$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa File: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (raw, json) Hash identifier: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk= Subject key identifier: 84:CC:DC:E5:1F:60:0A:DF:F8:A0:92:A4:17:6E:51:A4:CD:79:40:27 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 1796D21DB56B843AD63F15966B8A65E0BB7E66AC Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa Signing time: Sat 02 Aug 2025 11:00:02 +0000 ROA not before: Sat 02 Aug 2025 10:55:02 +0000 ROA not after: Sat 01 Aug 2026 11:00:02 +0000 asID: 140395 IP address blocks: 103.150.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:96:d2:1d:b5:6b:84:3a:d6:3f:15:96:6b:8a:65:e0:bb:7e:66:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Aug 2 10:55:02 2025 GMT Not After : Aug 1 11:00:02 2026 GMT Subject: CN=84CCDCE51F600ADFF8A092A4176E51A4CD794027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:8c:21:9b:95:c8:9b:f3:a6:12:a5:01:29: 76:2c:35:9d:80:04:43:3f:fb:da:c8:03:11:d6:90: ef:68:4f:51:ec:8a:c3:27:53:c1:57:b2:e1:fc:7d: a6:c6:9f:5a:29:13:13:41:70:df:17:04:63:41:f6: 41:92:4c:3d:be:fe:40:6e:77:b7:f9:14:b3:5e:f1: 00:c7:e9:73:5c:e2:0f:f5:60:72:4c:09:1c:e4:f6: e6:67:0f:8c:38:60:35:4f:26:ec:2a:ba:f0:51:48: 7e:1c:32:8c:7a:bf:b8:94:77:fa:e8:3e:ee:de:bd: 17:5a:15:b8:69:a1:9c:99:f4:d7:57:11:d2:7e:61: b6:02:08:70:26:d1:12:b8:55:2f:38:6f:08:a2:6e: 5d:f6:8e:02:eb:3e:ac:d8:39:38:ea:52:58:ee:41: 25:aa:bc:4e:1d:b9:b6:d1:68:55:17:70:b9:2e:4c: f9:ac:ac:16:d3:db:cd:b5:ea:0a:8f:f3:47:84:d4: 07:d6:5c:a4:93:4d:01:6b:76:f5:a4:ea:09:0d:eb: 93:10:c7:ff:59:91:a1:05:99:b9:ee:54:c5:73:95: 20:bd:11:79:f4:52:78:46:85:ed:d5:be:95:f5:d3: ef:69:e1:63:74:da:dc:73:a7:9e:e0:b0:e6:29:ee: 3c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:DC:E5:1F:60:0A:DF:F8:A0:92:A4:17:6E:51:A4:CD:79:40:27 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.150.0/23 Signature Algorithm: sha256WithRSAEncryption a3:fe:c7:f7:94:94:68:f4:03:86:2f:72:1a:60:cd:21:77:07: c5:71:57:1c:6f:21:21:a2:f3:d8:08:61:fc:3d:f9:71:06:fb: c3:50:d0:42:8e:08:28:a8:81:e7:9c:0d:04:d9:d3:8d:6e:50: 5b:16:f1:3f:64:c0:1e:5a:2a:9a:83:5c:d2:e3:7f:7e:42:67: ff:e9:fd:a7:96:da:ca:4a:9f:c7:ff:be:dc:06:9e:d9:3b:16: 39:c9:67:b2:3e:9c:03:b9:49:dc:8e:0f:5e:a6:8b:1a:d5:8f: 5e:34:8b:53:ad:24:3c:3e:e8:98:46:f9:4d:99:f9:03:c1:61: 0b:9a:10:b5:c6:83:0a:42:63:bc:3d:b7:13:b2:81:77:fb:77: 1d:dd:2f:57:00:94:03:5d:0a:2b:68:79:f3:ec:6d:90:e3:cb: c5:2a:48:67:b0:7c:f3:f7:04:b7:87:8e:22:a2:b4:d0:61:8c: 34:58:4a:91:7b:db:a6:e4:a6:a1:9f:c7:c8:33:84:5d:98:fa: c7:3f:e5:c9:f1:7c:ff:15:8d:38:33:20:37:1d:53:0b:f5:c6: c1:7d:dc:7d:5c:5a:35:29:f8:99:5a:e1:d7:d6:c9:b0:6f:19: 4e:98:24:bc:a6:8b:fd:ba:df:b7:e1:71:3b:1b:d1:17:04:21: a3:dd:c9:13 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUF5bSHbVrhDrWPxWWa4pl4Lt+ZqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTA4MDIxMDU1MDJaFw0yNjA4MDExMTAwMDJaMDMxMTAvBgNV BAMTKDg0Q0NEQ0U1MUY2MDBBREZGOEEwOTJBNDE3NkU1MUE0Q0Q3OTQwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcT4whm5XIm/OmEqUBKXYsNZ2A BEM/+9rIAxHWkO9oT1HsisMnU8FXsuH8fabGn1opExNBcN8XBGNB9kGSTD2+/kBu d7f5FLNe8QDH6XNc4g/1YHJMCRzk9uZnD4w4YDVPJuwquvBRSH4cMox6v7iUd/ro Pu7evRdaFbhpoZyZ9NdXEdJ+YbYCCHAm0RK4VS84bwiibl32jgLrPqzYOTjqUlju QSWqvE4dubbRaFUXcLkuTPmsrBbT28216gqP80eE1AfWXKSTTQFrdvWk6gkN65MQ x/9ZkaEFmbnuVMVzlSC9EXn0UnhGhe3VvpX10+9p4WN02txzp57gsOYp7jyTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhMzc5R9gCt/4oJKkF25RpM15QCcwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZDNkZDc5LTg2MzUtNDg1Ny04 YTNjLTk4NTk1NDUxNmY5ZS8wLzMxMzAzMzJlMzEzNTMwMmUzMTM1MzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzAzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlpYwDQYJ KoZIhvcNAQELBQADggEBAKP+x/eUlGj0A4YvchpgzSF3B8VxVxxvISGi89gIYfw9 +XEG+8NQ0EKOCCiogeecDQTZ041uUFsW8T9kwB5aKpqDXNLjf35CZ//p/aeW2spK n8f/vtwGntk7FjnJZ7I+nAO5SdyOD16mixrVj140i1OtJDw+6JhG+U2Z+QPBYQua ELXGgwpCY7w9txOygXf7dx3dL1cAlANdCitoefPsbZDjy8UqSGewfPP3BLeHjiKi tNBhjDRYSpF726bkpqGfx8gzhF2Y+sc/5cnxfP8VjTgzIDcdUwv1xsF93H1cWjUp +Jla4dfWybBvGU6YJLymi/2637fhcTsb0RcEIaPdyRM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:45 2025 by rpki-client