$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa File: 3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa (raw, json) Hash identifier: 3XMqr1SbGGTOsdpLnGk2+GvSMvPb+++c1PWx8+UbJng= Subject key identifier: 36:57:E7:D3:FB:21:6D:F2:B6:DA:C1:40:66:72:80:35:AF:20:D7:11 Certificate issuer: /CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Certificate serial: 5A2941D805A53580FEDCF9DD62A972A06E27160B Authority key identifier: 64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa Signing time: Tue 07 Oct 2025 16:00:01 +0000 ROA not before: Tue 07 Oct 2025 15:55:01 +0000 ROA not after: Tue 06 Oct 2026 16:00:01 +0000 asID: 149337 IP address blocks: 103.179.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:29:41:d8:05:a5:35:80:fe:dc:f9:dd:62:a9:72:a0:6e:27:16:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64848BA7A76415C6458AAC267B0A57658022C3C5 Validity Not Before: Oct 7 15:55:01 2025 GMT Not After : Oct 6 16:00:01 2026 GMT Subject: CN=3657E7D3FB216DF2B6DAC14066728035AF20D711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:f8:ec:a8:3d:c1:4c:cb:2d:9c:5d:af:26: c6:11:d5:54:1e:6b:5b:c1:ed:bd:c8:fb:83:32:0d: 96:eb:51:87:4d:da:82:63:91:62:9f:58:f1:bf:9c: 56:96:c1:86:28:f0:e4:98:5b:bb:68:3f:49:4b:55: 32:9f:7e:68:df:59:c3:ab:c1:e5:f7:b5:84:82:bd: 57:56:fd:de:22:16:13:42:2f:d8:ea:b9:5a:3b:1d: 20:c3:ec:d8:93:0f:0e:a8:00:b0:25:a7:9d:6b:e5: af:0d:48:dd:5b:a4:da:34:09:ee:7e:33:ed:0c:c3: bc:cb:14:58:bc:c1:1b:0b:2b:a7:d7:61:45:22:30: d5:5c:55:30:f7:86:13:8d:b8:92:d2:df:24:dd:04: 95:37:69:75:f0:cc:eb:b7:00:34:fa:f9:b0:83:46: ce:43:78:b2:57:59:6e:ce:de:58:b2:e1:46:56:60: 86:53:27:42:b0:7b:4c:3e:a0:38:e7:8f:69:f5:48: 51:0d:cd:b3:59:15:2f:0d:52:a6:4d:4d:1f:2c:d3: ad:96:4b:f1:9e:c6:77:0f:66:ce:57:c7:2f:ef:8f: 90:12:52:d7:0d:62:fc:fd:ac:5f:37:cd:14:17:ec: 43:dc:e1:d6:4c:23:3b:e5:ab:5f:1a:d7:cd:50:a1: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:57:E7:D3:FB:21:6D:F2:B6:DA:C1:40:66:72:80:35:AF:20:D7:11 X509v3 Authority Key Identifier: keyid:64:84:8B:A7:A7:64:15:C6:45:8A:AC:26:7B:0A:57:65:80:22:C3:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/64848BA7A76415C6458AAC267B0A57658022C3C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64848BA7A76415C6458AAC267B0A57658022C3C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ed012-afdb-42fb-971a-e162a9dec46d/0/3130332e3137392e36382e302f32342d3234203d3e20313439333337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.68.0/24 Signature Algorithm: