$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa File: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (raw, json) Hash identifier: /g+5nQoioDTt8teej8QvN1daXZtQyJ0RCEnJEqM8tz8= Subject key identifier: 7D:9F:27:EF:C0:99:63:B8:55:55:26:11:08:7E:0F:B2:AD:F1:5E:EF Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 38ACFE51C98ED1A30ABEDA8F7E897034F9951677 Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa Signing time: Sat 13 Sep 2025 07:00:00 +0000 ROA not before: Sat 13 Sep 2025 06:55:00 +0000 ROA not after: Sat 12 Sep 2026 07:00:00 +0000 asID: 149319 IP address blocks: 103.178.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ac:fe:51:c9:8e:d1:a3:0a:be:da:8f:7e:89:70:34:f9:95:16:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Sep 13 06:55:00 2025 GMT Not After : Sep 12 07:00:00 2026 GMT Subject: CN=7D9F27EFC09963B855552611087E0FB2ADF15EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:92:47:a9:b5:e2:d3:35:41:dd:5e:b9:27: d2:50:75:e9:c6:4b:27:ce:8f:74:a4:75:7d:49:ff: 53:98:c0:41:c3:47:d0:b4:1b:0a:10:3c:f0:b4:70: 7e:30:41:c5:ad:7b:17:22:a6:b0:af:09:b8:c4:5e: 8d:53:1f:ff:2a:4b:c8:24:a5:f8:48:58:cc:ff:f7: a1:7b:76:b9:d5:3b:7a:bc:e1:b4:b5:5b:23:00:18: eb:4a:e4:86:50:02:99:f5:2c:7b:d4:6c:01:47:ad: bc:25:6b:eb:aa:5c:de:73:a9:1c:12:11:b8:a6:e2: a2:23:62:d6:81:a4:46:71:a5:9b:e8:22:ef:cf:ff: d4:9b:8b:f9:9f:8f:a3:89:7e:2d:7c:05:23:e5:5a: e0:ba:b3:01:79:c4:dd:d7:a0:21:60:7d:69:96:e7: 00:48:47:e0:59:2f:53:de:e6:3f:85:f9:12:cc:87: c2:6f:6a:b6:dd:d5:8a:04:37:37:cb:64:a7:a5:a4: 09:41:4a:cd:be:41:3d:81:40:ee:1b:3e:53:5a:ac: f5:a6:df:2d:8d:31:96:4c:a5:e6:50:0c:54:91:31: cb:69:9f:f3:ec:cc:e9:36:c2:3d:b2:8f:a7:f1:07: eb:88:5d:7d:ce:d6:20:7a:75:07:6a:4f:75:f8:b6: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:27:EF:C0:99:63:B8:55:55:26:11:08:7E:0F:B2:AD:F1:5E:EF X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.20.0/23 Signature Algorithm: sha256WithRSAEncryption 62:2f:a0:83:68:7d:e0:32:77:90:11:83:e2:24:91:67:4f:84: c2:cf:f6:db:0e:1a:91:f0:2a:9f:0a:69:76:1b:04:ec:af:b9: 31:6d:61:52:3d:99:ee:03:29:07:b6:e3:51:5c:34:76:df:eb: 64:fd:a3:30:16:d5:80:82:48:0c:56:29:f8:27:fb:0d:eb:42: fb:82:b8:89:18:e7:25:59:f5:62:3c:cd:3c:8e:2b:b3:7c:30: eb:94:d4:4c:8c:c1:f5:79:10:99:ee:76:11:9b:5b:44:8e:e4: ed:c0:e1:20:cf:0d:c8:a7:0b:63:58:66:c0:10:21:01:26:d7: c0:67:96:6b:0c:52:54:73:3c:bd:c5:ec:06:51:af:e1:40:18: dc:8d:23:77:05:38:b3:8d:04:04:a6:9f:d7:84:8b:73:6c:dc: 4c:4f:f3:e0:a6:5a:f5:ae:b8:7c:f4:63:fa:4b:c0:d1:39:97: 8a:26:8a:73:ea:0e:9e:c3:27:d7:1b:42:a0:86:ee:f9:9d:ad: 90:9b:26:dc:22:3c:a7:0b:e5:91:00:7d:14:77:97:dd:50:c5: 38:fc:2f:78:33:73:4b:63:ef:26:a4:58:e7:f6:ec:59:4a:ad: e7:a2:68:6e:dc:71:3e:21:70:fa:13:c0:6e:fd:8d:b4:eb:7d: 4e:b2:65:1f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOKz+UcmO0aMKvtqPfolwNPmVFncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNTA5MTMwNjU1MDBaFw0yNjA5MTIwNzAwMDBaMDMxMTAvBgNV BAMTKDdEOUYyN0VGQzA5OTYzQjg1NTU1MjYxMTA4N0UwRkIyQURGMTVFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+95JHqbXi0zVB3V65J9JQdenG SyfOj3SkdX1J/1OYwEHDR9C0GwoQPPC0cH4wQcWtexciprCvCbjEXo1TH/8qS8gk pfhIWMz/96F7drnVO3q84bS1WyMAGOtK5IZQApn1LHvUbAFHrbwla+uqXN5zqRwS Ebim4qIjYtaBpEZxpZvoIu/P/9Sbi/mfj6OJfi18BSPlWuC6swF5xN3XoCFgfWmW 5wBIR+BZL1Pe5j+F+RLMh8Jvarbd1YoENzfLZKelpAlBSs2+QT2BQO4bPlNarPWm 3y2NMZZMpeZQDFSRMctpn/PszOk2wj2yj6fxB+uIXX3O1iB6dQdqT3X4to/9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfZ8n78CZY7hVVSYRCH4Psq3xXu8wHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZmQ5YTU4LWE5MDYtNDAyOS05 MmUyLWFkY2I1NmFlMThiZC8wLzMxMzAzMzJlMzEzNzM4MmUzMjMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzMzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7IUMA0GCSqG SIb3DQEBCwUAA4IBAQBiL6CDaH3gMneQEYPiJJFnT4TCz/bbDhqR8CqfCml2GwTs r7kxbWFSPZnuAykHtuNRXDR23+tk/aMwFtWAgkgMVin4J/sN60L7griJGOclWfVi PM08jiuzfDDrlNRMjMH1eRCZ7nYRm1tEjuTtwOEgzw3IpwtjWGbAECEBJtfAZ5Zr DFJUczy9xewGUa/hQBjcjSN3BTizjQQEpp/XhItzbNxMT/Pgplr1rrh89GP6S8DR OZeKJopz6g6ewyfXG0Kghu75na2QmybcIjynC+WRAH0Ud5fdUMU4/C94M3NLY+8m pFjn9uxZSq3nomhu3HE+IXD6E8Bu/Y20631OsmUf -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:52 2025 by rpki-client