$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa File: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (raw, json) Hash identifier: tMxmqnyNs+AqUZmzCKA8ba+dMpF5PucwNl1kbWxh19Q= Subject key identifier: 00:0D:65:01:F1:F8:64:E3:A1:51:46:55:E4:C0:BA:93:8A:B3:30:DE Certificate issuer: /CN=7470038419B67CD1743CE4D96953077ECE6928FE Certificate serial: 5BF94298AFF18A0034518A35533EC9298FF617A4 Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa Signing time: Tue 07 Oct 2025 11:02:26 +0000 ROA not before: Tue 07 Oct 2025 10:57:26 +0000 ROA not after: Tue 06 Oct 2026 11:02:26 +0000 asID: 140479 IP address blocks: 103.154.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f9:42:98:af:f1:8a:00:34:51:8a:35:53:3e:c9:29:8f:f6:17:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE Validity Not Before: Oct 7 10:57:26 2025 GMT Not After : Oct 6 11:02:26 2026 GMT Subject: CN=000D6501F1F864E3A1514655E4C0BA938AB330DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:52:e6:c3:c7:97:7f:63:d8:ab:d9:97:82:b7: 54:80:db:4c:c4:5d:67:66:6f:2b:c4:6b:69:d6:52: 01:e3:b0:dd:df:7d:27:51:f0:1c:c3:57:fd:a9:25: 67:a2:a5:de:5d:40:1c:04:68:3a:7d:a3:90:a9:22: 61:ec:dd:77:e8:ab:4f:f4:34:8b:d1:81:35:e2:fa: 77:9f:11:c4:0a:54:ee:0c:89:34:3f:65:14:2b:42: 2c:5e:ef:ce:80:f4:87:8f:9a:90:6a:74:6a:63:5a: ee:fa:84:4a:0d:03:dc:d2:80:20:3f:49:04:82:18: 9e:11:86:34:bd:7b:ba:97:2d:60:78:4f:1e:c3:5b: cd:a3:4e:ab:10:2e:17:80:2d:00:51:40:06:1f:e2: cc:e2:ee:ad:00:cf:8c:b3:3a:dc:b7:57:9f:f6:e9: 38:52:a2:22:a9:1d:e9:a7:9e:ee:66:d6:79:cc:53: 80:7d:37:a3:eb:d0:b2:64:93:41:ba:5a:e7:15:b2: cf:55:e3:a5:90:fd:0f:6f:29:af:75:a8:a4:a6:2e: 35:ca:39:90:65:86:6b:fb:cd:90:3e:62:bf:82:73: dc:24:b6:fb:39:cb:31:db:54:74:e0:91:01:a2:85: 56:19:9d:14:af:51:cf:33:5f:da:55:eb:3e:7a:0a: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0D:65:01:F1:F8:64:E3:A1:51:46:55:E4:C0:BA:93:8A:B3:30:DE X509v3 Authority Key Identifier: keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.52.0/24 Signature Algorithm: sha256WithRSAEncryption 03:52:33:1d:81:36:fe:d2:9f:5f:a2:70:57:fa:76:7b:e5:c6: f4:66:2f:db:73:52:4b:14:8a:f6:82:9c:de:23:a7:1f:76:dd: 35:e7:e3:81:a4:79:ca:57:2a:9b:fb:ae:bf:c1:d9:a4:9b:5b: 18:27:3f:b1:0d:74:f9:33:a9:8d:98:84:0b:09:f7:42:58:6a: 65:66:80:1b:65:f4:b9:6a:3b:21:ad:96:c6:ac:8b:21:e8:aa: 1c:d5:72:07:3f:c3:74:a5:10:e9:84:d1:54:ca:57:4a:86:ea: 3c:b1:b6:37:1b:1c:f7:c9:98:98:d1:cb:8a:07:17:4d:6b:06: eb:52:69:0c:99:6d:a6:d6:f4:27:4c:b2:64:23:dd:bc:ee:d5: a6:58:02:25:d6:b7:f7:6b:c9:83:b0:94:cc:de:d6:44:83:6f: 72:7f:0a:47:33:7c:1e:5a:0c:df:7d:cb:8a:31:1a:34:55:41: 71:26:2e:a2:98:c5:c4:f7:f5:bb:34:69:e8:0f:90:99:e4:d7: f4:5f:00:2a:41:2e:ca:df:2f:e3:cd:68:27:9d:8d:6d:42:e4: ba:ee:2d:51:54:0a:c9:f2:d2:08:ea:ea:a8:d3:62:ad:44:d1: 02:20:b3:d0:27:ae:6f:00:4f:5a:a2:88:68:9b:ed:b6:f0:a6: 54:6e:a5:09 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUW/lCmK/xigA0UYo1Uz7JKY/2F6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VD RTY5MjhGRTAeFw0yNTEwMDcxMDU3MjZaFw0yNjEwMDYxMTAyMjZaMDMxMTAvBgNV BAMTKDAwMEQ2NTAxRjFGODY0RTNBMTUxNDY1NUU0QzBCQTkzOEFCMzMwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcUubDx5d/Y9ir2ZeCt1SA20zE XWdmbyvEa2nWUgHjsN3ffSdR8BzDV/2pJWeipd5dQBwEaDp9o5CpImHs3Xfoq0/0 NIvRgTXi+nefEcQKVO4MiTQ/ZRQrQixe786A9IePmpBqdGpjWu76hEoNA9zSgCA/ SQSCGJ4RhjS9e7qXLWB4Tx7DW82jTqsQLheALQBRQAYf4szi7q0Az4yzOty3V5/2 6ThSoiKpHemnnu5m1nnMU4B9N6Pr0LJkk0G6WucVss9V46WQ/Q9vKa91qKSmLjXK OZBlhmv7zZA+Yr+Cc9wktvs5yzHbVHTgkQGihVYZnRSvUc8zX9pV6z56Ck6BAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAA1lAfH4ZOOhUUZV5MC6k4qzMN4wHwYDVR0j BBgwFoAUdHADhBm2fNF0POTZaVMHfs5pKP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Yzc2NWQ1MS1iMGIxLTQzNWQtYTY2Yi02MDRjNmU1ZDI5ZWYvMC83NDcwMDM4NDE5 QjY3Q0QxNzQzQ0U0RDk2OTUzMDc3RUNFNjkyOEZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VDRTY5 MjhGRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjNzY1ZDUxLWIwYjEtNDM1ZC1h NjZiLTYwNGM2ZTVkMjllZi8wLzMxMzAzMzJlMzEzNTM0MmUzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5o0MA0GCSqG SIb3DQEBCwUAA4IBAQADUjMdgTb+0p9fonBX+nZ75cb0Zi/bc1JLFIr2gpzeI6cf dt015+OBpHnKVyqb+66/wdmkm1sYJz+xDXT5M6mNmIQLCfdCWGplZoAbZfS5ajsh rZbGrIsh6Koc1XIHP8N0pRDphNFUyldKhuo8sbY3Gxz3yZiY0cuKBxdNawbrUmkM mW2m1vQnTLJkI9287tWmWAIl1rf3a8mDsJTM3tZEg29yfwpHM3weWgzffcuKMRo0 VUFxJi6imMXE9/W7NGnoD5CZ5Nf0XwAqQS7K3y/jzWgnnY1tQuS67i1RVArJ8tII 6uqo02KtRNECILPQJ65vAE9aoohom+228KZUbqUJ -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:33 2025 by rpki-client