$ rpki-client -vvf repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: h3TV+XhpTe6M1r47P8xg6LJKc7ssK2BZBj+55BbrRCw= Subject key identifier: 71:3B:86:FA:9C:B3:70:F1:47:9D:06:27:13:A3:19:DC:C2:11:4E:23 Certificate issuer: /CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Certificate serial: 05BAEABA083D190E1B0D4026F4CB2E3617F57C6B Authority key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa Signing time: Tue 02 Sep 2025 05:02:54 +0000 ROA not before: Tue 02 Sep 2025 04:57:54 +0000 ROA not after: Tue 01 Sep 2026 05:02:54 +0000 asID: 17769 IP address blocks: 103.147.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ba:ea:ba:08:3d:19:0e:1b:0d:40:26:f4:cb:2e:36:17:f5:7c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09461F85D577EF79DE072EECCA1E12135A3715C0 Validity Not Before: Sep 2 04:57:54 2025 GMT Not After : Sep 1 05:02:54 2026 GMT Subject: CN=713B86FA9CB370F1479D062713A319DCC2114E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:49:f8:db:90:74:13:d2:df:c5:7e:96:28:c0: d9:ed:04:37:a0:ef:88:3e:fd:56:24:e7:11:01:61: 0a:44:11:bf:57:45:b1:08:99:30:db:59:f3:f3:85: d4:ce:79:6f:8d:cb:47:ca:bf:1f:e0:12:d6:63:c7: 80:2b:79:48:5d:3c:40:57:e8:cc:95:45:1c:fe:f9: 69:69:57:87:a9:15:90:c0:59:39:3d:92:37:c8:4c: 68:53:6e:b5:8f:f8:b0:28:37:e0:ff:31:e3:0d:1b: 60:a2:06:92:b3:b7:77:90:28:52:4c:d6:8c:57:4c: 99:70:a6:f9:6d:8e:90:5d:5f:06:be:97:fd:d4:4c: 57:02:aa:8b:15:f1:35:fb:d7:e7:ec:53:2c:67:52: d8:5f:a9:bc:57:54:83:01:3e:4b:6e:1a:b2:79:bd: da:2c:59:76:c8:fa:dd:75:1d:b5:dd:3b:9a:a8:f1: 0f:2e:f2:4f:20:ef:5f:6c:ae:68:a7:35:ed:cf:96: e9:46:fe:15:28:90:cb:52:72:fd:2c:af:37:5b:fb: 21:f4:be:d2:53:a4:de:22:01:0b:20:03:36:c4:7a: 64:a8:66:9d:0b:c5:42:cb:12:1b:02:7e:82:dc:11: fb:dc:e1:e7:c7:d0:b7:95:0d:2b:b4:31:3a:0e:1c: 41:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3B:86:FA:9C:B3:70:F1:47:9D:06:27:13:A3:19:DC:C2:11:4E:23 X509v3 Authority Key Identifier: keyid:09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.146.0/23 Signature Algorithm: sha256WithRSAEncryption 38:3c:5a:a0:b9:4b:0e:9c:0a:67:cf:7b:81:8c:72:ef:9f:7e: 0b:22:a6:d8:15:73:8b:86:dd:75:1f:3e:51:a4:c5:11:f1:50: ac:f7:ad:bb:45:40:93:46:c4:04:1b:fb:68:ec:5f:3b:01:b0: 47:b6:5c:d3:fe:d5:b3:11:1e:7e:0a:17:f9:d9:35:61:c4:dc: 59:38:8a:af:9e:79:d9:cd:ad:cb:94:7d:98:ab:50:de:74:b4: 6d:c6:07:08:2c:cc:c3:f8:ff:c9:42:39:1d:0c:cf:c6:93:c7: 4d:9a:0c:7c:9e:75:52:c4:0d:09:4c:2b:2c:44:5b:7c:0c:6d: 6b:ad:c8:e3:cc:4b:6d:90:0c:d4:7d:6b:2c:1e:3e:d1:ab:3e: f0:e5:b9:56:19:d5:20:3c:a5:3f:3c:79:fb:bb:38:6c:d9:3b: 1f:aa:d8:4b:af:f6:99:c8:06:d2:94:0e:a1:51:f8:1e:7c:f7: c7:80:e3:e4:c5:90:c7:e2:cc:ec:84:4f:62:ee:63:7e:a6:1d: d0:30:aa:92:81:8d:f9:b4:e9:55:40:64:25:91:84:dc:d1:4d: d1:2d:87:13:6f:85:16:e7:b0:0f:28:60:91:a8:01:3b:44:a2: 92:67:f1:ca:e8:33:0b:3b:dc:cf:7e:13:25:e5:02:a7:19:c2: 12:07:93:a9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBbrqugg9GQ4bDUAm9MsuNhf1fGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1 QTM3MTVDMDAeFw0yNTA5MDIwNDU3NTRaFw0yNjA5MDEwNTAyNTRaMDMxMTAvBgNV BAMTKDcxM0I4NkZBOUNCMzcwRjE0NzlEMDYyNzEzQTMxOURDQzIxMTRFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6SfjbkHQT0t/FfpYowNntBDeg 74g+/VYk5xEBYQpEEb9XRbEImTDbWfPzhdTOeW+Ny0fKvx/gEtZjx4AreUhdPEBX 6MyVRRz++WlpV4epFZDAWTk9kjfITGhTbrWP+LAoN+D/MeMNG2CiBpKzt3eQKFJM 1oxXTJlwpvltjpBdXwa+l/3UTFcCqosV8TX71+fsUyxnUthfqbxXVIMBPktuGrJ5 vdosWXbI+t11HbXdO5qo8Q8u8k8g719srminNe3PlulG/hUokMtScv0srzdb+yH0 vtJTpN4iAQsgAzbEemSoZp0LxULLEhsCfoLcEfvc4efH0LeVDSu0MToOHEH3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcTuG+pyzcPFHnQYnE6MZ3MIRTiMwHwYDVR0j BBgwFoAUCUYfhdV373neBy7syh4SE1o3FcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NzNiOTU5ZS1mZjUyLTQwMjgtYjUzNC0xZDYwNWZhM2E4MGIvMC8wOTQ2MUY4NUQ1 NzdFRjc5REUwNzJFRUNDQTFFMTIxMzVBMzcxNUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk0NjFGODVENTc3RUY3OURFMDcyRUVDQ0ExRTEyMTM1QTM3 MTVDMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3M2I5NTllLWZmNTItNDAyOC1i NTM0LTFkNjA1ZmEzYTgwYi8wLzMxMzAzMzJlMzEzNDM3MmUzMTM0MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5OSMA0GCSqG SIb3DQEBCwUAA4IBAQA4PFqguUsOnApnz3uBjHLvn34LIqbYFXOLht11Hz5RpMUR 8VCs9627RUCTRsQEG/to7F87AbBHtlzT/tWzER5+Chf52TVhxNxZOIqvnnnZza3L lH2Yq1DedLRtxgcILMzD+P/JQjkdDM/Gk8dNmgx8nnVSxA0JTCssRFt8DG1rrcjj zEttkAzUfWssHj7Rqz7w5blWGdUgPKU/PHn7uzhs2TsfqthLr/aZyAbSlA6hUfge fPfHgOPkxZDH4szshE9i7mN+ph3QMKqSgY35tOlVQGQlkYTc0U3RLYcTb4UW57AP KGCRqAE7RKKSZ/HK6DMLO9zPfhMl5QKnGcISB5Op -----END CERTIFICATE-----Generated at Mon Sep 8 09:56:51 2025 by rpki-client