$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa File: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (raw, json) Hash identifier: vm5PhQ9OCf0FV3z/CHJ+RxKQHUnZeKsqWqWQwv0pY+4= Subject key identifier: 55:F5:A9:04:C5:69:97:8B:66:25:F9:4E:4E:9E:79:B4:BC:8C:27:03 Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 460CD9E527161BE9B933B3BB24A92DC5E2B4B9E6 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa Signing time: Tue 08 Jul 2025 04:00:00 +0000 ROA not before: Tue 08 Jul 2025 03:55:00 +0000 ROA not after: Tue 07 Jul 2026 04:00:00 +0000 asID: 140444 IP address blocks: 103.153.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0c:d9:e5:27:16:1b:e9:b9:33:b3:bb:24:a9:2d:c5:e2:b4:b9:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Jul 8 03:55:00 2025 GMT Not After : Jul 7 04:00:00 2026 GMT Subject: CN=55F5A904C569978B6625F94E4E9E79B4BC8C2703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7e:96:80:e7:21:52:75:d8:3c:01:38:ae:ea: f2:70:c5:16:f8:af:e9:f3:32:75:66:f0:8f:d9:40: c9:26:27:ad:fe:9f:05:8b:ca:d2:97:95:2f:b5:a9: 5c:cd:b5:9d:14:29:17:cd:e3:f0:47:a2:e0:44:af: 77:85:f5:94:ec:55:d6:75:d3:3d:50:78:f9:4e:11: 55:c0:88:9b:62:74:d3:b4:cc:a7:71:01:ac:8a:9d: d5:33:6e:de:4e:84:7f:49:86:cf:78:28:28:c1:38: ff:39:38:d4:e3:ce:58:9c:ba:b1:f8:9d:5a:ea:78: a1:3b:8c:5b:01:dd:ee:b2:96:af:b8:44:2f:79:0f: e1:5b:5b:9d:cd:f1:20:15:6f:93:b7:71:88:70:50: e8:a2:38:35:7e:2a:f2:33:e8:60:f6:bf:be:a5:89: 75:11:58:d9:5f:7d:2c:7a:87:ec:80:05:6f:28:e8: 61:2f:b8:df:41:5d:0d:21:6d:15:9d:07:ce:fd:58: ab:db:13:91:bf:d6:77:22:af:79:99:55:8c:ad:0c: f3:d1:e5:ee:db:3e:1f:b6:6f:2e:0f:59:48:c0:34: 2f:c5:8c:b9:6d:48:ec:40:1e:da:b8:66:94:ff:19: 31:99:2b:06:5e:5d:90:48:15:df:5e:21:bb:a3:c3: c3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F5:A9:04:C5:69:97:8B:66:25:F9:4E:4E:9E:79:B4:BC:8C:27:03 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.42.0/23 Signature Algorithm: sha256WithRSAEncryption 04:f1:46:9f:a0:53:4d:7a:ca:62:6c:c2:40:8b:bf:77:55:48: 50:91:86:b0:37:17:8b:8a:ff:af:6b:04:be:78:37:38:d5:dd: 59:ae:cc:98:0a:a9:50:20:6e:51:2e:ae:91:4a:4a:ec:bb:0a: 16:53:2a:f7:5b:5a:b9:57:11:9e:ff:0e:f5:33:67:df:e7:6d: f6:90:72:22:f0:f5:37:1d:29:fc:a6:67:99:09:5a:37:5a:f5: 87:c9:e4:cd:ac:33:48:cd:62:9d:9d:c4:ca:40:13:10:c6:0d: 08:b7:58:83:83:51:32:7c:1b:2e:3f:c8:c9:09:29:39:f7:f0: 6f:d3:c4:0a:7b:77:6d:56:68:34:73:b0:33:27:d6:7e:ab:a9: 29:cb:c9:b5:3c:17:82:97:22:28:f7:ed:06:bd:41:21:3b:f4: 9d:9f:f7:db:6c:d4:fd:67:52:2b:4f:47:5f:b4:ae:a6:40:8c: ce:b0:85:09:2e:a3:96:10:f5:cb:79:6e:ba:d3:05:85:51:36: 0b:bd:06:a9:6a:d8:a9:df:fb:1d:d8:c4:a2:09:64:7a:d1:31: 30:7f:18:4f:2b:d4:ee:9d:68:b1:c6:56:49:02:d6:00:36:cc: 7f:30:31:77:e4:b7:fc:c8:48:d9:aa:40:5f:1b:27:c4:81:9e: ce:40:c3:5d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURgzZ5ScWG+m5M7O7JKktxeK0ueYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTA3MDgwMzU1MDBaFw0yNjA3MDcwNDAwMDBaMDMxMTAvBgNV BAMTKDU1RjVBOTA0QzU2OTk3OEI2NjI1Rjk0RTRFOUU3OUI0QkM4QzI3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsfpaA5yFSddg8ATiu6vJwxRb4 r+nzMnVm8I/ZQMkmJ63+nwWLytKXlS+1qVzNtZ0UKRfN4/BHouBEr3eF9ZTsVdZ1 0z1QePlOEVXAiJtidNO0zKdxAayKndUzbt5OhH9Jhs94KCjBOP85ONTjzlicurH4 nVrqeKE7jFsB3e6ylq+4RC95D+FbW53N8SAVb5O3cYhwUOiiODV+KvIz6GD2v76l iXURWNlffSx6h+yABW8o6GEvuN9BXQ0hbRWdB879WKvbE5G/1ncir3mZVYytDPPR 5e7bPh+2by4PWUjANC/FjLltSOxAHtq4ZpT/GTGZKwZeXZBIFd9eIbujw8M5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUVfWpBMVpl4tmJflOTp55tLyMJwMwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MTE1NTllLWQ1ZWMtNGMxOS1i MzM1LWVlMjlkZGZiYjlkNS8wLzMxMzAzMzJlMzEzNTMzMmUzNDMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5kqMA0GCSqG SIb3DQEBCwUAA4IBAQAE8UafoFNNespibMJAi793VUhQkYawNxeLiv+vawS+eDc4 1d1ZrsyYCqlQIG5RLq6RSkrsuwoWUyr3W1q5VxGe/w71M2ff5232kHIi8PU3HSn8 pmeZCVo3WvWHyeTNrDNIzWKdncTKQBMQxg0It1iDg1EyfBsuP8jJCSk59/Bv08QK e3dtVmg0c7AzJ9Z+q6kpy8m1PBeClyIo9+0GvUEhO/Sdn/fbbNT9Z1IrT0dftK6m QIzOsIUJLqOWEPXLeW660wWFUTYLvQapatip3/sd2MSiCWR60TEwfxhPK9TunWix xlZJAtYANsx/MDF35Lf8yEjZqkBfGyfEgZ7OQMNd -----END CERTIFICATE-----Generated at Wed Jul 23 12:11:19 2025 by rpki-client