$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa File: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (raw, json) Hash identifier: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM= Subject key identifier: D9:2F:E0:E9:C2:48:D3:58:17:49:BD:62:58:D6:62:79:76:AA:4D:C3 Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 06A4EC73771AF4246A8343708D98F324350DFBBA Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa Signing time: Sat 04 Oct 2025 07:00:01 +0000 ROA not before: Sat 04 Oct 2025 06:55:01 +0000 ROA not after: Sat 03 Oct 2026 07:00:01 +0000 asID: 63023 IP address blocks: 103.120.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a4:ec:73:77:1a:f4:24:6a:83:43:70:8d:98:f3:24:35:0d:fb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Oct 4 06:55:01 2025 GMT Not After : Oct 3 07:00:01 2026 GMT Subject: CN=D92FE0E9C248D3581749BD6258D6627976AA4DC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:fe:01:e4:be:4d:5f:80:fd:73:4d:75:f3: f6:73:3c:7a:8b:1c:d7:d8:be:e6:66:e4:9b:64:ef: 7e:72:df:ef:96:cf:a8:87:49:08:22:06:17:4d:50: f5:5f:a8:88:62:fc:0f:f9:09:45:f1:41:40:d9:fa: d7:c4:1b:08:e6:81:09:4b:eb:bb:d3:a2:52:be:44: b1:ed:fe:01:d7:cf:4a:a3:5e:5b:4d:f5:1a:05:0a: 6c:41:87:fd:46:fe:b0:f2:b5:0e:b7:ac:d6:98:54: 38:9d:8e:53:41:0c:84:68:5e:54:55:9c:13:d8:8f: e8:eb:ba:5d:77:95:a6:7b:59:33:fb:4a:ed:80:40: 59:d3:a3:58:a6:f1:24:be:4f:71:d2:37:9a:b7:79: e7:46:04:08:3f:19:4a:35:b4:c4:a0:ff:45:3f:6f: 41:df:e0:e4:7f:a1:ad:2a:16:2a:33:83:f8:14:02: a7:98:c6:07:ab:bd:d2:27:c7:2e:c3:7c:01:45:32: 71:87:d8:06:d9:7f:fa:4c:ea:c5:b5:fd:89:a8:2c: 58:6f:05:27:f5:3e:c3:62:3c:31:1a:4b:d6:94:95: 79:46:14:7c:10:16:e1:9f:00:80:e9:5a:4f:31:7c: 97:43:54:50:a0:5e:16:04:65:06:04:87:70:72:da: 80:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2F:E0:E9:C2:48:D3:58:17:49:BD:62:58:D6:62:79:76:AA:4D:C3 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.205.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c4:18:59:33:58:08:25:59:37:04:8f:9d:78:ad:e4:32:d6: d7:e3:24:18:46:a2:dc:a3:d1:d9:cc:9e:9a:f4:7d:18:99:ce: eb:3a:ba:42:e1:5a:be:47:fa:73:91:b8:35:21:54:29:5c:50: 1f:55:ea:3a:34:80:5c:20:e6:4d:71:c3:20:36:e2:92:84:c8: ac:0a:30:35:66:31:27:56:05:16:02:44:09:26:1e:fc:1b:8f: 66:43:23:6b:7f:b8:f1:ec:de:69:1b:fb:b5:f2:dc:c4:e6:f8: 39:9e:2b:d0:d7:6e:35:39:10:82:44:a7:04:e5:ec:6d:a8:47: c1:28:ae:bd:d5:d3:6c:97:30:98:c9:69:b1:29:57:b1:42:b1: 29:97:55:ed:97:04:b8:be:e5:9e:1f:d4:d5:9e:06:48:e6:7d: 59:8a:d2:48:b8:0e:ec:25:17:8b:94:2f:67:b1:8f:7b:72:48: 97:fa:84:69:8e:1a:4f:09:57:8a:77:04:91:22:d8:15:60:3c: 23:b7:f2:55:95:79:39:c3:72:94:c4:32:82:38:e6:a2:38:1e: 05:8a:86:0d:da:75:a8:27:00:f9:3e:3b:c7:63:3d:0a:ee:3a: 69:63:d9:21:6f:65:87:0a:db:58:9c:1d:92:84:31:42:6d:50: 4c:04:33:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBqTsc3ca9CRqg0NwjZjzJDUN+7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTEwMDQwNjU1MDFaFw0yNjEwMDMwNzAwMDFaMDMxMTAvBgNV BAMTKEQ5MkZFMEU5QzI0OEQzNTgxNzQ5QkQ2MjU4RDY2Mjc5NzZBQTREQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/af4B5L5NX4D9c0118/ZzPHqL HNfYvuZm5Jtk735y3++Wz6iHSQgiBhdNUPVfqIhi/A/5CUXxQUDZ+tfEGwjmgQlL 67vTolK+RLHt/gHXz0qjXltN9RoFCmxBh/1G/rDytQ63rNaYVDidjlNBDIRoXlRV nBPYj+jrul13laZ7WTP7Su2AQFnTo1im8SS+T3HSN5q3eedGBAg/GUo1tMSg/0U/ b0Hf4OR/oa0qFiozg/gUAqeYxgervdInxy7DfAFFMnGH2AbZf/pM6sW1/YmoLFhv BSf1PsNiPDEaS9aUlXlGFHwQFuGfAIDpWk8xfJdDVFCgXhYEZQYEh3By2oCHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2S/g6cJI01gXSb1iWNZieXaqTcMwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGYzN2MwLTM4MGMtNDA1My1i M2JhLWIzMmVmMDM1YzI4Zi8wLzMxMzAzMzJlMzEzMjMwMmUzMjMwMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzAzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3jNMA0GCSqG SIb3DQEBCwUAA4IBAQB+xBhZM1gIJVk3BI+deK3kMtbX4yQYRqLco9HZzJ6a9H0Y mc7rOrpC4Vq+R/pzkbg1IVQpXFAfVeo6NIBcIOZNccMgNuKShMisCjA1ZjEnVgUW AkQJJh78G49mQyNrf7jx7N5pG/u18tzE5vg5nivQ1241ORCCRKcE5extqEfBKK69 1dNslzCYyWmxKVexQrEpl1XtlwS4vuWeH9TVngZI5n1ZitJIuA7sJReLlC9nsY97 ckiX+oRpjhpPCVeKdwSRItgVYDwjt/JVlXk5w3KUxDKCOOaiOB4FioYN2nWoJwD5 PjvHYz0K7jppY9khb2WHCttYnB2ShDFCbVBMBDNa -----END CERTIFICATE-----Generated at Mon Oct 27 10:04:36 2025 by rpki-client