$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa File: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (raw, json) Hash identifier: pXWaAnAiDsjhVjMrMqsJ0d+NFEE6GHbDUnVNomzIFpY= Subject key identifier: FC:3C:65:4B:11:6A:27:8A:F6:8F:78:7A:D6:6A:48:58:9F:54:E8:63 Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 62E5186742F367C7BF981B8ED52D7147EFA3C124 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa Signing time: Wed 27 Aug 2025 04:00:00 +0000 ROA not before: Wed 27 Aug 2025 03:55:00 +0000 ROA not after: Wed 26 Aug 2026 04:00:00 +0000 asID: 140444 IP address blocks: 103.153.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 05:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e5:18:67:42:f3:67:c7:bf:98:1b:8e:d5:2d:71:47:ef:a3:c1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Aug 27 03:55:00 2025 GMT Not After : Aug 26 04:00:00 2026 GMT Subject: CN=FC3C654B116A278AF68F787AD66A48589F54E863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:fb:c8:9e:fb:18:5a:91:80:fa:a7:71:3b: 0e:be:45:61:4a:5b:4a:af:4d:dc:a1:e1:16:1b:fb: 67:42:0a:01:bd:c9:f0:67:89:87:14:53:81:37:be: bc:34:6e:ab:43:41:32:a6:c8:fc:a1:29:8c:7b:24: 25:3d:99:56:be:c2:1c:8f:4b:e2:c4:1d:a7:b8:00: 58:d5:ea:70:8f:84:43:96:5a:e8:a4:60:3f:4f:ef: 4c:92:c3:55:3c:f4:06:eb:ea:51:23:60:b1:72:c3: 04:b6:c5:f9:46:d8:12:3c:6b:66:1d:2a:3e:be:fa: 47:c8:92:15:9a:a8:03:d1:d3:7e:73:a8:ff:18:72: 8d:50:60:54:57:8d:3a:0c:e3:05:13:eb:a2:a3:7e: 45:52:0d:47:8e:a5:97:a0:56:d0:50:be:2a:23:c1: ce:59:54:32:d2:e6:72:4c:23:97:95:62:39:5e:23: a3:48:f5:ae:58:79:73:b9:f2:10:bf:f3:44:5c:d0: cf:de:e4:5f:69:87:cf:1d:d1:f9:28:18:a9:6a:ea: 0f:30:6a:0d:a8:97:9b:6f:c4:a4:f6:dc:0f:4c:d1: 42:b5:3f:8a:60:d5:ed:1a:70:58:42:36:e4:aa:ef: b0:31:2c:17:0d:ed:a2:84:f6:44:b3:f1:b9:e7:9c: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3C:65:4B:11:6A:27:8A:F6:8F:78:7A:D6:6A:48:58:9F:54:E8:63 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.42.0/24 Signature Algorithm: sha256WithRSAEncryption 83:30:5a:60:39:bb:1a:7d:6d:c8:0c:65:77:80:30:f3:54:f3: 4e:b2:ee:2f:81:c3:00:93:02:fb:c9:d2:eb:81:ca:57:98:0d: 9c:6a:34:73:06:e8:49:4d:d7:98:87:49:1a:cd:71:3d:a4:16: 99:c8:d3:b5:ae:ef:9e:13:f7:60:7a:e4:f6:41:a2:19:65:d9: 7f:70:7a:6d:fa:2a:38:bb:87:26:bb:9c:5f:47:f5:af:fa:58: d4:9e:1b:9d:74:d3:d4:3d:a6:3a:8b:0e:7e:43:ac:ef:6d:35: 33:f7:ee:2b:8e:98:23:c0:2e:4f:45:c1:a9:75:fc:60:63:fe: 62:06:c2:3b:72:6f:87:25:e1:cd:0a:b1:47:53:b1:e3:49:8f: 81:31:c6:1c:21:f3:32:b6:6a:76:83:f7:0e:0d:33:ba:04:dc: e7:a4:db:0f:cf:9d:28:67:b2:3e:84:0e:9d:3e:12:3f:c9:ee: b2:53:41:f5:58:60:47:47:77:63:3e:aa:26:19:d9:b8:fa:31: 7b:f5:d1:9b:61:04:04:0e:99:37:14:20:8b:f3:d1:0a:fc:8c: 84:1d:27:7c:74:d8:85:75:22:83:54:8d:15:45:79:ae:0e:02: 55:8f:51:e8:b0:5c:84:16:ee:a4:8b:5c:e1:20:00:7e:b6:4a: 93:2b:23:d0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYuUYZ0LzZ8e/mBuO1S1xR++jwSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTA4MjcwMzU1MDBaFw0yNjA4MjYwNDAwMDBaMDMxMTAvBgNV BAMTKEZDM0M2NTRCMTE2QTI3OEFGNjhGNzg3QUQ2NkE0ODU4OUY1NEU4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsvvvInvsYWpGA+qdxOw6+RWFK W0qvTdyh4RYb+2dCCgG9yfBniYcUU4E3vrw0bqtDQTKmyPyhKYx7JCU9mVa+whyP S+LEHae4AFjV6nCPhEOWWuikYD9P70ySw1U89Abr6lEjYLFywwS2xflG2BI8a2Yd Kj6++kfIkhWaqAPR035zqP8Yco1QYFRXjToM4wUT66KjfkVSDUeOpZegVtBQvioj wc5ZVDLS5nJMI5eVYjleI6NI9a5YeXO58hC/80Rc0M/e5F9ph88d0fkoGKlq6g8w ag2ol5tvxKT23A9M0UK1P4pg1e0acFhCNuSq77AxLBcN7aKE9kSz8bnnnM2bAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/DxlSxFqJ4r2j3h61mpIWJ9U6GMwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMxMzAzMzJlMzEzNTMzMmUzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5kqMA0GCSqG SIb3DQEBCwUAA4IBAQCDMFpgObsafW3IDGV3gDDzVPNOsu4vgcMAkwL7ydLrgcpX mA2cajRzBuhJTdeYh0kazXE9pBaZyNO1ru+eE/dgeuT2QaIZZdl/cHpt+io4u4cm u5xfR/Wv+ljUnhuddNPUPaY6iw5+Q6zvbTUz9+4rjpgjwC5PRcGpdfxgY/5iBsI7 cm+HJeHNCrFHU7HjSY+BMcYcIfMytmp2g/cODTO6BNznpNsPz50oZ7I+hA6dPhI/ ye6yU0H1WGBHR3djPqomGdm4+jF79dGbYQQEDpk3FCCL89EK/IyEHSd8dNiFdSKD VI0VRXmuDgJVj1HosFyEFu6ki1zhIAB+tkqTKyPQ -----END CERTIFICATE-----Generated at Tue Oct 21 09:59:57 2025 by rpki-client