sha256WithRSAEncryption af:9d:1f:ea:cf:7d:ec:c6:d4:88:92:19:41:f1:55:65:eb:01: 4f:dd:d1:e7:bb:bd:c5:88:3f:ff:fe:d3:16:72:2f:23:89:45: 5b:d5:ba:4c:20:41:19:46:18:96:ae:d6:e5:4f:20:87:9d:d4: ff:48:3e:cc:35:1e:75:c4:ee:f9:33:4f:96:6f:c6:4b:54:fb: 56:75:49:70:fe:f9:ac:4e:84:60:31:b6:52:7b:c6:80:31:2c: 6e:08:3c:0c:48:9f:72:bf:58:5f:1e:27:51:c0:df:0c:9a:08: 6c:80:84:f7:b4:f8:92:3b:eb:20:c5:9f:52:1a:8b:a5:36:c2: 45:62:9d:d3:ef:84:0d:a4:b8:ad:74:c5:68:d6:45:82:e5:8b: 61:46:31:11:a4:5f:27:24:7c:b3:33:c1:91:95:6c:40:27:ef: 22:f9:8d:fb:21:83:45:04:bf:95:a3:08:46:cd:f4:1b:8a:8a: 3a:cf:20:1f:29:bc:c4:89:00:31:50:d0:b8:b2:9f:18:f2:31: 4b:77:b4:6e:fa:dd:7d:c5:20:73:f8:ab:e4:51:3a:be:9b:f0: 01:84:ec:b9:af:d9:08:3e:27:c1:e5:7a:19:1e:2a:72:d6:87: 81:07:56:96:eb:d1:60:a6:99:73:24:a1:dc:6e:11:ad:92:80: d5:74:17:c5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWilB2AWlNYD+3PndYqlyoG4nFgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4 MDIyQzNDNTAeFw0yNTEwMDcxNTU1MDFaFw0yNjEwMDYxNjAwMDFaMDMxMTAvBgNV BAMTKDM2NTdFN0QzRkIyMTZERjJCNkRBQzE0MDY2NzI4MDM1QUYyMEQ3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hPjsqD3BTMstnF2vJsYR1VQe a1vB7b3I+4MyDZbrUYdN2oJjkWKfWPG/nFaWwYYo8OSYW7toP0lLVTKffmjfWcOr weX3tYSCvVdW/d4iFhNCL9jquVo7HSDD7NiTDw6oALAlp51r5a8NSN1bpNo0Ce5+ M+0Mw7zLFFi8wRsLK6fXYUUiMNVcVTD3hhONuJLS3yTdBJU3aXXwzOu3ADT6+bCD Rs5DeLJXWW7O3liy4UZWYIZTJ0Kwe0w+oDjnj2n1SFENzbNZFS8NUqZNTR8s062W S/GexncPZs5Xxy/vj5ASUtcNYvz9rF83zRQX7EPc4dZMIzvlq18a181QofzlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUNlfn0/shbfK22sFAZnKANa8g1xEwHwYDVR0j BBgwFoAUZISLp6dkFcZFiqwmewpXZYAiw8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlZDAxMi1hZmRiLTQyZmItOTcxYS1lMTYyYTlkZWM0NmQvMC82NDg0OEJBN0E3 NjQxNUM2NDU4QUFDMjY3QjBBNTc2NTgwMjJDM0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ4NDhCQTdBNzY0MTVDNjQ1OEFBQzI2N0IwQTU3NjU4MDIy QzNDNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkM2VkMDEyLWFmZGItNDJmYi05 NzFhLWUxNjJhOWRlYzQ2ZC8wLzMxMzAzMzJlMzEzNzM5MmUzNjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7NEMA0GCSqG SIb3DQEBCwUAA4IBAQCvnR/qz33sxtSIkhlB8VVl6wFP3dHnu73FiD///tMWci8j iUVb1bpMIEEZRhiWrtblTyCHndT/SD7MNR51xO75M0+Wb8ZLVPtWdUlw/vmsToRg MbZSe8aAMSxuCDwMSJ9yv1hfHidRwN8MmghsgIT3tPiSO+sgxZ9SGoulNsJFYp3T 74QNpLitdMVo1kWC5YthRjERpF8nJHyzM8GRlWxAJ+8i+Y37IYNFBL+VowhGzfQb ioo6zyAfKbzEiQAxUNC4sp8Y8jFLd7Ru+t19xSBz+KvkUTq+m/ABhOy5r9kIPifB 5XoZHipy1oeBB1aW69FgpplzJKHcbhGtkoDVdBfF -----END CERTIFICATE-----Generated at Sun Oct 19 22:59:08 2025 by rpki-client