$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa File: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (raw, json) Hash identifier: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c= Subject key identifier: 98:40:38:E8:3A:3F:56:C5:1C:E8:61:45:34:C4:46:0A:0B:F4:54:FD Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 6A33949BBD8DF03F3852638BB7F23431F04F9BE9 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa Signing time: Wed 01 Oct 2025 03:00:00 +0000 ROA not before: Wed 01 Oct 2025 02:55:00 +0000 ROA not after: Wed 30 Sep 2026 03:00:00 +0000 asID: 139953 IP address blocks: 103.147.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:33:94:9b:bd:8d:f0:3f:38:52:63:8b:b7:f2:34:31:f0:4f:9b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Oct 1 02:55:00 2025 GMT Not After : Sep 30 03:00:00 2026 GMT Subject: CN=984038E83A3F56C51CE8614534C4460A0BF454FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:48:ed:a2:6a:90:34:a3:71:9a:e8:0a:25:2f: 79:35:93:f1:9d:60:3d:d9:eb:47:9c:5b:f2:24:9a: 3d:bc:b5:21:d6:c7:5a:83:7b:b3:f4:5e:0e:0c:cc: 5c:66:ac:1e:59:eb:7e:4f:8b:4d:15:f4:22:4b:18: 3e:d5:80:b9:ab:5b:3c:73:38:a7:74:e2:27:bd:4a: 29:12:a9:f5:27:6b:ba:5e:81:37:a7:e0:e5:6c:dc: 64:d8:71:be:b5:13:7a:57:d2:9f:9f:40:da:88:13: 1b:6d:10:e2:93:3e:b0:1f:40:6a:d6:cb:2a:57:01: 9a:1c:c2:cb:c5:18:d2:a0:81:98:01:9f:b8:a9:fe: 03:f8:1d:a8:a1:89:b8:5b:70:20:0c:f6:93:ef:77: 6e:da:de:64:26:b6:56:d4:c3:a3:23:1b:58:50:ba: fa:f8:b0:03:70:99:4b:bc:52:ac:f8:de:5a:31:5c: 6d:bf:42:73:1e:91:82:fc:3f:2c:ca:08:32:13:f3: 73:13:bd:8e:5e:e1:de:14:7e:bf:d3:d9:6e:6e:97: 8a:93:39:2d:1d:ed:68:3d:a6:26:fb:72:00:79:17: 8d:bb:b4:06:0b:64:eb:15:62:ce:a2:48:be:3e:c9: 56:38:0c:97:0c:c1:5c:8f:e6:e4:c8:3f:ad:92:27: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:40:38:E8:3A:3F:56:C5:1C:E8:61:45:34:C4:46:0A:0B:F4:54:FD X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.81.0/24 Signature Algorithm: sha256WithRSAEncryption 47:96:10:21:61:85:9e:25:b1:70:27:a7:1d:ef:9d:b9:23:a1: 91:eb:10:46:74:8a:6f:1f:7e:d4:cf:88:ad:dd:a6:10:90:b6: 13:4c:7b:d9:64:cb:e9:7a:59:c7:1e:9b:28:c7:70:aa:f7:b5: 24:ed:1b:fc:9e:2b:6d:93:a9:fa:7e:0c:27:d2:30:34:3e:c6: 80:6e:86:1d:c2:6f:3a:84:d2:19:3d:97:c6:af:86:9e:9b:34: 02:83:74:46:05:4d:66:29:ee:0d:e1:41:92:bc:b8:f0:75:49: a1:5f:c2:64:52:dc:da:0f:ae:7d:b2:e8:b1:09:a6:23:3e:fe: 2a:67:59:3f:24:33:e1:70:c6:31:ef:f9:00:9d:19:e0:1b:93: 0f:40:96:41:47:8f:a8:f0:79:1c:ec:8b:ab:09:31:1a:59:17: a4:8c:27:ea:2a:76:7f:90:c7:9e:60:fa:1f:a3:6c:5d:95:80: 35:ac:8e:dd:76:5d:0a:25:2a:d0:34:f2:96:c8:15:3a:16:0c: d7:75:9b:16:1a:69:15:07:3e:28:e2:4c:0a:37:41:8e:23:a4: 10:16:1a:01:3f:06:a4:37:15:6e:aa:8a:ae:02:81:b7:59:f2: 14:3b:3e:12:e2:bd:90:47:71:5f:93:23:e4:81:2a:9b:76:17: 26:f5:f7:ec -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUajOUm72N8D84UmOLt/I0MfBPm+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTEwMDEwMjU1MDBaFw0yNjA5MzAwMzAwMDBaMDMxMTAvBgNV BAMTKDk4NDAzOEU4M0EzRjU2QzUxQ0U4NjE0NTM0QzQ0NjBBMEJGNDU0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0SO2iapA0o3Ga6AolL3k1k/Gd YD3Z60ecW/Ikmj28tSHWx1qDe7P0Xg4MzFxmrB5Z635Pi00V9CJLGD7VgLmrWzxz OKd04ie9SikSqfUna7pegTen4OVs3GTYcb61E3pX0p+fQNqIExttEOKTPrAfQGrW yypXAZocwsvFGNKggZgBn7ip/gP4HaihibhbcCAM9pPvd27a3mQmtlbUw6MjG1hQ uvr4sANwmUu8Uqz43loxXG2/QnMekYL8PyzKCDIT83MTvY5e4d4Ufr/T2W5ul4qT OS0d7Wg9pib7cgB5F427tAYLZOsVYs6iSL4+yVY4DJcMwVyP5uTIP62SJxI3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmEA46Do/VsUc6GFFNMRGCgv0VP0wHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2YzU3MGVmLTZlZmQtNGY5Ny1i ZjMxLTk2ODEyNmFiNTdjMC8wLzMxMzAzMzJlMzEzNDM3MmUzODMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5NRMA0GCSqG SIb3DQEBCwUAA4IBAQBHlhAhYYWeJbFwJ6cd7525I6GR6xBGdIpvH37Uz4it3aYQ kLYTTHvZZMvpelnHHpsox3Cq97Uk7Rv8nittk6n6fgwn0jA0PsaAboYdwm86hNIZ PZfGr4aemzQCg3RGBU1mKe4N4UGSvLjwdUmhX8JkUtzaD659suixCaYjPv4qZ1k/ JDPhcMYx7/kAnRngG5MPQJZBR4+o8Hkc7IurCTEaWRekjCfqKnZ/kMeeYPofo2xd lYA1rI7ddl0KJSrQNPKWyBU6FgzXdZsWGmkVBz4o4kwKN0GOI6QQFhoBPwakNxVu qoquAoG3WfIUOz4S4r2QR3FfkyPkgSqbdhcm9ffs -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:09 2025 by rpki-client