$ rpki-client -vvf repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa File: 3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa (raw, json) Hash identifier: P1vMuZbunUFRMJmCFPvVUKKPOpQNGYneEv0PzmT3lQM= Subject key identifier: 00:7D:88:0D:02:53:E4:A0:C2:05:7C:28:4B:85:E2:44:81:38:35:68 Certificate issuer: /CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Certificate serial: 67BD16506411421CD384CD2CDE951CB3FB2CB06B Authority key identifier: 48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa Signing time: Sat 29 Mar 2025 10:00:01 +0000 ROA not before: Sat 29 Mar 2025 09:55:01 +0000 ROA not after: Sat 28 Mar 2026 10:00:01 +0000 asID: 138881 IP address blocks: 103.169.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bd:16:50:64:11:42:1c:d3:84:cd:2c:de:95:1c:b3:fb:2c:b0:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8 Validity Not Before: Mar 29 09:55:01 2025 GMT Not After : Mar 28 10:00:01 2026 GMT Subject: CN=007D880D0253E4A0C2057C284B85E24481383568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:53:7d:20:48:d4:b0:28:13:6f:02:87:f7: 34:19:f4:02:02:a5:b9:c4:d3:d8:5f:2b:a6:4f:df: 89:21:72:8c:f5:47:53:de:9e:a2:9b:c7:67:97:ed: 6f:07:89:8d:bf:f7:3b:d8:f8:e6:6f:32:b7:b0:13: e8:55:74:41:0c:1f:34:16:f8:c9:ca:47:3e:6a:7e: 87:85:a2:e8:bb:85:9a:28:14:48:8f:14:6c:fc:21: 4c:7f:2a:76:86:d4:27:39:7b:3a:a6:54:61:cb:16: 07:5c:d7:80:03:9a:71:51:fb:ea:42:8c:56:8f:b5: 1c:1a:52:e4:25:47:af:07:89:07:b4:d4:9b:01:2e: dd:81:ef:68:12:4e:0a:7f:ba:af:69:d0:d8:d4:58: f8:f6:5c:f1:68:4b:72:b9:51:85:5a:09:bf:8c:b5: c5:bb:d9:b8:a5:44:91:b3:e9:c6:96:5f:cc:b0:30: 0b:56:a3:b8:6d:d4:cb:93:fc:4b:0a:69:68:19:02: 5a:72:87:50:fc:17:84:bd:95:42:3c:6c:4e:f8:37: 01:89:bc:92:9b:7f:a2:3a:cb:bd:df:fc:b9:35:52: a0:5c:50:39:54:9c:4f:69:b3:c3:52:9f:9a:b9:6d: 5a:b8:48:21:2b:b9:8c:75:9d:9e:72:3a:54:97:58: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:88:0D:02:53:E4:A0:C2:05:7C:28:4B:85:E2:44:81:38:35:68 X509v3 Authority Key Identifier: keyid:48:54:9F:5F:50:A2:AB:C9:3D:8E:6B:9E:C2:07:4F:11:6E:3D:73:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48549F5F50A2ABC93D8E6B9EC2074F116E3D73B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b11ca620-dace-4a9f-b8e8-a3a2e581500e/0/3130332e3136392e3233382e302f32342d3234203d3e20313338383831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.238.0/24 Signature Algorithm: sha256WithRSAEncryption c8:f1:ed:ef:ef:6e:f3:3d:6b:08:20:74:a5:a9:10:d6:b4:86: 