$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa File: 3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa (raw, json) Hash identifier: fjgcl5+9NKkfLLz004zjT2IG3xnuzGUWybmxuvC15kw= Subject key identifier: 4A:43:BF:8F:DE:C0:B7:DF:8D:76:45:AE:F5:93:37:96:BA:C7:A1:5E Certificate issuer: /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Certificate serial: 5F1CE214AD475BE67E2115F253B8043D2F6E4591 Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa Signing time: Thu 16 Oct 2025 01:18:25 +0000 ROA not before: Thu 16 Oct 2025 01:13:25 +0000 ROA not after: Thu 15 Oct 2026 01:18:25 +0000 asID: 135478 IP address blocks: 101.128.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Oct 2025 10:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1c:e2:14:ad:47:5b:e6:7e:21:15:f2:53:b8:04:3d:2f:6e:45:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Validity Not Before: Oct 16 01:13:25 2025 GMT Not After : Oct 15 01:18:25 2026 GMT Subject: CN=4A43BF8FDEC0B7DF8D7645AEF5933796BAC7A15E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e9:2d:9b:72:99:40:27:a6:a4:4f:2e:f0:fb: 1c:13:60:60:ef:9a:5b:57:5d:7b:3c:86:99:f9:ba: bc:c3:f4:97:ae:b9:1d:fd:31:c8:c4:83:1a:25:64: c1:d8:7f:0b:63:96:92:d4:d8:20:a6:a1:79:b0:72: 3e:ab:a3:bb:e3:2d:ec:58:13:0c:86:0a:89:cc:be: ab:8a:8d:d8:b5:29:a6:1e:7d:d6:14:30:ad:87:f9: 5d:84:9c:1f:4a:17:d6:19:d8:94:43:94:53:c3:8c: b6:e0:26:88:11:d6:7c:1d:13:43:96:64:06:02:25: d6:01:ee:d2:53:c8:8e:90:91:7b:36:f9:cc:76:2f: 9e:57:d2:76:3c:d5:b6:12:5b:9a:0d:ed:6b:0d:0f: 81:6f:09:48:37:15:66:f1:3e:14:b9:76:78:9e:5a: 5f:a1:82:f9:e5:9c:b5:29:fb:ea:e2:4c:a8:e3:89: 68:02:0b:0e:bb:13:1e:bb:eb:fd:4a:f3:06:80:d3: da:98:73:7d:d1:0a:22:67:73:2b:31:67:ff:79:e0: fe:37:5b:a2:42:3f:da:b7:18:ff:6b:31:e8:a5:d3: 98:d8:c1:c7:0c:1d:65:7e:e1:f7:48:c7:4e:60:28: e4:ed:d0:17:9d:07:e8:e3:d2:14:24:22:54:65:ee: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:43:BF:8F:DE:C0:B7:DF:8D:76:45:AE:F5:93:37:96:BA:C7:A1:5E X509v3 Authority Key Identifier: keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36362e302f32332d3233203d3e20313335343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.128.66.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:20:47:9b:0f:f0:c4:d1:7d:2d:2e:b3:7b:94:b0:86:4a:ba: cf:c6:2e:05:6a:08:d5:15:60:8b:99:28:73:11:de:db:78:be: bb:4e:4d:02:3a:76:96:23:d5:b2:f5:97:1a:e3:80:3c:09:44: 3a:72:8d:60:35:8f:20:4d:6c:32:d7:8a:3f:8e:92:1a:d1:06: 04:46:c3:cc:47:58:e3:fe:02:7b:40:68:82:e3:a2:03:09:08: 48:43:c7:40:d6:d4:0e:49:d4:f1:7a:2d:08:18:38:90:6f:47: 2c:0a:1c:b0:b0:a7:d1:1d:2e:8d:48:e9:7d:5a:39:39:66:c1: 54:8b:63:02:b4:25:9c:38:b3:76:aa:f0:59:4b:43:d1:ed:cb: 6b:72:24:5d:52:54:c5:de:0d:f5:5c:5b:16:21:5c:c7:2a:00: e9:75:ab:24:5b:02:57:46:e6:83:3c:49:89:4c:14:af:ff:08: c3:ba:aa:c7:80:d5:65:07:b1:4d:38:07:42:7e:84:9b:51:8c: 1c:90:30:bd:7a:1f:3d:07:8f:37:cc:7f:34:92:9f:89:9d:16: 2a:d4:70:93:f3:9c:28:4e:33:b3:26:77:79:ab:a2:ea:fb:6a: c0:e3:61:1e:28:d9:89:58:08:06:11:39:05:bc:bf:0d:51:43: ed:00:f0:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXxziFK1HW+Z+IRXyU7gEPS9uRZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz N0Q2OTk4QTAeFw0yNTEwMTYwMTEzMjVaFw0yNjEwMTUwMTE4MjVaMDMxMTAvBgNV BAMTKDRBNDNCRjhGREVDMEI3REY4RDc2NDVBRUY1OTMzNzk2QkFDN0ExNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6S2bcplAJ6akTy7w+xwTYGDv mltXXXs8hpn5urzD9JeuuR39McjEgxolZMHYfwtjlpLU2CCmoXmwcj6ro7vjLexY EwyGConMvquKjdi1KaYefdYUMK2H+V2EnB9KF9YZ2JRDlFPDjLbgJogR1nwdE0OW ZAYCJdYB7tJTyI6QkXs2+cx2L55X0nY81bYSW5oN7WsND4FvCUg3FWbxPhS5dnie Wl+hgvnlnLUp++riTKjjiWgCCw67Ex676/1K8waA09qYc33RCiJncysxZ/954P43 W6JCP9q3GP9rMeil05jYwccMHWV+4fdIx05gKOTt0BedB+jj0hQkIlRl7g71AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSkO/j97At9+NdkWu9ZM3lrrHoV4wHwYDVR0j BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1 REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2 OTk4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04 Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNjM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZYBCMA0GCSqG SIb3DQEBCwUAA4IBAQAaIEebD/DE0X0tLrN7lLCGSrrPxi4FagjVFWCLmShzEd7b eL67Tk0COnaWI9Wy9Zca44A8CUQ6co1gNY8gTWwy14o/jpIa0QYERsPMR1jj/gJ7 QGiC46IDCQhIQ8dA1tQOSdTxei0IGDiQb0csChywsKfRHS6NSOl9Wjk5ZsFUi2MC tCWcOLN2qvBZS0PR7ctrciRdUlTF3g31XFsWIVzHKgDpdaskWwJXRuaDPEmJTBSv /wjDuqrHgNVlB7FNOAdCfoSbUYwckDC9eh89B483zH80kp+JnRYq1HCT85woTjOz Jnd5q6Lq+2rA42EeKNmJWAgGETkFvL8NUUPtAPBD -----END CERTIFICATE-----Generated at Thu Oct 16 08:30:39 2025 by rpki-client