$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa File: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (raw, json) Hash identifier: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ= Subject key identifier: 1E:8A:03:6A:9F:25:FC:66:F9:27:0B:F5:A6:6B:F9:8E:39:95:05:4E Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 07698BDBEF9F09FECB683F734F813D8234ECC9AB Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa Signing time: Tue 30 Sep 2025 08:02:12 +0000 ROA not before: Tue 30 Sep 2025 07:57:12 +0000 ROA not after: Tue 29 Sep 2026 08:02:12 +0000 asID: 141108 IP address blocks: 103.157.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 07:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:69:8b:db:ef:9f:09:fe:cb:68:3f:73:4f:81:3d:82:34:ec:c9:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Sep 30 07:57:12 2025 GMT Not After : Sep 29 08:02:12 2026 GMT Subject: CN=1E8A036A9F25FC66F9270BF5A66BF98E3995054E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:ac:ed:13:3f:ce:3d:c3:02:ed:b8:0e:ec: c8:71:2e:a6:68:03:a2:5d:82:c4:68:69:19:8f:0d: 6d:14:14:87:bd:e7:98:27:af:8f:d5:64:8d:21:9a: e2:cc:70:6e:1f:13:02:1b:9b:2e:6b:d9:fc:f3:78: d5:17:db:3d:12:f6:8e:ba:b3:bc:ae:1c:b9:37:9e: 28:be:25:4a:fc:62:36:d1:24:03:3d:17:6d:50:1b: 57:da:0c:63:9f:a2:1e:16:39:a6:56:22:58:da:ff: 17:29:0f:4b:ec:0f:7b:1c:0e:02:88:c3:3b:32:69: 43:d9:50:bf:01:3b:b4:75:b7:7d:69:1f:0d:98:cc: 3c:06:15:53:c3:df:69:41:16:d9:99:d6:a6:6d:bb: 64:d3:cd:eb:07:ae:7e:60:e6:b9:6a:17:89:ed:d7: ac:81:cb:98:b0:9e:6e:8c:93:8c:74:57:30:7d:da: 63:0c:ef:30:63:c1:c3:e1:76:e1:30:2e:dd:92:35: 23:c5:7f:90:9a:c4:3c:94:f5:27:62:8c:0d:90:3b: cb:57:6c:f5:ad:a6:46:35:1f:f0:24:87:a7:fe:1f: aa:c7:c7:92:3f:cd:10:c9:e5:b2:16:7b:5d:6d:aa: b5:98:0c:65:7e:df:92:1c:7f:41:d8:b8:1d:c9:c0: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8A:03:6A:9F:25:FC:66:F9:27:0B:F5:A6:6B:F9:8E:39:95:05:4E X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.25.0/24 Signature Algorithm: sha256WithRSAEncryption 73:1a:e2:ac:e7:ae:7c:d4:6f:88:6b:c0:da:51:09:34:8b:10: e9:dd:44:f6:23:5f:14:31:1a:55:a2:97:8e:72:06:ea:ea:3d: 2e:5a:3f:dc:92:43:43:22:54:67:bf:0c:a3:1d:2f:aa:67:4a: 1b:a7:77:d6:12:e1:7d:03:6c:00:35:05:a0:4e:2f:2e:8d:0f: 5a:6c:b9:03:f1:40:23:21:13:5b:c4:2d:dd:05:88:cc:26:98: e1:f3:cf:5a:3e:8f:f2:64:77:5d:7a:fb:7d:fd:fc:88:37:b5: 10:7b:ce:3d:e4:59:d6:91:44:29:3b:13:de:4b:e8:a0:51:c0: 0c:b8:a1:89:df:10:fa:5d:27:3b:97:a1:6e:3a:d7:a3:b8:8e: 5d:2b:7d:72:e3:5c:ea:73:bf:88:56:72:ab:06:74:dc:09:19: 87:48:78:90:3b:9d:2f:d9:c8:37:9c:0e:fb:ba:67:d5:a7:c4: 7e:cb:ff:2a:c9:b7:4e:2d:09:b8:19:90:32:6c:2f:29:6d:02: ce:af:97:a0:0d:4e:30:d4:4a:41:b8:5e:fc:a5:52:85:8e:3f: 95:2f:77:32:ab:d1:3c:cc:ad:ec:4e:5e:81:34:9a:79:d2:78: 01:4b:b4:0b:5e:1f:78:cb:05:22:b6:4d:0f:f8:8b:4e:2f:88: 45:4b:71:c4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB2mL2++fCf7LaD9zT4E9gjTsyaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNTA5MzAwNzU3MTJaFw0yNjA5MjkwODAyMTJaMDMxMTAvBgNV BAMTKDFFOEEwMzZBOUYyNUZDNjZGOTI3MEJGNUE2NkJGOThFMzk5NTA1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfqztEz/OPcMC7bgO7MhxLqZo A6JdgsRoaRmPDW0UFIe955gnr4/VZI0hmuLMcG4fEwIbmy5r2fzzeNUX2z0S9o66 s7yuHLk3nii+JUr8YjbRJAM9F21QG1faDGOfoh4WOaZWIlja/xcpD0vsD3scDgKI wzsyaUPZUL8BO7R1t31pHw2YzDwGFVPD32lBFtmZ1qZtu2TTzesHrn5g5rlqF4nt 16yBy5iwnm6Mk4x0VzB92mMM7zBjwcPhduEwLt2SNSPFf5CaxDyU9SdijA2QO8tX bPWtpkY1H/Akh6f+H6rHx5I/zRDJ5bIWe11tqrWYDGV+35Icf0HYuB3JwJ9tAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUHooDap8l/Gb5Jwv1pmv5jjmVBU4wHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwMWI3OWFjLTMzNTEtNDcwNS04 YzNkLTYwMmFkY2Q3OWJiNy8wLzMxMzAzMzJlMzEzNTM3MmUzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ50ZMA0GCSqG SIb3DQEBCwUAA4IBAQBzGuKs56581G+Ia8DaUQk0ixDp3UT2I18UMRpVopeOcgbq 6j0uWj/ckkNDIlRnvwyjHS+qZ0obp3fWEuF9A2wANQWgTi8ujQ9abLkD8UAjIRNb xC3dBYjMJpjh889aPo/yZHddevt9/fyIN7UQe8495FnWkUQpOxPeS+igUcAMuKGJ 3xD6XSc7l6FuOtejuI5dK31y41zqc7+IVnKrBnTcCRmHSHiQO50v2cg3nA77umfV p8R+y/8qybdOLQm4GZAybC8pbQLOr5egDU4w1EpBuF78pVKFjj+VL3cyq9E8zK3s Tl6BNJp50ngBS7QLXh94ywUitk0P+ItOL4hFS3HE -----END CERTIFICATE-----Generated at Tue Oct 21 09:08:32 2025 by rpki-client