$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa File: 3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (raw, json) Hash identifier: 3PkfuBqgUsXvYP/cBasxl1kYosVT98po9pZBDusnWb4= Subject key identifier: B4:7D:97:22:88:05:C0:28:BD:B8:25:79:18:4A:F4:81:75:A4:B8:B4 Certificate issuer: /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Certificate serial: 595B516910A17F1FF600CF31FFCBD0565A072AEC Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa Signing time: Sat 11 Oct 2025 16:00:00 +0000 ROA not before: Sat 11 Oct 2025 15:55:00 +0000 ROA not after: Sat 10 Oct 2026 16:00:00 +0000 asID: 136855 IP address blocks: 103.108.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5b:51:69:10:a1:7f:1f:f6:00:cf:31:ff:cb:d0:56:5a:07:2a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6 Validity Not Before: Oct 11 15:55:00 2025 GMT Not After : Oct 10 16:00:00 2026 GMT Subject: CN=B47D97228805C028BDB82579184AF48175A4B8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:9f:b3:df:c6:7f:7d:48:ef:4b:49:43:7a: 37:a9:63:e6:a9:2a:ed:9f:44:6d:02:c5:8c:be:ec: 2c:1a:73:60:74:ca:ea:50:84:20:51:8c:89:f7:5c: 68:77:df:5b:6d:ac:e0:6f:1f:f7:97:58:54:8e:75: 27:4c:a5:58:65:b3:6c:cf:ce:92:0a:52:11:2f:b4: 72:26:f1:63:b6:95:1e:2c:11:a7:19:84:c3:0f:74: 88:2d:52:af:eb:8f:66:b8:e4:9c:84:9e:b0:f2:d3: 55:74:40:be:c6:17:f9:b7:46:f8:e5:ae:c7:1c:46: ec:40:6c:4a:2c:88:d5:98:c7:d6:29:16:af:72:1c: 8e:b5:2e:4d:93:9d:d2:a0:5e:5e:4b:46:57:88:ca: 6d:a1:c9:59:a7:af:4a:74:fb:6e:d7:b8:84:f8:6c: ec:f0:a7:9f:42:bc:ed:7d:a2:36:64:8f:b3:1e:99: 7b:52:af:95:9e:2e:57:69:14:dc:16:e3:06:3c:2e: 96:06:7b:ea:5f:02:63:04:4a:e8:4f:66:90:99:6f: 4f:27:2d:93:34:cc:3a:08:54:eb:2c:ad:e0:b8:44: df:be:a1:04:91:d1:52:41:9f:68:3f:85:9f:1f:f0: 57:36:28:2d:44:af:cd:34:53:30:53:14:b9:86:a2: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7D:97:22:88:05:C0:28:BD:B8:25:79:18:4A:F4:81:75:A4:B8:B4 X509v3 Authority Key Identifier: keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.242.0/24 Signature Algorithm: sha256WithRSAEncryption 73:23:b1:e1:a6:7f:cc:eb:3d:ed:96:93:db:9d:75:56:c9:68: 49:d8:49:d2:38:42:d0:b9:8c:4a:16:e8:7e:6c:b2:40:df:70: 41:b5:28:5c:35:2b:39:18:de:d3:82:b3:45:01:71:8e:4a:76: b1:1d:fc:b2:14:99:d5:ea:85:be:fb:d8:90:59:a2:2d:66:64: 4f:97:aa:7f:d1:70:ab:da:c9:a3:9e:a4:9b:a1:d5:7d:e7:10: 52:5f:13:ca:90:a2:92:01:52:19:ac:25:55:29:90:8b:69:6c: a8:8a:20:aa:b5:d5:22:65:0f:7a:74:0d:53:1a:34:f1:d0:b6: 48:a3:68:69:bf:b9:3f:e1:1a:bf:e4:66:14:4e:2d:65:5d:7d: de:c2:39:1a:f7:eb:d1:ad:fe:81:ba:43:f2:ff:c3:5c:53:54: df:f9:61:3a:bf:d8:9e:0b:7e:28:6e:45:dc:45:9a:dc:1d:6f: b7:b3:00:3e:d4:16:e0:b5:1b:1a:37:68:d5:dc:56:0c:11:23: 6d:81:83:c8:5b:93:21:c8:9a:ec:2d:93:03:05:c0:ca:45:cd: b7:65:d0:00:6e:bb:cd:e8:a3:43:4b:8a:8e:3b:82:4e:10:63: 48:2e:29:ac:52:a4:9d:4b:d4:25:b4:01:ea:eb:b5:20:af:cf: 0f:aa:36:b7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWVtRaRChfx/2AM8x/8vQVloHKuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5 NDc5OUFBNjAeFw0yNTEwMTExNTU1MDBaFw0yNjEwMTAxNjAwMDBaMDMxMTAvBgNV BAMTKEI0N0Q5NzIyODgwNUMwMjhCREI4MjU3OTE4NEFGNDgxNzVBNEI4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeZ+z38Z/fUjvS0lDejepY+ap Ku2fRG0CxYy+7Cwac2B0yupQhCBRjIn3XGh331ttrOBvH/eXWFSOdSdMpVhls2zP zpIKUhEvtHIm8WO2lR4sEacZhMMPdIgtUq/rj2a45JyEnrDy01V0QL7GF/m3Rvjl rsccRuxAbEosiNWYx9YpFq9yHI61Lk2TndKgXl5LRleIym2hyVmnr0p0+27XuIT4 bOzwp59CvO19ojZkj7MemXtSr5WeLldpFNwW4wY8LpYGe+pfAmMESuhPZpCZb08n LZM0zDoIVOssreC4RN++oQSR0VJBn2g/hZ8f8Fc2KC1Er800UzBTFLmGolVLAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUtH2XIogFwCi9uCV5GEr0gXWkuLQwHwYDVR0j BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3 ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5 OUFBNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViODFiY2VhLWI3MGYtNDM3NC05 MjRiLWI2Yzc3ODEwOTgzNy8wLzMxMzAzMzJlMzEzMDM4MmUzMjM0MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbPIwDQYJ KoZIhvcNAQELBQADggEBAHMjseGmf8zrPe2Wk9uddVbJaEnYSdI4QtC5jEoW6H5s skDfcEG1KFw1KzkY3tOCs0UBcY5KdrEd/LIUmdXqhb772JBZoi1mZE+Xqn/RcKva yaOepJuh1X3nEFJfE8qQopIBUhmsJVUpkItpbKiKIKq11SJlD3p0DVMaNPHQtkij aGm/uT/hGr/kZhROLWVdfd7CORr369Gt/oG6Q/L/w1xTVN/5YTq/2J4LfihuRdxF mtwdb7ezAD7UFuC1Gxo3aNXcVgwRI22Bg8hbkyHImuwtkwMFwMpFzbdl0ABuu83o o0NLio47gk4QY0guKaxSpJ1L1CW0AerrtSCvzw+qNrc= -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:53 2025 by rpki-client