$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa File: 3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa (raw, json) Hash identifier: Y0QuciRTpFDwvV/OBPdTjgLcEkiudatiiHEhsbTutWI= Subject key identifier: 77:AB:6B:63:70:9B:9A:89:C8:B2:A0:2D:53:89:C1:4F:32:AB:63:65 Certificate issuer: /CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Certificate serial: 124D4E63A4C499AB9E0A548C0161A2682C72DBB5 Authority key identifier: 02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa Signing time: Fri 12 Sep 2025 15:00:01 +0000 ROA not before: Fri 12 Sep 2025 14:55:01 +0000 ROA not after: Fri 11 Sep 2026 15:00:01 +0000 asID: 140023 IP address blocks: 103.149.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4d:4e:63:a4:c4:99:ab:9e:0a:54:8c:01:61:a2:68:2c:72:db:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023DAF793CD2BAF6C7BC7A45A13DF236B7401661 Validity Not Before: Sep 12 14:55:01 2025 GMT Not After : Sep 11 15:00:01 2026 GMT Subject: CN=77AB6B63709B9A89C8B2A02D5389C14F32AB6365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:57:b3:68:dd:9d:c8:11:fd:a9:4c:6d:c7:33: 6c:c2:8d:bd:4d:6f:6e:1c:d8:f5:51:00:db:ba:49: a5:97:4c:c7:a2:a5:f4:af:f6:03:04:71:0a:04:47: d8:cf:fa:e8:8a:52:62:89:42:79:96:91:cf:ca:16: 7b:4c:ae:3f:0b:e6:6a:aa:5b:36:3a:0d:13:ee:84: fd:24:d9:cd:ca:16:74:e6:11:10:14:03:61:36:49: d9:dd:e6:0c:30:8d:72:9e:8a:ad:ac:5e:7d:9b:76: 4f:01:2a:00:b2:20:5f:71:9b:10:02:b5:d0:46:6b: 05:f9:ee:9f:c6:ea:31:d9:cc:31:87:d1:c3:de:8b: c2:a3:f5:3a:b9:aa:34:bc:fd:35:03:07:9d:50:f8: 10:95:08:89:fb:8e:08:a9:f9:a5:95:ff:52:d2:53: d9:92:7a:8c:8b:52:01:c9:4a:9e:fc:35:95:85:06: 94:2b:73:62:d6:70:26:35:66:80:3c:4a:47:de:01: 4f:2b:32:af:59:5f:97:b9:13:d0:ed:a2:5f:17:4a: 37:b9:c9:54:5d:cf:da:67:27:ba:0c:a1:72:44:ca: a1:60:a7:95:76:3b:f3:15:3b:64:41:ca:f9:67:04: 49:56:80:e6:85:06:61:91:ff:ea:98:39:8e:e0:b9: 5b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AB:6B:63:70:9B:9A:89:C8:B2:A0:2D:53:89:C1:4F:32:AB:63:65 X509v3 Authority Key Identifier: keyid:02:3D:AF:79:3C:D2:BA:F6:C7:BC:7A:45:A1:3D:F2:36:B7:40:16:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/023DAF793CD2BAF6C7BC7A45A13DF236B7401661.