$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa File: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (raw, json) Hash identifier: +DUYJRF9jOOzr505d8fEOet+gT8K/JULeZjzetsH0Vc= Subject key identifier: C0:E3:E4:88:62:79:5C:20:48:4C:2E:7F:FC:37:4A:63:3B:BF:A4:27 Certificate issuer: /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Certificate serial: 772502928057B2EDB0989DDF9F24E12291A81054 Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa Signing time: Thu 18 Sep 2025 11:01:08 +0000 ROA not before: Thu 18 Sep 2025 10:56:08 +0000 ROA not after: Thu 17 Sep 2026 11:01:08 +0000 asID: 38758 IP address blocks: 103.131.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:25:02:92:80:57:b2:ed:b0:98:9d:df:9f:24:e1:22:91:a8:10:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71 Validity Not Before: Sep 18 10:56:08 2025 GMT Not After : Sep 17 11:01:08 2026 GMT Subject: CN=C0E3E48862795C20484C2E7FFC374A633BBFA427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:71:40:19:c2:04:c5:10:2d:82:46:3f:da:44: 68:43:76:c2:ac:69:2e:40:35:d2:47:65:b4:c4:44: c7:f0:72:3f:58:58:a5:2c:c1:87:7e:ec:b6:d3:8f: 6e:4a:f0:73:c5:ef:b9:f4:9b:90:de:a2:89:b2:86: 4b:17:c0:9c:94:97:8b:9a:88:60:4c:6b:6f:bd:b4: 5e:48:aa:a6:91:8f:e3:8b:cf:22:0b:cc:a0:10:10: 78:5e:e9:74:18:20:7c:42:9c:be:72:c3:1e:0d:14: 58:70:50:7d:e1:c3:1e:52:49:ab:21:21:45:4c:c6: 33:d5:b9:43:83:a8:e3:5f:30:79:09:d8:9a:b5:8c: 2c:2a:66:f4:a8:fa:3a:03:c1:05:a4:15:48:76:2d: 6d:17:37:f3:a6:b8:cc:4c:8c:e4:fe:aa:c0:3e:40: 7d:f4:71:a0:b3:1e:4b:7c:b5:9b:e2:3b:6f:4a:86: 42:55:f9:84:23:32:2a:6d:88:95:19:64:8e:05:b9: 8a:35:04:10:8a:b7:9c:c7:c1:9e:86:6c:3f:09:2b: 78:4f:02:cb:a1:67:06:40:85:9b:95:5c:55:1e:83: 04:8b:5f:c6:0a:26:09:20:25:51:49:a8:b3:76:b1: bf:a7:97:7d:f0:2b:f0:6d:e6:72:b1:92:78:55:ed: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E3:E4:88:62:79:5C:20:48:4C:2E:7F:FC:37:4A:63:3B:BF:A4:27 X509v3 Authority Key Identifier: keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.216.0/24 Signature Algorithm: sha256WithRSAEncryption a0:70:2e:31:c6:e4:b5:c4:d9:f5:ea:09:57:67:67:6d:9a:76: 70:75:1f:a7:f7:cf:76:9f:f3:77:8f:34:a9:20:86:68:78:35: 28:cb:38:12:96:bf:7c:9a:b8:e8:b3:6b:a0:1a:0b:28:19:f3: fb:3c:bd:00:95:47:c3:d0:2c:8b:ce:7e:2c:2a:37:4d:2d:7c: d1:fe:8e:ee:4b:26:b0:2e:3e:50:c8:70:dd:5c:70:ce:f2:90: a3:42:ea:67:b6:f6:02:e3:99:34:23:f9:e8:c9:29:16:32:21: 97:0d:7c:c8:79:79:d7:49:66:0f:9e:33:50:28:46:bb:a5:3d: df:04:03:5f:bc:1a:d5:37:f5:46:dd:35:1a:3d:5c:7a:9f:9c: d0:f5:f0:66:eb:e8:49:21:9b:3f:ca:cb:05:30:34:f1:66:e8: 2a:b8:76:b1:e8:55:02:a9:b7:16:b2:82:64:e1:b6:ab:47:42: 64:4a:95:a6:f4:c4:54:39:d9:1b:52:1d:01:c4:27:04:6c:9b: 6e:0f:9c:62:96:f5:3f:32:e6:26:38:8b:22:7c:d2:c0:d1:6f: e8:8e:44:34:c5:51:a0:2c:6b:92:1a:78:c1:b6:6f:32:cb:8d: 37:d3:45:3c:43:6f:3a:f3:8e:d1:b3:b5:4e:9c:fa:7b:a4:22: be:d7:af:1a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdyUCkoBXsu2wmJ3fnyThIpGoEFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4 MTc0OEE3MTAeFw0yNTA5MTgxMDU2MDhaFw0yNjA5MTcxMTAxMDhaMDMxMTAvBgNV BAMTKEMwRTNFNDg4NjI3OTVDMjA0ODRDMkU3RkZDMzc0QTYzM0JCRkE0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0cUAZwgTFEC2CRj/aRGhDdsKs aS5ANdJHZbTERMfwcj9YWKUswYd+7LbTj25K8HPF77n0m5DeoomyhksXwJyUl4ua iGBMa2+9tF5IqqaRj+OLzyILzKAQEHhe6XQYIHxCnL5ywx4NFFhwUH3hwx5SSash IUVMxjPVuUODqONfMHkJ2Jq1jCwqZvSo+joDwQWkFUh2LW0XN/OmuMxMjOT+qsA+ QH30caCzHkt8tZviO29KhkJV+YQjMiptiJUZZI4FuYo1BBCKt5zHwZ6GbD8JK3hP AsuhZwZAhZuVXFUegwSLX8YKJgkgJVFJqLN2sb+nl33wK/Bt5nKxknhV7VTXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwOPkiGJ5XCBITC5//DdKYzu/pCcwHwYDVR0j BBgwFoAUSeEuXN1XsuNDpWDKaBbJPIF0inEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTUzZWRhYi00YTNkLTQ0ZTQtOGQ5Ni02MjVhMWMyMDM3OGQvMC80OUUxMkU1Q0RE NTdCMkUzNDNBNTYwQ0E2ODE2QzkzQzgxNzQ4QTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTJFNUNERDU3QjJFMzQzQTU2MENBNjgxNkM5M0M4MTc0 OEE3MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1NTNlZGFiLTRhM2QtNDRlNC04 ZDk2LTYyNWExYzIwMzc4ZC8wLzMxMzAzMzJlMzEzMzMxMmUzMjMxMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4PYMA0GCSqG SIb3DQEBCwUAA4IBAQCgcC4xxuS1xNn16glXZ2dtmnZwdR+n9892n/N3jzSpIIZo eDUoyzgSlr98mrjos2ugGgsoGfP7PL0AlUfD0CyLzn4sKjdNLXzR/o7uSyawLj5Q yHDdXHDO8pCjQupntvYC45k0I/noySkWMiGXDXzIeXnXSWYPnjNQKEa7pT3fBANf vBrVN/VG3TUaPVx6n5zQ9fBm6+hJIZs/yssFMDTxZugquHax6FUCqbcWsoJk4bar R0JkSpWm9MRUOdkbUh0BxCcEbJtuD5xilvU/MuYmOIsifNLA0W/ojkQ0xVGgLGuS GnjBtm8yy40300U8Q286847Rs7VOnPp7pCK+168a -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:12 2025 by rpki-client