$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa File: AS147168.roa (raw, json) Hash identifier: SfwVcPhlkwWs3fgP+tbn9sWqgzMndeGhqXYvwXPNvxY= Subject key identifier: A2:91:48:C0:8A:D5:FA:B9:40:22:D2:9A:B4:D0:68:2B:B5:DD:51:0E Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 66B858F8C5962EACE433096DB2D30B08D2023BA0 Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa Signing time: Wed 24 Sep 2025 11:00:03 +0000 ROA not before: Wed 24 Sep 2025 10:55:03 +0000 ROA not after: Wed 23 Sep 2026 11:00:03 +0000 asID: 147168 IP address blocks: 103.178.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:b8:58:f8:c5:96:2e:ac:e4:33:09:6d:b2:d3:0b:08:d2:02:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Sep 24 10:55:03 2025 GMT Not After : Sep 23 11:00:03 2026 GMT Subject: CN=A29148C08AD5FAB94022D29AB4D0682BB5DD510E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:b6:76:03:37:20:73:54:3b:53:0c:6b:8e: 12:56:25:2e:cf:f6:f8:26:65:e3:77:b7:f1:44:f2: c5:15:e7:79:0f:41:2e:c0:d2:3c:4c:b2:95:98:e9: ec:df:41:63:5e:a0:40:cd:ed:07:f5:50:60:87:79: 1d:6a:56:1d:de:7b:79:76:01:a1:c3:20:f4:db:16: d2:f9:1e:a9:e4:49:f9:5c:6e:94:af:79:5f:95:b0: 8c:94:8e:7f:77:78:49:76:43:82:c7:47:bc:23:8f: 85:64:97:ab:a3:a6:2f:01:65:97:4d:11:27:01:c6: 70:5f:24:92:aa:f0:13:05:24:d9:e3:85:45:f7:fb: b3:dd:ed:4b:99:0a:03:a4:2b:34:ad:f1:cf:50:b7: 89:12:b8:98:ce:23:04:81:0c:f6:af:bb:80:fd:0b: c0:66:d2:fc:66:77:8d:b7:45:2f:7b:38:75:13:c0: 15:64:0f:cf:13:08:8a:23:c5:3e:55:e2:be:5d:a5: 37:2b:5f:b7:12:d3:f8:fe:1c:24:98:ec:83:da:0d: fc:7d:62:c6:65:2d:47:8d:55:ad:c5:c4:46:9b:c7: ef:f7:85:cd:12:78:f3:cc:65:64:9a:48:67:93:bb: 18:57:2d:73:6b:05:54:31:48:b3:f0:49:3a:25:8c: db:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:48:C0:8A:D5:FA:B9:40:22:D2:9A:B4:D0:68:2B:B5:DD:51:0E X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/AS147168.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.8.0/24 Signature Algorithm: sha256WithRSAEncryption 55:37:bf:c5:61:52:59:33:8a:ac:24:b9:00:69:34:ef:06:22: 16:25:5a:63:44:50:34:d0:cf:40:b9:56:0e:b5:34:20:5e:e4: 79:69:7c:02:94:6e:3b:5d:3c:32:07:d3:0e:03:6c:1e:a2:00: 78:b1:94:96:c7:bb:97:4d:fc:cc:f8:08:e9:0b:24:44:bf:eb: 6d:0e:c7:1a:e1:13:78:d8:e2:d2:96:5b:56:90:d8:a4:ac:d9: b0:47:e7:0b:bb:27:31:9d:2b:2c:0c:c8:1f:51:1d:7e:7c:08: 92:e9:92:70:e5:81:4c:a1:7c:9b:e8:60:65:c2:a1:30:66:70: 5f:0e:66:e1:02:72:3c:9f:56:a3:1d:2a:4e:55:5e:ff:a2:14: 16:6d:48:75:c0:dd:5e:3e:37:b8:91:bd:83:c2:7a:d5:6f:8d: f9:95:7b:6c:f8:e2:47:a4:a6:c7:09:a5:e8:7a:7a:ba:b5:3f: 51:71:85:a7:69:08:f0:30:23:bf:61:b4:46:16:94:79:03:35: bb:35:d8:88:6b:18:39:3c:78:48:13:ae:12:3d:f3:33:6a:67: c1:7a:3d:04:38:d0:d1:e7:d7:4a:85:1a:4d:3c:c1:a1:0e:4f: e8:77:96:45:d2:b4:2a:2f:4b:c7:ae:4e:a5:a3:60:5a:52:63: dc:6f:25:1e -----BEGIN CERTIFICATE----- MIIE9TCCA92gAwIBAgIUZrhY+MWWLqzkMwltstMLCNICO6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTA5MjQxMDU1MDNaFw0yNjA5MjMxMTAwMDNaMDMxMTAvBgNV BAMTKEEyOTE0OEMwOEFENUZBQjk0MDIyRDI5QUI0RDA2ODJCQjVERDUxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51rZ2Azcgc1Q7UwxrjhJWJS7P 9vgmZeN3t/FE8sUV53kPQS7A0jxMspWY6ezfQWNeoEDN7Qf1UGCHeR1qVh3ee3l2 AaHDIPTbFtL5HqnkSflcbpSveV+VsIyUjn93eEl2Q4LHR7wjj4Vkl6ujpi8BZZdN EScBxnBfJJKq8BMFJNnjhUX3+7Pd7UuZCgOkKzSt8c9Qt4kSuJjOIwSBDPavu4D9 C8Bm0vxmd423RS97OHUTwBVkD88TCIojxT5V4r5dpTcrX7cS0/j+HCSY7IPaDfx9 YsZlLUeNVa3FxEabx+/3hc0SePPMZWSaSGeTuxhXLXNrBVQxSLPwSToljNuLAgMB AAGjggH/MIIB+zAdBgNVHQ4EFgQUopFIwIrV+rlAItKatNBoK7XdUQ4wHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jl cG8tcnBraS5pZG5pYy5uZXQvcmVwby8yZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0y NTQzODEwNjllNTcvMC9BUzE0NzE2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeyCDANBgkqhkiG9w0B AQsFAAOCAQEAVTe/xWFSWTOKrCS5AGk07wYiFiVaY0RQNNDPQLlWDrU0IF7keWl8 ApRuO108MgfTDgNsHqIAeLGUlse7l038zPgI6QskRL/rbQ7HGuETeNji0pZbVpDY pKzZsEfnC7snMZ0rLAzIH1EdfnwIkumScOWBTKF8m+hgZcKhMGZwXw5m4QJyPJ9W ox0qTlVe/6IUFm1IdcDdXj43uJG9g8J61W+N+ZV7bPjiR6Smxwml6Hp6urU/UXGF p2kI8DAjv2G0RhaUeQM1uzXYiGsYOTx4SBOuEj3zM2pnwXo9BDjQ0efXSoUaTTzB oQ5P6HeWRdK0Ki9Lx65OpaNgWlJj3G8lHg== -----END CERTIFICATE-----Generated at Tue Oct 21 01:37:42 2025 by rpki-client