHUIeKf4iJ2bUOiz1uWPmflhHy4/uL4jXAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUKu2R3IDsxvlK7eBzSPTCuyrbA68wHwYDVR0j BBgwFoAUaQ57xybHh5kdQ4vdtImQp6F9jRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDQzMTc1MS02NjRiLTQ3YTAtYTUyMC1kOTdmNWMxMjYxOGMvMC82OTBFN0JDNzI2 Qzc4Nzk5MUQ0MzhCRERCNDg5OTBBN0ExN0Q4RDE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjkwRTdCQzcyNkM3ODc5OTFENDM4QkREQjQ4OTkwQTdBMTdE OEQxNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0NDMxNzUxLTY2NGItNDdhMC1h NTIwLWQ5N2Y1YzEyNjE4Yy8wLzMxMzAzMzJlMzIzNjJlMzIzMDM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmca0DANBgkqhkiG 9w0BAQsFAAOCAQEAGVbgl1Ovsjzor4nx5h8ERXVzgq3ayvQ8Z9ji67XHznUzXO8w MMiCJ8/Kc9Ego/jOq/0fBImMzO98ZxNzBaXgCnKMMYPe1rLQEJCnDEWBdUGldSIX K+6B1F+yc7tG0soXG4A0GJUn9v2pWDs9AvIlVWwEdmP3jRgkagzNGzaf+kYjeQUo ++XhfTlF27hlWbiPLndyhhVnqrrxkXZbmOFqTh4Fu0iPOikTaIcBemonH2CdDJvA KodRyEVL8XLp4hzVxYTV5abgO84KX9l9Th+IyKvSu30PT9mYYl2DuTRc4zOvLd3G dvAHeIdrtJHuiSAWWapDW5tayxAJ/jEPiELdMw== -----END CERTIFICATE-----Generated at Mon Oct 20 21:08:53 2025 by rpki-client