$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa File: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (raw, json) Hash identifier: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4= Subject key identifier: B9:39:52:87:40:5F:34:1D:25:86:52:81:C1:1F:6A:BF:9F:3C:40:E7 Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 07A552B3093ED62945D7EA24EC232C969B059014 Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa Signing time: Thu 25 Sep 2025 12:00:02 +0000 ROA not before: Thu 25 Sep 2025 11:55:02 +0000 ROA not after: Thu 24 Sep 2026 12:00:02 +0000 asID: 141637 IP address blocks: 103.162.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a5:52:b3:09:3e:d6:29:45:d7:ea:24:ec:23:2c:96:9b:05:90:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Sep 25 11:55:02 2025 GMT Not After : Sep 24 12:00:02 2026 GMT Subject: CN=B9395287405F341D25865281C11F6ABF9F3C40E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:7a:71:bf:27:ad:36:92:a7:bb:9f:ec:73: db:7f:b2:e2:8f:70:f1:ca:9f:21:89:da:b6:98:84: 8a:c0:db:1c:0a:0e:67:40:ce:ad:29:27:f3:99:b2: cb:5f:b8:bb:c2:8b:95:72:43:d8:1f:3b:32:bd:b6: 8a:49:1b:a0:f6:6d:ea:e1:a5:a9:a5:35:c4:76:dc: 61:c8:6e:c2:6b:4e:23:e0:8a:bd:20:38:81:9a:bb: 84:9f:de:0f:a5:68:2a:3a:b0:8f:1e:bd:db:a0:77: de:17:8a:8c:45:9a:00:10:be:cf:47:ab:8f:c2:1a: 09:9c:56:6e:6a:02:be:37:da:95:e8:d3:97:5d:f0: 76:d2:a1:9c:01:6d:ba:ba:8a:73:fb:3b:a2:0e:51: 5f:8c:a2:43:33:a1:ad:d8:57:6b:91:76:1d:75:17: 69:bb:6a:61:be:82:06:49:ba:de:99:cf:d3:1b:c7: 24:12:6e:06:b5:c7:1e:d7:8b:df:71:ed:78:1b:d7: 2a:47:7a:16:10:1c:cc:88:0d:c4:97:74:d6:6c:7c: df:19:2e:9e:73:09:5e:b9:95:ed:e4:6b:34:7f:48: de:b1:47:c1:5d:21:52:94:c5:ac:30:2a:42:e7:21: 2d:0c:6e:d9:7a:5c:d4:ae:38:f5:19:2b:f6:e2:09: 22:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:39:52:87:40:5F:34:1D:25:86:52:81:C1:1F:6A:BF:9F:3C:40:E7 X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.34.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:cf:76:74:39:f4:8c:9d:96:a3:2e:33:98:7d:4f:d9:2b:03: 3e:cf:be:3a:ec:b3:5a:b4:80:ae:84:64:ef:85:38:de:37:19: 43:d8:54:6c:86:d4:be:21:26:a1:c0:0c:98:b1:7e:4b:8d:f0: 6b:99:16:5c:72:30:09:45:67:7a:e3:da:8c:28:af:b8:ab:93: b1:c6:fd:c9:2f:4f:91:76:6b:01:f2:e7:66:79:c7:de:fa:63: 37:e6:22:c8:d3:51:52:09:37:f9:1f:4d:a5:fb:cb:95:61:de: 6d:aa:7a:32:58:54:12:b2:be:06:1e:ad:d8:e1:0d:d1:0c:b7: ba:16:0a:b5:7b:5e:79:52:5b:00:ea:66:19:3b:9b:ec:38:f0: e3:5f:47:85:0d:9a:1e:1f:9e:63:0b:a3:4f:35:19:a0:7a:85: 6b:d2:bb:bc:ce:b4:4e:39:dc:a6:63:5e:e5:e1:f2:b4:cb:b9: d1:ad:29:4a:f7:55:84:54:8e:96:c6:84:0f:c8:23:c2:1f:1d: 30:64:fd:dc:dc:9f:02:43:d0:6e:8b:19:34:34:f0:f0:1e:f6: 8a:1f:c0:a9:ff:50:9c:14:e0:50:36:0e:d5:77:c2:fb:23:78: b0:48:82:b6:6a:6c:e7:83:4e:b7:d2:3c:ee:83:44:1a:38:1b: db:c1:b7:57 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB6VSswk+1ilF1+ok7CMslpsFkBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTA5MjUxMTU1MDJaFw0yNjA5MjQxMjAwMDJaMDMxMTAvBgNV BAMTKEI5Mzk1Mjg3NDA1RjM0MUQyNTg2NTI4MUMxMUY2QUJGOUYzQzQwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChQnpxvyetNpKnu5/sc9t/suKP cPHKnyGJ2raYhIrA2xwKDmdAzq0pJ/OZsstfuLvCi5VyQ9gfOzK9topJG6D2berh pamlNcR23GHIbsJrTiPgir0gOIGau4Sf3g+laCo6sI8evdugd94XioxFmgAQvs9H q4/CGgmcVm5qAr432pXo05dd8HbSoZwBbbq6inP7O6IOUV+MokMzoa3YV2uRdh11 F2m7amG+ggZJut6Zz9MbxyQSbga1xx7Xi99x7Xgb1ypHehYQHMyIDcSXdNZsfN8Z Lp5zCV65le3kazR/SN6xR8FdIVKUxawwKkLnIS0Mbtl6XNSuOPUZK/biCSIRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUuTlSh0BfNB0lhlKBwR9qv588QOcwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU0MjQyMzU1LWE3ZTItNGNiOS04 Y2ZmLTllMTdjNzQyYzJlZi8wLzMxMzAzMzJlMzEzNjMyMmUzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6IiMA0GCSqG SIb3DQEBCwUAA4IBAQB9z3Z0OfSMnZajLjOYfU/ZKwM+z7467LNatICuhGTvhTje NxlD2FRshtS+ISahwAyYsX5LjfBrmRZccjAJRWd649qMKK+4q5Oxxv3JL0+RdmsB 8udmecfe+mM35iLI01FSCTf5H02l+8uVYd5tqnoyWFQSsr4GHq3Y4Q3RDLe6Fgq1 e155UlsA6mYZO5vsOPDjX0eFDZoeH55jC6NPNRmgeoVr0ru8zrROOdymY17l4fK0 y7nRrSlK91WEVI6WxoQPyCPCHx0wZP3c3J8CQ9Buixk0NPDwHvaKH8Cp/1CcFOBQ Ng7Vd8L7I3iwSIK2amzng0630jzug0QaOBvbwbdX -----END CERTIFICATE-----Generated at Tue Oct 21 02:32:34 2025 by rpki-client