$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa File: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (raw, json) Hash identifier: Hx5e9eX/0MDiWg+S8NREaCwOHPQ1Onm3jq45DAvThoc= Subject key identifier: FB:90:97:65:54:F9:DA:C5:4F:53:70:6F:AC:8E:DC:32:78:33:86:C3 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 554DB6B229F24625ABA6AF0B35E5BA9EA55D8B54 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa Signing time: Fri 17 Oct 2025 08:00:00 +0000 ROA not before: Fri 17 Oct 2025 07:55:00 +0000 ROA not after: Fri 16 Oct 2026 08:00:00 +0000 asID: 131738 IP address blocks: 103.21.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4d:b6:b2:29:f2:46:25:ab:a6:af:0b:35:e5:ba:9e:a5:5d:8b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Oct 17 07:55:00 2025 GMT Not After : Oct 16 08:00:00 2026 GMT Subject: CN=FB90976554F9DAC54F53706FAC8EDC32783386C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2e:f4:04:dc:e7:d0:4b:2a:3d:a1:ea:4f:a8: a0:de:03:87:53:38:b7:40:d2:f7:73:4d:bc:62:2e: 84:e5:ac:08:e8:50:34:38:f2:8e:d8:a2:dc:31:d9: 7c:48:eb:07:f8:27:cf:bd:4e:42:06:20:b4:66:5a: 4b:36:19:69:51:da:83:62:df:35:97:7f:d5:c4:db: 78:03:6c:7d:cb:e0:38:80:35:3a:15:3b:b9:64:ff: d5:84:2b:aa:10:f0:56:88:6b:46:d3:cf:21:6a:28: 1c:dd:9c:a5:76:27:be:12:3b:ab:be:82:21:0a:37: 03:b6:72:92:7b:1a:f5:25:97:ef:04:dd:32:31:16: d7:6f:38:25:4e:e2:9f:b2:95:2d:c0:f7:52:67:45: d8:3e:d7:7d:df:08:a8:54:f1:5a:72:0b:5f:00:7e: 94:e0:73:af:67:68:72:8f:c7:87:4b:e6:78:db:9e: 14:c9:32:6e:6e:6a:3f:da:82:c1:39:06:2d:cf:5f: 63:b8:a0:79:b1:d1:2d:15:91:04:39:82:43:e5:37: 4e:f5:be:12:5b:5f:3a:56:c9:0b:93:ae:63:5b:0b: 08:4d:3f:45:52:33:62:ae:1a:42:f8:a6:79:68:b4: b0:76:4c:75:17:64:95:ef:9b:01:c1:02:a1:01:5c: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:90:97:65:54:F9:DA:C5:4F:53:70:6F:AC:8E:DC:32:78:33:86:C3 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/3130332e32312e39332e302f32342d3234203d3e20313331373338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.93.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:2f:46:96:e0:29:8a:00:a0:25:4d:c8:7f:ee:74:82:eb:4f: e3:f3:ee:8c:fc:05:2a:a0:86:e1:2d:44:9f:b6:13:2b:33:47: 0c:6f:39:db:aa:77:2c:cf:8a:fd:15:5e:f3:82:76:af:c3:4f: b4:ef:52:c6:cc:d6:ce:15:fd:d4:69:c5:af:68:de:c7:ec:fe: cd:e0:86:28:10:4a:47:d9:d8:b7:a2:6d:35:11:d5:1b:bd:27: a4:ad:e8:fe:c0:05:ad:11:c4:31:cd:18:d3:c0:1c:5b:4a:df: 81:3e:ce:1f:29:5e:66:3d:f4:9a:4c:9f:91:78:56:ab:68:89: 6f:ac:5c:07:c2:19:21:9d:73:64:d9:40:b0:e6:a2:69:89:d8: 7c:a5:ac:fc:d5:20:5d:3a:2f:db:95:04:12:cc:a3:56:ee:d0: e3:4c:5a:7b:c2:b4:da:79:1e:b1:94:d8:b3:94:c5:ac:e0:3c: 4b:17:44:13:f1:1f:57:84:17:c4:93:55:26:86:40:f3:8a:98: 34:3c:59:8b:a1:e2:1a:62:55:d6:77:cc:71:87:2d:35:83:2e: e0:82:a9:be:79:ea:31:6a:5b:69:9b:9c:06:a2:a3:43:55:66: 56:af:61:d4:27:52:1b:a5:4e:4d:3b:e5:a2:f4:a4:88:a7:8b: de:38:a4:fa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVU22sinyRiWrpq8LNeW6nqVdi1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNTEwMTcwNzU1MDBaFw0yNjEwMTYwODAwMDBaMDMxMTAvBgNV BAMTKEZCOTA5NzY1NTRGOURBQzU0RjUzNzA2RkFDOEVEQzMyNzgzMzg2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLvQE3OfQSyo9oepPqKDeA4dT OLdA0vdzTbxiLoTlrAjoUDQ48o7Yotwx2XxI6wf4J8+9TkIGILRmWks2GWlR2oNi 3zWXf9XE23gDbH3L4DiANToVO7lk/9WEK6oQ8FaIa0bTzyFqKBzdnKV2J74SO6u+ giEKNwO2cpJ7GvUll+8E3TIxFtdvOCVO4p+ylS3A91JnRdg+133fCKhU8VpyC18A fpTgc69naHKPx4dL5njbnhTJMm5uaj/agsE5Bi3PX2O4oHmx0S0VkQQ5gkPlN071 vhJbXzpWyQuTrmNbCwhNP0VSM2KuGkL4pnlotLB2THUXZJXvmwHBAqEBXOgBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+5CXZVT52sVPU3BvrI7cMngzhsMwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkZThlMThkLWEwNDctNDU5MC05 ZTU2LTQ2NGE3M2UyM2M2Yy8wLzMxMzAzMzJlMzIzMTJlMzkzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcVXTANBgkqhkiG 9w0BAQsFAAOCAQEATC9GluApigCgJU3If+50gutP4/PujPwFKqCG4S1En7YTKzNH DG8526p3LM+K/RVe84J2r8NPtO9SxszWzhX91GnFr2jex+z+zeCGKBBKR9nYt6Jt NRHVG70npK3o/sAFrRHEMc0Y08AcW0rfgT7OHyleZj30mkyfkXhWq2iJb6xcB8IZ IZ1zZNlAsOaiaYnYfKWs/NUgXTov25UEEsyjVu7Q40xae8K02nkesZTYs5TFrOA8 SxdEE/EfV4QXxJNVJoZA84qYNDxZi6HiGmJV1nfMcYctNYMu4IKpvnnqMWpbaZuc BqKjQ1VmVq9h1CdSG6VOTTvlovSkiKeL3jik+g== -----END CERTIFICATE-----Generated at Tue Oct 21 00:39:22 2025 by rpki-client