$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32342d3234203d3e203436303233.roa File: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (raw, json) Hash identifier: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews= Subject key identifier: 74:22:A9:FF:5E:09:1F:FB:00:DD:91:D8:21:59:83:29:95:C5:92:E9 Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 0DB5C4F5CF22AAB3FFB5C7439B4E1752DB926F53 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32342d3234203d3e203436303233.roa Signing time: Wed 15 Oct 2025 10:02:05 +0000 ROA not before: Wed 15 Oct 2025 09:57:05 +0000 ROA not after: Wed 14 Oct 2026 10:02:05 +0000 asID: 46023 IP address blocks: 103.75.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b5:c4:f5:cf:22:aa:b3:ff:b5:c7:43:9b:4e:17:52:db:92:6f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Oct 15 09:57:05 2025 GMT Not After : Oct 14 10:02:05 2026 GMT Subject: CN=7422A9FF5E091FFB00DD91D82159832995C592E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:69:a2:63:07:30:18:5e:a7:7c:bf:42:0f: 00:76:33:0d:a1:15:c8:0b:06:c4:50:9d:d8:b5:3a: 35:cc:79:05:e2:05:f3:47:5e:9e:83:45:8c:d4:57: 84:3e:e2:0d:39:65:ab:e7:80:b3:1a:c7:ea:c0:79: 0d:70:8b:cb:11:c6:89:45:24:c4:ea:03:b7:74:01: 57:bc:50:98:08:27:28:c2:fe:bf:ca:e0:1d:ad:e9: 69:3e:58:99:3b:35:00:b0:6b:c6:64:97:44:4c:13: 38:43:d0:e6:f2:b2:41:f6:52:48:c7:8f:0a:0b:eb: 87:3c:5e:ad:a8:8e:11:9e:71:a9:14:3a:be:15:f8: 57:3c:20:09:ed:74:6f:09:86:cd:b7:04:e0:c5:03: ba:06:3f:53:48:d1:34:13:08:c4:46:b5:56:81:f5: b9:86:be:90:82:83:bd:e2:32:ee:16:85:6b:9a:3c: 4b:5f:12:12:7a:6c:72:2b:ec:c9:3d:bf:ea:cb:aa: 57:50:56:0b:c7:ba:21:52:ed:7e:76:2b:6a:83:a8: 60:6e:a5:8f:89:3c:94:27:96:ed:bb:95:89:5b:0c: 5e:10:c0:7d:d4:31:b2:c9:3d:2f:3f:29:5c:a6:20: 55:24:ca:e9:ec:4c:1c:60:33:2f:f4:b2:ee:fe:15: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:22:A9:FF:5E:09:1F:FB:00:DD:91:D8:21:59:83:29:95:C5:92:E9 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/3130332e37352e35322e302f32342d3234203d3e203436303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.75.52.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:9a:65:ab:9e:b2:8e:bf:eb:81:03:17:6b:81:2a:01:e8:5a: 1b:ca:e5:09:63:84:e6:89:48:27:f1:d6:6e:33:5f:ac:65:60: 9a:42:00:16:9f:b5:fc:7f:5c:37:f0:6d:c8:54:ef:4c:fe:f5: 65:a2:dc:dc:78:80:11:57:4b:82:76:f0:09:fc:8d:1f:b3:94: 7d:82:1c:a3:ba:16:01:93:09:2d:90:1a:44:ac:32:7c:df:d7: b9:7e:7e:93:ff:a7:f2:9c:56:83:b8:b2:f2:dc:25:9c:e3:41: 1d:d1:5a:db:16:93:65:78:07:f5:77:ca:20:1c:e4:33:d7:d4: 03:0f:07:e1:c4:ee:18:80:dd:06:6e:9a:1f:de:a5:54:c8:91: f0:2f:8f:c3:05:fe:81:a5:74:ac:c1:dc:fb:0b:09:85:4d:6b: fd:79:b9:68:5b:66:4c:95:9f:72:f4:21:e1:88:8a:4a:dd:b7: 00:9d:89:7a:f7:13:2e:9c:dc:1d:48:5f:f5:3c:5d:69:70:91: 30:76:f9:fb:da:27:00:fa:81:3c:25:05:27:db:44:b1:a6:1d: eb:47:ac:c2:2a:bc:31:fe:b9:96:a9:67:74:f5:e8:86:95:13: f4:94:5a:02:2d:d2:e8:46:2d:6c:b8:da:e7:eb:62:ed:0f:4e: e3:f3:f2:44 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDbXE9c8iqrP/tcdDm04XUtuSb1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNTEwMTUwOTU3MDVaFw0yNjEwMTQxMDAyMDVaMDMxMTAvBgNV BAMTKDc0MjJBOUZGNUUwOTFGRkIwMEREOTFEODIxNTk4MzI5OTVDNTkyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTmmiYwcwGF6nfL9CDwB2Mw2h FcgLBsRQndi1OjXMeQXiBfNHXp6DRYzUV4Q+4g05ZavngLMax+rAeQ1wi8sRxolF JMTqA7d0AVe8UJgIJyjC/r/K4B2t6Wk+WJk7NQCwa8Zkl0RMEzhD0ObyskH2UkjH jwoL64c8Xq2ojhGecakUOr4V+Fc8IAntdG8Jhs23BODFA7oGP1NI0TQTCMRGtVaB 9bmGvpCCg73iMu4WhWuaPEtfEhJ6bHIr7Mk9v+rLqldQVgvHuiFS7X52K2qDqGBu pY+JPJQnlu27lYlbDF4QwH3UMbLJPS8/KVymIFUkyunsTBxgMy/0su7+FbhvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUdCKp/14JH/sA3ZHYIVmDKZXFkukwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2ZTUwNGM1LWQ3YmEtNGZlOS05 ZTU2LTc5MmRjMDFhOTdjYi8wLzMxMzAzMzJlMzczNTJlMzUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnSzQwDQYJKoZIhvcN AQELBQADggEBAB6aZaueso6/64EDF2uBKgHoWhvK5QljhOaJSCfx1m4zX6xlYJpC ABaftfx/XDfwbchU70z+9WWi3Nx4gBFXS4J28An8jR+zlH2CHKO6FgGTCS2QGkSs Mnzf17l+fpP/p/KcVoO4svLcJZzjQR3RWtsWk2V4B/V3yiAc5DPX1AMPB+HE7hiA 3QZumh/epVTIkfAvj8MF/oGldKzB3PsLCYVNa/15uWhbZkyVn3L0IeGIikrdtwCd iXr3Ey6c3B1IX/U8XWlwkTB2+fvaJwD6gTwlBSfbRLGmHetHrMIqvDH+uZapZ3T1 6IaVE/SUWgIt0uhGLWy42ufrYu0PTuPz8kQ= -----END CERTIFICATE-----Generated at Tue Oct 21 04:23:38 2025 by rpki-client