$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa File: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw= Subject key identifier: FA:20:E3:D0:A1:A8:CE:20:8F:30:E8:12:21:7E:09:5A:61:31:8F:C0 Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Certificate serial: 4D43552C3CAFAA61C6E22126D9D6ACD9FD3C569F Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa Signing time: Wed 20 Aug 2025 09:02:27 +0000 ROA not before: Wed 20 Aug 2025 08:57:27 +0000 ROA not after: Wed 19 Aug 2026 09:02:27 +0000 asID: 131111 IP address blocks: 103.177.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 16:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:43:55:2c:3c:af:aa:61:c6:e2:21:26:d9:d6:ac:d9:fd:3c:56:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC Validity Not Before: Aug 20 08:57:27 2025 GMT Not After : Aug 19 09:02:27 2026 GMT Subject: CN=FA20E3D0A1A8CE208F30E812217E095A61318FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2c:f1:ce:a9:d9:bb:8d:e8:2d:46:16:dc:53: 6e:ea:37:38:11:a4:58:ad:ab:91:8c:d1:d6:6a:5e: 4d:aa:33:b3:8f:0c:d4:15:fa:53:00:b4:fe:a8:de: 8f:72:86:c9:69:da:95:83:ff:4e:b4:2b:da:03:00: 78:04:58:d6:78:d8:02:43:f2:9e:08:3b:e0:e9:0a: 74:07:b4:9b:38:3e:ab:17:9a:35:f2:6c:63:83:53: e4:3d:5a:07:3d:82:57:d3:bf:2d:4d:14:ad:8a:8d: fb:56:26:45:bc:c2:3c:3d:1f:51:7b:65:fb:0d:b7: a7:0c:fd:a2:49:bd:7f:7d:d5:36:a7:28:22:47:19: a8:88:b2:c7:29:e2:13:dd:cf:1f:34:cb:18:8c:af: 74:c0:67:c9:0c:b2:54:8c:48:79:3d:09:71:0b:16: 77:93:0c:6e:60:37:23:ca:94:5f:98:d7:25:1a:53: 0b:1e:7b:a7:7d:9d:0f:24:ed:bb:68:bc:63:d3:f3: bc:02:3b:b9:a7:ec:b6:44:6b:d1:80:27:5b:c5:13: 8a:5a:22:b0:ae:05:ed:b6:3f:8b:83:fc:95:62:d9: f7:cd:45:64:f3:1f:2d:a0:d9:8c:b2:06:b9:ba:43: 54:0c:d7:13:c4:3e:36:3f:f8:e5:f0:7d:7f:66:6b: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:20:E3:D0:A1:A8:CE:20:8F:30:E8:12:21:7E:09:5A:61:31:8F:C0 X509v3 Authority Key Identifier: keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.90.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:50:17:21:e8:d2:bd:50:ff:cc:b6:f4:70:30:77:80:12:33: 41:b9:1f:0f:58:e3:b6:f2:84:7d:91:99:de:e4:f7:4e:4d:7d: b5:ac:00:df:7d:22:29:46:f3:a8:cd:60:29:54:4d:be:50:ce: df:5a:f0:56:18:b8:cb:45:98:ff:08:cc:85:07:4f:91:ff:f9: 16:95:9f:e3:2f:e1:1f:20:4e:de:35:27:26:3b:6c:e3:e9:de: c0:52:12:ab:fa:bb:ff:1e:d1:a1:ab:b6:1b:4b:0b:e4:cc:d1: 79:02:25:54:6c:ac:36:4c:aa:91:30:b1:af:5c:85:3b:f8:4c: 1d:2f:b7:65:b5:27:48:4c:65:05:be:dd:8c:bb:aa:2a:f3:d9: 9a:91:1c:cf:3a:a7:b9:cc:b6:79:49:7e:2f:cd:10:38:e8:8e: 32:6e:05:bd:54:52:6e:dc:5e:8f:44:7d:38:6c:36:04:28:46: 67:8c:2d:07:cc:35:c0:da:16:0a:5f:64:b1:6f:9f:59:20:6f: 88:67:34:b1:d7:f3:fe:93:b4:d5:15:33:84:6e:14:5e:43:29: 04:7f:57:4a:6c:e7:8f:fc:36:ba:03:c0:07:30:31:43:1d:ad: 37:fa:1d:cf:3b:b7:a6:88:a5:8a:3b:61:b6:e7:6a:e8:76:08: a2:af:b3:16 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTUNVLDyvqmHG4iEm2das2f08Vp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThG RTdFOUFFQzAeFw0yNTA4MjAwODU3MjdaFw0yNjA4MTkwOTAyMjdaMDMxMTAvBgNV BAMTKEZBMjBFM0QwQTFBOENFMjA4RjMwRTgxMjIxN0UwOTVBNjEzMThGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxLPHOqdm7jegtRhbcU27qNzgR pFitq5GM0dZqXk2qM7OPDNQV+lMAtP6o3o9yhslp2pWD/060K9oDAHgEWNZ42AJD 8p4IO+DpCnQHtJs4PqsXmjXybGODU+Q9Wgc9glfTvy1NFK2KjftWJkW8wjw9H1F7 ZfsNt6cM/aJJvX991TanKCJHGaiIsscp4hPdzx80yxiMr3TAZ8kMslSMSHk9CXEL FneTDG5gNyPKlF+Y1yUaUwsee6d9nQ8k7btovGPT87wCO7mn7LZEa9GAJ1vFE4pa IrCuBe22P4uD/JVi2ffNRWTzHy2g2YyyBrm6Q1QM1xPEPjY/+OXwfX9ma0DfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+iDj0KGoziCPMOgSIX4JWmExj8AwHwYDVR0j BBgwFoAUzqO1NWTT9hXmMM3ap7pa6P5+muwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Y2NjNWY2NC1lZDYyLTQ4NDgtOGMzOC00MmRmNDhlMzRiYjYvMC9DRUEzQjUzNTY0 RDNGNjE1RTYzMENEREFBN0JBNUFFOEZFN0U5QUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBM0I1MzU2NEQzRjYxNUU2MzBDRERBQTdCQTVBRThGRTdF OUFFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljY2M1ZjY0LWVkNjItNDg0OC04 YzM4LTQyZGY0OGUzNGJiNi8wLzMxMzAzMzJlMzEzNzM3MmUzOTMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7FaMA0GCSqG SIb3DQEBCwUAA4IBAQBfUBch6NK9UP/MtvRwMHeAEjNBuR8PWOO28oR9kZne5PdO TX21rADffSIpRvOozWApVE2+UM7fWvBWGLjLRZj/CMyFB0+R//kWlZ/jL+EfIE7e NScmO2zj6d7AUhKr+rv/HtGhq7YbSwvkzNF5AiVUbKw2TKqRMLGvXIU7+EwdL7dl tSdITGUFvt2Mu6oq89makRzPOqe5zLZ5SX4vzRA46I4ybgW9VFJu3F6PRH04bDYE KEZnjC0HzDXA2hYKX2Sxb59ZIG+IZzSx1/P+k7TVFTOEbhReQykEf1dKbOeP/Da6 A8AHMDFDHa03+h3PO7emiKWKO2G252rodgiir7MW -----END CERTIFICATE-----Generated at Sat Nov 1 14:01:00 2025 by rpki-client