$ rpki-client -vvf repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa File: 3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: Kb0M/Ho3VT/nqDiJsvCx89Y+HDOUAdoV9jho+WllLB8= Subject key identifier: 14:0C:89:C6:09:B8:65:15:39:49:4D:64:80:5B:B1:DB:59:27:27:F9 Certificate issuer: /CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Certificate serial: 7D9579CDD26715A5955273463FD8846714431279 Authority key identifier: 14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa Signing time: Tue 21 Oct 2025 09:02:24 +0000 ROA not before: Tue 21 Oct 2025 08:57:24 +0000 ROA not after: Tue 20 Oct 2026 09:02:24 +0000 asID: 17995 IP address blocks: 103.170.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 20:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:95:79:cd:d2:67:15:a5:95:52:73:46:3f:d8:84:67:14:43:12:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1472DDF3B8546A8B201733914AFB7036FC6742F3 Validity Not Before: Oct 21 08:57:24 2025 GMT Not After : Oct 20 09:02:24 2026 GMT Subject: CN=140C89C609B8651539494D64805BB1DB592727F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:3f:1a:d1:54:3f:91:ae:52:94:f1:dd:66: 58:f6:da:b6:ce:15:c0:c3:7e:a4:8e:09:17:64:4a: 20:78:ba:bc:e1:f3:f1:c2:6a:40:a1:c5:c7:a5:de: 88:ab:1e:02:85:a8:a8:7d:7e:ff:5e:bb:ea:a0:31: f6:93:a2:02:62:8b:96:90:34:e5:b2:c3:da:7e:5b: 68:77:4a:0f:83:65:a4:26:59:58:14:d0:60:5e:5b: 46:6a:13:1e:33:25:a8:eb:d4:c4:91:be:42:ba:41: 08:21:ac:5f:39:c3:71:aa:8b:cd:e0:f1:f7:03:82: f7:6d:8b:50:03:6d:bc:02:27:9a:31:1b:ea:72:dd: 71:2f:6d:86:1c:ca:db:0a:27:5b:d1:be:f1:80:b9: 02:ea:1a:63:b8:fb:94:00:be:4f:27:39:df:76:0a: fc:aa:4e:7f:eb:77:ac:98:a7:18:a0:b2:03:22:dd: 04:14:d8:c0:cf:5c:a1:90:f1:91:d1:c5:43:5f:a8: 69:d3:87:80:98:65:e9:b5:78:3a:b2:00:3d:5e:e3: e1:5a:5b:6f:f4:82:b8:ec:3d:1e:fe:d4:d7:dd:51: 05:ea:f1:d3:d9:e5:eb:36:f6:45:cc:2f:10:34:63: cf:ed:1a:80:01:25:9c:1e:5a:c0:14:3f:b4:4e:40: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:89:C6:09:B8:65:15:39:49:4D:64:80:5B:B1:DB:59:27:27:F9 X509v3 Authority Key Identifier: keyid:14:72:DD:F3:B8:54:6A:8B:20:17:33:91:4A:FB:70:36:FC:67:42:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/1472DDF3B8546A8B201733914AFB7036FC6742F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1472DDF3B8546A8B201733914AFB7036FC6742F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911a746e-53e3-4c23-b9e5-f64f3ef3d136/0/3130332e3137302e3139362e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.196.0/23 Signature Algorithm: