$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa File: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (raw, json) Hash identifier: MTg1tuijanT/fwfxdf3hwp8GNR+2Cd4sBdhUtmiigzQ= Subject key identifier: B1:88:52:EB:5B:37:E6:71:9C:24:A3:98:5F:23:3D:1C:9D:00:24:E8 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 20DFE5DFA33B8C7C625F2BC0FD529DE1A4CF4A53 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa Signing time: Tue 14 Oct 2025 12:02:26 +0000 ROA not before: Tue 14 Oct 2025 11:57:26 +0000 ROA not after: Tue 13 Oct 2026 12:02:26 +0000 asID: 142350 IP address blocks: 103.168.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:df:e5:df:a3:3b:8c:7c:62:5f:2b:c0:fd:52:9d:e1:a4:cf:4a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Oct 14 11:57:26 2025 GMT Not After : Oct 13 12:02:26 2026 GMT Subject: CN=B18852EB5B37E6719C24A3985F233D1C9D0024E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:eb:95:6d:42:0d:4d:06:5f:d9:d5:25:ec: 75:59:ed:77:62:77:4d:64:9e:da:82:fa:f6:21:e0: 43:4a:9c:8f:08:57:1b:fd:1b:2d:48:a8:1c:2e:87: 49:5a:e0:51:dc:f5:d7:10:6a:84:33:1a:70:e6:1b: f5:61:b0:e3:51:88:be:bb:f0:35:9e:22:a7:98:03: 0c:9f:17:64:1d:97:d5:d8:78:09:2c:51:45:be:f5: ce:70:46:33:9b:e2:64:25:12:da:44:05:a7:b6:57: 99:da:1f:c2:80:9d:23:47:5d:e5:e4:fd:ba:fe:ad: 01:13:e7:d8:b5:bc:c3:41:f9:30:bf:dc:d8:e8:1d: bf:fd:aa:e5:3f:48:45:5f:a8:b3:54:b6:9d:3d:26: b2:8f:18:c7:28:59:51:1d:51:58:c9:bd:82:9c:9e: 25:27:75:87:91:58:21:d3:41:0b:28:5c:fe:73:71: 56:98:15:af:22:0c:69:7e:bf:de:9a:8c:39:77:06: 11:86:c1:45:d2:c7:fb:78:14:c0:8a:b8:46:6b:aa: fc:78:9d:6b:36:b2:30:74:f4:59:67:c6:52:c3:5e: 42:dd:4b:6b:2c:98:06:73:a2:74:f7:07:3f:ca:12: f0:c0:e4:05:ff:3c:d1:06:bd:cf:3d:7c:6b:d2:36: 65:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:88:52:EB:5B:37:E6:71:9C:24:A3:98:5F:23:3D:1C:9D:00:24:E8 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.148.0/24 Signature Algorithm: sha256WithRSAEncryption cc:92:d1:fa:c8:33:d5:d8:59:9c:81:1e:0d:cd:34:94:3b:71: 91:ed:04:e0:04:e1:af:0c:9c:e3:1f:42:f5:8a:90:e1:2a:a0: 6b:f3:92:18:ff:84:79:2e:97:89:61:6b:11:53:f0:60:ba:2b: a4:d5:27:22:de:fb:4b:7b:c6:4a:ea:55:d2:65:b4:05:98:a3: e8:aa:a3:e0:40:dd:5f:79:17:fd:94:ed:50:cf:5c:58:d6:49: a1:7b:08:cb:12:c0:86:43:94:78:06:94:f5:03:3e:c7:f6:cf: 8d:9c:c7:46:c2:c5:b3:22:86:dc:17:cc:09:17:97:76:9d:07: f2:b2:0b:cc:90:1e:77:d1:dc:5a:4c:a1:80:be:bf:ec:e4:57: 94:ce:0b:7b:9f:a1:64:3a:c2:9e:df:5b:75:05:da:31:4e:26: 87:0e:2c:bd:36:06:80:f9:f2:b4:e5:6b:aa:7a:49:40:3a:8f: 9e:40:0a:fa:b2:bb:26:4e:12:e4:eb:8c:fb:4a:0c:97:49:21: 77:27:e4:cf:f9:ca:52:82:de:e6:7a:a1:e2:f5:d2:32:60:1d: 94:ee:d1:c7:6c:17:b8:fd:0c:f0:52:d4:18:e5:3d:c5:ab:e5: ef:05:2b:9b:2b:05:52:11:4d:e3:07:ef:d3:18:71:ca:f4:b1: 99:0f:8f:ea -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIN/l36M7jHxiXyvA/VKd4aTPSlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNTEwMTQxMTU3MjZaFw0yNjEwMTMxMjAyMjZaMDMxMTAvBgNV BAMTKEIxODg1MkVCNUIzN0U2NzE5QzI0QTM5ODVGMjMzRDFDOUQwMDI0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxeuVbUINTQZf2dUl7HVZ7Xdi d01kntqC+vYh4ENKnI8IVxv9Gy1IqBwuh0la4FHc9dcQaoQzGnDmG/VhsONRiL67 8DWeIqeYAwyfF2Qdl9XYeAksUUW+9c5wRjOb4mQlEtpEBae2V5naH8KAnSNHXeXk /br+rQET59i1vMNB+TC/3NjoHb/9quU/SEVfqLNUtp09JrKPGMcoWVEdUVjJvYKc niUndYeRWCHTQQsoXP5zcVaYFa8iDGl+v96ajDl3BhGGwUXSx/t4FMCKuEZrqvx4 nWs2sjB09FlnxlLDXkLdS2ssmAZzonT3Bz/KEvDA5AX/PNEGvc89fGvSNmW3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsYhS61s35nGcJKOYXyM9HJ0AJOgwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhMWY2Mjk5LWIxNTUtNDIxMi1i NWUxLTlmNTcwM2NkMDk4OS8wLzMxMzAzMzJlMzEzNjM4MmUzMTM0MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM1MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqJQwDQYJ KoZIhvcNAQELBQADggEBAMyS0frIM9XYWZyBHg3NNJQ7cZHtBOAE4a8MnOMfQvWK kOEqoGvzkhj/hHkul4lhaxFT8GC6K6TVJyLe+0t7xkrqVdJltAWYo+iqo+BA3V95 F/2U7VDPXFjWSaF7CMsSwIZDlHgGlPUDPsf2z42cx0bCxbMihtwXzAkXl3adB/Ky C8yQHnfR3FpMoYC+v+zkV5TOC3ufoWQ6wp7fW3UF2jFOJocOLL02BoD58rTla6p6 SUA6j55ACvqyuyZOEuTrjPtKDJdJIXcn5M/5ylKC3uZ6oeL10jJgHZTu0cdsF7j9 DPBS1BjlPcWr5e8FK5srBVIRTeMH79MYccr0sZkPj+o= -----END CERTIFICATE-----Generated at Tue Oct 21 02:02:03 2025 by rpki-client