$ rpki-client -vvf repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa File: 3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa (raw, json) Hash identifier: 4BHdCYqlJBbs7oaN7Hdy9PDCOH2HYrL7cOj61277Yu8= Subject key identifier: F5:BC:66:07:D7:6D:35:BD:0E:16:9F:9C:93:4C:37:FB:59:54:DE:9C Certificate issuer: /CN=99F644C407D1C8C133A923CC84619FC228E767AC Certificate serial: 78856B7CC305224E602E769A9B93246BAC60E00F Authority key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa Signing time: Tue 23 Sep 2025 15:00:02 +0000 ROA not before: Tue 23 Sep 2025 14:55:02 +0000 ROA not after: Tue 22 Sep 2026 15:00:02 +0000 asID: 142391 IP address blocks: 103.169.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:85:6b:7c:c3:05:22:4e:60:2e:76:9a:9b:93:24:6b:ac:60:e0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99F644C407D1C8C133A923CC84619FC228E767AC Validity Not Before: Sep 23 14:55:02 2025 GMT Not After : Sep 22 15:00:02 2026 GMT Subject: CN=F5BC6607D76D35BD0E169F9C934C37FB5954DE9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:84:8c:e0:38:eb:6a:bb:bf:6d:ec:61:87: f6:8b:fc:20:82:0e:91:52:14:67:b5:e0:67:ce:d4: fb:81:a7:84:94:93:3f:23:d6:81:20:b0:eb:ad:fc: 57:0a:a3:8c:f9:91:89:8f:cd:32:fd:96:4a:d4:86: 99:00:87:75:1e:ad:6e:22:16:1f:12:f0:cb:bc:38: 26:48:79:ec:95:9a:2d:ef:7f:61:ba:81:cd:69:78: ae:48:cc:a8:59:b9:89:c5:b8:77:6d:fb:1e:3a:64: fc:ff:21:4e:34:2e:93:6b:3b:42:53:42:68:a5:aa: 58:1f:2a:29:d5:93:e7:df:2b:c0:a2:83:a5:ad:6f: 2e:71:04:78:a3:ac:f7:4c:0d:4f:32:9c:ee:fc:06: e6:20:18:b4:3a:57:6a:30:2e:66:b1:8b:96:53:4b: 24:50:be:cc:63:35:c8:a2:6f:11:9d:b8:9a:94:b4: 0c:06:e0:37:1f:ea:2a:d6:ed:b9:85:9a:3f:ed:f3: 5d:12:29:55:92:d5:dd:3a:d7:82:fe:61:92:d3:65: ed:fe:e4:99:27:16:3c:3e:b5:50:5f:d3:00:f0:d2: 19:6d:d8:6b:d5:89:86:e7:10:dc:50:ce:70:43:74: 56:56:9e:1c:63:2e:30:18:c2:a4:4f:14:76:56:05: bd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:66:07:D7:6D:35:BD:0E:16:9F:9C:93:4C:37:FB:59:54:DE:9C X509v3 Authority Key Identifier: keyid:99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/3130332e3136392e34352e302f32342d3234203d3e20313432333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.45.0/24 Signature Algorithm: sha256WithRSAEncryption f9:bc:5c:2c:3c:e9:b4:21:49:6c:10:e7:00:2d:21:44:d8:2a: b5:4d:12:2d:09:d8:66:ae:d8:fa:5b:b2:1f:da:d8:84:41:fe: e3:8a:a4:66:67:62:24:f8:0f:99:72:12:1a:d8:f6:a7:4e:b8: 94:f2:57:db:6e:24:b3:80:cb:3f:b7:a6:3d:17:02:16:0e:70: c5:4b:fc:e9:21:ba:54:90:16:cd:b7:b1:c9:0e:58:f6:e3:eb: c8:d0:27:83:68:f1:bc:c8:a4:fa:9b:ba:1f:16:ac:9c:c4:5f: 59:bd:ab:e2:0b:31:fd:08:8f:3d:3b:32:72:f5:54:21:f7:f6: 45:6b:ca:3e:67:22:8d:b6:f6:a0:a4:b3:10:36:11:94:9f:f3: 3b:45:5f:20:12:5b:51:9a:dd:8b:94:1d:92:36:6e:f8:1a:5e: 6f:9e:1a:7f:e7:d5:02:07:85:45:fd:bf:92:27:0f:6e:9e:6b: c4:42:3e:1a:07:bc:6e:62:68:fe:fc:b9:34:7f:4d:53:fc:62: 6d:cf:0a:bc:cd:a4:39:3e:29:e3:42:e4:6b:3b:8c:94:46:e7: bc:5c:fd:01:05:a5:0a:3d:b2:8a:24:89:51:76:3b:95:39:70: ed:e8:55:4d:e5:e8:cb:ea:93:d5:9a:30:9d:9f:a8:df:b1:ba: 8a:1b:64:14 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeIVrfMMFIk5gLnaam5Mka6xg4A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIy OEU3NjdBQzAeFw0yNTA5MjMxNDU1MDJaFw0yNjA5MjIxNTAwMDJaMDMxMTAvBgNV BAMTKEY1QkM2NjA3RDc2RDM1QkQwRTE2OUY5QzkzNEMzN0ZCNTk1NERFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWLISM4Djraru/bexhh/aL/CCC DpFSFGe14GfO1PuBp4SUkz8j1oEgsOut/FcKo4z5kYmPzTL9lkrUhpkAh3UerW4i Fh8S8Mu8OCZIeeyVmi3vf2G6gc1peK5IzKhZuYnFuHdt+x46ZPz/IU40LpNrO0JT QmilqlgfKinVk+ffK8Cig6Wtby5xBHijrPdMDU8ynO78BuYgGLQ6V2owLmaxi5ZT SyRQvsxjNciibxGduJqUtAwG4Dcf6irW7bmFmj/t810SKVWS1d0614L+YZLTZe3+ 5JknFjw+tVBf0wDw0hlt2GvViYbnENxQznBDdFZWnhxjLjAYwqRPFHZWBb25AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9bxmB9dtNb0OFp+ck0w3+1lU3pwwHwYDVR0j BBgwFoAUmfZExAfRyMEzqSPMhGGfwijnZ6wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMC85OUY2NDRDNDA3 RDFDOEMxMzNBOTIzQ0M4NDYxOUZDMjI4RTc2N0FDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlGNjQ0QzQwN0QxQzhDMTMzQTkyM0NDODQ2MTlGQzIyOEU3 NjdBQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0NmI1MjQ4LWNlMzMtNGU5Ny04 ODJmLWY2MTQ1ZjMxOTAyNi8wLzMxMzAzMzJlMzEzNjM5MmUzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6ktMA0GCSqG SIb3DQEBCwUAA4IBAQD5vFwsPOm0IUlsEOcALSFE2Cq1TRItCdhmrtj6W7If2tiE Qf7jiqRmZ2Ik+A+ZchIa2PanTriU8lfbbiSzgMs/t6Y9FwIWDnDFS/zpIbpUkBbN t7HJDlj24+vI0CeDaPG8yKT6m7ofFqycxF9ZvaviCzH9CI89OzJy9VQh9/ZFa8o+ ZyKNtvagpLMQNhGUn/M7RV8gEltRmt2LlB2SNm74Gl5vnhp/59UCB4VF/b+SJw9u nmvEQj4aB7xuYmj+/Lk0f01T/GJtzwq8zaQ5PinjQuRrO4yURue8XP0BBaUKPbKK JIlRdjuVOXDt6FVN5ejL6pPVmjCdn6jfsbqKG2QU -----END CERTIFICATE-----Generated at Tue Oct 21 04:49:39 2025 by rpki-client