$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa File: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (raw, json) Hash identifier: gonve5wIJ3O85bDiwHHm2xjnNdsU9xH6JAbxD3Ax5a8= Subject key identifier: 5F:20:0A:12:13:6C:60:A6:AE:FF:CE:47:25:EB:72:41:B8:47:DD:93 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 4BE3E86581D07F80FED12FB5BF72F576A28F61AB Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa Signing time: Wed 03 Sep 2025 23:00:01 +0000 ROA not before: Wed 03 Sep 2025 22:55:01 +0000 ROA not after: Wed 02 Sep 2026 23:00:01 +0000 asID: 137331 IP address blocks: 103.178.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Oct 2025 21:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e3:e8:65:81:d0:7f:80:fe:d1:2f:b5:bf:72:f5:76:a2:8f:61:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Sep 3 22:55:01 2025 GMT Not After : Sep 2 23:00:01 2026 GMT Subject: CN=5F200A12136C60A6AEFFCE4725EB7241B847DD93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:b4:d9:1d:2d:a1:0a:10:f3:ff:63:13:d3: 8a:ee:4c:1c:a2:5f:94:cf:e2:ef:86:19:a6:e5:94: de:e7:ea:60:52:7b:65:b1:7f:94:ed:7d:a6:a7:b4: 85:17:da:15:28:cc:4e:48:53:dd:45:49:65:c5:1c: f4:a8:3b:37:38:4a:de:5f:50:ea:98:ac:66:dd:53: fe:80:d8:a2:13:c3:04:13:af:3a:43:73:44:5e:ba: 8e:e2:d5:8d:df:a8:8f:d9:60:c6:91:b7:f3:6d:5a: b1:f8:20:79:71:29:09:f0:b0:bd:8d:95:ee:d3:0e: e3:d7:31:22:da:8f:68:d0:13:d1:22:59:db:74:b8: 4b:ee:91:ed:7d:90:ac:5d:f3:63:10:4f:e0:88:0f: 07:e5:96:ef:c2:14:74:e2:3b:a1:d1:e0:ac:cc:f8: 7b:0b:ee:76:f4:2e:b0:31:1a:d5:91:dd:a5:26:93: f4:b7:25:5c:88:21:00:18:ec:fc:fb:2c:82:8d:2a: 5e:1c:12:5e:e3:c3:d0:cb:b8:ad:15:e7:37:01:36: e1:f9:97:52:b0:7f:24:96:42:17:66:e2:2b:0b:8f: 44:ee:b2:e1:cd:a5:51:a8:7e:cf:92:fd:ee:4f:f2: 33:c3:e5:4a:13:c2:25:1d:a1:14:73:84:4d:e9:3b: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:20:0A:12:13:6C:60:A6:AE:FF:CE:47:25:EB:72:41:B8:47:DD:93 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.174.0/23 Signature Algorithm: sha256WithRSAEncryption aa:c2:01:35:2c:19:b4:59:a0:91:56:d7:7a:1a:8f:fb:5f:dd: c9:6c:04:01:9e:51:9c:7d:25:89:a6:84:24:25:e9:35:97:b7: 48:55:87:83:5d:48:c3:c5:e6:3d:e5:1e:b1:cd:d1:b1:b5:60: 22:34:9c:d6:cf:5d:1e:58:ab:63:1b:4b:d7:77:ad:68:bb:02: 26:bd:1c:a4:2d:ae:a0:bc:03:3f:29:4a:5e:8b:7d:0e:2f:1f: 80:45:44:49:48:b0:65:05:8a:44:c2:aa:96:34:24:ac:07:e3: 86:bf:c0:f2:da:99:ea:b3:59:95:ae:71:00:04:85:9a:aa:01: 85:82:57:ab:97:99:4b:71:df:24:c3:2c:84:cb:da:c8:92:60: 45:aa:9a:dd:fc:0c:69:9b:c7:51:8e:67:1b:ef:fe:ae:49:90: 46:43:81:dc:22:ea:51:d4:df:ae:6b:1d:c3:ff:f5:37:77:f4: 11:ce:1a:a4:ef:e5:4e:0a:1c:9e:82:b1:aa:1a:1c:87:6b:09: 0d:ce:39:cd:38:c0:7a:c6:46:44:a2:f6:d3:03:a0:27:9c:1f: 56:be:4a:f6:b9:02:8a:69:eb:e0:69:ab:3c:bc:b6:5e:f6:f8: f1:ee:3f:38:10:56:69:77:c0:73:3b:2e:78:f7:41:63:eb:4f: 3a:c6:fd:5c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUS+PoZYHQf4D+0S+1v3L1dqKPYaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTA5MDMyMjU1MDFaFw0yNjA5MDIyMzAwMDFaMDMxMTAvBgNV BAMTKDVGMjAwQTEyMTM2QzYwQTZBRUZGQ0U0NzI1RUI3MjQxQjg0N0REOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TLTZHS2hChDz/2MT04ruTByi X5TP4u+GGabllN7n6mBSe2Wxf5TtfaantIUX2hUozE5IU91FSWXFHPSoOzc4St5f UOqYrGbdU/6A2KITwwQTrzpDc0Reuo7i1Y3fqI/ZYMaRt/NtWrH4IHlxKQnwsL2N le7TDuPXMSLaj2jQE9EiWdt0uEvuke19kKxd82MQT+CIDwfllu/CFHTiO6HR4KzM +HsL7nb0LrAxGtWR3aUmk/S3JVyIIQAY7Pz7LIKNKl4cEl7jw9DLuK0V5zcBNuH5 l1KwfySWQhdm4isLj0TusuHNpVGofs+S/e5P8jPD5UoTwiUdoRRzhE3pO0eZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUXyAKEhNsYKau/85HJetyQbhH3ZMwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkN2Y5ZWY0LWY5OWYtNDRmZi1i OTY4LTcwZDQ1MjRkNzIwNy8wLzMxMzAzMzJlMzEzNzM4MmUzMTM3MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnsq4wDQYJ KoZIhvcNAQELBQADggEBAKrCATUsGbRZoJFW13oaj/tf3clsBAGeUZx9JYmmhCQl 6TWXt0hVh4NdSMPF5j3lHrHN0bG1YCI0nNbPXR5Yq2MbS9d3rWi7Aia9HKQtrqC8 Az8pSl6LfQ4vH4BFRElIsGUFikTCqpY0JKwH44a/wPLameqzWZWucQAEhZqqAYWC V6uXmUtx3yTDLITL2siSYEWqmt38DGmbx1GOZxvv/q5JkEZDgdwi6lHU365rHcP/ 9Td39BHOGqTv5U4KHJ6CsaoaHIdrCQ3OOc04wHrGRkSi9tMDoCecH1a+Sva5Aopp 6+Bpqzy8tl72+PHuPzgQVml3wHM7Lnj3QWPrTzrG/Vw= -----END CERTIFICATE-----Generated at Sat Oct 11 09:16:56 2025 by rpki-client