$ rpki-client -vvf repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa File: 3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa (raw, json) Hash identifier: sFMVy7dDJJRHWvtmqbp2frseo5smPIhlhNP2pmcRkE8= Subject key identifier: 7F:E2:41:BC:41:A5:63:AA:F3:8B:86:6A:FA:2D:04:AE:06:D8:14:F9 Certificate issuer: /CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Certificate serial: 112B8EF71CA9A57BE5025AD1F78ADC4677AD41AB Authority key identifier: 06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject info access: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa Signing time: Fri 21 Mar 2025 08:00:00 +0000 ROA not before: Fri 21 Mar 2025 07:55:00 +0000 ROA not after: Fri 20 Mar 2026 08:00:00 +0000 asID: 139423 IP address blocks: 103.144.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 18 Nov 2025 19:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2b:8e:f7:1c:a9:a5:7b:e5:02:5a:d1:f7:8a:dc:46:77:ad:41:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064A8F9FBD487AB04370A31B7D603B27E6674937 Validity Not Before: Mar 21 07:55:00 2025 GMT Not After : Mar 20 08:00:00 2026 GMT Subject: CN=7FE241BC41A563AAF38B866AFA2D04AE06D814F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:07:4e:ec:2d:bb:af:2a:55:7c:9f:f9:4f:95: 2c:1f:6e:d1:a9:a5:f0:fa:4c:14:42:84:ef:a1:05: 68:42:a3:e2:d9:f7:8e:76:1e:de:b7:4e:69:bb:33: 15:18:ed:8d:b2:d5:d8:e1:45:ad:ca:c3:ef:69:a3: 59:72:02:07:20:62:3f:3a:41:db:75:6a:e9:34:3f: 48:2c:5a:39:83:5c:9a:c8:a0:e3:e9:57:52:c2:9b: f9:80:94:f9:61:2e:26:6e:8b:3b:35:14:09:27:d7: 80:41:96:17:f3:29:27:a0:33:df:d4:7f:61:86:e0: 50:2c:1a:d9:69:a5:c4:4e:5e:14:f4:ec:81:bf:21: 7b:5a:21:f7:76:8d:94:54:b9:cc:46:9b:f1:b6:2a: 8b:13:ac:87:e9:69:07:e0:0d:e0:1f:5c:67:01:91: 6c:52:2d:c8:f5:1e:5e:af:df:ca:b7:c4:29:67:2c: 1e:30:f2:c5:65:a1:58:06:e4:f3:98:20:35:a2:3a: f6:84:14:59:08:8c:58:73:8a:f9:f1:8d:87:9c:1a: fc:74:de:a6:5f:31:de:1d:58:5c:63:64:7c:36:ce: 46:d8:8c:0a:1d:ab:07:a8:df:e5:38:86:4f:d9:4c: 25:83:19:96:3f:7c:73:c5:91:bc:50:e3:be:e8:d7: 7b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E2:41:BC:41:A5:63:AA:F3:8B:86:6A:FA:2D:04:AE:06:D8:14:F9 X509v3 Authority Key Identifier: keyid:06:4A:8F:9F:BD:48:7A:B0:43:70:A3:1B:7D:60:3B:27:E6:67:49:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/064A8F9FBD487AB04370A31B7D603B27E6674937.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/064A8F9FBD487AB04370A31B7D603B27E6674937.