$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa File: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (raw, json) Hash identifier: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM= Subject key identifier: 5B:BF:D3:DB:91:F3:BD:81:C3:05:AF:E4:21:8B:26:9C:59:1E:0B:74 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 1695F0E8E7186F134D5B16F1AC4551F4A45C13A7 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa Signing time: Fri 03 Oct 2025 08:01:50 +0000 ROA not before: Fri 03 Oct 2025 07:56:50 +0000 ROA not after: Fri 02 Oct 2026 08:01:50 +0000 asID: 149333 IP address blocks: 103.179.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:95:f0:e8:e7:18:6f:13:4d:5b:16:f1:ac:45:51:f4:a4:5c:13:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Oct 3 07:56:50 2025 GMT Not After : Oct 2 08:01:50 2026 GMT Subject: CN=5BBFD3DB91F3BD81C305AFE4218B269C591E0B74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:7d:70:3f:f5:45:bc:c9:bf:52:d3:e3:66: 4e:15:17:6c:7f:32:fd:59:ba:96:c5:d5:24:68:5d: 5b:67:3d:00:98:94:43:ec:4c:b2:bf:62:86:2a:9f: 75:20:e3:b4:5a:42:b3:49:bd:90:6d:00:4b:73:87: d5:48:e9:6d:7e:7d:de:be:00:26:11:5e:1c:1f:13: ed:25:de:63:d7:dc:c3:7d:56:18:9b:a3:11:b2:07: e9:34:4c:0d:57:d9:3b:9c:a7:d0:02:93:11:09:f1: ae:77:77:53:a8:ae:f0:c0:81:04:e9:a2:b7:8f:57: b6:7f:9e:33:46:19:a1:0c:b5:37:fd:3e:08:57:40: 7a:23:77:3d:5d:a0:ea:17:cd:a9:01:bc:28:b7:18: 4f:26:7f:fa:de:42:e1:34:8b:52:51:2f:b8:00:5f: b8:11:25:9e:ac:9a:2f:0c:b8:fe:62:f2:76:00:a6: 46:56:cf:4f:14:4c:bf:98:21:7b:8a:9c:d4:47:36: 47:ef:d2:5a:a6:00:bc:d3:86:9f:08:ae:b5:85:78: 58:89:36:51:9d:6d:26:43:dd:d5:d8:0f:66:e1:ac: bd:13:b8:f0:47:63:86:51:02:23:1e:2d:db:bb:fc: 2c:16:4d:4b:cb:43:98:17:24:a4:2e:04:20:59:57: 02:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BF:D3:DB:91:F3:BD:81:C3:05:AF:E4:21:8B:26:9C:59:1E:0B:74 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.26.0/24 Signature Algorithm: sha256WithRSAEncryption af:e2:b2:98:5a:d4:6a:d2:d2:b4:90:a5:69:15:5d:8d:20:fa: 66:d3:b5:f1:5b:52:d4:54:e2:bd:b3:3e:84:2e:f0:8a:8a:15: f1:7a:fc:90:ee:f4:55:e2:af:b3:d7:78:f1:a2:79:b1:fc:79: 7f:72:9d:03:1b:e1:11:8e:6b:db:6e:46:37:3a:8c:52:e0:cc: b2:db:f8:e3:82:53:d7:dc:c7:74:51:1b:31:3b:7d:e8:02:ef: eb:ff:60:4d:1a:c7:c6:6a:87:00:34:a8:60:11:e5:73:95:88: 2f:45:01:e7:d2:84:13:4d:fe:98:97:c2:57:4a:17:0d:b5:e0: bd:b4:35:55:97:25:4b:15:21:70:f2:30:f4:3a:05:57:40:25: e9:8f:41:ec:07:ed:c9:ed:15:5f:3e:ae:5e:81:cc:df:04:9f: 8e:ff:95:44:a6:bc:3e:7d:30:57:a2:c6:1a:21:17:db:16:4c: 74:32:2b:c0:ad:c7:5a:55:9f:04:63:fc:2b:75:45:e4:11:7a: da:f8:20:f8:89:0a:99:38:90:d8:20:cd:28:6c:25:6b:8f:f3: f2:a7:ba:60:fe:61:3d:63:b6:8a:d6:eb:9c:91:40:1b:06:eb: 36:90:e3:ea:b1:19:b2:ba:be:54:8a:29:46:ac:2c:9b:0d:00: 70:3f:b5:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFpXw6OcYbxNNWxbxrEVR9KRcE6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNTEwMDMwNzU2NTBaFw0yNjEwMDIwODAxNTBaMDMxMTAvBgNV BAMTKDVCQkZEM0RCOTFGM0JEODFDMzA1QUZFNDIxOEIyNjlDNTkxRTBCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAX1wP/VFvMm/UtPjZk4VF2x/ Mv1ZupbF1SRoXVtnPQCYlEPsTLK/YoYqn3Ug47RaQrNJvZBtAEtzh9VI6W1+fd6+ ACYRXhwfE+0l3mPX3MN9VhiboxGyB+k0TA1X2Tucp9ACkxEJ8a53d1OorvDAgQTp orePV7Z/njNGGaEMtTf9PghXQHojdz1doOoXzakBvCi3GE8mf/reQuE0i1JRL7gA X7gRJZ6smi8MuP5i8nYApkZWz08UTL+YIXuKnNRHNkfv0lqmALzThp8IrrWFeFiJ NlGdbSZD3dXYD2bhrL0TuPBHY4ZRAiMeLdu7/CwWTUvLQ5gXJKQuBCBZVwKlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUW7/T25HzvYHDBa/kIYsmnFkeC3QwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5OGIzNTQ5LWUyNTMtNGZkOS1h NzA0LTI5Njk0NGU1YTA2My8wLzMxMzAzMzJlMzEzNzM5MmUzMjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7MaMA0GCSqG SIb3DQEBCwUAA4IBAQCv4rKYWtRq0tK0kKVpFV2NIPpm07XxW1LUVOK9sz6ELvCK ihXxevyQ7vRV4q+z13jxonmx/Hl/cp0DG+ERjmvbbkY3OoxS4Myy2/jjglPX3Md0 URsxO33oAu/r/2BNGsfGaocANKhgEeVzlYgvRQHn0oQTTf6Yl8JXShcNteC9tDVV lyVLFSFw8jD0OgVXQCXpj0HsB+3J7RVfPq5egczfBJ+O/5VEprw+fTBXosYaIRfb Fkx0MivArcdaVZ8EY/wrdUXkEXra+CD4iQqZOJDYIM0obCVrj/Pyp7pg/mE9Y7aK 1uuckUAbBus2kOPqsRmyur5UiilGrCybDQBwP7Ut -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:00 2025 by rpki-client