$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa File: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (raw, json) Hash identifier: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM= Subject key identifier: FC:E6:99:D5:75:F9:0F:6A:10:F5:D1:AA:88:BE:1E:BA:2E:31:E9:03 Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Certificate serial: 4FAE8D010B9BDB9882B346ED630DFEDE63F0CB81 Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa Signing time: Fri 03 Oct 2025 07:02:57 +0000 ROA not before: Fri 03 Oct 2025 06:57:57 +0000 ROA not after: Fri 02 Oct 2026 07:02:57 +0000 asID: 18351 IP address blocks: 103.115.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ae:8d:01:0b:9b:db:98:82:b3:46:ed:63:0d:fe:de:63:f0:cb:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Validity Not Before: Oct 3 06:57:57 2025 GMT Not After : Oct 2 07:02:57 2026 GMT Subject: CN=FCE699D575F90F6A10F5D1AA88BE1EBA2E31E903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:bc:56:8d:eb:09:68:55:93:15:b0:8f:0b: e1:9e:d2:c0:27:38:d7:fd:d0:3a:67:22:a6:df:f8: 6d:a9:5b:a3:e1:f6:66:2b:8a:58:17:0f:1f:06:1a: ef:77:cc:b1:fd:f3:10:fd:53:0d:02:d8:6b:7c:c2: e3:da:a4:15:96:f8:fb:2f:60:8e:7b:2d:68:05:06: 32:6a:48:fe:2f:6a:5f:a7:16:6c:15:9e:fa:d8:b7: b5:b8:94:1d:51:35:a1:01:44:de:00:f6:96:ce:24: ba:a9:82:6a:08:2b:82:e6:b6:04:65:bd:90:59:41: 87:3f:02:40:9f:b0:8f:ad:dc:4f:89:28:7b:20:3c: 7a:69:f7:74:d1:5c:0e:e2:61:b9:fc:d3:33:b2:9e: d1:98:11:ac:fa:a4:4a:4e:14:1b:0c:26:97:25:16: bc:87:b7:5c:24:fb:d7:fd:f1:09:a3:5d:99:53:fb: b1:55:b0:f5:11:62:97:b0:03:9c:d8:21:71:16:f4: b7:d3:9e:4a:cb:ee:56:7a:93:cf:47:67:89:9f:af: 76:dd:56:82:c8:79:44:db:a0:a1:bd:9c:09:46:53: 4c:66:fb:8f:16:55:80:de:ee:09:15:fb:d1:be:05: 48:f4:6c:b7:6a:f5:fe:e8:28:64:f6:1d:05:53:6e: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E6:99:D5:75:F9:0F:6A:10:F5:D1:AA:88:BE:1E:BA:2E:31:E9:03 X509v3 Authority Key Identifier: keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.228.0/22 Signature Algorithm: sha256WithRSAEncryption 70:2e:02:39:cc:51:c8:4b:c2:0e:c8:a3:81:f9:7f:e9:27:bb: f2:58:d5:af:72:58:15:c6:1c:da:06:2e:0d:da:47:83:23:c4: 30:21:f6:2c:b2:76:f3:38:43:3b:4b:c7:d1:00:28:b5:23:6c: ae:f8:1f:95:55:c3:72:25:6e:98:e2:50:eb:9e:cc:0e:28:81: 8d:a9:29:16:8e:ea:de:7c:1f:5a:16:6d:e1:1d:50:d1:48:bc: e0:19:d1:f8:ee:07:2d:c2:1c:49:96:66:c0:38:17:fa:b6:17: 7c:cc:36:68:b0:b3:eb:9c:01:4e:23:74:0f:d9:41:a6:8a:f8: 27:12:f7:6e:30:83:bb:39:91:d0:ae:c3:b1:a2:d0:ae:1d:83: c5:56:c6:60:62:74:0e:07:88:08:83:a9:1e:01:ed:27:d3:e5: 64:3e:32:d8:42:01:b4:9a:fe:47:08:1f:f9:93:ee:e0:1d:12: 86:cf:ad:61:98:b4:a6:f1:c1:31:74:d5:03:56:db:98:bd:71: 04:9e:1b:04:29:b3:57:13:45:4b:9d:f5:1a:3d:3b:fa:3c:94: 80:be:fc:51:91:68:5f:b0:f7:ac:cc:ee:ed:46:82:f4:94:f9: 01:61:0d:b7:86:7a:07:61:51:bd:af:4e:22:ed:ce:4c:58:17: b4:f5:23:3a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT66NAQub25iCs0btYw3+3mPwy4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1 NTA1NTg4OTAeFw0yNTEwMDMwNjU3NTdaFw0yNjEwMDIwNzAyNTdaMDMxMTAvBgNV BAMTKEZDRTY5OUQ1NzVGOTBGNkExMEY1RDFBQTg4QkUxRUJBMkUzMUU5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBFrxWjesJaFWTFbCPC+Ge0sAn ONf90DpnIqbf+G2pW6Ph9mYrilgXDx8GGu93zLH98xD9Uw0C2Gt8wuPapBWW+Psv YI57LWgFBjJqSP4val+nFmwVnvrYt7W4lB1RNaEBRN4A9pbOJLqpgmoIK4LmtgRl vZBZQYc/AkCfsI+t3E+JKHsgPHpp93TRXA7iYbn80zOyntGYEaz6pEpOFBsMJpcl FryHt1wk+9f98QmjXZlT+7FVsPURYpewA5zYIXEW9LfTnkrL7lZ6k89HZ4mfr3bd VoLIeUTboKG9nAlGU0xm+48WVYDe7gkV+9G+BUj0bLdq9f7oKGT2HQVTbm/jAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/OaZ1XX5D2oQ9dGqiL4eui4x6QMwHwYDVR0j BBgwFoAUeFeFiFA6fwkfHXzXsWvcnlUFWIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGU0Y2E1NC04NTdiLTRmNjgtYWI1Zi0wZDhjNDcyZTZjOTIvMC83ODU3ODU4ODUw M0E3RjA5MUYxRDdDRDdCMTZCREM5RTU1MDU1ODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1NTA1 NTg4OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwZTRjYTU0LTg1N2ItNGY2OC1h YjVmLTBkOGM0NzJlNmM5Mi8wLzMxMzAzMzJlMzEzMTM1MmUzMjMyMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM4MzMzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3PkMA0GCSqG SIb3DQEBCwUAA4IBAQBwLgI5zFHIS8IOyKOB+X/pJ7vyWNWvclgVxhzaBi4N2keD I8QwIfYssnbzOEM7S8fRACi1I2yu+B+VVcNyJW6Y4lDrnswOKIGNqSkWjurefB9a Fm3hHVDRSLzgGdH47gctwhxJlmbAOBf6thd8zDZosLPrnAFOI3QP2UGmivgnEvdu MIO7OZHQrsOxotCuHYPFVsZgYnQOB4gIg6keAe0n0+VkPjLYQgG0mv5HCB/5k+7g HRKGz61hmLSm8cExdNUDVtuYvXEEnhsEKbNXE0VLnfUaPTv6PJSAvvxRkWhfsPes zO7tRoL0lPkBYQ23hnoHYVG9r04i7c5MWBe09SM6 -----END CERTIFICATE-----Generated at Mon Oct 20 20:43:33 2025 by rpki-client