$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa File: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (raw, json) Hash identifier: cidgl2SIo3vuKAc4LvPzn48241T8Yqf3Lk4VBRTBdhc= Subject key identifier: F4:C6:60:92:DA:07:EB:9C:BF:C6:F0:DE:4B:F2:BD:74:C0:80:83:CE Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 2812DFA327B31CB9CDF5C0201C35FA1DD6395AFE Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa Signing time: Wed 27 Aug 2025 04:00:00 +0000 ROA not before: Wed 27 Aug 2025 03:55:00 +0000 ROA not after: Wed 26 Aug 2026 04:00:00 +0000 asID: 140444 IP address blocks: 103.153.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 05:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:12:df:a3:27:b3:1c:b9:cd:f5:c0:20:1c:35:fa:1d:d6:39:5a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Aug 27 03:55:00 2025 GMT Not After : Aug 26 04:00:00 2026 GMT Subject: CN=F4C66092DA07EB9CBFC6F0DE4BF2BD74C08083CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:f3:8f:2e:c4:da:66:71:fd:90:7b:88:55: c0:b1:6f:1e:d9:96:98:c8:49:f8:d5:82:51:7a:56: 2a:6c:2a:ca:28:de:73:f2:0b:c5:91:da:ba:7f:af: c2:a6:ef:6e:3b:22:00:0e:38:0e:bd:c3:21:51:d0: 13:bf:39:22:2d:15:35:94:1c:87:3a:04:d7:99:4d: 9b:39:b0:ba:c8:4a:a6:82:23:01:e7:11:25:bc:22: c5:45:95:d1:94:a7:d0:d1:00:56:9a:9e:bc:e3:6b: b2:42:89:36:5c:7a:eb:7d:d4:ca:7d:29:d5:e9:b0: 20:dc:f2:c4:8b:9b:b1:b0:cb:a8:23:05:c1:4f:de: 96:5e:3e:cc:ac:98:e0:cf:cf:4f:93:17:f2:90:92: 8f:0b:c3:b7:8a:34:91:ff:ea:26:5b:9f:6f:d5:49: 4d:51:ad:23:d7:b6:a9:7b:46:59:6e:68:71:0b:2e: 56:96:1f:a5:19:31:5f:da:91:28:45:17:f3:f2:b9: ec:11:f2:da:c0:3b:77:20:48:c9:82:23:f7:d6:76: a0:6b:82:0d:34:35:db:2b:95:1c:4e:20:a0:fa:55: 31:e0:04:39:84:32:ad:2e:17:84:e9:3a:51:34:94: c7:a5:09:45:dd:14:7d:2b:04:4c:dc:22:9f:67:ca: a6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C6:60:92:DA:07:EB:9C:BF:C6:F0:DE:4B:F2:BD:74:C0:80:83:CE X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.43.0/24 Signature Algorithm: sha256WithRSAEncryption 93:25:54:f9:4a:79:bc:57:f1:f0:4b:d0:18:be:f5:28:97:7b: aa:f7:0b:82:64:96:84:fa:c3:81:df:bf:d6:f8:dc:cf:67:f4: a4:fb:fa:5c:a5:04:55:44:7d:ab:25:57:9f:fc:31:96:53:c6: c8:77:c0:7b:fd:34:3d:da:d6:f8:35:89:f4:f0:fb:f7:a0:99: 90:91:ae:9d:3b:6a:f1:73:7c:1f:c7:49:d2:60:7f:d9:e6:17: 4d:4a:f8:3e:1d:f2:28:8d:28:6a:ba:ff:85:9d:0a:c2:78:25: 77:27:5a:04:b2:68:b0:5e:da:f0:d4:bd:19:65:95:7b:e7:8b: bb:fb:4b:f4:ea:cf:1a:80:90:21:2e:04:11:66:1d:23:e7:9d: ca:31:60:47:3f:4a:75:fb:d3:bd:3c:17:76:43:aa:b1:d3:78: fb:0d:6f:1b:7a:e0:14:cb:3b:a3:fa:22:bd:ae:79:04:e8:e0: 27:d9:a3:7c:c0:d2:50:08:ed:aa:84:c7:00:50:a4:dd:39:65: c5:09:5d:60:f1:eb:a7:38:46:e5:44:7c:62:70:8b:ca:82:3d: 16:d8:82:52:e3:c1:bc:46:03:d1:a5:cd:5f:54:76:57:fa:10: 03:f2:ac:2d:77:37:3a:78:65:65:83:32:3a:cf:ed:06:70:d1: 8b:15:40:f8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKBLfoyezHLnN9cAgHDX6HdY5Wv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTA4MjcwMzU1MDBaFw0yNjA4MjYwNDAwMDBaMDMxMTAvBgNV BAMTKEY0QzY2MDkyREEwN0VCOUNCRkM2RjBERTRCRjJCRDc0QzA4MDgzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc1POPLsTaZnH9kHuIVcCxbx7Z lpjISfjVglF6VipsKsoo3nPyC8WR2rp/r8Km7247IgAOOA69wyFR0BO/OSItFTWU HIc6BNeZTZs5sLrISqaCIwHnESW8IsVFldGUp9DRAFaanrzja7JCiTZceut91Mp9 KdXpsCDc8sSLm7Gwy6gjBcFP3pZePsysmODPz0+TF/KQko8Lw7eKNJH/6iZbn2/V SU1RrSPXtql7RlluaHELLlaWH6UZMV/akShFF/PyuewR8trAO3cgSMmCI/fWdqBr gg00NdsrlRxOIKD6VTHgBDmEMq0uF4TpOlE0lMelCUXdFH0rBEzcIp9nyqYzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9MZgktoH65y/xvDeS/K9dMCAg84wHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMxMzAzMzJlMzEzNTMzMmUzNDMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5krMA0GCSqG SIb3DQEBCwUAA4IBAQCTJVT5Snm8V/HwS9AYvvUol3uq9wuCZJaE+sOB37/W+NzP Z/Sk+/pcpQRVRH2rJVef/DGWU8bId8B7/TQ92tb4NYn08Pv3oJmQka6dO2rxc3wf x0nSYH/Z5hdNSvg+HfIojShquv+FnQrCeCV3J1oEsmiwXtrw1L0ZZZV754u7+0v0 6s8agJAhLgQRZh0j553KMWBHP0p1+9O9PBd2Q6qx03j7DW8beuAUyzuj+iK9rnkE 6OAn2aN8wNJQCO2qhMcAUKTdOWXFCV1g8eunOEblRHxicIvKgj0W2IJS48G8RgPR pc1fVHZX+hAD8qwtdzc6eGVlgzI6z+0GcNGLFUD4 -----END CERTIFICATE-----Generated at Tue Oct 21 09:59:58 2025 by rpki-client