$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa File: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (raw, json) Hash identifier: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE= Subject key identifier: E5:02:75:92:C1:91:6F:1F:DA:BA:17:09:1D:2F:6F:C4:DC:75:A9:5A Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 46BCD3235DEA749C9D2D0262ACB3E50B45980A8A Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa Signing time: Fri 10 Oct 2025 14:00:00 +0000 ROA not before: Fri 10 Oct 2025 13:55:00 +0000 ROA not after: Fri 09 Oct 2026 14:00:00 +0000 asID: 149340 IP address blocks: 103.178.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:bc:d3:23:5d:ea:74:9c:9d:2d:02:62:ac:b3:e5:0b:45:98:0a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Oct 10 13:55:00 2025 GMT Not After : Oct 9 14:00:00 2026 GMT Subject: CN=E5027592C1916F1FDABA17091D2F6FC4DC75A95A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:12:02:68:1a:76:0d:c5:7e:c2:27:4d:eb: ec:c6:7d:eb:67:fd:00:51:d1:38:f3:de:28:f2:30: ed:12:2d:b2:1a:cd:88:4a:3b:7a:eb:de:c3:04:d6: 7b:fb:29:2d:cb:23:89:e5:b2:57:ef:2f:8b:4d:b4: f8:09:16:1d:8e:00:54:53:b2:7a:56:1b:67:53:25: 8c:9f:e4:c5:5e:76:ee:9f:e0:e8:d1:46:d6:dd:49: 75:65:f1:36:b3:be:9a:b9:c0:a9:69:38:eb:12:86: 39:3a:6a:f6:9e:b5:d5:14:c2:f9:34:90:c8:2e:01: c3:a8:c0:a3:a0:5d:5c:a8:48:46:03:b9:2f:9a:33: 01:a1:b6:1e:f9:f9:cb:70:eb:91:13:ef:c0:a9:8e: 28:12:f0:eb:01:61:4d:4c:9e:12:ec:1e:ff:fd:3b: 94:35:ae:8b:8e:f6:88:44:88:2f:56:96:6b:d7:4b: 36:99:50:20:bf:52:9a:2b:e9:88:6e:4e:93:81:a4: df:78:0d:4e:65:5d:df:2c:71:b8:3f:69:fd:a0:88: 48:d7:df:25:2d:42:b3:a8:a3:ad:f6:8f:ef:cb:7d: 1f:db:46:b5:bb:8e:10:d6:d4:e7:53:e1:c6:00:1f: 29:ac:d8:9c:24:80:75:1a:df:56:76:4e:c9:86:a3: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:02:75:92:C1:91:6F:1F:DA:BA:17:09:1D:2F:6F:C4:DC:75:A9:5A X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.147.0/24 Signature Algorithm: sha256WithRSAEncryption 44:55:6f:60:bf:ba:d3:c5:07:32:cd:d8:05:f0:e7:b2:f6:59: 73:28:87:dd:22:6a:42:df:0a:38:f0:ed:32:4d:cd:37:b0:8d: bc:d3:54:2b:79:2e:df:49:e5:02:89:98:db:b7:ad:65:ef:f1: 4c:b0:67:93:2e:bd:d7:1c:f6:a2:8b:c5:3c:69:f5:90:b2:fd: d9:f1:73:84:ee:a5:ab:56:0f:8b:b3:35:0d:bf:ce:02:0c:68: d1:cd:ae:08:3b:d5:b3:ce:6f:bd:38:18:16:2c:23:f6:ba:af: 41:e5:29:0d:e7:bd:0e:99:de:f9:fd:a0:50:48:12:67:17:92: 9c:40:0a:5c:45:0d:a9:30:9e:09:b4:bf:10:e0:32:97:85:0c: b0:eb:c8:b5:0b:06:5b:d7:0c:a3:27:8c:c8:58:cc:14:ad:ed: e7:bc:a5:95:70:b1:3c:19:e2:f3:b5:66:35:30:54:aa:6b:48: 90:f5:a2:52:ca:f6:76:5c:83:12:78:76:0d:ba:f5:be:44:fd: 25:4a:a6:8b:e0:8b:20:78:19:42:43:ce:c0:8a:d4:bf:78:d0: ec:b3:37:3c:bb:0f:fe:dd:a4:32:15:f5:dc:13:02:ff:5e:0f: b5:72:1a:ff:ea:d1:06:3f:2c:da:e1:8d:52:ab:ae:41:d6:74: 70:07:31:26 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIURrzTI13qdJydLQJirLPlC0WYCoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTEwMTAxMzU1MDBaFw0yNjEwMDkxNDAwMDBaMDMxMTAvBgNV BAMTKEU1MDI3NTkyQzE5MTZGMUZEQUJBMTcwOTFEMkY2RkM0REM3NUE5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmhICaBp2DcV+widN6+zGfetn /QBR0Tjz3ijyMO0SLbIazYhKO3rr3sME1nv7KS3LI4nlslfvL4tNtPgJFh2OAFRT snpWG2dTJYyf5MVedu6f4OjRRtbdSXVl8Tazvpq5wKlpOOsShjk6avaetdUUwvk0 kMguAcOowKOgXVyoSEYDuS+aMwGhth75+ctw65ET78CpjigS8OsBYU1MnhLsHv/9 O5Q1rouO9ohEiC9WlmvXSzaZUCC/Upor6YhuTpOBpN94DU5lXd8scbg/af2giEjX 3yUtQrOoo632j+/LfR/bRrW7jhDW1OdT4cYAHyms2JwkgHUa31Z2TsmGo/e3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU5QJ1ksGRbx/auhcJHS9vxNx1qVowHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYWI4MDQyLTBlMWMtNDNiMS1i NzAzLTYzNDM4YmUyMzI1Yi8wLzMxMzAzMzJlMzEzNzM4MmUzMTM0MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnspMwDQYJ KoZIhvcNAQELBQADggEBAERVb2C/utPFBzLN2AXw57L2WXMoh90iakLfCjjw7TJN zTewjbzTVCt5Lt9J5QKJmNu3rWXv8UywZ5Muvdcc9qKLxTxp9ZCy/dnxc4TupatW D4uzNQ2/zgIMaNHNrgg71bPOb704GBYsI/a6r0HlKQ3nvQ6Z3vn9oFBIEmcXkpxA ClxFDakwngm0vxDgMpeFDLDryLULBlvXDKMnjMhYzBSt7ee8pZVwsTwZ4vO1ZjUw VKprSJD1olLK9nZcgxJ4dg269b5E/SVKpovgiyB4GUJDzsCK1L940OyzNzy7D/7d pDIV9dwTAv9eD7VyGv/q0QY/LNrhjVKrrkHWdHAHMSY= -----END CERTIFICATE-----Generated at Tue Oct 21 02:04:53 2025 by rpki-client