$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa File: 3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (raw, json) Hash identifier: aO5GUOOYzWayE1+nuqtYCqJb6iqD3aY2aScclOaaV0o= Subject key identifier: 11:83:FD:73:03:34:A5:79:B7:70:93:3D:D2:79:18:E3:B6:73:E9:A8 Certificate issuer: /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Certificate serial: 73671475DA5823AB4C2CF9FA2450C86260F2849C Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa Signing time: Sat 23 Aug 2025 07:00:00 +0000 ROA not before: Sat 23 Aug 2025 06:55:00 +0000 ROA not after: Sat 22 Aug 2026 07:00:00 +0000 asID: 141617 IP address blocks: 103.161.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:67:14:75:da:58:23:ab:4c:2c:f9:fa:24:50:c8:62:60:f2:84:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157 Validity Not Before: Aug 23 06:55:00 2025 GMT Not After : Aug 22 07:00:00 2026 GMT Subject: CN=1183FD730334A579B770933DD27918E3B673E9A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:00:aa:8e:0b:a4:fe:62:d9:5c:e5:10:9a: 59:52:84:88:38:23:21:9f:88:c8:5f:88:60:03:ae: 57:36:25:b3:19:67:05:7f:c4:7d:78:86:0a:79:99: a0:d5:62:17:0c:e4:45:d0:83:3d:31:5c:e6:cf:6a: 54:16:ae:e6:cf:a7:8f:9f:d6:ac:67:0f:f8:6f:41: 7a:51:d1:8f:57:a0:1c:60:a7:23:0d:ed:79:e8:84: 09:0c:43:e4:3a:b1:04:48:d6:e1:62:41:9b:d9:34: ae:8a:e4:86:fa:23:33:4d:fc:83:b1:31:f9:95:a9: a6:bb:54:d2:43:12:cd:39:f7:c4:5d:70:cf:06:94: b2:f2:84:31:c3:f4:18:9e:e4:f1:9c:e5:9f:a2:b0: 48:7e:eb:ab:f3:52:c4:f3:38:11:98:4f:2b:34:3c: f9:0f:38:e8:a4:04:0f:7f:92:44:59:f6:55:33:8a: 73:11:2b:de:eb:9e:a8:19:56:84:bc:9e:c8:f9:aa: bd:18:71:8d:1a:52:ed:28:ec:64:9b:ed:d7:71:a1: 1b:84:43:23:ad:62:7b:b2:dc:2e:d5:5e:a1:cc:da: b4:ba:af:13:19:9e:2f:5f:0e:7f:55:85:13:78:3e: b8:be:58:33:6f:25:82:10:8b:ed:d4:5b:95:68:96: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:83:FD:73:03:34:A5:79:B7:70:93:3D:D2:79:18:E3:B6:73:E9:A8 X509v3 Authority Key Identifier: keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.149.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:d0:8f:9a:90:94:83:15:f4:7d:79:e6:12:5b:bb:01:25:0f: 03:05:83:90:cd:47:c8:2e:03:f4:26:7a:c2:69:ab:e9:b2:1b: 44:05:aa:5c:80:07:13:00:75:8b:fd:86:52:ad:43:e5:f1:d1: c5:c8:fc:d5:40:1c:a7:fe:29:67:78:04:1f:fe:80:6f:58:aa: cf:cf:ee:d9:d3:4c:8a:98:28:c4:9e:91:76:1f:6a:ac:b8:38: c7:7b:86:5f:4b:90:37:3d:4d:eb:64:9c:a6:ab:9e:2c:0f:7e: ef:65:65:e3:10:bc:0a:a8:05:68:e1:fa:a4:92:78:68:16:cb: 7a:f5:4b:6c:d8:2a:dc:b1:3c:6c:42:4d:e1:55:6b:01:16:ae: 95:9e:78:71:0e:cb:f3:d0:4e:ce:21:d3:92:cc:6d:37:f5:05: d4:61:45:4d:6b:2e:8d:72:43:69:84:d3:1a:99:b9:f4:86:4e: 7b:80:69:23:d0:40:ab:0d:61:0a:85:dd:74:a0:c1:c9:f3:af: 34:66:b0:ee:5c:98:b1:19:4b:e5:54:2b:c4:bd:53:59:b7:f2: 1a:32:54:b3:5c:e2:84:c0:71:fc:e1:08:11:5e:38:77:bf:6a: e2:69:aa:35:0f:a4:b3:6f:7a:98:7e:39:7f:f7:5b:34:8e:38: d8:44:39:c0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUc2cUddpYI6tMLPn6JFDIYmDyhJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0 OTJFNjE1NzAeFw0yNTA4MjMwNjU1MDBaFw0yNjA4MjIwNzAwMDBaMDMxMTAvBgNV BAMTKDExODNGRDczMDMzNEE1NzlCNzcwOTMzREQyNzkxOEUzQjY3M0U5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9ACqjguk/mLZXOUQmllShIg4 IyGfiMhfiGADrlc2JbMZZwV/xH14hgp5maDVYhcM5EXQgz0xXObPalQWrubPp4+f 1qxnD/hvQXpR0Y9XoBxgpyMN7XnohAkMQ+Q6sQRI1uFiQZvZNK6K5Ib6IzNN/IOx MfmVqaa7VNJDEs0598RdcM8GlLLyhDHD9Bie5PGc5Z+isEh+66vzUsTzOBGYTys0 PPkPOOikBA9/kkRZ9lUzinMRK97rnqgZVoS8nsj5qr0YcY0aUu0o7GSb7ddxoRuE QyOtYnuy3C7VXqHM2rS6rxMZni9fDn9VhRN4Pri+WDNvJYIQi+3UW5VoliqbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUEYP9cwM0pXm3cJM90nkY47Zz6agwHwYDVR0j BBgwFoAU6h/yGDTOJUa5P/er16JCMUkuYVcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjExOGYyYi05Zjk0LTQxOTktYTI0MS04ZmM1MWQxN2UwYzUvMC9FQTFGRjIxODM0 Q0UyNTQ2QjkzRkY3QUJEN0EyNDIzMTQ5MkU2MTU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUExRkYyMTgzNENFMjU0NkI5M0ZGN0FCRDdBMjQyMzE0OTJF NjE1Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2MTE4ZjJiLTlmOTQtNDE5OS1h MjQxLThmYzUxZDE3ZTBjNS8wLzMxMzAzMzJlMzEzNjMxMmUzMTM0MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoZUwDQYJ KoZIhvcNAQELBQADggEBAFrQj5qQlIMV9H155hJbuwElDwMFg5DNR8guA/QmesJp q+myG0QFqlyABxMAdYv9hlKtQ+Xx0cXI/NVAHKf+KWd4BB/+gG9Yqs/P7tnTTIqY KMSekXYfaqy4OMd7hl9LkDc9TetknKarniwPfu9lZeMQvAqoBWjh+qSSeGgWy3r1 S2zYKtyxPGxCTeFVawEWrpWeeHEOy/PQTs4h05LMbTf1BdRhRU1rLo1yQ2mE0xqZ ufSGTnuAaSPQQKsNYQqF3XSgwcnzrzRmsO5cmLEZS+VUK8S9U1m38hoyVLNc4oTA cfzhCBFeOHe/auJpqjUPpLNveph+OX/3WzSOONhEOcA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:06:51 2025 by rpki-client