$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa File: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (raw, json) Hash identifier: vIF48KMANXIGE+Lk+ZdIeOLTYmbNmfa3MrBKBvJQqmE= Subject key identifier: 1D:13:CD:7F:B9:03:65:CB:6F:4D:3C:EA:B6:0E:42:49:39:27:CE:9F Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 75F8361DA73833FE558EF25640C867DC4D80E90F Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa Signing time: Wed 24 Sep 2025 03:00:00 +0000 ROA not before: Wed 24 Sep 2025 02:55:00 +0000 ROA not after: Wed 23 Sep 2026 03:00:00 +0000 asID: 149926 IP address blocks: 103.191.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f8:36:1d:a7:38:33:fe:55:8e:f2:56:40:c8:67:dc:4d:80:e9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Sep 24 02:55:00 2025 GMT Not After : Sep 23 03:00:00 2026 GMT Subject: CN=1D13CD7FB90365CB6F4D3CEAB60E42493927CE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:59:49:b8:cb:67:c4:f6:47:b5:61:ff:b4: d8:06:6d:13:9b:5d:a7:5b:88:1a:14:cb:05:a9:2a: 34:f7:17:78:ca:f3:a8:6c:83:f0:15:fa:a6:1e:05: d3:a5:18:5e:93:15:38:9e:85:3d:59:a0:21:30:77: e2:eb:cf:26:d8:33:ec:09:aa:59:32:78:62:e2:69: c3:3f:f9:06:19:91:af:a7:ff:11:b3:86:48:b8:08: bc:b5:8b:92:52:68:fa:29:29:18:eb:a8:25:a1:11: 41:1c:cf:7b:88:be:08:dd:4a:1d:1f:c6:8e:5b:a7: d3:e5:0b:b5:89:b4:db:50:26:db:d4:fa:d7:6e:25: 9e:1b:27:b7:a2:68:1f:7c:4b:fe:79:07:d7:df:f7: 64:b8:0a:79:22:3e:f2:24:ef:47:87:6a:da:87:fc: c7:31:67:98:9b:84:3a:82:22:36:97:f2:be:4a:5e: 36:28:84:8e:b3:27:60:e3:d5:5a:38:ed:70:03:13: 1e:af:7c:7e:5c:44:6d:b7:a8:f7:8a:f0:13:61:20: 44:24:5a:ab:69:c6:03:b4:88:16:59:ff:cc:3c:72: cb:59:6b:23:57:0d:ff:5a:3f:a0:0b:db:db:1f:36: d0:1c:42:77:83:2f:e9:8d:23:9e:d5:04:f0:46:ac: 94:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:13:CD:7F:B9:03:65:CB:6F:4D:3C:EA:B6:0E:42:49:39:27:CE:9F X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.155.0/24 Signature Algorithm: sha256WithRSAEncryption 29:09:7a:97:8d:f1:34:bb:4c:a1:a1:7c:f2:38:03:7b:8d:e1: 9a:e8:31:a9:1b:21:0a:bb:c9:05:d1:2c:f9:a8:c3:70:5f:33: 1c:21:52:85:4f:2a:17:02:67:aa:7b:0f:5d:a7:6e:4f:47:f8: 5b:f6:6b:31:41:69:f7:10:b8:c0:79:b2:ec:0e:7f:ae:50:e3: 0f:68:c7:44:c9:a4:98:8d:ed:9c:44:e8:1f:14:ae:2c:eb:f2: 5e:42:ff:84:9e:3c:ba:5f:c0:72:d6:58:a0:2e:ce:49:30:d4: eb:b1:e6:b0:df:9a:74:d9:1d:73:dc:91:a3:3f:a1:33:0f:b6: 5a:f1:c2:0a:c1:ac:60:31:26:79:e8:f2:f2:c4:77:20:19:46: ba:3a:86:c3:9a:19:99:f7:00:5e:81:3c:71:9e:e1:a6:d3:ee: 72:e5:5a:31:b6:17:5f:8d:14:6c:76:c6:30:e8:0a:b6:fa:57: 1c:eb:dc:1d:f1:7a:d2:f5:aa:b9:2d:3f:21:94:0a:28:7e:cf: 25:0f:4a:b2:fe:6f:1c:cc:22:93:f7:43:0a:6e:14:77:45:ae: 8f:7b:53:da:98:0b:1e:60:81:ca:f4:03:fd:b3:50:0f:93:ef: 1f:35:c6:d8:67:76:a8:79:76:ac:38:dc:d6:7f:cd:16:8d:1a: 3f:65:38:63 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdfg2Hac4M/5VjvJWQMhn3E2A6Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNTA5MjQwMjU1MDBaFw0yNjA5MjMwMzAwMDBaMDMxMTAvBgNV BAMTKDFEMTNDRDdGQjkwMzY1Q0I2RjREM0NFQUI2MEU0MjQ5MzkyN0NFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qllJuMtnxPZHtWH/tNgGbROb XadbiBoUywWpKjT3F3jK86hsg/AV+qYeBdOlGF6TFTiehT1ZoCEwd+LrzybYM+wJ qlkyeGLiacM/+QYZka+n/xGzhki4CLy1i5JSaPopKRjrqCWhEUEcz3uIvgjdSh0f xo5bp9PlC7WJtNtQJtvU+tduJZ4bJ7eiaB98S/55B9ff92S4CnkiPvIk70eHatqH /McxZ5ibhDqCIjaX8r5KXjYohI6zJ2Dj1Vo47XADEx6vfH5cRG23qPeK8BNhIEQk WqtpxgO0iBZZ/8w8cstZayNXDf9aP6AL29sfNtAcQneDL+mNI57VBPBGrJTlAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHRPNf7kDZctvTTzqtg5CSTknzp8wHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1ZWFiYWNkLTI4ZWItNGI5Ni04 NjEwLWRiYjRiMDZmYzhiZC8wLzMxMzAzMzJlMzEzOTMxMmUzMTM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv5swDQYJ KoZIhvcNAQELBQADggEBACkJepeN8TS7TKGhfPI4A3uN4ZroMakbIQq7yQXRLPmo w3BfMxwhUoVPKhcCZ6p7D12nbk9H+Fv2azFBafcQuMB5suwOf65Q4w9ox0TJpJiN 7ZxE6B8Urizr8l5C/4SePLpfwHLWWKAuzkkw1Oux5rDfmnTZHXPckaM/oTMPtlrx wgrBrGAxJnno8vLEdyAZRro6hsOaGZn3AF6BPHGe4abT7nLlWjG2F1+NFGx2xjDo Crb6Vxzr3B3xetL1qrktPyGUCih+zyUPSrL+bxzMIpP3QwpuFHdFro97U9qYCx5g gcr0A/2zUA+T7x81xthndqh5dqw43NZ/zRaNGj9lOGM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:48 2025 by rpki-client