$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa File: 3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (raw, json) Hash identifier: jr0zhMaOjFRbvUw0rAJarRm1el624E3tGIRY/QTijIk= Subject key identifier: 68:FB:ED:D7:F3:C1:D3:FB:B6:49:B4:A2:68:E3:22:F7:EC:35:73:6A Certificate issuer: /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Certificate serial: 4F82E93DE4C45340BABF1A8D5CD9930CBC346D75 Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa Signing time: Fri 19 Sep 2025 06:00:01 +0000 ROA not before: Fri 19 Sep 2025 05:55:01 +0000 ROA not after: Fri 18 Sep 2026 06:00:01 +0000 asID: 135477 IP address blocks: 103.76.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:82:e9:3d:e4:c4:53:40:ba:bf:1a:8d:5c:d9:93:0c:bc:34:6d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9 Validity Not Before: Sep 19 05:55:01 2025 GMT Not After : Sep 18 06:00:01 2026 GMT Subject: CN=68FBEDD7F3C1D3FBB649B4A268E322F7EC35736A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:10:03:30:da:f4:63:a9:95:4e:f1:3e:b1: 53:77:6d:82:8b:56:72:d0:38:d1:e6:d6:6f:c7:97: 40:34:a7:a8:de:c5:c7:61:48:13:1f:e2:be:c7:f7: d7:39:ee:0f:11:83:c1:c9:d8:19:33:d6:b0:85:d9: 3a:ec:11:93:7a:1a:e2:08:a4:fd:d6:0d:1b:1f:f0: 3e:ac:a1:4b:de:44:28:55:1f:5f:96:a9:5e:93:f4: f5:18:4b:9c:c6:33:d7:19:fd:76:52:98:d3:bf:8e: 05:85:c2:6f:60:61:ad:ac:e1:16:28:aa:a5:94:b5: 54:55:83:9f:3b:1a:76:f2:de:35:b9:3c:b3:60:29: ef:04:8c:bc:ed:e3:93:93:73:c0:c3:f8:35:36:3e: bc:09:db:b0:60:57:eb:ce:df:d8:4d:da:46:2f:96: 20:35:51:d5:04:85:e0:aa:63:2f:ba:93:28:e8:19: 7e:8b:1e:66:89:56:e0:00:32:4c:5d:93:45:01:cc: 08:2f:5e:13:18:af:71:50:d6:dd:57:da:9d:ca:92: e8:66:da:22:1f:ae:be:0e:95:cc:6f:2b:e2:7d:58: 16:c0:33:81:47:24:46:66:24:a2:c5:c5:41:6f:6c: 64:f0:88:13:17:d3:70:5f:7c:c3:fc:f9:42:5b:2e: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FB:ED:D7:F3:C1:D3:FB:B6:49:B4:A2:68:E3:22:F7:EC:35:73:6A X509v3 Authority Key Identifier: keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.149.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a5:ac:4f:1e:c5:88:bf:68:3d:02:1f:d2:7b:07:c5:7c:15: 18:83:ed:c4:2f:fe:ac:3d:27:54:8f:46:cf:05:ef:3b:1d:ed: 4f:4a:f5:9b:5a:8f:6d:d0:4f:8a:1d:ae:44:d9:b7:fa:02:ca: 06:78:ee:e9:82:0a:68:c6:be:da:61:63:73:55:2a:ea:11:30: 72:5a:7c:c1:87:46:4e:06:c1:06:ea:4f:c0:21:f7:66:6b:de: 6f:f1:2d:59:2a:b9:81:60:b9:fa:b2:c5:18:cd:86:0f:4b:43: 4d:e3:35:f2:d6:11:79:d0:41:e8:cc:c0:6d:d8:96:f0:da:bb: 14:dc:56:6c:df:2e:5b:60:de:3c:0f:0d:78:f3:af:e6:76:4b: 0a:0a:f8:7b:dc:6d:43:a8:5f:70:70:7b:9d:b9:16:cb:1b:29: e0:06:41:56:70:22:86:0c:fe:37:09:a1:d7:82:65:45:53:27: a0:f4:d0:a2:3b:c5:c9:7a:4c:c9:e1:ec:d7:9d:b9:10:9f:13: eb:3b:73:2c:35:df:63:09:70:24:49:0d:ee:b3:5a:6d:18:4a: ab:f1:d5:40:af:c9:c3:17:31:cb:24:8c:b8:4f:6a:97:48:ac: 78:ea:ef:ed:75:55:7a:84:95:89:33:9d:34:37:a9:e7:b0:e7: c7:e4:c0:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT4LpPeTEU0C6vxqNXNmTDLw0bXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5 Qjk0MTBFOTAeFw0yNTA5MTkwNTU1MDFaFw0yNjA5MTgwNjAwMDFaMDMxMTAvBgNV BAMTKDY4RkJFREQ3RjNDMUQzRkJCNjQ5QjRBMjY4RTMyMkY3RUMzNTczNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYTRADMNr0Y6mVTvE+sVN3bYKL VnLQONHm1m/Hl0A0p6jexcdhSBMf4r7H99c57g8Rg8HJ2Bkz1rCF2TrsEZN6GuII pP3WDRsf8D6soUveRChVH1+WqV6T9PUYS5zGM9cZ/XZSmNO/jgWFwm9gYa2s4RYo qqWUtVRVg587Gnby3jW5PLNgKe8EjLzt45OTc8DD+DU2PrwJ27BgV+vO39hN2kYv liA1UdUEheCqYy+6kyjoGX6LHmaJVuAAMkxdk0UBzAgvXhMYr3FQ1t1X2p3Kkuhm 2iIfrr4OlcxvK+J9WBbAM4FHJEZmJKLFxUFvbGTwiBMX03BffMP8+UJbLuYfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaPvt1/PB0/u2SbSiaOMi9+w1c2owHwYDVR0j BBgwFoAUgKV9krjUw/8X5xwDBdmtgpuUEOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h N2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC84MEE1N0Q5MkI4 RDRDM0ZGMTdFNzFDMDMwNUQ5QUQ4MjlCOTQxMEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5Qjk0 MTBFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3ZmRmNDNlLTRhNGMtNGRiYy1i Nzg1LWRkN2NiZjFhNjdiNy8wLzMxMzAzMzJlMzczNjJlMzEzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0yVMA0GCSqG SIb3DQEBCwUAA4IBAQBQpaxPHsWIv2g9Ah/SewfFfBUYg+3EL/6sPSdUj0bPBe87 He1PSvWbWo9t0E+KHa5E2bf6AsoGeO7pggpoxr7aYWNzVSrqETByWnzBh0ZOBsEG 6k/AIfdma95v8S1ZKrmBYLn6ssUYzYYPS0NN4zXy1hF50EHozMBt2Jbw2rsU3FZs 3y5bYN48Dw1486/mdksKCvh73G1DqF9wcHuduRbLGyngBkFWcCKGDP43CaHXgmVF Uyeg9NCiO8XJekzJ4ezXnbkQnxPrO3MsNd9jCXAkSQ3us1ptGEqr8dVAr8nDFzHL JIy4T2qXSKx46u/tdVV6hJWJM500N6nnsOfH5MA2 -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:37 2025 by rpki-client