$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa File: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (raw, json) Hash identifier: pmEfBdkV2X0aiNWYmtMTZTWBxEmwxyhF/kgAB9N14Tk= Subject key identifier: 2D:AA:FE:4D:C5:0A:A4:53:CD:ED:D0:85:F9:86:8A:18:7D:9F:85:AF Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Certificate serial: 183D5978C9E8BCD381ECBCFAF0AAC7C8E2F12780 Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa Signing time: Fri 10 Oct 2025 11:00:02 +0000 ROA not before: Fri 10 Oct 2025 10:55:02 +0000 ROA not after: Fri 09 Oct 2026 11:00:02 +0000 asID: 141909 IP address blocks: 103.164.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3d:59:78:c9:e8:bc:d3:81:ec:bc:fa:f0:aa:c7:c8:e2:f1:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Validity Not Before: Oct 10 10:55:02 2025 GMT Not After : Oct 9 11:00:02 2026 GMT Subject: CN=2DAAFE4DC50AA453CDEDD085F9868A187D9F85AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:b8:e7:96:b0:46:db:f0:6c:fd:c8:f6:39: bc:7f:7c:05:78:68:c6:81:7d:14:d2:a9:e8:50:27: 92:1f:7a:d2:6c:09:c4:df:5a:01:fd:4f:ba:52:51: 32:54:85:78:9e:d9:da:31:a9:7d:fc:34:0d:9b:88: 28:bf:27:10:15:9b:4f:32:5e:87:a7:72:cd:07:ea: 98:bb:f7:d1:7b:98:f2:1e:46:01:1b:16:f5:86:a6: e2:49:3e:b6:bb:11:40:ab:43:cb:a5:cd:a0:dc:7c: 5a:bb:e5:9d:83:af:c5:f8:60:34:0b:3b:a0:5b:b7: 00:b0:74:77:6e:72:86:f0:dc:5c:3c:68:9f:72:02: 14:e0:d7:9e:39:1c:6b:5a:d9:b0:69:49:5d:fc:fc: eb:fb:87:32:b4:ce:88:ed:47:fa:38:7f:ea:e2:a4: 95:34:ec:33:fb:e0:3c:15:85:a7:c2:3a:f8:d7:67: 4f:13:d7:65:51:54:3a:4b:68:12:f9:11:19:75:28: 14:26:45:17:e6:47:05:18:35:bc:6f:99:9b:a1:c2: 47:94:e0:dd:fc:bb:f6:39:d2:a9:ee:3e:43:34:6d: 9f:ba:c7:86:9f:1f:af:53:49:10:d8:e7:40:29:4a: 3f:99:35:7c:ec:47:d2:62:96:74:9d:56:f5:3f:99: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AA:FE:4D:C5:0A:A4:53:CD:ED:D0:85:F9:86:8A:18:7D:9F:85:AF X509v3 Authority Key Identifier: keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.150.0/24 Signature Algorithm: sha256WithRSAEncryption 05:52:ed:1b:34:05:d4:eb:d5:89:01:b5:af:b3:ff:0f:dc:1c: 1e:e3:c2:39:0d:25:ca:4e:ed:c6:e7:b6:95:a3:30:82:ae:c1: c9:34:48:db:78:c3:fa:34:2d:f6:59:0a:35:42:1d:69:f3:8e: 7b:34:22:04:4b:9d:6a:be:ca:32:83:b1:a0:b6:97:c4:53:5d: 31:c5:72:90:cb:47:1f:cd:92:85:50:2f:42:80:74:37:73:67: 53:4e:2d:db:2c:8a:57:a0:2c:d0:a7:83:e7:19:17:4b:70:63: 89:9e:18:6a:48:9f:c0:61:b4:4a:c5:d1:d5:4d:53:44:12:89: 20:37:1b:af:36:6a:62:d8:2b:f6:20:3e:a8:2a:bf:01:cc:2e: 44:f6:d1:b1:65:83:23:5a:c5:09:0b:98:f4:df:4f:40:7f:bf: e5:f7:2b:66:85:c0:6a:ef:09:c3:1a:8b:cc:84:b2:db:ed:4a: 71:4d:a0:9f:f6:ea:b4:64:f6:c9:20:ac:85:73:22:40:dd:21: eb:84:4a:09:f9:9c:24:dd:0f:d8:d6:e7:e7:7b:ba:61:ce:63: 51:8c:9b:93:08:4f:4d:b4:ab:4b:7d:78:5c:22:4e:79:fe:e5: 9e:9d:94:7a:ca:40:8d:2b:3a:a6:b9:7f:5f:a2:a6:27:11:ee: 66:05:d2:58 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGD1ZeMnovNOB7Lz68KrHyOLxJ4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcw MEQzMDAwMTAeFw0yNTEwMTAxMDU1MDJaFw0yNjEwMDkxMTAwMDJaMDMxMTAvBgNV BAMTKDJEQUFGRTREQzUwQUE0NTNDREVERDA4NUY5ODY4QTE4N0Q5Rjg1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRbjnlrBG2/Bs/cj2Obx/fAV4 aMaBfRTSqehQJ5IfetJsCcTfWgH9T7pSUTJUhXie2doxqX38NA2biCi/JxAVm08y Xoencs0H6pi799F7mPIeRgEbFvWGpuJJPra7EUCrQ8ulzaDcfFq75Z2Dr8X4YDQL O6BbtwCwdHducobw3Fw8aJ9yAhTg1545HGta2bBpSV38/Ov7hzK0zojtR/o4f+ri pJU07DP74DwVhafCOvjXZ08T12VRVDpLaBL5ERl1KBQmRRfmRwUYNbxvmZuhwkeU 4N38u/Y50qnuPkM0bZ+6x4afH69TSRDY50ApSj+ZNXzsR9JilnSdVvU/meNTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQULar+TcUKpFPN7dCF+YaKGH2fha8wHwYDVR0j BBgwFoAUJsASR2k/aM/aH4y2uI96NwDTAAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMC8yNkMwMTI0NzY5 M0Y2OENGREExRjhDQjZCODhGN0EzNzAwRDMwMDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcwMEQz MDAwMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWM0ZDYxLWRjZWYtNGEyMC1i ZDRjLWEyODJhMzdhYTY5ZS8wLzMxMzAzMzJlMzEzNjM0MmUzMTM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpJYwDQYJ KoZIhvcNAQELBQADggEBAAVS7Rs0BdTr1YkBta+z/w/cHB7jwjkNJcpO7cbntpWj MIKuwck0SNt4w/o0LfZZCjVCHWnzjns0IgRLnWq+yjKDsaC2l8RTXTHFcpDLRx/N koVQL0KAdDdzZ1NOLdssilegLNCng+cZF0twY4meGGpIn8BhtErF0dVNU0QSiSA3 G682amLYK/YgPqgqvwHMLkT20bFlgyNaxQkLmPTfT0B/v+X3K2aFwGrvCcMai8yE stvtSnFNoJ/26rRk9skgrIVzIkDdIeuESgn5nCTdD9jW5+d7umHOY1GMm5MIT020 q0t9eFwiTnn+5Z6dlHrKQI0rOqa5f1+ipicR7mYF0lg= -----END CERTIFICATE-----Generated at Tue Oct 21 01:42:20 2025 by rpki-client