sha256WithRSAEncryption 12:1e:ad:8f:11:31:83:f1:9e:66:29:84:b1:60:b8:2c:25:74: e5:11:7a:18:04:62:b7:fc:a7:6d:c9:b9:4a:e8:71:80:db:f7: fb:65:05:5c:61:84:62:48:a4:e2:75:4c:ad:63:5b:66:ce:c9: d0:32:51:9e:1d:78:9f:3f:73:0d:96:f8:97:a6:70:d8:26:a1: 71:db:6a:68:a2:ed:bf:1a:43:e3:e4:97:65:87:44:a6:b6:90: ef:e9:79:80:71:d8:14:e5:aa:af:8b:1e:24:6a:79:2c:37:ec: 1d:ae:8a:ed:7a:df:0c:3d:c8:df:3d:b6:7a:4c:08:dd:6e:a8: 71:55:71:31:e9:f9:c3:15:ff:80:a1:fd:4f:aa:9f:fa:d8:c1: f9:a4:cd:01:bc:d4:e1:9f:ab:33:be:f0:7b:2b:ca:ce:2d:e1: 23:05:af:cd:9d:34:fd:98:43:2b:b6:af:6d:6a:91:31:b3:44: e8:7d:a6:cf:66:3a:c7:b9:2a:24:ec:01:90:fd:bb:75:43:92: 3e:62:b2:2e:72:de:67:51:42:ca:ef:e6:13:29:22:13:b7:3c: c1:7d:41:da:02:25:58:7f:c2:58:38:37:09:04:ec:b6:84:17: 4d:f4:dd:a8:a6:8e:4f:ae:58:f4:a5:9e:11:cf:39:f6:8a:18: 4c:9b:c1:a5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfZV5zdJnFaWVUnNGP9iEZxRDEnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZG QzY3NDJGMzAeFw0yNTEwMjEwODU3MjRaFw0yNjEwMjAwOTAyMjRaMDMxMTAvBgNV BAMTKDE0MEM4OUM2MDlCODY1MTUzOTQ5NEQ2NDgwNUJCMURCNTkyNzI3RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDz8a0VQ/ka5SlPHdZlj22rbO FcDDfqSOCRdkSiB4urzh8/HCakChxcel3oirHgKFqKh9fv9eu+qgMfaTogJii5aQ NOWyw9p+W2h3Sg+DZaQmWVgU0GBeW0ZqEx4zJajr1MSRvkK6QQghrF85w3Gqi83g 8fcDgvdti1ADbbwCJ5oxG+py3XEvbYYcytsKJ1vRvvGAuQLqGmO4+5QAvk8nOd92 CvyqTn/rd6yYpxigsgMi3QQU2MDPXKGQ8ZHRxUNfqGnTh4CYZem1eDqyAD1e4+Fa W2/0grjsPR7+1NfdUQXq8dPZ5es29kXMLxA0Y8/tGoABJZweWsAUP7ROQOa5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFAyJxgm4ZRU5SU1kgFux21knJ/kwHwYDVR0j BBgwFoAUFHLd87hUaosgFzORSvtwNvxnQvMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTFhNzQ2ZS01M2UzLTRjMjMtYjllNS1mNjRmM2VmM2QxMzYvMC8xNDcyRERGM0I4 NTQ2QThCMjAxNzMzOTE0QUZCNzAzNkZDNjc0MkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ3MkRERjNCODU0NkE4QjIwMTczMzkxNEFGQjcwMzZGQzY3 NDJGMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMWE3NDZlLTUzZTMtNGMyMy1i OWU1LWY2NGYzZWYzZDEzNi8wLzMxMzAzMzJlMzEzNzMwMmUzMTM5MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6rEMA0GCSqG SIb3DQEBCwUAA4IBAQASHq2PETGD8Z5mKYSxYLgsJXTlEXoYBGK3/KdtyblK6HGA 2/f7ZQVcYYRiSKTidUytY1tmzsnQMlGeHXifP3MNlviXpnDYJqFx22poou2/GkPj 5Jdlh0SmtpDv6XmAcdgU5aqvix4kanksN+wdrortet8MPcjfPbZ6TAjdbqhxVXEx 6fnDFf+Aof1Pqp/62MH5pM0BvNThn6szvvB7K8rOLeEjBa/NnTT9mEMrtq9tapEx s0TofabPZjrHuSok7AGQ/bt1Q5I+YrIuct5nUULK7+YTKSITtzzBfUHaAiVYf8JY ODcJBOy2hBdN9N2opo5Prlj0pZ4Rzzn2ihhMm8Gl -----END CERTIFICATE-----Generated at Thu Oct 23 02:02:45 2025 by rpki-client