$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa File: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (raw, json) Hash identifier: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4= Subject key identifier: E3:B8:45:B3:BF:C3:DF:48:42:D0:1A:01:97:D4:DD:FA:6F:F0:40:57 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 4E71CD487E1D52CB6779BE97C5C93D2D33EAB3FB Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa Signing time: Tue 04 Mar 2025 06:00:00 +0000 ROA not before: Tue 04 Mar 2025 05:55:00 +0000 ROA not after: Tue 03 Mar 2026 06:00:00 +0000 asID: 38496 IP address blocks: 103.90.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:71:cd:48:7e:1d:52:cb:67:79:be:97:c5:c9:3d:2d:33:ea:b3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Mar 4 05:55:00 2025 GMT Not After : Mar 3 06:00:00 2026 GMT Subject: CN=E3B845B3BFC3DF4842D01A0197D4DDFA6FF04057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:98:9d:d5:81:4f:a3:c0:e3:95:d8:75:22: 8a:21:af:2e:7e:02:35:7e:bf:ab:ec:ea:93:38:22: b8:09:25:bb:54:b2:d5:6e:25:55:7d:87:d4:58:59: 12:e9:01:a0:39:1c:a4:35:2f:c2:f4:9d:a5:44:3a: 7e:61:87:ef:00:d4:61:18:64:21:88:30:fd:30:95: 5c:91:f2:01:b5:9e:e2:92:4d:49:92:ff:f9:d2:68: 2c:f0:48:8f:84:40:ed:01:cd:3f:63:4c:7a:30:b5: d3:0d:b7:8b:ee:ac:64:f8:c9:59:7d:35:09:6a:b6: 0c:e3:8a:67:cd:1f:42:40:89:8c:a0:92:bc:46:30: fd:a4:c7:98:b2:ff:90:76:39:29:1a:e7:9f:0e:0c: 09:cd:c7:c3:3c:d1:3e:cf:8f:46:d4:c3:87:27:0e: 8f:57:e4:e8:bc:3c:2b:e3:ab:b0:f9:ab:c8:02:7e: 11:d2:e8:26:c9:e5:1f:1b:16:45:c2:b8:d2:0c:53: f1:8d:fc:c2:46:7b:ca:ea:14:e6:96:b2:42:16:97: dc:e2:c1:3e:0a:6e:db:42:b2:48:75:3a:8a:a7:6a: 5b:2e:f9:1b:6a:83:48:3b:97:86:1d:04:5a:90:9c: 21:0f:b5:06:8a:25:6a:13:4d:9f:18:8e:b2:be:3d: 4b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B8:45:B3:BF:C3:DF:48:42:D0:1A:01:97:D4:DD:FA:6F:F0:40:57 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.252.0/24 Signature Algorithm: sha256WithRSAEncryption a1:6e:1b:5b:bf:9b:99:bd:6a:17:6b:46:fc:5f:73:f9:2a:e0: 2b:a8:e3:f6:8d:54:95:16:c9:3a:83:e8:4b:f1:94:26:6d:70: 70:ff:e1:bf:80:2b:f5:1b:d7:cf:b5:1f:1b:e4:de:c9:0a:de: cd:9d:50:ef:a3:13:6a:8c:91:b5:bf:72:71:a7:d1:b7:38:0f: 04:6b:83:f1:ca:80:e0:c9:c8:0f:fa:25:84:fc:ec:5e:52:9a: 96:d6:66:96:b0:cd:9a:40:c8:06:ae:83:e1:86:86:b2:0a:1a: b9:50:da:3b:e0:5b:8c:5f:af:da:47:44:70:9b:d7:cb:2f:1c: 81:2a:4f:03:e2:aa:ad:90:b5:3e:48:ce:cc:1e:d7:eb:c3:4a: 9e:5b:e9:06:16:de:26:ef:22:6a:ab:11:d3:87:14:6a:51:81: e4:fc:6f:1f:92:c8:bb:89:de:e2:f0:e9:f4:c0:86:50:ed:5e: 17:a7:92:16:bb:0b:11:f3:d8:8b:50:ac:db:0d:14:be:f1:04: 0f:1a:25:91:bc:a1:ad:8c:1c:3f:90:4c:99:eb:44:b6:f4:26: 11:e0:f4:ac:eb:a0:30:e0:6f:79:4b:1e:f0:fd:0a:d4:ca:ec: 79:37:c4:4c:d7:e8:04:90:05:40:e2:9f:4d:ce:42:54:0b:83: bf:8a:ec:1a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTnHNSH4dUstneb6Xxck9LTPqs/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTAzMDQwNTU1MDBaFw0yNjAzMDMwNjAwMDBaMDMxMTAvBgNV BAMTKEUzQjg0NUIzQkZDM0RGNDg0MkQwMUEwMTk3RDREREZBNkZGMDQwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjRZid1YFPo8Djldh1Ioohry5+ AjV+v6vs6pM4IrgJJbtUstVuJVV9h9RYWRLpAaA5HKQ1L8L0naVEOn5hh+8A1GEY ZCGIMP0wlVyR8gG1nuKSTUmS//nSaCzwSI+EQO0BzT9jTHowtdMNt4vurGT4yVl9 NQlqtgzjimfNH0JAiYygkrxGMP2kx5iy/5B2OSka558ODAnNx8M80T7Pj0bUw4cn Do9X5Oi8PCvjq7D5q8gCfhHS6CbJ5R8bFkXCuNIMU/GN/MJGe8rqFOaWskIWl9zi wT4KbttCskh1Ooqnalsu+Rtqg0g7l4YdBFqQnCEPtQaKJWoTTZ8YjrK+PUs9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU47hFs7/D30hC0BoBl9Td+m/wQFcwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3NzRiMThjLWYyNjMtNGZlMS04 ZGY4LTFlN2M2OGJmYmVmYy8wLzMxMzAzMzJlMzkzMDJlMzIzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGda/DANBgkqhkiG 9w0BAQsFAAOCAQEAoW4bW7+bmb1qF2tG/F9z+SrgK6jj9o1UlRbJOoPoS/GUJm1w cP/hv4Ar9RvXz7UfG+TeyQrezZ1Q76MTaoyRtb9ycafRtzgPBGuD8cqA4MnID/ol hPzsXlKaltZmlrDNmkDIBq6D4YaGsgoauVDaO+BbjF+v2kdEcJvXyy8cgSpPA+Kq rZC1PkjOzB7X68NKnlvpBhbeJu8iaqsR04cUalGB5PxvH5LIu4ne4vDp9MCGUO1e F6eSFrsLEfPYi1Cs2w0UvvEEDxolkbyhrYwcP5BMmetEtvQmEeD0rOugMOBveUse 8P0K1MrseTfETNfoBJAFQOKfTc5CVAuDv4rsGg== -----END CERTIFICATE-----Generated at Mon Oct 27 10:42:38 2025 by rpki-client