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132312e302f32342d3234203d3e20313430303233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.121.0/24 Signature Algorithm: sha256WithRSAEncryption 79:27:1f:16:3b:5a:18:89:e7:88:02:5f:4f:74:ac:ce:61:e3: 88:49:4e:be:f2:ff:7d:85:a0:d3:0f:83:a6:49:3c:16:fa:83: b4:ca:8d:55:84:3c:5e:62:79:79:c5:71:80:e8:c7:07:b6:c9: b4:e0:37:0a:e0:1c:c6:72:48:ff:bd:91:71:84:13:35:a3:6d: 4d:14:5a:70:b1:c4:13:82:80:59:36:af:47:3a:65:27:29:fe: ef:17:c0:42:46:3c:96:38:df:99:f7:ac:19:4c:5f:2f:db:a3: 58:36:b7:e8:f0:3c:55:8d:3c:19:f1:fe:6e:77:53:85:b7:74: 64:82:9e:50:13:87:81:01:70:4a:d9:56:6c:46:7d:81:8d:b7: de:63:d6:e1:55:c3:b4:a3:1c:48:04:3e:6d:01:1c:f6:29:c3: f1:f6:bd:97:8c:ca:37:20:80:8d:45:83:49:10:8a:2d:07:11: e6:47:17:3f:b6:91:0f:cf:1b:d0:88:6b:40:fe:db:68:30:85: 44:f6:f2:d3:f1:71:07:10:a1:2c:c3:78:a3:43:83:f2:6f:a5: d1:45:3a:de:03:34:41:ad:81:bf:9b:e7:03:65:74:d0:cd:7f: 9b:0f:68:d0:aa:e4:4f:e2:eb:0b:25:61:6d:1e:9e:cd:2e:b0: cf:f9:c3:82 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEk1OY6TEmaueClSMAWGiaCxy27UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZC NzQwMTY2MTAeFw0yNTA5MTIxNDU1MDFaFw0yNjA5MTExNTAwMDFaMDMxMTAvBgNV BAMTKDc3QUI2QjYzNzA5QjlBODlDOEIyQTAyRDUzODlDMTRGMzJBQjYzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0V7No3Z3IEf2pTG3HM2zCjb1N b24c2PVRANu6SaWXTMeipfSv9gMEcQoER9jP+uiKUmKJQnmWkc/KFntMrj8L5mqq WzY6DRPuhP0k2c3KFnTmERAUA2E2Sdnd5gwwjXKeiq2sXn2bdk8BKgCyIF9xmxAC tdBGawX57p/G6jHZzDGH0cPei8Kj9Tq5qjS8/TUDB51Q+BCVCIn7jgip+aWV/1LS U9mSeoyLUgHJSp78NZWFBpQrc2LWcCY1ZoA8SkfeAU8rMq9ZX5e5E9Dtol8XSje5 yVRdz9pnJ7oMoXJEyqFgp5V2O/MVO2RByvlnBElWgOaFBmGR/+qYOY7guVu9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUd6trY3CbmonIsqAtU4nBTzKrY2UwHwYDVR0j BBgwFoAUAj2veTzSuvbHvHpFoT3yNrdAFmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQwZTY0MC0yMmU5LTQ0MWMtODYzNC1mOTUyNTMwN2RhNzYvMC8wMjNEQUY3OTND RDJCQUY2QzdCQzdBNDVBMTNERjIzNkI3NDAxNjYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIzREFGNzkzQ0QyQkFGNkM3QkM3QTQ1QTEzREYyMzZCNzQw MTY2MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4ZDBlNjQwLTIyZTktNDQxYy04 NjM0LWY5NTI1MzA3ZGE3Ni8wLzMxMzAzMzJlMzEzNDM5MmUzMTMyMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlXkwDQYJ KoZIhvcNAQELBQADggEBAHknHxY7WhiJ54gCX090rM5h44hJTr7y/32FoNMPg6ZJ PBb6g7TKjVWEPF5ieXnFcYDoxwe2ybTgNwrgHMZySP+9kXGEEzWjbU0UWnCxxBOC gFk2r0c6ZScp/u8XwEJGPJY435n3rBlMXy/bo1g2t+jwPFWNPBnx/m53U4W3dGSC nlATh4EBcErZVmxGfYGNt95j1uFVw7SjHEgEPm0BHPYpw/H2vZeMyjcggI1Fg0kQ ii0HEeZHFz+2kQ/PG9CIa0D+22gwhUT28tPxcQcQoSzDeKNDg/JvpdFFOt4DNEGt gb+b5wNldNDNf5sPaNCq5E/i6wslYW0ens0usM/5w4I= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:27 2025 by rpki-client