$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa File: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (raw, json) Hash identifier: LRTGK+GW9A0RpTs3Gv4UsfHpkx7owdE7KVjUD93I+Vo= Subject key identifier: A9:10:2E:5F:DE:3C:ED:9F:11:37:CA:A1:FC:0C:92:8F:AD:83:2E:D1 Certificate issuer: /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Certificate serial: 3DE4BDA248DB027862652ECAAECF72FB0A623246 Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa Signing time: Wed 25 Jun 2025 16:00:01 +0000 ROA not before: Wed 25 Jun 2025 15:55:01 +0000 ROA not after: Wed 24 Jun 2026 16:00:01 +0000 asID: 46055 IP address blocks: 103.198.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e4:bd:a2:48:db:02:78:62:65:2e:ca:ae:cf:72:fb:0a:62:32:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Validity Not Before: Jun 25 15:55:01 2025 GMT Not After : Jun 24 16:00:01 2026 GMT Subject: CN=A9102E5FDE3CED9F1137CAA1FC0C928FAD832ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:88:69:e0:79:32:2f:a1:1d:da:93:18:7a: 47:17:d6:fd:da:18:9d:9e:e7:12:55:38:e9:dd:63: d0:bc:56:db:da:92:79:b3:19:f2:52:88:2a:80:5f: dd:d3:1d:60:7d:14:82:90:7d:ff:d4:15:2c:92:e9: b0:5f:5c:fe:ab:f7:64:d1:fb:9d:1d:a1:a6:e8:77: 3a:4b:1a:f2:02:98:24:aa:15:40:f8:47:79:98:d9: 2e:4e:d2:af:09:f1:88:70:58:cd:7e:5d:8f:d5:d0: 0e:69:a2:99:ca:b0:bf:47:5d:20:0c:45:10:69:2d: 43:32:7e:4c:10:70:0e:ff:2d:5a:8f:93:33:0a:27: dc:f4:9a:a8:d2:37:c1:75:d6:7d:ca:9b:cc:68:0c: c4:04:5a:68:51:62:3d:0e:b4:48:10:ed:27:a5:82: 44:87:fe:f3:57:fd:a7:e0:06:4f:30:0f:4c:a9:5b: 88:38:94:ad:ec:60:2a:00:b7:57:da:23:39:88:b1: dd:3c:4f:2a:9d:c7:42:a9:8e:40:67:c1:fc:21:3e: 2f:c0:0f:70:28:02:49:36:30:84:2c:00:1d:08:a8: 41:79:2a:0a:4d:77:66:56:14:5a:74:26:4b:38:92: 8b:f9:3a:bc:a9:b1:59:2b:0c:bd:e2:5a:f1:b0:19: ce:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:10:2E:5F:DE:3C:ED:9F:11:37:CA:A1:FC:0C:92:8F:AD:83:2E:D1 X509v3 Authority Key Identifier: keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.122.0/23 Signature Algorithm: sha256WithRSAEncryption a2:a5:97:9c:f4:f1:86:5b:60:ef:79:b2:57:64:19:6f:14:fa: 78:62:0b:e3:ab:e4:a5:d7:78:cc:aa:a2:57:89:19:6d:f1:96: cb:82:b4:df:4e:3b:8c:61:84:b4:ff:7e:32:e8:da:51:ff:8d: 2b:04:87:a6:0b:0f:79:78:86:c1:78:44:06:c1:64:4d:40:23: 5e:e7:40:ba:c6:7b:bf:2f:c8:37:83:95:1f:b2:0a:d7:d4:7c: d4:5f:0a:09:61:e6:3f:b2:47:3e:bd:1e:34:7f:d7:69:05:07: 27:3e:b2:9d:c2:f1:ef:ed:a9:78:64:dd:59:4b:e6:71:08:9c: ef:8d:7f:9a:1d:4c:1d:de:61:6b:c2:d6:ee:0d:7f:2f:da:2b: 2a:d6:93:ea:ac:3b:0b:c5:24:a5:ff:dd:67:e1:53:a8:91:35: 93:3a:eb:04:8d:8a:1b:fa:cc:88:d0:f8:79:2f:b6:eb:98:84: 7b:ca:91:85:77:15:fd:42:49:66:14:2a:df:98:f0:c3:6b:28: 84:d8:62:5c:7f:39:3e:13:d0:f1:51:9c:e1:19:70:d6:48:8f: 12:35:d1:29:02:c3:9c:e4:10:0a:99:a1:a6:12:2d:7a:17:92: 41:28:33:a9:57:dd:6c:54:22:1a:e9:ce:05:70:1b:b7:90:6c: 9d:74:ff:27 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPeS9okjbAnhiZS7Krs9y+wpiMkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx M0ZGREE5MTAeFw0yNTA2MjUxNTU1MDFaFw0yNjA2MjQxNjAwMDFaMDMxMTAvBgNV BAMTKEE5MTAyRTVGREUzQ0VEOUYxMTM3Q0FBMUZDMEM5MjhGQUQ4MzJFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClaohp4HkyL6Ed2pMYekcX1v3a GJ2e5xJVOOndY9C8VtvaknmzGfJSiCqAX93THWB9FIKQff/UFSyS6bBfXP6r92TR +50doabodzpLGvICmCSqFUD4R3mY2S5O0q8J8YhwWM1+XY/V0A5popnKsL9HXSAM RRBpLUMyfkwQcA7/LVqPkzMKJ9z0mqjSN8F11n3Km8xoDMQEWmhRYj0OtEgQ7Sel gkSH/vNX/afgBk8wD0ypW4g4lK3sYCoAt1faIzmIsd08Tyqdx0KpjkBnwfwhPi/A D3AoAkk2MIQsAB0IqEF5KgpNd2ZWFFp0Jks4kov5OrypsVkrDL3iWvGwGc4nAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqRAuX9487Z8RN8qh/AySj62DLtEwHwYDVR0j BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG REE5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0LThjMmQtNGViMS1i NGNkLTM1YjQ5MjE2ZTA3My8wLzMxMzAzMzJlMzEzOTM4MmUzMTMyMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzNDM2MzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8Z6MA0GCSqG SIb3DQEBCwUAA4IBAQCipZec9PGGW2DvebJXZBlvFPp4Ygvjq+Sl13jMqqJXiRlt 8ZbLgrTfTjuMYYS0/34y6NpR/40rBIemCw95eIbBeEQGwWRNQCNe50C6xnu/L8g3 g5UfsgrX1HzUXwoJYeY/skc+vR40f9dpBQcnPrKdwvHv7al4ZN1ZS+ZxCJzvjX+a HUwd3mFrwtbuDX8v2isq1pPqrDsLxSSl/91n4VOokTWTOusEjYob+syI0Ph5L7br mIR7ypGFdxX9QklmFCrfmPDDayiE2GJcfzk+E9DxUZzhGXDWSI8SNdEpAsOc5BAK maGmEi16F5JBKDOpV91sVCIa6c4FcBu3kGyddP8n -----END CERTIFICATE-----Generated at Mon Nov 3 06:57:16 2025 by rpki-client