$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa File: 3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa (raw, json) Hash identifier: OrYEci2LXcYUd7zO3w5vMjUiO57zzyli3tlZ6qJrtVM= Subject key identifier: A1:07:61:22:12:8C:84:40:6E:E6:6A:2E:B1:00:60:CF:AF:86:7C:CB Certificate issuer: /CN=232967D03C1169374A898D1C8991F1ABE7744870 Certificate serial: 34925B8F9F464E27FC2E001FBD2BDF248EA059CC Authority key identifier: 23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa Signing time: Sat 06 Sep 2025 12:00:00 +0000 ROA not before: Sat 06 Sep 2025 11:55:00 +0000 ROA not after: Sat 05 Sep 2026 12:00:00 +0000 asID: 141098 IP address blocks: 103.156.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:92:5b:8f:9f:46:4e:27:fc:2e:00:1f:bd:2b:df:24:8e:a0:59:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232967D03C1169374A898D1C8991F1ABE7744870 Validity Not Before: Sep 6 11:55:00 2025 GMT Not After : Sep 5 12:00:00 2026 GMT Subject: CN=A1076122128C84406EE66A2EB10060CFAF867CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:e8:48:e7:9b:b0:f9:ab:71:31:20:0a:81: b9:2a:e9:7d:5c:88:e8:6e:36:de:c8:7e:94:e8:b1: bb:c1:13:b2:2a:38:6e:5f:f5:40:f3:17:85:84:f6: 4c:af:44:e2:98:db:85:1c:87:d4:93:83:d6:99:4f: 0a:a1:39:ef:d8:25:90:e5:33:0f:1a:9f:e8:30:f8: c4:29:ff:80:d7:1e:a0:89:0d:b0:7d:2e:d7:39:11: 94:47:75:67:4e:3c:7c:e9:26:ed:66:b9:20:6e:32: 25:ff:fb:ac:61:3e:92:77:53:cb:b7:8e:36:e3:80: d4:ba:0c:62:d3:04:fb:9f:a4:93:25:26:07:0f:ce: 04:b7:4d:19:13:49:0c:72:6c:26:fc:3d:f8:83:67: c6:f5:20:eb:f3:67:7e:9b:ea:03:db:7e:85:d6:ef: c4:7d:f6:d9:b4:8f:91:f5:f7:37:4c:eb:e1:00:26: 5e:d6:01:2b:65:a4:51:8c:f8:2f:da:3b:aa:57:f7: 7c:4a:f4:de:e3:68:2f:bd:fa:19:62:9d:2f:0a:d7: c9:b3:a2:bb:e2:29:70:dd:f9:e4:74:5f:54:89:45: ed:a7:b7:f9:ec:76:59:7d:eb:20:21:29:30:9d:e1: 71:11:48:f9:81:c9:27:6c:bc:c8:d5:9e:8a:ce:7b: 32:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:07:61:22:12:8C:84:40:6E:E6:6A:2E:B1:00:60:CF:AF:86:7C:CB X509v3 Authority Key Identifier: keyid:23:29:67:D0:3C:11:69:37:4A:89:8D:1C:89:91:F1:AB:E7:74:48:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/232967D03C1169374A898D1C8991F1ABE7744870.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/232967D03C1169374A898D1C8991F1ABE7744870.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e3e981-bf39-42e0-a2f6-cf87c757f827/0/3130332e3135362e3233322e302f32332d3234203d3e20313431303938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.232.