$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa File: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (raw, json) Hash identifier: 4gEYG74hLJoWqqDL/9mjAvBzy+wEC65juI9diH8YI3I= Subject key identifier: 4B:36:41:26:D7:D4:D4:FA:AB:E5:95:69:F2:25:37:EF:78:12:89:62 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 5D5E6EFBAE8DD78F2E85BAB07B54426FF4853DE9 Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa Signing time: Fri 05 Sep 2025 17:00:02 +0000 ROA not before: Fri 05 Sep 2025 16:55:02 +0000 ROA not after: Fri 04 Sep 2026 17:00:02 +0000 asID: 141656 IP address blocks: 103.162.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5e:6e:fb:ae:8d:d7:8f:2e:85:ba:b0:7b:54:42:6f:f4:85:3d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Sep 5 16:55:02 2025 GMT Not After : Sep 4 17:00:02 2026 GMT Subject: CN=4B364126D7D4D4FAABE59569F22537EF78128962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:26:96:64:a5:17:90:30:80:8e:09:55:bf: 4a:6e:18:0d:16:5c:1a:4e:38:15:1a:22:b0:b4:b7: 99:8e:0d:ca:21:56:67:08:b7:73:8d:19:ec:82:78: a7:5e:04:59:04:f6:f6:83:66:d1:97:6c:97:19:f4: ee:90:dc:51:a7:93:5a:af:72:1f:61:e9:a8:ea:31: 49:c7:23:be:6f:23:95:56:82:c8:94:ac:fe:5c:7b: 42:36:fe:9c:57:15:e4:49:60:d5:ba:19:02:ae:ac: 28:ea:79:63:c7:15:f5:5f:e6:96:4f:8d:46:51:84: 32:21:24:91:4a:e8:f3:99:fc:ea:bf:4c:3d:97:8a: 1f:a5:6b:1a:45:54:b7:e2:c6:cf:0b:18:cc:3f:51: ff:63:39:78:1d:2a:5d:95:9a:17:98:d2:06:fa:80: 79:0b:2f:88:d8:a3:2c:35:69:64:75:08:02:c1:1b: 7e:41:b1:01:ad:cd:5b:26:ca:89:61:c6:90:35:df: b3:39:22:85:3e:97:b8:36:93:e4:ee:82:62:35:d5: 3c:ef:07:51:ff:d3:ab:52:a4:27:d2:b1:34:8e:1e: c7:31:13:86:71:92:43:3d:68:5b:e9:f9:b8:d0:c5: 72:14:07:5f:db:85:a0:aa:42:10:ef:f6:59:77:2e: 42:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:41:26:D7:D4:D4:FA:AB:E5:95:69:F2:25:37:EF:78:12:89:62 X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.151.0/24 Signature Algorithm: sha256WithRSAEncryption bd:11:5a:16:cd:8e:78:64:f6:db:61:1d:1d:4f:14:65:89:7e: ca:1c:f5:f1:03:6a:16:fb:6b:7e:b2:e1:6f:23:78:a6:b7:67: 41:3a:35:4c:01:13:95:17:a2:b9:79:80:de:cc:48:9c:60:37: 1d:fa:fc:18:38:5f:b3:0e:b3:e9:16:b9:a1:35:80:94:dd:73: 85:57:f2:30:e8:ac:f5:1a:ff:b4:48:66:9f:6d:9e:b8:32:74: 07:46:4f:fb:51:b0:56:cc:e3:60:57:5f:d6:0d:92:03:5a:61: ef:9f:9a:03:3d:cb:a7:ce:5c:cc:02:e0:f3:47:62:d3:f9:6d: 2a:1d:8d:07:f2:39:51:88:22:7f:7f:9d:d0:70:6d:f6:3c:c0: cb:74:b8:11:31:3c:0b:bb:46:02:a3:00:53:e8:f9:6d:c4:68: 87:0c:0d:c4:cc:6a:43:c3:b4:d7:49:8b:eb:07:66:56:c9:f3: 86:e9:4a:93:65:5d:63:61:fd:89:ec:47:2f:7f:61:0f:62:ab: a5:56:cf:cd:4f:1e:9c:0a:6d:f4:ca:ff:77:08:1d:8d:99:e7: c1:75:05:e1:f5:da:5e:ce:bb:d7:93:dc:62:88:f1:37:29:87: b2:b5:46:a0:78:ef:9b:64:52:8c:aa:7f:f2:2b:25:97:2c:9c: 22:c0:dd:8b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUXV5u+66N148uhbqwe1RCb/SFPekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTA5MDUxNjU1MDJaFw0yNjA5MDQxNzAwMDJaMDMxMTAvBgNV BAMTKDRCMzY0MTI2RDdENEQ0RkFBQkU1OTU2OUYyMjUzN0VGNzgxMjg5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9viaWZKUXkDCAjglVv0puGA0W XBpOOBUaIrC0t5mODcohVmcIt3ONGeyCeKdeBFkE9vaDZtGXbJcZ9O6Q3FGnk1qv ch9h6ajqMUnHI75vI5VWgsiUrP5ce0I2/pxXFeRJYNW6GQKurCjqeWPHFfVf5pZP jUZRhDIhJJFK6POZ/Oq/TD2Xih+laxpFVLfixs8LGMw/Uf9jOXgdKl2VmheY0gb6 gHkLL4jYoyw1aWR1CALBG35BsQGtzVsmyolhxpA137M5IoU+l7g2k+TugmI11Tzv B1H/06tSpCfSsTSOHscxE4ZxkkM9aFvp+bjQxXIUB1/bhaCqQhDv9ll3LkKZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUSzZBJtfU1Pqr5ZVp8iU373gSiWIwHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlZDllYTIwLTM0M2QtNGFjYi05 NTgxLTgxZjlkN2VhOTJmZS8wLzMxMzAzMzJlMzEzNjMyMmUzMTM1MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnopcwDQYJ KoZIhvcNAQELBQADggEBAL0RWhbNjnhk9tthHR1PFGWJfsoc9fEDahb7a36y4W8j eKa3Z0E6NUwBE5UXorl5gN7MSJxgNx36/Bg4X7MOs+kWuaE1gJTdc4VX8jDorPUa /7RIZp9tnrgydAdGT/tRsFbM42BXX9YNkgNaYe+fmgM9y6fOXMwC4PNHYtP5bSod jQfyOVGIIn9/ndBwbfY8wMt0uBExPAu7RgKjAFPo+W3EaIcMDcTMakPDtNdJi+sH ZlbJ84bpSpNlXWNh/YnsRy9/YQ9iq6VWz81PHpwKbfTK/3cIHY2Z58F1BeH12l7O u9eT3GKI8Tcph7K1RqB475tkUoyqf/IrJZcsnCLA3Ys= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:35 2025 by rpki-client