$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa File: 3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (raw, json) Hash identifier: qCAW9RGYIwqqetHxh1sU75304B2gQRTVVqzCEK/6DVI= Subject key identifier: C9:4E:44:24:45:6D:52:01:F3:C1:57:99:88:31:67:59:40:2E:8A:44 Certificate issuer: /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Certificate serial: 018186F80E932FF696FB4F9AE1839E79B354FCC9 Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa Signing time: Wed 17 Sep 2025 09:03:20 +0000 ROA not before: Wed 17 Sep 2025 08:58:20 +0000 ROA not after: Wed 16 Sep 2026 09:03:20 +0000 asID: 141642 IP address blocks: 103.162.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:81:86:f8:0e:93:2f:f6:96:fb:4f:9a:e1:83:9e:79:b3:54:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794 Validity Not Before: Sep 17 08:58:20 2025 GMT Not After : Sep 16 09:03:20 2026 GMT Subject: CN=C94E4424456D5201F3C1579988316759402E8A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:a6:14:42:16:16:82:d0:ed:66:d9:ff:41: ea:09:bf:e4:13:0f:ce:8a:97:c0:34:74:bd:41:98: ad:bf:2c:1e:8c:f6:6e:1b:2d:d3:a6:62:13:8d:6d: 91:13:5c:21:31:8a:49:41:6d:0c:9e:9d:c9:94:e1: c9:c7:36:11:e1:07:ae:67:c7:93:18:8e:ef:b3:93: b0:e0:3a:4f:99:d8:cf:f5:af:28:a5:12:f3:2e:21: 69:77:26:5f:ee:82:e5:bf:09:9c:1c:c1:2a:e4:e0: 58:97:5c:c3:c3:48:0a:42:21:46:ac:1e:97:69:91: d7:80:13:71:26:d4:d0:99:2b:06:90:d1:df:e8:a4: 43:a9:2d:a7:ac:e8:a4:80:7e:e4:1e:13:f3:86:1f: 90:12:50:c3:24:e3:3b:51:5b:30:f5:00:a6:74:ae: 9f:1d:ad:5e:57:55:2a:6d:8a:16:11:19:6c:6b:e3: 7f:e7:a9:e5:61:7a:68:40:5f:e3:a1:06:ad:9b:5f: 96:83:01:6a:23:55:b8:8f:2e:f0:44:1f:08:2e:14: 10:af:4c:8e:bf:17:b0:1b:2c:e4:91:99:86:6b:48: 39:9d:9f:d5:36:be:37:11:54:4d:b7:9f:7e:c5:88: 47:31:0a:43:69:1d:5d:72:27:e3:09:6b:11:8b:56: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:44:24:45:6D:52:01:F3:C1:57:99:88:31:67:59:40:2E:8A:44 X509v3 Authority Key Identifier: keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.62.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:ef:68:3a:22:dc:c9:00:d2:0b:99:d4:4a:29:33:92:bd:4d: b3:b3:b5:a9:6d:d5:f7:e8:1c:66:fe:1f:25:66:17:c4:a6:de: 83:15:37:04:7e:e8:25:06:f9:37:8b:b2:c0:80:69:ab:47:8c: 34:92:e0:19:bd:5f:c5:80:c3:15:e1:3b:19:1a:e0:75:10:2a: 74:4d:15:55:96:ae:48:bc:07:75:5b:81:05:a8:8f:bf:8e:bd: e7:7a:ca:78:7a:da:18:5f:86:c4:54:bd:34:9a:f4:c6:39:4d: c0:e3:20:42:fc:53:fd:eb:0d:27:1c:d2:01:56:0d:1d:1b:e8: 01:26:ab:68:70:b5:30:f3:55:17:70:08:1b:80:f5:2e:d0:8a: c2:b1:0c:88:e7:f7:83:06:2c:28:6b:4d:3f:8f:77:c5:14:9a: c5:b4:dc:26:b4:9c:d0:eb:b5:e2:04:d8:1f:c0:bc:91:ea:eb: 58:48:3d:53:83:f7:39:3b:c9:54:ae:7e:6a:4c:4b:10:95:03: c6:8c:55:7a:7b:64:bf:1c:94:50:8a:c5:40:1a:5a:84:9d:02: c2:77:39:23:e9:74:53:4d:5a:e7:1b:29:91:5d:75:f1:8c:ac: 09:25:51:2b:f2:9a:4d:09:9c:a0:b9:3f:a3:a0:c5:ac:b0:c8: 79:04:49:2a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAYGG+A6TL/aW+0+a4YOeebNU/MkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFD MUE3Njc5NDAeFw0yNTA5MTcwODU4MjBaFw0yNjA5MTYwOTAzMjBaMDMxMTAvBgNV BAMTKEM5NEU0NDI0NDU2RDUyMDFGM0MxNTc5OTg4MzE2NzU5NDAyRThBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVqYUQhYWgtDtZtn/QeoJv+QT D86Kl8A0dL1BmK2/LB6M9m4bLdOmYhONbZETXCExiklBbQyencmU4cnHNhHhB65n x5MYju+zk7DgOk+Z2M/1ryilEvMuIWl3Jl/uguW/CZwcwSrk4FiXXMPDSApCIUas HpdpkdeAE3Em1NCZKwaQ0d/opEOpLaes6KSAfuQeE/OGH5ASUMMk4ztRWzD1AKZ0 rp8drV5XVSptihYRGWxr43/nqeVhemhAX+OhBq2bX5aDAWojVbiPLvBEHwguFBCv TI6/F7AbLOSRmYZrSDmdn9U2vjcRVE23n37FiEcxCkNpHV1yJ+MJaxGLVvGVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyU5EJEVtUgHzwVeZiDFnWUAuikQwHwYDVR0j BBgwFoAUMWsNeBWof1qgfsng2PyFmsGnZ5QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWNhOTQzNS03MjI0LTQ3YTgtOTUxYi1jMWI0MmViMGUyZjcvMC8zMTZCMEQ3ODE1 QTg3RjVBQTA3RUM5RTBEOEZDODU5QUMxQTc2Nzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE2QjBENzgxNUE4N0Y1QUEwN0VDOUUwRDhGQzg1OUFDMUE3 Njc5NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExY2E5NDM1LTcyMjQtNDdhOC05 NTFiLWMxYjQyZWIwZTJmNy8wLzMxMzAzMzJlMzEzNjMyMmUzNjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6I+MA0GCSqG SIb3DQEBCwUAA4IBAQCN72g6ItzJANILmdRKKTOSvU2zs7WpbdX36Bxm/h8lZhfE pt6DFTcEfuglBvk3i7LAgGmrR4w0kuAZvV/FgMMV4TsZGuB1ECp0TRVVlq5IvAd1 W4EFqI+/jr3nesp4etoYX4bEVL00mvTGOU3A4yBC/FP96w0nHNIBVg0dG+gBJqto cLUw81UXcAgbgPUu0IrCsQyI5/eDBiwoa00/j3fFFJrFtNwmtJzQ67XiBNgfwLyR 6utYSD1Tg/c5O8lUrn5qTEsQlQPGjFV6e2S/HJRQisVAGlqEnQLCdzkj6XRTTVrn GymRXXXxjKwJJVEr8ppNCZyguT+joMWssMh5BEkq -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:35 2025 by rpki-client