$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa File: 3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa (raw, json) Hash identifier: x9Scc7P/cR+uB6pbraj2/Tz5zieFbUeEmVdvJxIQm/A= Subject key identifier: 8A:88:5F:48:61:16:83:10:60:91:61:7A:72:02:CE:B3:40:8F:6A:74 Certificate issuer: /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Certificate serial: 4395386F279091C04BA9AAB743BDF85B4FE4C95B Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa Signing time: Mon 22 Sep 2025 16:37:02 +0000 ROA not before: Mon 22 Sep 2025 16:32:02 +0000 ROA not after: Mon 21 Sep 2026 16:37:02 +0000 asID: 141887 IP address blocks: 103.105.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:95:38:6f:27:90:91:c0:4b:a9:aa:b7:43:bd:f8:5b:4f:e4:c9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Validity Not Before: Sep 22 16:32:02 2025 GMT Not After : Sep 21 16:37:02 2026 GMT Subject: CN=8A885F48611683106091617A7202CEB3408F6A74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9c:9e:66:52:d1:7a:64:47:ad:43:ec:ea:93: ac:be:3e:87:d5:c6:1e:89:79:5c:68:93:e6:fa:52: ee:36:b6:00:18:fe:ff:f5:54:b8:49:2a:60:f0:15: 14:39:fa:10:1a:66:44:5d:6e:f2:32:06:11:0d:93: 8c:dc:14:0c:c1:7c:9b:5a:b6:36:2b:af:f5:16:7e: c4:40:32:fa:9e:7f:e0:4b:32:f8:ed:40:1a:da:d7: bd:58:2c:81:0f:0b:ce:07:e9:d3:77:84:5a:4f:24: 82:4f:24:50:0a:86:06:87:fa:a4:8a:cb:f9:a4:00: 05:e7:91:65:a9:c0:79:f2:a4:34:92:5a:83:25:da: 6e:de:d5:72:b1:c5:64:0f:7a:c7:fe:be:88:3e:37: 44:f4:af:b8:07:dc:da:92:6d:0e:7b:0f:06:bb:39: e9:3a:9f:6c:69:d2:e4:d1:26:6d:75:07:ce:a7:4c: 75:41:35:af:81:56:f2:3d:ab:7b:86:b3:0d:1b:28: 1b:03:9a:a0:1b:a6:61:17:29:24:07:f6:a8:c6:01: c2:fe:02:ed:9f:8f:cd:dc:0a:dc:33:95:37:11:4c: 7b:42:8f:86:b1:a0:cb:cd:61:d0:f2:19:d7:16:c9: 8a:93:ad:9c:12:6b:46:3d:0b:66:9a:ee:50:ff:68: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:5F:48:61:16:83:10:60:91:61:7A:72:02:CE:B3:40:8F:6A:74 X509v3 Authority Key Identifier: keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131352e302f32342d3234203d3e20313431383837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.115.0/24 Signature Algorithm: sha256WithRSAEncryption 33:6c:f8:2e:e0:59:9a:08:3e:b1:ed:66:3c:62:e2:e7:0f:e6: 67:07:f7:58:52:cc:ec:ea:27:14:33:86:f2:4f:ec:4e:26:04: d8:c6:ad:7c:a0:09:a0:1e:4a:d1:96:b3:a3:69:01:eb:15:b1: 49:43:08:e6:43:0d:3a:35:b4:e1:a4:cf:f2:41:9c:c0:5d:6f: 85:94:71:28:ed:95:7e:49:4e:c8:28:23:42:c3:08:7e:f5:74: 9d:e0:c2:b4:17:51:75:39:0b:1c:73:59:02:0d:97:40:2f:04: 31:9a:e3:6a:45:7a:36:dc:92:4f:63:2a:1b:6f:ea:d5:e0:f2: 1a:83:ff:ee:cd:d9:10:2f:54:e0:79:4c:2d:d8:8a:d5:23:92: 97:f9:1c:25:d0:06:18:e4:2f:72:45:ad:d4:41:8c:6b:91:c1: 3e:40:53:e8:b9:e6:a8:80:f1:9c:57:d0:78:2f:84:b5:ea:21: c1:66:d8:dd:64:f2:7a:ad:76:7b:b2:2d:d7:b6:7d:ff:62:a8: 84:84:e7:56:bf:48:d7:72:29:64:62:88:a2:0d:56:1b:4a:1c: da:20:da:81:69:2e:32:14:ec:c2:9b:dd:eb:64:eb:fb:80:fd: a7:aa:19:79:7c:11:db:50:7f:de:3e:35:54:ea:9f:55:c5:3a: db:f3:4c:59 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQ5U4byeQkcBLqaq3Q734W0/kyVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG OEVFNEMxOTAeFw0yNTA5MjIxNjMyMDJaFw0yNjA5MjExNjM3MDJaMDMxMTAvBgNV BAMTKDhBODg1RjQ4NjExNjgzMTA2MDkxNjE3QTcyMDJDRUIzNDA4RjZBNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWnJ5mUtF6ZEetQ+zqk6y+PofV xh6JeVxok+b6Uu42tgAY/v/1VLhJKmDwFRQ5+hAaZkRdbvIyBhENk4zcFAzBfJta tjYrr/UWfsRAMvqef+BLMvjtQBra171YLIEPC84H6dN3hFpPJIJPJFAKhgaH+qSK y/mkAAXnkWWpwHnypDSSWoMl2m7e1XKxxWQPesf+vog+N0T0r7gH3NqSbQ57Dwa7 Oek6n2xp0uTRJm11B86nTHVBNa+BVvI9q3uGsw0bKBsDmqAbpmEXKSQH9qjGAcL+ Au2fj83cCtwzlTcRTHtCj4axoMvNYdDyGdcWyYqTrZwSa0Y9C2aa7lD/aHAXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiohfSGEWgxBgkWF6cgLOs0CPanQwHwYDVR0j BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF NEMxOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZlNzE2ZGVhLTY1MzYtNGQ2ZS1i NTRiLWJmN2Y3M2NmNmI5NC8wLzMxMzAzMzJlMzEzMDM1MmUzMTMxMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzODM4Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnaXMwDQYJ KoZIhvcNAQELBQADggEBADNs+C7gWZoIPrHtZjxi4ucP5mcH91hSzOzqJxQzhvJP 7E4mBNjGrXygCaAeStGWs6NpAesVsUlDCOZDDTo1tOGkz/JBnMBdb4WUcSjtlX5J TsgoI0LDCH71dJ3gwrQXUXU5CxxzWQINl0AvBDGa42pFejbckk9jKhtv6tXg8hqD /+7N2RAvVOB5TC3YitUjkpf5HCXQBhjkL3JFrdRBjGuRwT5AU+i55qiA8ZxX0Hgv hLXqIcFm2N1k8nqtdnuyLde2ff9iqISE51a/SNdyKWRiiKINVhtKHNog2oFpLjIU 7MKb3etk6/uA/aeqGXl8EdtQf94+NVTqn1XFOtvzTFk= -----END CERTIFICATE-----Generated at Tue Oct 21 02:18:01 2025 by rpki-client