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:b4:c0:e4:99:c3:2a:28:a7:6d:04:30:4f:eb:7d:65:a7:10: 73:60:9e:3a:f4:f8:d1:f4:63:27:78:67:69:4c:76:16:d6:10: 15:74:ec:45:ea:8b:f6:29:58:a2:cf:ec:a8:51:b6:97:2d:1a: 2b:a0:ea:c6:37:85:cd:cb:17:57:42:b6:76:98:6e:8c:80:b4: c3:7d:dd:7d:5a:c7:c0:61:8c:b7:d5:fc:e3:ef:f8:36:39:3f: fe:67:7f:a2:3a:69:83:99:fa:51:b9:b3:fb:d4:fd:de:ee:77: a5:1e:94:26:8d:01:92:0a:83:ff:83:1f:e3:35:ab:17:09:84: c1:51:a6:a2:fe:a1:2b:7d:49:7d:11:06:03:69:2c:e3:83:75: 6d:53:4f:fb:04:bd:57:b7:bf:e3:a3:1a:66:fc:a2:9b:ff:ed: 4f:05:59:16:a4:86:0b:3a:5c:ad:16:15:be:71:4f:f4:f7:a9: 18:7b:1d:92:5b:cf:74:b9:34:af:55:ec:c3:63:23:93:f3:12: 87:7f:d0:8d:84:7b:f4:a1:b4:9d:27:9f:2c:3e:a5:83:65:2d: 6f:12:8e:0b:6e:73:da:60:6d:f8:18:3d:90:8b:0a:93:d6:7d: f8:d6:e7:6d:b7:cf:9f:c3:00:60:66:07:0c:2a:66:8c:8b:31: ae:23:4c:d0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUNJJbj59GTif8LgAfvSvfJI6gWcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJF Nzc0NDg3MDAeFw0yNTA5MDYxMTU1MDBaFw0yNjA5MDUxMjAwMDBaMDMxMTAvBgNV BAMTKEExMDc2MTIyMTI4Qzg0NDA2RUU2NkEyRUIxMDA2MENGQUY4NjdDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2B+hI55uw+atxMSAKgbkq6X1c iOhuNt7IfpTosbvBE7IqOG5f9UDzF4WE9kyvROKY24Uch9STg9aZTwqhOe/YJZDl Mw8an+gw+MQp/4DXHqCJDbB9Ltc5EZRHdWdOPHzpJu1muSBuMiX/+6xhPpJ3U8u3 jjbjgNS6DGLTBPufpJMlJgcPzgS3TRkTSQxybCb8PfiDZ8b1IOvzZ36b6gPbfoXW 78R99tm0j5H19zdM6+EAJl7WAStlpFGM+C/aO6pX93xK9N7jaC+9+hlinS8K18mz orviKXDd+eR0X1SJRe2nt/nsdll96yAhKTCd4XERSPmBySdsvMjVnorOezLjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUoQdhIhKMhEBu5mousQBgz6+GfMswHwYDVR0j BBgwFoAUIyln0DwRaTdKiY0ciZHxq+d0SHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUzZTk4MS1iZjM5LTQyZTAtYTJmNi1jZjg3Yzc1N2Y4MjcvMC8yMzI5NjdEMDND MTE2OTM3NEE4OThEMUM4OTkxRjFBQkU3NzQ0ODcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMyOTY3RDAzQzExNjkzNzRBODk4RDFDODk5MUYxQUJFNzc0 NDg3MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZTNlOTgxLWJmMzktNDJlMC1h MmY2LWNmODdjNzU3ZjgyNy8wLzMxMzAzMzJlMzEzNTM2MmUzMjMzMzIyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnOgwDQYJ KoZIhvcNAQELBQADggEBAG+0wOSZwyoop20EME/rfWWnEHNgnjr0+NH0Yyd4Z2lM dhbWEBV07EXqi/YpWKLP7KhRtpctGiug6sY3hc3LF1dCtnaYboyAtMN93X1ax8Bh jLfV/OPv+DY5P/5nf6I6aYOZ+lG5s/vU/d7ud6UelCaNAZIKg/+DH+M1qxcJhMFR pqL+oSt9SX0RBgNpLOODdW1TT/sEvVe3v+OjGmb8opv/7U8FWRakhgs6XK0WFb5x T/T3qRh7HZJbz3S5NK9V7MNjI5PzEod/0I2Ee/ShtJ0nnyw+pYNlLW8Sjgtuc9pg bfgYPZCLCpPWffjW5223z5/DAGBmBwwqZoyLMa4jTNA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:55:15 2025 by rpki-client