$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32342d3234203d3e203137363731.roa File: 3130332e31302e3133362e302f32342d3234203d3e203137363731.roa (raw, json) Hash identifier: BoMk9BYxWAU3dq1MQNVtsM0MFrBh7p78QyltKqr9g0c= Subject key identifier: A0:91:20:BE:C0:1B:EB:F2:C0:3D:34:8B:A1:A3:C5:83:E9:25:7A:54 Certificate issuer: /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Certificate serial: 6227085DDCDAB26C700D30E98357ADB0AD96BA4B Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32342d3234203d3e203137363731.roa Signing time: Thu 15 May 2025 11:00:02 +0000 ROA not before: Thu 15 May 2025 10:55:02 +0000 ROA not after: Thu 14 May 2026 11:00:02 +0000 asID: 17671 IP address blocks: 103.10.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:27:08:5d:dc:da:b2:6c:70:0d:30:e9:83:57:ad:b0:ad:96:ba:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25 Validity Not Before: May 15 10:55:02 2025 GMT Not After : May 14 11:00:02 2026 GMT Subject: CN=A09120BEC01BEBF2C03D348BA1A3C583E9257A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:c9:8a:ad:c1:57:61:5f:b7:4d:86:1c:92: 54:aa:40:b2:cd:df:9b:b6:ec:89:72:a5:26:4b:18: db:a1:3a:e0:d5:05:45:a6:0a:a8:78:66:bb:ae:e2: a6:7a:30:51:8c:48:23:4c:b7:be:05:22:ab:69:18: 45:70:25:3d:fa:18:5e:05:35:e7:a6:92:6a:3b:11: 24:fd:a5:2d:8d:5d:e1:88:51:cc:81:57:cd:67:d6: 25:13:40:75:cf:2d:55:98:cc:1a:69:a8:4a:d6:1a: 3c:fc:ff:39:9f:3f:e0:b2:b8:5e:94:6b:fc:31:f3: e4:0f:f7:b0:02:f2:2f:a2:f0:df:3d:f7:30:29:ec: 89:fa:09:fd:99:cb:ee:61:49:12:c2:40:37:48:0d: 83:42:21:35:3a:a3:20:da:6e:b2:28:e4:f0:1f:f2: ee:19:df:c8:05:a9:aa:a2:00:8f:25:e9:fc:a2:3e: 3c:a7:99:31:87:5b:ad:a7:86:67:2c:60:94:eb:d3: 7e:23:29:25:b4:33:05:b2:9c:1a:30:93:7d:e4:f2: 0b:e8:57:b4:5a:38:a8:05:57:f4:e3:85:f5:d4:1d: 0b:3d:ba:b5:0c:e3:12:36:8d:62:d7:97:d8:b1:ff: 3b:5f:8b:dc:15:77:ea:93:4e:f8:28:cd:a8:c4:50: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:91:20:BE:C0:1B:EB:F2:C0:3D:34:8B:A1:A3:C5:83:E9:25:7A:54 X509v3 Authority Key Identifier: keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32342d3234203d3e203137363731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.136.0/24 Signature Algorithm: sha256WithRSAEncryption ba:48:e2:a4:7e:cf:a0:f8:a4:13:7d:24:e2:19:7f:fd:9c:07: f7:a1:e1:9c:c8:14:ad:dc:e1:c3:58:b3:ec:1b:8f:48:59:24: 05:bf:2a:61:d2:fc:fb:83:66:42:d4:54:97:b7:63:65:20:0b: 1d:69:5a:ea:e9:17:ab:68:ec:15:8a:45:06:96:1c:94:42:67: a1:48:13:6e:ed:8c:9b:e3:48:62:e3:18:00:08:62:2f:a5:ad: d3:21:54:6f:90:41:80:a2:ce:3b:71:be:3c:67:54:c7:e8:7c: 8e:ea:51:08:9c:bb:e8:42:39:b8:37:55:4c:cb:04:84:21:ad: 43:9d:c7:38:77:dc:d4:be:6c:5a:ba:49:c3:d0:4a:22:fc:1d: 3a:e9:28:76:ef:e9:a7:a0:2b:b1:4e:4f:a0:03:2f:b7:83:c3: c0:a2:c7:ac:ea:72:b3:bd:d1:17:54:6d:ee:1d:ef:42:8f:04: a6:e8:da:f2:14:ab:12:f5:93:07:7f:a9:99:3e:dc:e5:3f:10: f7:fc:5a:1c:96:82:ab:2f:48:83:04:4a:5a:c7:42:7f:0e:8d: ea:14:28:02:c8:1b:ea:63:ab:81:ac:d0:41:11:af:ea:25:20: ee:c7:0b:6c:5d:a6:a1:b3:80:85:b6:67:4b:2c:b0:c7:a8:52: ee:eb:1a:c6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYicIXdzasmxwDTDpg1etsK2WukswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw NTY0QUIyNTAeFw0yNTA1MTUxMDU1MDJaFw0yNjA1MTQxMTAwMDJaMDMxMTAvBgNV BAMTKEEwOTEyMEJFQzAxQkVCRjJDMDNEMzQ4QkExQTNDNTgzRTkyNTdBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVMmKrcFXYV+3TYYcklSqQLLN 35u27IlypSZLGNuhOuDVBUWmCqh4Zruu4qZ6MFGMSCNMt74FIqtpGEVwJT36GF4F Neemkmo7EST9pS2NXeGIUcyBV81n1iUTQHXPLVWYzBppqErWGjz8/zmfP+CyuF6U a/wx8+QP97AC8i+i8N899zAp7In6Cf2Zy+5hSRLCQDdIDYNCITU6oyDabrIo5PAf 8u4Z38gFqaqiAI8l6fyiPjynmTGHW62nhmcsYJTr034jKSW0MwWynBowk33k8gvo V7RaOKgFV/TjhfXUHQs9urUM4xI2jWLXl9ix/ztfi9wVd+qTTvgozajEUEwDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUoJEgvsAb6/LAPTSLoaPFg+klelQwHwYDVR0j BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0 QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzAzMzJlMzEzMDJlMzEzMzM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKiDANBgkqhkiG 9w0BAQsFAAOCAQEAukjipH7PoPikE30k4hl//ZwH96HhnMgUrdzhw1iz7BuPSFkk Bb8qYdL8+4NmQtRUl7djZSALHWla6ukXq2jsFYpFBpYclEJnoUgTbu2Mm+NIYuMY AAhiL6Wt0yFUb5BBgKLOO3G+PGdUx+h8jupRCJy76EI5uDdVTMsEhCGtQ53HOHfc 1L5sWrpJw9BKIvwdOukodu/pp6ArsU5PoAMvt4PDwKLHrOpys73RF1Rt7h3vQo8E puja8hSrEvWTB3+pmT7c5T8Q9/xaHJaCqy9IgwRKWsdCfw6N6hQoAsgb6mOrgazQ QRGv6iUg7scLbF2mobOAhbZnSyywx6hS7usaxg== -----END CERTIFICATE-----Generated at Mon Oct 27 19:52:29 2025 by rpki-client