$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa File: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (raw, json) Hash identifier: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM= Subject key identifier: 9A:42:C2:3E:07:18:3E:CB:78:AF:02:6C:35:4F:2D:F1:49:A1:9E:62 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 4803BABE927954688671274A0B4DF9B65F1BF0CE Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa Signing time: Sat 11 Oct 2025 07:00:03 +0000 ROA not before: Sat 11 Oct 2025 06:55:03 +0000 ROA not after: Sat 10 Oct 2026 07:00:03 +0000 asID: 133823 IP address blocks: 103.161.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:03:ba:be:92:79:54:68:86:71:27:4a:0b:4d:f9:b6:5f:1b:f0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Oct 11 06:55:03 2025 GMT Not After : Oct 10 07:00:03 2026 GMT Subject: CN=9A42C23E07183ECB78AF026C354F2DF149A19E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:77:dd:84:2c:30:70:0b:1f:6c:31:8e:f1:ed: a0:e5:96:b4:90:df:48:47:66:a9:ad:91:ff:6d:dd: 58:0e:ea:8b:bd:51:65:fa:cf:e3:a0:a8:b1:65:52: 33:6a:f3:e2:c2:43:26:f9:5f:21:4b:63:4d:08:53: 13:41:85:22:c6:77:5a:29:e7:c5:38:11:5a:0b:f0: 90:47:9b:c1:84:28:cf:61:0f:07:29:cf:26:73:8a: a3:33:8e:26:05:76:b5:1a:ef:2e:7f:6e:31:13:87: 9a:8b:c4:20:4e:35:7c:86:b7:92:18:0e:39:9c:be: bf:01:04:f7:1f:07:3f:b2:21:5a:63:04:d0:70:8d: 06:9e:bb:d2:dd:e0:e9:a9:79:4d:00:23:67:85:f9: 50:a4:62:fc:e9:76:2b:1e:b7:4e:46:15:d7:09:94: 6e:07:8e:38:71:69:e0:1c:db:af:2e:f6:c6:06:f3: 54:a1:91:05:a6:74:29:9e:e9:61:6f:2c:41:c4:99: e4:fe:d8:f5:bd:d4:d6:8d:7d:44:4f:be:91:39:98: 63:02:37:6f:1c:92:48:5e:c6:b9:84:81:be:b1:d0: 15:14:c6:89:4e:0f:33:c5:2b:62:bd:50:71:69:44: a5:b8:3d:3e:88:17:78:98:c0:1b:5a:d3:a6:18:ae: a6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:42:C2:3E:07:18:3E:CB:78:AF:02:6C:35:4F:2D:F1:49:A1:9E:62 X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.190.0/23 Signature Algorithm: sha256WithRSAEncryption 46:70:e5:bd:6f:6a:5d:2d:c4:34:17:90:9d:af:8f:b0:9d:78: bc:eb:1d:99:1c:19:c0:4c:46:84:b0:f9:11:68:02:68:ee:41: 72:2b:ac:9d:12:9b:08:45:02:3b:f0:6d:18:97:52:47:3b:a0: 64:d4:b0:6f:81:1f:b7:ec:cd:51:c1:51:08:e1:db:ad:81:34: 1e:01:8c:ba:22:31:d9:91:71:09:76:65:36:39:9d:d1:98:2c: 4b:e0:c5:ba:2a:bf:c0:5d:8c:31:04:dc:46:3e:23:a6:ed:2b: 98:a9:b1:91:3f:c3:83:7b:28:f1:05:80:e7:68:dd:ac:51:c5: c6:0d:68:b0:b2:24:1b:f2:25:21:53:0b:90:ad:9a:a4:49:89: 9a:4c:55:ff:6e:e3:0e:61:db:e8:f4:40:fd:58:fc:99:15:d8: c3:6f:68:6f:f9:bb:09:7d:96:fc:f4:26:d5:65:4f:4b:2d:f6: 01:c3:ec:91:a2:1e:a1:8f:e1:e5:0e:33:e2:87:ad:fd:c8:14: df:6c:90:9e:95:df:24:f6:22:7d:40:b0:e4:f8:fc:44:cd:f9: 12:42:0c:5b:4d:1b:fe:a4:b9:ef:17:72:ac:e4:0e:0a:b8:02: 26:d4:d3:8c:54:bd:4a:cb:d6:a3:84:9e:32:60:83:67:3c:4d: 92:c3:76:4b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSAO6vpJ5VGiGcSdKC035tl8b8M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNTEwMTEwNjU1MDNaFw0yNjEwMTAwNzAwMDNaMDMxMTAvBgNV BAMTKDlBNDJDMjNFMDcxODNFQ0I3OEFGMDI2QzM1NEYyREYxNDlBMTlFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUd92ELDBwCx9sMY7x7aDllrSQ 30hHZqmtkf9t3VgO6ou9UWX6z+OgqLFlUjNq8+LCQyb5XyFLY00IUxNBhSLGd1op 58U4EVoL8JBHm8GEKM9hDwcpzyZziqMzjiYFdrUa7y5/bjETh5qLxCBONXyGt5IY Djmcvr8BBPcfBz+yIVpjBNBwjQaeu9Ld4OmpeU0AI2eF+VCkYvzpdiset05GFdcJ lG4HjjhxaeAc268u9sYG81ShkQWmdCme6WFvLEHEmeT+2PW91NaNfURPvpE5mGMC N28ckkhexrmEgb6x0BUUxolODzPFK2K9UHFpRKW4PT6IF3iYwBta06YYrqbtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmkLCPgcYPst4rwJsNU8t8UmhnmIwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1OTFiNTliLTFjYTUtNDQ2NC05 OTgyLWJmNmY2ZDhhMWM5NC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM5MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzMzODMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnob4wDQYJ KoZIhvcNAQELBQADggEBAEZw5b1val0txDQXkJ2vj7CdeLzrHZkcGcBMRoSw+RFo AmjuQXIrrJ0SmwhFAjvwbRiXUkc7oGTUsG+BH7fszVHBUQjh262BNB4BjLoiMdmR cQl2ZTY5ndGYLEvgxboqv8BdjDEE3EY+I6btK5ipsZE/w4N7KPEFgOdo3axRxcYN aLCyJBvyJSFTC5CtmqRJiZpMVf9u4w5h2+j0QP1Y/JkV2MNvaG/5uwl9lvz0JtVl T0st9gHD7JGiHqGP4eUOM+KHrf3IFN9skJ6V3yT2In1AsOT4/ETN+RJCDFtNG/6k ue8XcqzkDgq4AibU04xUvUrL1qOEnjJgg2c8TZLDdks= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:36 2025 by rpki-client