$ rpki-client -vvf repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa File: 3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa (raw, json) Hash identifier: 5CmAHoxqMaeNE699lYg+ydVRs8BbrTW2xLv4KFQbvVM= Subject key identifier: 5C:64:10:2B:13:79:E0:DB:3F:3D:23:E4:B4:C8:18:AA:09:61:CB:90 Certificate issuer: /CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Certificate serial: 1257DAFA46C24E3DCD727BD59C574C09E7DF7AA0 Authority key identifier: F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa Signing time: Tue 15 Jul 2025 03:57:04 +0000 ROA not before: Tue 15 Jul 2025 03:52:04 +0000 ROA not after: Tue 14 Jul 2026 03:57:04 +0000 asID: 150544 IP address blocks: 103.147.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:57:da:fa:46:c2:4e:3d:cd:72:7b:d5:9c:57:4c:09:e7:df:7a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F71ADE61635D40E729AD7D386CF8F90E391AB884 Validity Not Before: Jul 15 03:52:04 2025 GMT Not After : Jul 14 03:57:04 2026 GMT Subject: CN=5C64102B1379E0DB3F3D23E4B4C818AA0961CB90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:3f:37:62:4f:94:f6:c1:2c:0a:d4:08:ad: 9e:61:f2:22:45:94:60:0a:89:9f:5b:28:d3:26:d0: aa:79:6b:6e:a4:7b:98:25:ba:26:a9:a6:13:92:14: 63:d0:46:cf:85:30:7c:8d:c7:ab:31:f0:af:e5:15: 29:8b:35:96:68:05:e8:c1:5c:fd:e2:06:4e:42:33: 51:5e:0f:5f:c9:7c:d1:2b:7d:fc:4d:0f:3e:c0:b2: 7c:20:f0:73:3c:c5:99:38:f0:3d:3d:e5:e7:da:be: a3:c7:f6:fa:4c:17:d0:57:82:2c:13:0d:db:6c:e7: 5b:70:bd:8b:94:fb:89:0c:6c:b5:55:90:33:18:ee: f5:34:60:df:a4:96:fe:70:99:7d:ba:64:10:eb:fb: d1:2d:45:ef:88:59:65:15:b2:7b:f3:69:b6:c7:85: 7c:db:4c:ad:f2:7f:0a:e2:2f:2d:53:3f:54:32:6a: 06:b3:e0:6f:db:7d:e9:4b:0d:8e:81:e3:68:30:ff: c5:2e:f6:31:34:c2:b0:eb:99:68:64:b2:c1:3d:f0: 65:f8:5e:af:f3:a3:d3:1f:bd:b2:a0:0c:0e:b3:8b: 24:15:dd:78:57:a9:a3:28:3d:34:d2:43:19:df:eb: 0c:ec:c8:05:c3:68:34:af:fc:9f:5a:52:36:1e:ec: c4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:64:10:2B:13:79:E0:DB:3F:3D:23:E4:B4:C8:18:AA:09:61:CB:90 X509v3 Authority Key Identifier: keyid:F7:1A:DE:61:63:5D:40:E7:29:AD:7D:38:6C:F8:F9:0E:39:1A:B8:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/F71ADE61635D40E729AD7D386CF8F90E391AB884.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F71ADE61635D40E729AD7D386CF8F90E391AB884.