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/341ff3e2-76b6-4833-86b5-82f3fa4ebcb7/0/3130332e3134342e32302e302f32342d3234203d3e20313339343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.20.0/24 Signature Algorithm: sha256WithRSAEncryption 69:f5:5a:e8:e2:ed:c2:5a:ef:55:fd:3e:0d:a0:c8:52:5d:bf: 99:74:28:a6:87:8d:d2:28:7f:0c:4b:d1:98:4a:e7:fd:74:f3: 04:03:a6:43:c1:d4:c2:02:be:bf:d0:18:35:a2:26:0e:d3:9f: f7:e3:70:7c:f4:75:c3:cc:7c:de:0e:fe:8c:9d:aa:68:8c:48: 2d:99:89:28:52:3f:5e:b4:17:fb:eb:77:04:6b:7e:6b:9b:25: 04:a7:17:3b:49:b5:07:98:2b:85:e2:81:c7:f8:24:8b:89:7c: 55:c7:1d:e9:c0:33:7a:b5:78:cc:81:60:0d:8b:58:f0:6f:0b: 04:76:92:4c:6b:58:c1:fe:0e:7b:39:da:ab:d4:d4:20:7e:2d: 07:17:f3:dd:26:35:5c:7b:95:46:bc:93:fb:79:e4:30:4d:f4: 7c:70:fc:3c:37:d0:a1:5f:94:36:44:98:09:c0:33:0a:59:31: d3:bd:1f:b9:57:15:fb:35:25:4f:8f:32:d4:52:d4:f6:ea:59: 1e:1a:e6:05:f5:ea:c9:4f:28:c6:8d:fa:26:dc:a8:04:eb:0a: f4:28:63:fb:ec:ff:fe:b0:7c:b0:8a:8d:20:3c:e2:09:34:af: 3a:a6:9d:6a:a2:13:38:de:93:9c:73:70:1e:e9:9e:4d:a3:77: 9d:49:a6:f5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUESuO9xyppXvlAlrR94rcRnetQaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdF NjY3NDkzNzAeFw0yNTAzMjEwNzU1MDBaFw0yNjAzMjAwODAwMDBaMDMxMTAvBgNV BAMTKDdGRTI0MUJDNDFBNTYzQUFGMzhCODY2QUZBMkQwNEFFMDZEODE0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrB07sLbuvKlV8n/lPlSwfbtGp pfD6TBRChO+hBWhCo+LZ9452Ht63Tmm7MxUY7Y2y1djhRa3Kw+9po1lyAgcgYj86 Qdt1auk0P0gsWjmDXJrIoOPpV1LCm/mAlPlhLiZuizs1FAkn14BBlhfzKSegM9/U f2GG4FAsGtlppcROXhT07IG/IXtaIfd2jZRUucxGm/G2KosTrIfpaQfgDeAfXGcB kWxSLcj1Hl6v38q3xClnLB4w8sVloVgG5POYIDWiOvaEFFkIjFhzivnxjYecGvx0 3qZfMd4dWFxjZHw2zkbYjAodqweo3+U4hk/ZTCWDGZY/fHPFkbxQ477o13sRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUf+JBvEGlY6rzi4Zq+i0ErgbYFPkwHwYDVR0j BBgwFoAUBkqPn71IerBDcKMbfWA7J+ZnSTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDFmZjNlMi03NmI2LTQ4MzMtODZiNS04MmYzZmE0ZWJjYjcvMC8wNjRBOEY5RkJE NDg3QUIwNDM3MEEzMUI3RDYwM0IyN0U2Njc0OTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY0QThGOUZCRDQ4N0FCMDQzNzBBMzFCN0Q2MDNCMjdFNjY3 NDkzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0MWZmM2UyLTc2YjYtNDgzMy04 NmI1LTgyZjNmYTRlYmNiNy8wLzMxMzAzMzJlMzEzNDM0MmUzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5AUMA0GCSqG SIb3DQEBCwUAA4IBAQBp9Vro4u3CWu9V/T4NoMhSXb+ZdCimh43SKH8MS9GYSuf9 dPMEA6ZDwdTCAr6/0Bg1oiYO05/343B89HXDzHzeDv6MnapojEgtmYkoUj9etBf7 63cEa35rmyUEpxc7SbUHmCuF4oHH+CSLiXxVxx3pwDN6tXjMgWANi1jwbwsEdpJM a1jB/g57Odqr1NQgfi0HF/PdJjVce5VGvJP7eeQwTfR8cPw8N9ChX5Q2RJgJwDMK WTHTvR+5VxX7NSVPjzLUUtT26lkeGuYF9erJTyjGjfom3KgE6wr0KGP77P/+sHyw io0gPOIJNK86pp1qohM43pOcc3Ae6Z5No3edSab1 -----END CERTIFICATE-----Generated at Mon Nov 17 15:55:22 2025 by rpki-client