$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa File: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (raw, json) Hash identifier: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY= Subject key identifier: 80:53:17:10:AA:C2:3C:F3:62:F5:68:E6:F9:20:2E:9F:EA:6D:C4:1F Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 1D58D52D7262E854D7F42E8B491E5ABED464C34A Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa Signing time: Fri 17 Oct 2025 10:00:01 +0000 ROA not before: Fri 17 Oct 2025 09:55:01 +0000 ROA not after: Fri 16 Oct 2026 10:00:01 +0000 asID: 138087 IP address blocks: 103.125.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:58:d5:2d:72:62:e8:54:d7:f4:2e:8b:49:1e:5a:be:d4:64:c3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Oct 17 09:55:01 2025 GMT Not After : Oct 16 10:00:01 2026 GMT Subject: CN=80531710AAC23CF362F568E6F9202E9FEA6DC41F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:71:7e:e2:eb:93:4d:c3:c4:ec:91:c0:92: 3a:e0:1b:3e:39:92:bf:35:50:1c:95:9d:1d:3a:5f: ff:3f:ef:5a:53:c7:82:f6:77:7b:c1:f7:d8:94:d5: ae:c5:98:94:83:e4:4e:f0:f2:9f:54:41:ba:f9:07: ac:55:b0:c2:38:8d:ab:fa:85:58:1e:07:71:d7:25: de:fc:6c:d4:bc:49:56:a4:53:70:46:a8:57:e6:55: 7c:16:97:4c:ab:7c:85:4a:e7:f8:29:a5:6c:4f:d5: 25:f2:8c:3b:c5:f2:a9:ca:1e:67:32:8b:a3:12:88: e4:e0:d5:6f:90:48:ea:e6:d2:e9:91:8b:81:c4:0f: ab:49:e7:e9:5e:02:c2:03:b1:85:c3:9a:77:ad:58: a0:db:00:e5:f3:ed:ab:52:a4:3d:28:6f:85:c5:4c: 89:21:92:34:fd:76:67:91:9e:97:00:89:3a:e9:02: aa:42:7b:33:c9:20:b9:f1:4b:c6:1c:0a:47:00:00: 95:1c:11:02:30:e3:53:14:47:f8:05:ad:73:7b:33: 92:a3:8c:dc:50:33:79:b4:d4:ed:70:a7:0d:b5:92: 0e:26:4e:cd:d4:6e:f9:cf:a1:08:33:31:c4:1e:b1: e5:b0:12:91:a4:97:09:fd:96:59:4f:19:5c:3b:a0: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:53:17:10:AA:C2:3C:F3:62:F5:68:E6:F9:20:2E:9F:EA:6D:C4:1F X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.19.0/24 Signature Algorithm: sha256WithRSAEncryption df:8b:5b:57:ca:55:b1:e4:1d:3e:3c:43:81:12:fc:4a:36:92: 21:da:60:c1:0f:74:30:d8:05:ba:6e:49:b1:39:5a:a0:19:4f: 56:09:31:fe:c6:65:1a:88:93:39:fc:43:f1:8e:70:86:6d:cb: f5:8d:67:42:b1:49:35:74:f4:f0:33:4e:c1:34:98:2e:10:8b: b6:9b:cb:e6:6a:7a:23:24:48:21:f0:ae:de:a7:9a:1b:51:5e: 4c:79:c0:21:aa:8e:c6:e6:b7:51:e8:c1:b6:9b:4f:25:fc:26: 3b:c8:73:17:c2:93:be:e6:ad:62:aa:bd:b2:8e:3d:fa:50:58: a3:b1:1d:ee:66:0f:b7:06:65:e7:1e:38:fb:3b:9f:88:89:3f: b6:3c:e8:53:b2:c3:1f:67:da:56:95:b5:0b:f9:8b:7b:53:f5: 18:46:3e:02:78:ea:73:ea:2c:1b:18:6d:6d:34:e4:bf:78:12: 87:7d:f1:49:d4:c7:c9:e1:a3:2d:0c:b3:80:57:46:7e:26:a3: a2:2f:7f:c8:aa:8e:f2:46:3f:81:07:b3:2e:eb:c1:4f:74:0b: 93:16:2e:07:90:29:1a:78:c5:27:c0:6a:76:43:fe:d6:c7:5f: 33:58:a3:7a:41:90:f2:2b:ab:fb:06:a0:d8:19:b6:25:1e:ed: 3f:7e:f7:59 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHVjVLXJi6FTX9C6LSR5avtRkw0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTEwMTcwOTU1MDFaFw0yNjEwMTYxMDAwMDFaMDMxMTAvBgNV BAMTKDgwNTMxNzEwQUFDMjNDRjM2MkY1NjhFNkY5MjAyRTlGRUE2REM0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cHF+4uuTTcPE7JHAkjrgGz45 kr81UByVnR06X/8/71pTx4L2d3vB99iU1a7FmJSD5E7w8p9UQbr5B6xVsMI4jav6 hVgeB3HXJd78bNS8SVakU3BGqFfmVXwWl0yrfIVK5/gppWxP1SXyjDvF8qnKHmcy i6MSiOTg1W+QSOrm0umRi4HED6tJ5+leAsIDsYXDmnetWKDbAOXz7atSpD0ob4XF TIkhkjT9dmeRnpcAiTrpAqpCezPJILnxS8YcCkcAAJUcEQIw41MUR/gFrXN7M5Kj jNxQM3m01O1wpw21kg4mTs3UbvnPoQgzMcQeseWwEpGklwn9lllPGVw7oB3xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUgFMXEKrCPPNi9Wjm+SAun+ptxB8wHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1OGQ2ZGNhLTZkN2ItNDgxMS04 NjJiLTBkYzVkNTdmYTJkOS8wLzMxMzAzMzJlMzEzMjM1MmUzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ30TMA0GCSqG SIb3DQEBCwUAA4IBAQDfi1tXylWx5B0+PEOBEvxKNpIh2mDBD3Qw2AW6bkmxOVqg GU9WCTH+xmUaiJM5/EPxjnCGbcv1jWdCsUk1dPTwM07BNJguEIu2m8vmanojJEgh 8K7ep5obUV5MecAhqo7G5rdR6MG2m08l/CY7yHMXwpO+5q1iqr2yjj36UFijsR3u Zg+3BmXnHjj7O5+IiT+2POhTssMfZ9pWlbUL+Yt7U/UYRj4CeOpz6iwbGG1tNOS/ eBKHffFJ1MfJ4aMtDLOAV0Z+JqOiL3/Iqo7yRj+BB7Mu68FPdAuTFi4HkCkaeMUn wGp2Q/7Wx18zWKN6QZDyK6v7BqDYGbYlHu0/fvdZ -----END CERTIFICATE-----Generated at Mon Oct 20 18:53:02 2025 by rpki-client