$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa File: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (raw, json) Hash identifier: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg= Subject key identifier: B6:A0:40:F1:38:AF:11:21:55:09:3C:80:D5:76:23:D3:D2:B8:8D:A0 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 35D22E360F796BA25F89D52DB7CBCBD5BE547381 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa Signing time: Tue 19 Aug 2025 12:00:01 +0000 ROA not before: Tue 19 Aug 2025 11:55:01 +0000 ROA not after: Tue 18 Aug 2026 12:00:01 +0000 asID: 140464 IP address blocks: 103.153.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d2:2e:36:0f:79:6b:a2:5f:89:d5:2d:b7:cb:cb:d5:be:54:73:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Aug 19 11:55:01 2025 GMT Not After : Aug 18 12:00:01 2026 GMT Subject: CN=B6A040F138AF112155093C80D57623D3D2B88DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:59:21:00:60:95:72:a7:73:77:0f:0d:d8: f1:32:d6:c4:96:8d:ab:b3:f7:2f:3b:a8:fa:d3:7f: 44:e7:01:47:66:4b:52:ee:70:5b:fe:cc:4b:05:68: 3d:61:c8:f4:68:7b:98:a4:bf:ea:2b:a3:ba:a5:57: 53:f9:c0:28:86:84:d6:dd:6d:a1:4c:59:63:32:63: 0c:68:e8:d0:6e:77:b2:45:6e:dc:a9:40:5f:8f:f0: 8a:5e:f0:49:bc:50:4d:a1:5d:90:00:e9:23:04:a7: 4a:fb:52:6b:e0:9c:73:07:7a:dc:ea:46:3c:77:87: 72:1f:36:4d:76:76:77:e4:40:28:de:4b:8e:f3:5c: ab:9c:00:d7:09:7e:0e:18:14:d1:85:02:fa:7a:40: 77:05:39:06:00:cc:c1:85:be:da:a0:84:10:5e:46: 0f:f3:e3:1a:c3:f7:44:07:b4:fd:ab:4d:4f:6c:69: 5b:c0:2b:fb:3f:88:46:06:87:62:23:2e:97:36:b6: 06:e9:7e:7b:d3:8e:4b:94:85:05:67:63:dc:40:9b: 8b:9d:e7:cd:ae:84:c0:45:cc:31:5b:9b:94:8f:eb: 2b:43:b7:11:2d:85:a7:fa:e3:a4:12:f4:69:54:f0: 8c:7f:96:74:70:b8:3d:f3:86:b9:0a:9f:b4:98:94: 43:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A0:40:F1:38:AF:11:21:55:09:3C:80:D5:76:23:D3:D2:B8:8D:A0 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.134.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:dc:bc:ad:bc:71:b6:9d:2f:ff:76:c5:d8:7e:71:90:7f:0e: 30:06:06:fb:d5:a0:2c:08:56:89:e2:8c:7f:01:86:2a:9c:df: be:6a:73:b5:b0:c9:22:26:81:8a:4f:ce:d3:2c:62:c2:46:b8: e9:b9:60:cf:b4:1c:e4:e8:ff:56:63:5e:6d:f4:b2:7e:8a:1b: 4f:30:ff:69:e1:49:64:4a:68:36:af:d6:09:68:a0:32:9c:a3: c1:8b:b4:7e:4d:c8:02:11:dd:4c:a3:35:34:27:ea:c3:07:67: 7a:93:81:12:b6:83:30:8a:82:8f:09:e5:02:c6:f8:ac:d2:c8: bf:c7:f0:4f:63:ad:88:0d:6d:e8:dd:c0:37:a8:c5:e8:9d:0c: 16:c4:fd:f5:ee:cd:81:50:b8:3d:ad:31:a9:8d:3c:38:65:8b: 8a:92:02:25:f6:83:72:5f:71:25:62:f3:a2:fa:79:6d:1c:72: 5f:30:2d:b4:43:73:73:9d:3e:f7:2d:95:b1:8a:d6:26:cd:15: c7:63:5e:d8:3e:c5:25:63:3c:9c:10:11:3b:7c:fa:d1:af:f1: 04:61:67:03:59:0e:e0:6a:8a:9e:ea:6e:95:63:86:a8:33:33: 9b:06:75:53:e4:e8:17:dc:2c:f4:e2:93:40:cd:dd:59:c5:dc: b8:9f:c7:6d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNdIuNg95a6JfidUtt8vL1b5Uc4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNTA4MTkxMTU1MDFaFw0yNjA4MTgxMjAwMDFaMDMxMTAvBgNV BAMTKEI2QTA0MEYxMzhBRjExMjE1NTA5M0M4MEQ1NzYyM0QzRDJCODhEQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxFkhAGCVcqdzdw8N2PEy1sSW jauz9y87qPrTf0TnAUdmS1LucFv+zEsFaD1hyPRoe5ikv+oro7qlV1P5wCiGhNbd baFMWWMyYwxo6NBud7JFbtypQF+P8Ipe8Em8UE2hXZAA6SMEp0r7UmvgnHMHetzq Rjx3h3IfNk12dnfkQCjeS47zXKucANcJfg4YFNGFAvp6QHcFOQYAzMGFvtqghBBe Rg/z4xrD90QHtP2rTU9saVvAK/s/iEYGh2IjLpc2tgbpfnvTjkuUhQVnY9xAm4ud 582uhMBFzDFbm5SP6ytDtxEthaf646QS9GlU8Ix/lnRwuD3zhrkKn7SYlENZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUtqBA8TivESFVCTyA1XYj09K4jaAwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJlOTA1LWYyOTYtNDVkMS1h ODc5LTRhNGRlNTJjYjJkNi8wLzMxMzAzMzJlMzEzNTMzMmUzMTMzMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmYYwDQYJ KoZIhvcNAQELBQADggEBABzcvK28cbadL/92xdh+cZB/DjAGBvvVoCwIVonijH8B hiqc375qc7WwySImgYpPztMsYsJGuOm5YM+0HOTo/1ZjXm30sn6KG08w/2nhSWRK aDav1glooDKco8GLtH5NyAIR3UyjNTQn6sMHZ3qTgRK2gzCKgo8J5QLG+KzSyL/H 8E9jrYgNbejdwDeoxeidDBbE/fXuzYFQuD2tMamNPDhli4qSAiX2g3JfcSVi86L6 eW0ccl8wLbRDc3OdPvctlbGK1ibNFcdjXtg+xSVjPJwQETt8+tGv8QRhZwNZDuBq ip7qbpVjhqgzM5sGdVPk6BfcLPTik0DN3VnF3Lifx20= -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:49 2025 by rpki-client