$ rpki-client -vvf repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa File: 3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: gepyqAbuiPaUA1F4qNan63WSMqffSkJDQ7owW86Bv/s= Subject key identifier: ED:64:9B:E2:09:9B:C6:1C:99:B6:9B:D4:E3:FC:83:CE:BD:45:38:B1 Certificate issuer: /CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Certificate serial: 700F3AC1242491A786E50DD4ED23A3BBC4C45C73 Authority key identifier: FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa Signing time: Sat 21 Jun 2025 07:00:00 +0000 ROA not before: Sat 21 Jun 2025 06:55:00 +0000 ROA not after: Sat 20 Jun 2026 07:00:00 +0000 asID: 137331 IP address blocks: 103.157.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0f:3a:c1:24:24:91:a7:86:e5:0d:d4:ed:23:a3:bb:c4:c4:5c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38 Validity Not Before: Jun 21 06:55:00 2025 GMT Not After : Jun 20 07:00:00 2026 GMT Subject: CN=ED649BE2099BC61C99B69BD4E3FC83CEBD4538B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:cc:43:28:e2:db:16:27:1d:c2:cd:d9:84: f9:62:b8:0a:99:c7:0b:29:d3:91:62:1d:09:e6:a3: c4:1e:8a:df:6b:d8:72:01:ba:6e:d4:75:a4:53:37: b1:7e:c0:49:84:c9:dc:c9:92:61:20:c5:d7:9d:b3: 82:0c:b3:50:c5:58:ec:95:ca:ea:62:c7:b6:f8:64: 19:29:d8:29:6f:97:b0:c4:fd:a2:0c:d9:15:5f:1b: dc:0d:aa:c8:e7:f7:1b:ac:31:58:c9:80:3f:6f:0f: 21:79:b7:a8:c7:40:e3:52:c7:fe:94:cb:f4:5f:a6: 06:ad:4e:52:9b:6c:25:22:67:99:00:1c:b7:e7:43: 80:8f:cd:38:d0:15:5f:de:af:ae:6a:40:55:e1:2f: 8e:73:e3:84:51:79:9a:38:57:46:0b:69:85:41:c9: 3d:f7:4a:70:90:b9:be:5b:b3:a5:4c:e6:cc:74:c6: c8:05:6e:8f:52:b2:65:e4:dd:fe:e5:3a:f2:ee:f7: df:7e:1d:1a:e8:2e:45:35:50:67:dd:22:45:6e:ad: a0:d2:2e:2b:da:4a:c2:2b:52:a2:22:18:24:49:41: cb:38:f9:7f:ed:66:08:48:08:c3:f9:50:31:91:15: 7f:87:4b:9f:7b:02:db:56:14:d9:4b:72:1f:85:81: b8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:64:9B:E2:09:9B:C6:1C:99:B6:9B:D4:E3:FC:83:CE:BD:45:38:B1 X509v3 Authority Key Identifier: keyid:FA:BD:B6:E4:44:51:B7:F0:37:8A:E9:2C:27:50:EB:FE:5A:3C:FA:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FABDB6E44451B7F0378AE92C2750EBFE5A3CFA38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d07e3d8-9bfc-4483-a2dd-afa4593811e5/0/3130332e3135372e3131362e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.116.0/23 Signature Algorithm: sha256WithRSAEncryption 01:85:0e:23:0e:98:ac:f6:83:56:81:b9:5b:69:f9:f3:a7:ef: 