$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa File: 3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa (raw, json) Hash identifier: EGqCere+OuMmi+yewJcL8GzC3eQu4ZQkb/8gD6T4+6E= Subject key identifier: 30:5C:56:1D:68:17:12:7B:71:F5:68:B2:8A:F5:1B:6C:DC:30:CA:DE Certificate issuer: /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Certificate serial: 2EF685CAA8BAA09C3750F144D0995B3B36C937D7 Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa Signing time: Wed 17 Sep 2025 09:09:15 +0000 ROA not before: Wed 17 Sep 2025 09:04:15 +0000 ROA not after: Wed 16 Sep 2026 09:09:15 +0000 asID: 136820 IP address blocks: 103.98.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f6:85:ca:a8:ba:a0:9c:37:50:f1:44:d0:99:5b:3b:36:c9:37:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088 Validity Not Before: Sep 17 09:04:15 2025 GMT Not After : Sep 16 09:09:15 2026 GMT Subject: CN=305C561D6817127B71F568B28AF51B6CDC30CADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:19:e3:f1:dd:59:1c:27:f8:75:bb:12:bb: dd:f7:4b:1b:7f:8f:a7:25:ae:f7:7e:86:3a:09:73: 4d:00:72:23:b4:82:da:c5:55:68:f2:31:c7:65:ed: 16:21:6c:7f:fd:7f:17:23:c6:c1:b1:a9:11:fe:9d: fa:3e:1d:a5:e7:ae:0f:2b:f1:d2:03:c3:07:d4:13: dc:3e:29:9a:89:5c:fe:7d:2b:c4:1c:85:30:61:ea: 88:39:c5:ef:66:21:7d:27:37:22:23:7b:d2:dd:41: 67:2a:bc:a9:f3:9a:77:5c:d6:f7:e5:42:bc:b4:7b: e4:3f:c7:b3:bb:4e:38:21:29:73:5d:e9:38:61:85: aa:7b:f3:a4:0a:5a:f1:7d:9f:c6:7f:24:d6:3f:35: e1:13:4b:5c:71:cd:f8:4f:1a:fb:da:62:2c:cf:ff: 9b:6a:0d:28:a8:32:56:13:a3:e5:84:2b:fe:6d:a3: ca:ed:d9:99:ec:39:2b:fa:27:ee:92:40:6c:14:34: c2:c1:34:ce:1f:26:d6:a8:c5:9e:e9:ef:19:ad:2b: d5:e1:05:b0:28:2a:9a:5e:bb:1e:f4:1e:2a:1f:b4: e9:8f:4e:3a:49:50:1d:54:80:ab:22:da:6d:7f:f8: 1d:f6:65:f9:dc:e6:6a:5c:55:af:a4:40:a3:f1:b5: a7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5C:56:1D:68:17:12:7B:71:F5:68:B2:8A:F5:1B:6C:DC:30:CA:DE X509v3 Authority Key Identifier: keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131382e302f32332d3233203d3e20313336383230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.118.0/23 Signature Algorithm: sha256WithRSAEncryption 65:e0:0c:80:41:b8:9b:1c:83:ce:38:35:60:70:89:dc:cc:e8: c4:f8:3a:69:ba:39:23:de:14:49:84:91:e3:fa:9a:0c:8e:67: ad:20:03:32:01:0b:52:ac:e3:db:f9:14:f5:a9:9d:4d:4c:b4: 64:90:00:81:99:e7:e4:67:20:41:9b:85:b9:6a:34:fe:e9:cf: 80:ea:67:ce:5e:c3:2b:1b:61:21:c1:84:e0:20:2d:24:cc:e4: ba:af:c8:28:2c:02:fd:17:07:cd:b8:4f:fb:67:21:7a:c0:ac: b7:8b:14:26:97:41:3a:1a:5c:8d:cb:be:ba:8b:e8:3a:a4:1e: 19:3f:af:1a:c1:7a:5a:ae:8e:92:b7:ce:7d:a4:de:ec:5b:36: 35:6f:be:42:68:be:87:a9:6f:99:a9:c6:e2:da:26:6d:7f:dc: 80:16:14:ed:8c:a5:8e:52:22:36:af:a3:54:94:d5:51:69:76: 8e:ad:af:fb:6d:1c:c0:71:db:7e:82:f2:5c:ed:b7:7f:42:67: 3e:fb:92:e3:c3:cc:de:9c:14:41:79:20:0f:f9:14:a0:1d:44: 77:67:d8:15:a2:d3:2c:b3:9f:43:01:ef:c2:f4:2b:60:75:88: 8c:98:a3:67:26:31:fe:2f:cf:2a:f2:5d:e5:22:2d:59:92:28: 73:26:8c:c6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULvaFyqi6oJw3UPFE0JlbOzbJN9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcy N0Q2RTA4ODAeFw0yNTA5MTcwOTA0MTVaFw0yNjA5MTYwOTA5MTVaMDMxMTAvBgNV BAMTKDMwNUM1NjFENjgxNzEyN0I3MUY1NjhCMjhBRjUxQjZDREMzMENBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ghnj8d1ZHCf4dbsSu933Sxt/ j6clrvd+hjoJc00AciO0gtrFVWjyMcdl7RYhbH/9fxcjxsGxqRH+nfo+HaXnrg8r 8dIDwwfUE9w+KZqJXP59K8QchTBh6og5xe9mIX0nNyIje9LdQWcqvKnzmndc1vfl Qry0e+Q/x7O7TjghKXNd6Thhhap786QKWvF9n8Z/JNY/NeETS1xxzfhPGvvaYizP /5tqDSioMlYTo+WEK/5to8rt2ZnsOSv6J+6SQGwUNMLBNM4fJtaoxZ7p7xmtK9Xh BbAoKppeux70HioftOmPTjpJUB1UgKsi2m1/+B32Zfnc5mpcVa+kQKPxtadVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMFxWHWgXEntx9WiyivUbbNwwyt4wHwYDVR0j BBgwFoAUPiFzzOZ/ddKfHKqnOebMZyfW4IgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Q1Mzk0OC1kZGYzLTQ0OWEtYmYyYi1jZjNmN2FlMTc2ZDMvMC8zRTIxNzNDQ0U2 N0Y3NUQyOUYxQ0FBQTczOUU2Q0M2NzI3RDZFMDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UyMTczQ0NFNjdGNzVEMjlGMUNBQUE3MzlFNkNDNjcyN0Q2 RTA4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZDUzOTQ4LWRkZjMtNDQ5YS1i ZjJiLWNmM2Y3YWUxNzZkMy8wLzMxMzAzMzJlMzkzODJlMzEzMTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM2MzgzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2J2MA0GCSqG SIb3DQEBCwUAA4IBAQBl4AyAQbibHIPOODVgcInczOjE+Dppujkj3hRJhJHj+poM jmetIAMyAQtSrOPb+RT1qZ1NTLRkkACBmefkZyBBm4W5ajT+6c+A6mfOXsMrG2Eh wYTgIC0kzOS6r8goLAL9FwfNuE/7ZyF6wKy3ixQml0E6GlyNy766i+g6pB4ZP68a wXparo6St859pN7sWzY1b75CaL6HqW+Zqcbi2iZtf9yAFhTtjKWOUiI2r6NUlNVR aXaOra/7bRzAcdt+gvJc7bd/Qmc++5Ljw8zenBRBeSAP+RSgHUR3Z9gVotMss59D Ae/C9CtgdYiMmKNnJjH+L88q8l3lIi1ZkihzJozG -----END CERTIFICATE-----Generated at Tue Oct 21 01:28:57 2025 by rpki-client