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f0a2bec-f81a-4a3b-a144-175b168e22fd/0/3130332e3134372e3231312e302f32342d3234203d3e20313530353434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.211.0/24 Signature Algorithm: sha256WithRSAEncryption d5:4a:53:91:1c:bf:6a:70:07:50:e2:34:b6:de:76:d7:fb:24: af:24:5e:bc:aa:7f:48:c0:46:9c:61:90:93:db:dc:c0:0e:9e: e4:11:b5:a3:d5:76:70:4b:dd:c4:0c:23:e2:00:25:58:45:f4: c5:ec:62:2d:81:ef:2a:fe:41:43:0c:95:bc:b8:2d:40:76:aa: ca:3e:fd:a8:96:ab:c8:e9:f3:6e:d7:b5:af:38:1a:a7:9a:b6: 98:fc:ac:76:16:07:bf:5e:e8:6f:98:49:0c:86:76:77:8e:c8: 70:bd:49:83:fd:07:57:f0:11:93:64:8c:f6:ab:55:4a:e9:0b: c2:64:50:10:19:d7:0d:54:df:1f:86:ab:f9:c9:66:a3:0d:ef: 9c:f1:40:9d:89:65:30:5b:8d:d1:d0:cd:cb:26:a8:17:70:3b: 67:5c:7c:e6:53:df:e3:ce:71:76:1f:e8:ce:77:bd:00:ef:9c: 99:95:6e:92:d7:92:5b:33:08:f2:e6:93:b3:b8:42:1a:55:0e: b7:bb:fa:93:be:c3:2f:6d:03:d5:4d:67:64:0e:c2:18:80:d5: 06:9c:42:4a:bb:c1:c9:f1:13:d5:7f:87:9a:98:c1:e1:d4:6f: f8:99:f1:7c:0d:79:52:03:19:9e:6a:f2:7d:c2:d6:bb:3d:8f: 41:6a:98:72 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUElfa+kbCTj3NcnvVnFdMCeffeqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUz OTFBQjg4NDAeFw0yNTA3MTUwMzUyMDRaFw0yNjA3MTQwMzU3MDRaMDMxMTAvBgNV BAMTKDVDNjQxMDJCMTM3OUUwREIzRjNEMjNFNEI0QzgxOEFBMDk2MUNCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VD83Yk+U9sEsCtQIrZ5h8iJF lGAKiZ9bKNMm0Kp5a26ke5gluiapphOSFGPQRs+FMHyNx6sx8K/lFSmLNZZoBejB XP3iBk5CM1FeD1/JfNErffxNDz7Asnwg8HM8xZk48D095efavqPH9vpMF9BXgiwT Ddts51twvYuU+4kMbLVVkDMY7vU0YN+klv5wmX26ZBDr+9EtRe+IWWUVsnvzabbH hXzbTK3yfwriLy1TP1Qyagaz4G/bfelLDY6B42gw/8Uu9jE0wrDrmWhkssE98GX4 Xq/zo9MfvbKgDA6ziyQV3XhXqaMoPTTSQxnf6wzsyAXDaDSv/J9aUjYe7MSNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXGQQKxN54Ns/PSPktMgYqglhy5AwHwYDVR0j BBgwFoAU9xreYWNdQOcprX04bPj5DjkauIQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjBhMmJlYy1mODFhLTRhM2ItYTE0NC0xNzViMTY4ZTIyZmQvMC9GNzFBREU2MTYz NUQ0MEU3MjlBRDdEMzg2Q0Y4RjkwRTM5MUFCODg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcxQURFNjE2MzVENDBFNzI5QUQ3RDM4NkNGOEY5MEUzOTFB Qjg4NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmMGEyYmVjLWY4MWEtNGEzYi1h MTQ0LTE3NWIxNjhlMjJmZC8wLzMxMzAzMzJlMzEzNDM3MmUzMjMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk9MwDQYJ KoZIhvcNAQELBQADggEBANVKU5Ecv2pwB1DiNLbedtf7JK8kXryqf0jARpxhkJPb 3MAOnuQRtaPVdnBL3cQMI+IAJVhF9MXsYi2B7yr+QUMMlby4LUB2qso+/aiWq8jp 827Xta84Gqeatpj8rHYWB79e6G+YSQyGdneOyHC9SYP9B1fwEZNkjParVUrpC8Jk UBAZ1w1U3x+Gq/nJZqMN75zxQJ2JZTBbjdHQzcsmqBdwO2dcfOZT3+POcXYf6M53 vQDvnJmVbpLXklszCPLmk7O4QhpVDre7+pO+wy9tA9VNZ2QOwhiA1QacQkq7wcnx E9V/h5qYweHUb/iZ8XwNeVIDGZ5q8n3C1rs9j0FqmHI= -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:10 2025 by rpki-client