45:3e:a3:a9:87:dd:1c:99:ca:2d:01:cc:2e:b1:45:fa:4f:60: 8b:b1:87:69:13:7f:f1:ce:ce:06:85:fe:3d:10:9c:0c:33:4c: 25:b9:64:91:ea:da:99:2c:ee:ba:2e:1d:d6:b4:94:10:37:38: d1:2e:a5:08:d2:4a:81:53:8f:a4:05:6f:4a:3d:24:7a:06:32: 69:b5:ec:1c:62:9d:27:d9:3c:37:7f:37:6a:e1:61:90:d9:e4: fd:0a:ed:a0:a0:fe:27:5d:37:40:cb:5b:8b:9d:8a:43:65:cf: c4:5b:c4:b4:5c:e0:ac:59:15:b6:b3:30:4f:89:b4:ad:5d:c4: 0f:ee:0a:22:7f:1b:c4:cb:09:66:8c:90:d5:a2:0f:f1:b5:f4: 83:e6:d6:10:9a:42:47:39:b6:5a:6f:d2:ff:b9:da:64:ca:08: 9a:fa:71:a2:e9:b3:fb:a7:e4:c0:96:ff:e8:c5:2c:0c:91:59: 4d:c0:06:1f:2a:3a:bb:27:7f:85:18:d1:5f:69:9b:de:c6:d0: 2d:86:d6:b3:a7:eb:8c:f0:04:0d:15:c7:dc:56:b9:86:7b:c9: 27:4f:f4:0c:0c:0f:30:4d:60:05:11:74:3b:3c:e7:ad:3e:5c: 90:a2:65:97 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcA86wSQkkaeG5Q3U7SOju8TEXHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1 QTNDRkEzODAeFw0yNTA2MjEwNjU1MDBaFw0yNjA2MjAwNzAwMDBaMDMxMTAvBgNV BAMTKEVENjQ5QkUyMDk5QkM2MUM5OUI2OUJENEUzRkM4M0NFQkQ0NTM4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgMxDKOLbFicdws3ZhPliuAqZ xwsp05FiHQnmo8Qeit9r2HIBum7UdaRTN7F+wEmEydzJkmEgxdeds4IMs1DFWOyV yupix7b4ZBkp2Clvl7DE/aIM2RVfG9wNqsjn9xusMVjJgD9vDyF5t6jHQONSx/6U y/RfpgatTlKbbCUiZ5kAHLfnQ4CPzTjQFV/er65qQFXhL45z44RReZo4V0YLaYVB yT33SnCQub5bs6VM5sx0xsgFbo9SsmXk3f7lOvLu999+HRroLkU1UGfdIkVuraDS LivaSsIrUqIiGCRJQcs4+X/tZghICMP5UDGRFX+HS597AttWFNlLch+FgbjRAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7WSb4gmbxhyZtpvU4/yDzr1FOLEwHwYDVR0j BBgwFoAU+r225ERRt/A3iuksJ1Dr/lo8+jgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDA3ZTNkOC05YmZjLTQ0ODMtYTJkZC1hZmE0NTkzODExZTUvMC9GQUJEQjZFNDQ0 NTFCN0YwMzc4QUU5MkMyNzUwRUJGRTVBM0NGQTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkFCREI2RTQ0NDUxQjdGMDM3OEFFOTJDMjc1MEVCRkU1QTND RkEzOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkMDdlM2Q4LTliZmMtNDQ4My1h MmRkLWFmYTQ1OTM4MTFlNS8wLzMxMzAzMzJlMzEzNTM3MmUzMTMxMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnXQwDQYJ KoZIhvcNAQELBQADggEBAAGFDiMOmKz2g1aBuVtp+fOn70U+o6mH3RyZyi0BzC6x RfpPYIuxh2kTf/HOzgaF/j0QnAwzTCW5ZJHq2pks7rouHda0lBA3ONEupQjSSoFT j6QFb0o9JHoGMmm17BxinSfZPDd/N2rhYZDZ5P0K7aCg/iddN0DLW4udikNlz8Rb xLRc4KxZFbazME+JtK1dxA/uCiJ/G8TLCWaMkNWiD/G19IPm1hCaQkc5tlpv0v+5 2mTKCJr6caLps/un5MCW/+jFLAyRWU3ABh8qOrsnf4UY0V9pm97G0C2G1rOn64zw BA0Vx9xWuYZ7ySdP9AwMDzBNYAURdDs8560+XJCiZZc= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:16 2025 by rpki-client