$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa File: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (raw, json) Hash identifier: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA= Subject key identifier: 46:69:29:23:19:9C:4C:D9:E1:67:C4:03:62:E9:0F:63:F5:CC:59:27 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 1EE8EFA9E0FE31E174E9CDA166201562476DE527 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa Signing time: Fri 26 Sep 2025 13:00:01 +0000 ROA not before: Fri 26 Sep 2025 12:55:01 +0000 ROA not after: Fri 25 Sep 2026 13:00:01 +0000 asID: 136061 IP address blocks: 103.82.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e8:ef:a9:e0:fe:31:e1:74:e9:cd:a1:66:20:15:62:47:6d:e5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Sep 26 12:55:01 2025 GMT Not After : Sep 25 13:00:01 2026 GMT Subject: CN=46692923199C4CD9E167C40362E90F63F5CC5927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:b1:51:6f:85:14:54:d7:83:8f:68:7e:7a: d0:ea:53:3e:d8:d8:ca:f7:11:e2:50:5c:57:3a:67: 3d:32:86:c5:1c:49:29:fb:d1:e6:58:3d:cd:c6:47: 4a:70:42:4f:23:8f:3d:e9:bd:ca:da:51:fb:0e:7c: ba:ea:00:03:9e:79:b8:58:06:e6:87:26:80:84:41: 2a:9a:4d:c7:84:4d:cd:b7:f3:3b:9a:2c:73:72:cc: ac:81:fc:31:6d:7d:03:dd:58:84:9e:c5:c2:ff:48: 67:a2:33:de:e6:ab:71:98:d5:b8:1e:8f:c6:68:8c: ec:c8:c8:ed:d2:61:0a:d6:ad:70:fc:e7:f0:a0:e9: b4:85:34:9a:03:80:97:8f:7a:10:6e:eb:8a:5c:96: 1d:42:da:b2:68:a1:13:c1:8c:6b:12:88:b0:b5:92: 8e:70:9a:88:73:95:17:2b:58:27:2d:3d:48:13:be: 6b:98:23:ef:2e:d4:c5:7a:cd:93:77:50:96:ae:5e: f9:81:67:9e:c4:0a:b1:56:02:40:3a:e1:6c:c0:84: db:eb:91:7e:02:1e:4c:4c:53:05:ab:8d:48:ce:38: 8e:c8:d7:eb:92:14:9d:98:4b:bb:13:ed:34:7e:cf: cd:81:e2:59:37:d5:59:ed:0c:26:c4:53:8a:42:40: 52:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:69:29:23:19:9C:4C:D9:E1:67:C4:03:62:E9:0F:63:F5:CC:59:27 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.82.181.0/24 Signature Algorithm: sha256WithRSAEncryption b2:37:4f:e7:a0:c2:81:36:21:e6:59:cb:24:4a:fe:09:bf:42: 92:ce:5c:b8:0f:74:47:99:1a:06:21:53:f5:26:71:54:ba:9a: e2:18:f7:4e:4b:c7:ca:2e:a3:60:bb:68:4a:78:34:81:71:8d: d1:0d:76:2d:1b:f7:5b:35:04:b2:01:dd:70:91:ca:eb:1d:1d: b7:4d:c8:0b:b9:cf:4a:63:10:a7:51:0d:5d:28:65:fe:d2:e0: 1a:61:f1:45:54:56:2c:af:db:51:cf:45:79:56:ff:43:f0:72: e5:f0:5c:93:67:98:bc:1f:43:4c:8a:de:07:dd:b5:c2:42:f3: 3e:c2:ab:39:02:b6:ac:f2:e1:8c:f1:04:64:d5:b0:48:9d:4e: b4:82:fc:d9:8a:0d:38:15:e5:4f:9f:54:af:5b:29:c4:af:fa: f8:fa:b1:75:79:1b:3e:30:9d:3c:74:57:4a:56:a4:9c:d6:be: aa:e3:1e:47:85:dd:97:ca:ef:93:4a:76:d4:0c:21:7a:59:01: b1:3d:7f:3e:5f:bc:28:99:d4:45:a2:34:7d:3e:5c:f1:18:60: 92:de:c4:bf:6c:6a:27:64:6a:57:56:52:ae:df:84:a6:b8:7f: b7:e7:3a:49:07:b4:dc:7a:33:d6:28:fb:c3:b3:b7:23:75:18: 6b:03:e8:75 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHujvqeD+MeF06c2hZiAVYkdt5ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA5MjYxMjU1MDFaFw0yNjA5MjUxMzAwMDFaMDMxMTAvBgNV BAMTKDQ2NjkyOTIzMTk5QzRDRDlFMTY3QzQwMzYyRTkwRjYzRjVDQzU5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFerFRb4UUVNeDj2h+etDqUz7Y 2Mr3EeJQXFc6Zz0yhsUcSSn70eZYPc3GR0pwQk8jjz3pvcraUfsOfLrqAAOeebhY BuaHJoCEQSqaTceETc238zuaLHNyzKyB/DFtfQPdWISexcL/SGeiM97mq3GY1bge j8ZojOzIyO3SYQrWrXD85/Cg6bSFNJoDgJePehBu64pclh1C2rJooRPBjGsSiLC1 ko5wmohzlRcrWCctPUgTvmuYI+8u1MV6zZN3UJauXvmBZ57ECrFWAkA64WzAhNvr kX4CHkxMUwWrjUjOOI7I1+uSFJ2YS7sT7TR+z82B4lk31VntDCbEU4pCQFL9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQURmkpIxmcTNnhZ8QDYukPY/XMWScwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwNzU4ZjE1LTVkZTgtNDg3ZC05 OTQ1LWMzZWEyMDdlNDRhZC8wLzMxMzAzMzJlMzgzMjJlMzEzODMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1K1MA0GCSqG SIb3DQEBCwUAA4IBAQCyN0/noMKBNiHmWcskSv4Jv0KSzly4D3RHmRoGIVP1JnFU upriGPdOS8fKLqNgu2hKeDSBcY3RDXYtG/dbNQSyAd1wkcrrHR23TcgLuc9KYxCn UQ1dKGX+0uAaYfFFVFYsr9tRz0V5Vv9D8HLl8FyTZ5i8H0NMit4H3bXCQvM+wqs5 Aras8uGM8QRk1bBInU60gvzZig04FeVPn1SvWynEr/r4+rF1eRs+MJ08dFdKVqSc 1r6q4x5Hhd2Xyu+TSnbUDCF6WQGxPX8+X7womdRFojR9PlzxGGCS3sS/bGonZGpX VlKu34SmuH+35zpJB7TcejPWKPvDs7cjdRhrA+h1 -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:01 2025 by rpki-client