85:ce:04:63:ff:73:d6:98:fb:23:0f:7e:8f:e7:23:ec:6b:94: c7:13:8c:3c:94:cf:25:d9:90:62:2e:e3:b2:05:03:fa:64:44: 04:3a:2e:fc:32:e2:75:da:21:34:a2:04:d1:7b:89:d1:cb:0d: 02:47:d4:94:f9:f0:9c:ad:a5:7c:42:40:48:cd:64:c0:b4:25: eb:0a:f4:a3:ee:be:ea:82:e7:f8:5f:e0:65:f1:d6:20:20:b1: bc:f7:c9:83:ad:ee:8e:77:9f:c4:db:53:2e:e9:24:04:cc:c4: 90:7d:f8:7f:0d:63:07:4a:dc:c9:ae:f1:24:9f:80:a9:3b:5e: c5:c2:c5:1c:85:78:8c:1d:3b:e8:d7:2c:0f:b6:ba:9d:d0:72: 73:7b:6d:db:ea:82:e0:82:df:f5:f9:72:27:27:6d:65:18:33: ee:23:b1:b5:d6:ed:dc:8f:3a:ea:02:db:39:55:7d:0d:40:f5: 19:00:c6:12:42:64:7d:44:e5:a6:72:c5:e7:c6:49:5f:48:82: 5b:8d:60:6b:d0:5e:4e:c2:18:b1:a8:80:83:51:9b:be:f2:dc: 94:ac:6b:87:76:40:30:e7:05:97:74:07:0c:ca:07:99:9a:69: 39:a0:c2:af -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZ70WUGQRQhzThM0s3pUcs/sssGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2 RTNENzNCODAeFw0yNTAzMjkwOTU1MDFaFw0yNjAzMjgxMDAwMDFaMDMxMTAvBgNV BAMTKDAwN0Q4ODBEMDI1M0U0QTBDMjA1N0MyODRCODVFMjQ0ODEzODM1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6VN9IEjUsCgTbwKH9zQZ9AIC pbnE09hfK6ZP34khcoz1R1PenqKbx2eX7W8HiY2/9zvY+OZvMrewE+hVdEEMHzQW +MnKRz5qfoeFoui7hZooFEiPFGz8IUx/KnaG1Cc5ezqmVGHLFgdc14ADmnFR++pC jFaPtRwaUuQlR68HiQe01JsBLt2B72gSTgp/uq9p0NjUWPj2XPFoS3K5UYVaCb+M tcW72bilRJGz6caWX8ywMAtWo7ht1MuT/EsKaWgZAlpyh1D8F4S9lUI8bE74NwGJ vJKbf6I6y73f/Lk1UqBcUDlUnE9ps8NSn5q5bVq4SCEruYx1nZ5yOlSXWBDPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAH2IDQJT5KDCBXwoS4XiRIE4NWgwHwYDVR0j BBgwFoAUSFSfX1Ciq8k9jmuewgdPEW49c7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTFjYTYyMC1kYWNlLTRhOWYtYjhlOC1hM2EyZTU4MTUwMGUvMC80ODU0OUY1RjUw QTJBQkM5M0Q4RTZCOUVDMjA3NEYxMTZFM0Q3M0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg1NDlGNUY1MEEyQUJDOTNEOEU2QjlFQzIwNzRGMTE2RTNE NzNCOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxMWNhNjIwLWRhY2UtNGE5Zi1i OGU4LWEzYTJlNTgxNTAwZS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqe4wDQYJ KoZIhvcNAQELBQADggEBAMjx7e/vbvM9awggdKWpENa0hoXOBGP/c9aY+yMPfo/n I+xrlMcTjDyUzyXZkGIu47IFA/pkRAQ6Lvwy4nXaITSiBNF7idHLDQJH1JT58Jyt pXxCQEjNZMC0JesK9KPuvuqC5/hf4GXx1iAgsbz3yYOt7o53n8TbUy7pJATMxJB9 +H8NYwdK3Mmu8SSfgKk7XsXCxRyFeIwdO+jXLA+2up3QcnN7bdvqguCC3/X5cicn bWUYM+4jsbXW7dyPOuoC2zlVfQ1A9RkAxhJCZH1E5aZyxefGSV9IgluNYGvQXk7C GLGogINRm77y3JSsa4d2QDDnBZd0BwzKB5maaTmgwq8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:56:36 2025 by rpki-client