$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32332e302f32342d3234203d3e20313530353537.roa File: 3130332e39352e32332e302f32342d3234203d3e20313530353537.roa (raw, json) Hash identifier: AIJ0j0Aq9CMXFN6w7WVU0mj1+YJAf4nV9FCI3W971zc= Subject key identifier: 92:FF:89:B6:35:6C:8D:77:CC:AE:F0:83:41:20:4F:4D:7B:50:A4:A0 Certificate issuer: /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Certificate serial: 5D100364675188238E31F7B4FFE4EA25B9072438 Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32332e302f32342d3234203d3e20313530353537.roa Signing time: Tue 16 Sep 2025 16:00:01 +0000 ROA not before: Tue 16 Sep 2025 15:55:01 +0000 ROA not after: Tue 15 Sep 2026 16:00:01 +0000 asID: 150557 IP address blocks: 103.95.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:10:03:64:67:51:88:23:8e:31:f7:b4:ff:e4:ea:25:b9:07:24:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910 Validity Not Before: Sep 16 15:55:01 2025 GMT Not After : Sep 15 16:00:01 2026 GMT Subject: CN=92FF89B6356C8D77CCAEF08341204F4D7B50A4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7c:5f:6f:a4:a3:79:a0:66:7c:10:df:96:5f: ca:91:d9:b6:e0:7e:83:eb:c2:e6:1c:d7:b7:0b:9e: 58:8a:87:f0:0f:37:c0:2a:02:f0:5c:d6:aa:ae:db: 12:81:be:90:da:40:af:a3:56:5a:10:ff:41:2e:9e: 53:62:d1:1c:52:44:16:96:90:25:3b:dc:ef:00:1d: 97:e8:7e:84:e0:6e:38:d3:b4:54:0d:0b:13:78:2b: 9a:c1:60:40:5f:d0:c2:3d:4e:87:51:99:7e:ee:24: ca:df:0c:c2:5d:e6:1e:1d:47:d7:3e:19:bb:7e:55: 87:4b:53:90:55:25:e9:de:0f:4d:a8:64:b0:35:1a: d6:39:94:36:e4:94:35:0e:14:20:90:15:92:16:a4: 5c:2e:df:57:99:c5:02:16:b9:ed:ed:c4:c3:b1:4f: 31:7e:cb:28:b5:27:df:02:40:f6:13:90:0d:fb:db: 52:03:59:39:9b:6f:fb:8d:b4:96:ec:fe:ff:bd:81: 20:e4:a7:f6:f1:2c:38:ba:fa:37:44:73:fc:f7:c4: ff:b3:d0:e4:23:f8:0f:24:a4:f0:d1:30:6b:98:c9: d0:1a:79:83:2d:d8:10:48:d3:af:af:a6:51:98:6f: a2:f0:73:47:5f:c3:ba:9b:ee:94:ef:ba:a0:ed:9e: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FF:89:B6:35:6C:8D:77:CC:AE:F0:83:41:20:4F:4D:7B:50:A4:A0 X509v3 Authority Key Identifier: keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32332e302f32342d3234203d3e20313530353537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.23.0/24 Signature Algorithm: sha256WithRSAEncryption ce:f8:21:12:8b:a3:86:fe:96:b1:06:26:d5:62:96:e6:bd:1b: f5:c5:19:90:0a:41:05:48:0c:cf:6d:ce:7d:51:e3:b4:ae:1b: c0:7f:78:09:d3:10:d4:5e:c5:a0:82:36:58:2e:06:78:5e:4f: 95:52:69:3c:d5:1b:a9:e0:a0:f2:a8:e3:6a:cf:05:63:d1:ba: b8:0b:8e:13:c8:a2:bc:13:6a:a7:ca:39:55:4d:65:0b:9b:81: 17:77:32:2b:ab:2c:11:7b:6c:97:f2:64:c1:70:52:6f:46:bf: f1:7b:64:13:f0:7c:f1:38:b2:cc:35:29:41:30:3d:16:6b:06: 83:1d:e8:44:2b:13:a1:bf:39:c5:5d:9e:4e:0b:2c:db:34:d7: 2c:e6:72:73:e1:10:43:bc:7e:8a:5f:57:e1:b4:21:48:3b:82: 9b:00:a7:6e:30:81:df:05:28:d8:9c:6a:0a:d3:3d:92:0e:37: 16:0c:e4:b8:82:94:ea:f6:3d:c1:0f:7a:ab:a1:8c:16:b8:e5: bd:39:0b:c5:94:4c:f6:95:52:51:67:4f:22:89:7e:a7:fb:4b: 49:b4:a7:a2:71:73:35:8b:66:a4:3f:7a:50:2b:56:8e:19:bd: dc:7d:c0:a6:9c:27:69:48:95:34:c9:c3:07:ac:11:7e:5c:81: 14:7f:fe:ca -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXRADZGdRiCOOMfe0/+TqJbkHJDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRD QkFBOTkxMDAeFw0yNTA5MTYxNTU1MDFaFw0yNjA5MTUxNjAwMDFaMDMxMTAvBgNV BAMTKDkyRkY4OUI2MzU2QzhENzdDQ0FFRjA4MzQxMjA0RjREN0I1MEE0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfF9vpKN5oGZ8EN+WX8qR2bbg foPrwuYc17cLnliKh/APN8AqAvBc1qqu2xKBvpDaQK+jVloQ/0EunlNi0RxSRBaW kCU73O8AHZfofoTgbjjTtFQNCxN4K5rBYEBf0MI9TodRmX7uJMrfDMJd5h4dR9c+ Gbt+VYdLU5BVJeneD02oZLA1GtY5lDbklDUOFCCQFZIWpFwu31eZxQIWue3txMOx TzF+yyi1J98CQPYTkA3721IDWTmbb/uNtJbs/v+9gSDkp/bxLDi6+jdEc/z3xP+z 0OQj+A8kpPDRMGuYydAaeYMt2BBI06+vplGYb6Lwc0dfw7qb7pTvuqDtnnG9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkv+JtjVsjXfMrvCDQSBPTXtQpKAwHwYDVR0j BBgwFoAUtwzWZplYIvMsBOCa/wGy1MuqmRAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmQ0Zjg2OS00ZGI2LTRiMGEtYWFiNi1jZGU0N2I0NDdkNzcvMC9CNzBDRDY2Njk5 NTgyMkYzMkMwNEUwOUFGRjAxQjJENENCQUE5OTEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQ0Q2NjY5OTU4MjJGMzJDMDRFMDlBRkYwMUIyRDRDQkFB OTkxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZDRmODY5LTRkYjYtNGIwYS1h YWI2LWNkZTQ3YjQ0N2Q3Ny8wLzMxMzAzMzJlMzkzNTJlMzIzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdfFzANBgkqhkiG 9w0BAQsFAAOCAQEAzvghEoujhv6WsQYm1WKW5r0b9cUZkApBBUgMz23OfVHjtK4b wH94CdMQ1F7FoII2WC4GeF5PlVJpPNUbqeCg8qjjas8FY9G6uAuOE8iivBNqp8o5 VU1lC5uBF3cyK6ssEXtsl/JkwXBSb0a/8XtkE/B88TiyzDUpQTA9FmsGgx3oRCsT ob85xV2eTgss2zTXLOZyc+EQQ7x+il9X4bQhSDuCmwCnbjCB3wUo2JxqCtM9kg43 FgzkuIKU6vY9wQ96q6GMFrjlvTkLxZRM9pVSUWdPIol+p/tLSbSnonFzNYtmpD96 UCtWjhm93H3AppwnaUiVNMnDB6wRflyBFH/+yg== -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:40 2025 by rpki-client