$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/3130332e392e3132342e302f32322d3234203d3e20313331373131.roa File: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (raw, json) Hash identifier: gJ4+RIzMU3sNK8zgeNrc/IFATPDJCmEd1aztpgZm3dA= Subject key identifier: D7:37:71:0B:37:8A:3B:EA:99:A4:29:6F:13:D8:B9:43:C6:A6:CF:DB Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 53803E7CE30C338AF6D1171B4E9E360D6D507B7B Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/3130332e392e3132342e302f32322d3234203d3e20313331373131.roa Signing time: Mon 25 Aug 2025 11:02:28 +0000 ROA not before: Mon 25 Aug 2025 10:57:28 +0000 ROA not after: Mon 24 Aug 2026 11:02:28 +0000 asID: 131711 IP address blocks: 103.9.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 00:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:80:3e:7c:e3:0c:33:8a:f6:d1:17:1b:4e:9e:36:0d:6d:50:7b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Aug 25 10:57:28 2025 GMT Not After : Aug 24 11:02:28 2026 GMT Subject: CN=D737710B378A3BEA99A4296F13D8B943C6A6CFDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:b0:81:3d:bd:67:34:dd:71:a7:0c:5f:2d: f8:d0:53:40:12:07:e1:19:fc:a6:db:d3:e0:1a:95: 37:b0:ba:b0:99:65:31:0d:cf:7f:b8:a7:cf:63:20: 93:7d:6a:e6:14:e5:e5:17:fa:93:76:17:d7:43:11: 9a:c2:cc:19:01:45:2b:63:47:f5:0d:ae:80:24:f8: 83:d1:9e:91:ed:04:41:9f:44:77:1a:45:77:c8:f2: 2f:63:41:f9:a4:2a:df:4e:53:7e:e9:8d:c6:bc:94: 82:b8:75:07:15:42:7d:01:7f:50:98:04:74:fe:c4: 77:7e:e9:9d:50:ee:57:bd:54:dd:18:69:95:44:2c: 83:73:d7:f4:52:16:15:e8:7d:d6:bb:98:92:a1:0b: 5b:d8:3e:9a:35:13:96:b7:cf:a3:8b:cd:ef:d7:da: 4b:e8:b1:fd:14:9e:fe:e5:b9:33:b4:27:c5:a2:fe: c2:0d:1d:21:a7:1b:cb:0e:57:c6:ae:e6:af:34:75: 0c:0f:39:ef:41:f6:46:76:ed:2b:84:49:08:8c:64: 81:33:52:de:b2:b3:e4:42:f3:18:ee:67:0b:e9:36: 27:b0:d5:9e:b4:32:61:42:3d:1e:99:72:79:2f:6e: bd:8d:eb:1b:fb:ca:db:87:fd:f3:a0:66:d2:74:26: c8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:37:71:0B:37:8A:3B:EA:99:A4:29:6F:13:D8:B9:43:C6:A6:CF:DB X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/3130332e392e3132342e302f32322d3234203d3e20313331373131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.9.124.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:2a:79:b2:49:26:c2:fb:f2:d7:dc:97:c5:c2:b7:80:91:b9: 4a:81:76:33:36:e1:e7:dd:e1:2d:31:69:41:5e:69:1b:81:c5: a6:02:c7:e3:0f:f9:67:26:a8:77:ed:0a:f9:6e:5a:3b:64:38: 1e:1a:ec:67:9b:84:63:5e:95:66:cf:cc:3d:e4:52:9e:3d:fe: 80:9c:2f:ae:63:f1:2c:15:cc:ff:86:63:cd:d7:05:af:fb:6d: 9b:2f:21:ee:83:72:1e:8e:cc:1c:cb:09:b4:78:94:b9:85:9e: 93:e6:c8:2d:15:26:72:81:6b:82:68:dd:9a:f1:6b:97:e4:36: 16:bc:ee:8a:99:f7:8b:1a:ef:59:c9:13:2c:1c:ef:67:70:88: ec:99:b6:57:1a:e2:1c:d6:61:e2:ba:7d:87:53:65:40:2a:eb: 0b:0c:e8:9e:75:d5:e1:ef:0f:e0:4b:39:e7:7b:e8:2e:81:28: fc:e7:cd:de:57:2e:cb:91:7b:fb:a5:c6:d2:af:d0:92:93:bc: d5:ea:3d:08:57:e3:97:1f:a0:35:d2:c4:cb:a7:3d:bf:26:d1: 8d:c7:90:37:9d:bc:39:de:75:e9:71:40:1f:33:e5:16:62:97: 66:88:b6:45:c7:e5:9b:09:3e:de:50:e2:09:4c:91:9f:d1:02: c7:d4:f4:57 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUU4A+fOMMM4r20RcbTp42DW1Qe3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTA4MjUxMDU3MjhaFw0yNjA4MjQxMTAyMjhaMDMxMTAvBgNV BAMTKEQ3Mzc3MTBCMzc4QTNCRUE5OUE0Mjk2RjEzRDhCOTQzQzZBNkNGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6LCBPb1nNN1xpwxfLfjQU0AS B+EZ/Kbb0+AalTewurCZZTENz3+4p89jIJN9auYU5eUX+pN2F9dDEZrCzBkBRStj R/UNroAk+IPRnpHtBEGfRHcaRXfI8i9jQfmkKt9OU37pjca8lIK4dQcVQn0Bf1CY BHT+xHd+6Z1Q7le9VN0YaZVELINz1/RSFhXofda7mJKhC1vYPpo1E5a3z6OLze/X 2kvosf0Unv7luTO0J8Wi/sINHSGnG8sOV8au5q80dQwPOe9B9kZ27SuESQiMZIEz Ut6ys+RC8xjuZwvpNiew1Z60MmFCPR6Zcnkvbr2N6xv7ytuH/fOgZtJ0JshjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1zdxCzeKO+qZpClvE9i5Q8amz9swHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiMGExMWI1LTk0NDEtNGNjOS1h NjcyLWJlOTc5OWI2NTUyMC8wLzMxMzAzMzJlMzkyZTMxMzIzNDJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzMTM3MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcJfDANBgkqhkiG 9w0BAQsFAAOCAQEATip5skkmwvvy19yXxcK3gJG5SoF2Mzbh593hLTFpQV5pG4HF pgLH4w/5Zyaod+0K+W5aO2Q4HhrsZ5uEY16VZs/MPeRSnj3+gJwvrmPxLBXM/4Zj zdcFr/ttmy8h7oNyHo7MHMsJtHiUuYWek+bILRUmcoFrgmjdmvFrl+Q2Frzuipn3 ixrvWckTLBzvZ3CI7Jm2VxriHNZh4rp9h1NlQCrrCwzonnXV4e8P4Es553voLoEo /OfN3lcuy5F7+6XG0q/QkpO81eo9CFfjlx+gNdLEy6c9vybRjceQN528Od516XFA HzPlFmKXZoi2Rcflmwk+3lDiCUyRn9ECx9T0Vw== -----END CERTIFICATE-----Generated at Tue Oct 28 14:03:26 2025 by rpki-client