$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa File: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (raw, json) Hash identifier: Z+uPltjZGSJJVlVHwNz2NCUXUIEBHK05ylu6rUY+FMs= Subject key identifier: 38:ED:55:DA:10:A1:F8:38:67:F0:2C:76:01:3C:94:4A:82:40:54:67 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 627F2BAE6F4A710A0A94A23560800B4702DC4138 Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa Signing time: Tue 23 Sep 2025 00:25:43 +0000 ROA not before: Tue 23 Sep 2025 00:20:43 +0000 ROA not after: Tue 22 Sep 2026 00:25:43 +0000 asID: 149976 IP address blocks: 103.157.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 13:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7f:2b:ae:6f:4a:71:0a:0a:94:a2:35:60:80:0b:47:02:dc:41:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Sep 23 00:20:43 2025 GMT Not After : Sep 22 00:25:43 2026 GMT Subject: CN=38ED55DA10A1F83867F02C76013C944A82405467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:fe:4e:aa:8e:3d:e8:40:d8:6e:00:f1:29: e3:17:0b:13:dc:54:74:f2:47:24:89:7b:ca:f3:e5: 8c:cb:f4:8b:e8:8e:13:26:d2:33:cc:14:6c:ec:77: 25:72:a9:16:89:f6:5e:c6:36:7f:85:07:84:13:8d: 7c:a3:9e:da:87:87:1a:8e:ea:41:34:cd:3c:1c:24: 93:ae:7e:8e:14:38:ba:a3:33:d1:b4:5b:f9:5d:02: 1a:bd:ce:b4:93:3b:e3:14:25:16:c9:8f:c1:8c:b2: 87:b7:5e:da:04:03:ee:6c:22:47:11:27:7f:29:09: 76:61:56:2e:3c:32:14:51:12:ff:a1:32:a7:f3:61: 9e:cd:14:4e:df:14:25:79:7f:e7:b0:aa:d0:21:31: 39:7e:79:05:7a:f4:02:96:f2:54:f3:ac:79:94:7d: 58:90:b7:5b:12:f2:65:b6:ac:14:98:49:6f:03:0a: 4c:91:93:b7:42:ec:b7:df:c4:ea:76:98:fa:b4:8c: 17:57:74:c7:3c:61:d7:fd:7d:1a:44:ad:ab:b0:8d: 76:e8:0f:a3:7e:49:38:84:f9:ca:e8:26:ba:8a:87: f9:0e:d0:62:1b:ea:9b:ed:b8:37:c1:b8:9b:25:00: af:a5:a9:86:dc:69:9b:47:f8:b1:66:fd:46:98:18: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:ED:55:DA:10:A1:F8:38:67:F0:2C:76:01:3C:94:4A:82:40:54:67 X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.62.0/23 Signature Algorithm: sha256WithRSAEncryption 97:cb:1f:f5:c2:b1:f6:62:86:e9:5c:2b:12:5c:a9:80:07:50: 62:f7:ee:bd:84:e8:77:1a:3d:e4:26:b5:f6:7b:ae:fb:00:68: 5f:29:6f:33:50:a0:44:7e:72:81:e5:fd:1f:f1:86:32:e7:09: 8f:98:00:1c:6d:ac:4e:1f:1b:1e:50:a5:77:5b:d9:f2:a7:6e: b9:43:be:b2:06:67:c5:f3:b8:e8:aa:3b:40:a7:35:3b:94:82: 7b:a2:a5:1b:5f:70:28:f4:dc:4d:f0:9e:5c:b9:d5:d8:2e:cb: 71:3e:09:fe:c0:a9:f8:e6:dc:5e:d1:c0:44:eb:b0:6e:7a:72: 14:83:d1:2b:92:70:78:30:b6:1f:f8:bb:1a:8f:f8:b6:18:7e: fd:d7:ab:14:3b:fe:7c:6a:7b:ce:fd:b3:a9:f8:58:bd:b2:4c: 06:af:36:44:23:e5:b4:4e:29:b5:27:31:05:51:37:b4:d3:26: 3f:53:87:40:f6:50:83:95:29:67:91:ca:b5:78:89:71:20:10: 06:75:4f:33:55:f5:b0:2d:41:ad:a8:ca:e7:e1:6c:90:78:3d: 5c:35:33:98:23:21:2e:92:ba:c9:c3:f2:1d:37:13:3e:ee:63: b4:02:bc:7b:f4:26:57:69:6c:1d:7b:ea:15:9e:ea:9a:da:d6: c5:e6:43:a3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYn8rrm9KcQoKlKI1YIALRwLcQTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTA5MjMwMDIwNDNaFw0yNjA5MjIwMDI1NDNaMDMxMTAvBgNV BAMTKDM4RUQ1NURBMTBBMUY4Mzg2N0YwMkM3NjAxM0M5NDRBODI0MDU0NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XP5Oqo496EDYbgDxKeMXCxPc VHTyRySJe8rz5YzL9IvojhMm0jPMFGzsdyVyqRaJ9l7GNn+FB4QTjXyjntqHhxqO 6kE0zTwcJJOufo4UOLqjM9G0W/ldAhq9zrSTO+MUJRbJj8GMsoe3XtoEA+5sIkcR J38pCXZhVi48MhRREv+hMqfzYZ7NFE7fFCV5f+ewqtAhMTl+eQV69AKW8lTzrHmU fViQt1sS8mW2rBSYSW8DCkyRk7dC7LffxOp2mPq0jBdXdMc8Ydf9fRpErauwjXbo D6N+STiE+croJrqKh/kO0GIb6pvtuDfBuJslAK+lqYbcaZtH+LFm/UaYGM+9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOO1V2hCh+Dhn8Cx2ATyUSoJAVGcwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiZDMwNTg3LWE3Y2EtNDE5NS1h MzU5LTBjMGY2MjdhZjhkYS8wLzMxMzAzMzJlMzEzNTM3MmUzNjMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ50+MA0GCSqG SIb3DQEBCwUAA4IBAQCXyx/1wrH2YobpXCsSXKmAB1Bi9+69hOh3Gj3kJrX2e677 AGhfKW8zUKBEfnKB5f0f8YYy5wmPmAAcbaxOHxseUKV3W9nyp265Q76yBmfF87jo qjtApzU7lIJ7oqUbX3Ao9NxN8J5cudXYLstxPgn+wKn45txe0cBE67BuenIUg9Er knB4MLYf+Lsaj/i2GH7916sUO/58anvO/bOp+Fi9skwGrzZEI+W0Tim1JzEFUTe0 0yY/U4dA9lCDlSlnkcq1eIlxIBAGdU8zVfWwLUGtqMrn4WyQeD1cNTOYIyEukrrJ w/IdNxM+7mO0Arx79CZXaWwde+oVnuqa2tbF5kOj -----END CERTIFICATE-----Generated at Tue Oct 21 07:09:49 2025 by rpki-client