$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa File: 3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa (raw, json) Hash identifier: GXjT7wgYQoqsV9FwN2D35bHHkEGQ5XElgoRdLgqO+WM= Subject key identifier: 2B:10:6D:09:98:02:47:1C:CF:30:93:8A:CA:3E:D1:45:52:D5:D0:3D Certificate issuer: /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Certificate serial: 06D60549F701A7FD664288D473200FCD97886F7A Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa Signing time: Fri 12 Sep 2025 11:00:00 +0000 ROA not before: Fri 12 Sep 2025 10:55:00 +0000 ROA not after: Fri 11 Sep 2026 11:00:00 +0000 asID: 149395 IP address blocks: 103.181.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:d6:05:49:f7:01:a7:fd:66:42:88:d4:73:20:0f:cd:97:88:6f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF Validity Not Before: Sep 12 10:55:00 2025 GMT Not After : Sep 11 11:00:00 2026 GMT Subject: CN=2B106D099802471CCF30938ACA3ED14552D5D03D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1c:48:66:e6:e6:8e:d6:0a:f6:24:f7:e6:aa: 8e:25:e5:53:1a:9d:2e:ae:50:c4:ae:67:29:e3:f9: 7d:ca:22:19:ac:bf:77:16:28:ee:00:83:87:01:12: 4b:22:b4:cc:4d:d0:9c:ee:38:e1:e8:ad:19:c1:44: fc:cc:01:cc:17:34:9f:a8:49:c6:73:93:07:b0:c6: 05:4a:b7:33:17:8d:55:30:fd:07:44:e4:ac:10:15: 2c:8a:ae:2a:9e:b8:5e:8e:00:95:84:f0:90:0a:bb: 62:28:91:c7:8c:b0:1b:42:e9:13:ea:1e:64:a5:24: 03:02:e7:1f:63:57:ac:61:89:08:4a:6a:88:19:49: 46:03:96:07:d2:78:58:11:88:12:65:79:bf:7f:94: 4a:fd:5b:1a:93:65:56:54:fe:bd:12:d2:e6:fe:c7: 95:0d:e4:48:60:43:01:36:39:f1:ec:f8:6b:fd:cd: f7:1c:1e:1c:a5:69:b3:1d:8c:1f:10:39:6a:fd:58: e5:14:0c:04:9b:01:22:4b:60:71:22:ce:01:d3:d5: 03:00:50:76:12:d0:16:53:3d:9b:55:3a:4b:39:d4: c7:2d:93:ba:42:9f:f8:68:4c:f3:2e:e2:7e:ec:14: 0e:f9:35:fa:90:e1:b2:b4:12:20:d9:ed:d1:fb:a7: 69:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:6D:09:98:02:47:1C:CF:30:93:8A:CA:3E:D1:45:52:D5:D0:3D X509v3 Authority Key Identifier: keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32342d3234203d3e20313439333935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.246.0/24 Signature Algorithm: sha256WithRSAEncryption 76:99:2d:af:5f:f0:fb:2b:a9:08:3d:c0:2f:05:a1:2a:2c:9d: fd:ef:10:64:67:71:15:f5:f5:01:5d:db:d0:a1:4e:3a:b1:65: 42:98:e5:31:b5:bb:64:db:1f:bc:3f:27:36:42:23:1d:2a:7b: a1:52:6c:3b:f3:46:39:99:d1:80:d5:ab:c0:12:0b:b2:de:a1: 45:d8:74:f5:78:c2:1c:c4:b5:57:5b:03:ed:b1:4c:30:3c:6c: 89:01:be:89:4c:51:9c:2f:7f:87:d9:de:e6:09:d8:e1:5d:99: ac:3f:04:e0:d1:79:6f:6b:68:38:9b:a6:50:e3:91:90:b9:ab: 89:1b:a4:16:73:ef:df:ec:6c:4d:77:b4:79:05:20:e9:4a:2b: 84:15:a8:2f:c2:0c:1a:12:8b:90:b4:a1:8c:be:aa:5c:f1:15: 83:3b:d5:18:e9:72:e6:96:30:b7:a2:be:9f:7b:ef:fd:97:7c: 99:9e:82:b0:cf:7a:67:63:06:4d:5a:0f:46:37:6a:a2:34:b9: 59:49:e7:a8:0d:0f:31:ce:0f:ed:93:67:96:88:49:fc:3e:a4: d2:34:38:32:9c:31:85:a3:5d:e5:71:b3:69:86:56:34:c1:a0: ea:24:11:c1:68:2f:35:af:86:9e:52:0c:14:83:34:f0:4b:0b: 23:9d:33:f7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBtYFSfcBp/1mQojUcyAPzZeIb3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhE NkY3M0ZBRjAeFw0yNTA5MTIxMDU1MDBaFw0yNjA5MTExMTAwMDBaMDMxMTAvBgNV BAMTKDJCMTA2RDA5OTgwMjQ3MUNDRjMwOTM4QUNBM0VEMTQ1NTJENUQwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHEhm5uaO1gr2JPfmqo4l5VMa nS6uUMSuZynj+X3KIhmsv3cWKO4Ag4cBEksitMxN0JzuOOHorRnBRPzMAcwXNJ+o ScZzkwewxgVKtzMXjVUw/QdE5KwQFSyKriqeuF6OAJWE8JAKu2IokceMsBtC6RPq HmSlJAMC5x9jV6xhiQhKaogZSUYDlgfSeFgRiBJleb9/lEr9WxqTZVZU/r0S0ub+ x5UN5EhgQwE2OfHs+Gv9zfccHhylabMdjB8QOWr9WOUUDASbASJLYHEizgHT1QMA UHYS0BZTPZtVOks51Mctk7pCn/hoTPMu4n7sFA75NfqQ4bK0EiDZ7dH7p2n/AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUKxBtCZgCRxzPMJOKyj7RRVLV0D0wHwYDVR0j BBgwFoAU6TFDB60UMC30DeGo7QtdSNb3P68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDFlMDhlZi0zYWU2LTRiOTAtYjQ3Ny0wZTkxNDBkMDQzODAvMC9FOTMxNDMwN0FE MTQzMDJERjQwREUxQThFRDBCNUQ0OEQ2RjczRkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTkzMTQzMDdBRDE0MzAyREY0MERFMUE4RUQwQjVENDhENkY3 M0ZBRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0MWUwOGVmLTNhZTYtNGI5MC1i NDc3LTBlOTE0MGQwNDM4MC8wLzMxMzAzMzJlMzEzODMxMmUzMjM0MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntfYwDQYJ KoZIhvcNAQELBQADggEBAHaZLa9f8PsrqQg9wC8FoSosnf3vEGRncRX19QFd29Ch TjqxZUKY5TG1u2TbH7w/JzZCIx0qe6FSbDvzRjmZ0YDVq8ASC7LeoUXYdPV4whzE tVdbA+2xTDA8bIkBvolMUZwvf4fZ3uYJ2OFdmaw/BODReW9raDibplDjkZC5q4kb pBZz79/sbE13tHkFIOlKK4QVqC/CDBoSi5C0oYy+qlzxFYM71RjpcuaWMLeivp97 7/2XfJmegrDPemdjBk1aD0Y3aqI0uVlJ56gNDzHOD+2TZ5aISfw+pNI0ODKcMYWj XeVxs2mGVjTBoOokEcFoLzWvhp5SDBSDNPBLCyOdM/c= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:03 2025 by rpki-client