$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa File: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (raw, json) Hash identifier: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU= Subject key identifier: 94:70:8B:EE:21:62:3B:5D:04:4B:7A:68:9A:9C:81:53:ED:37:92:A0 Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 053BA7DC591C37330C2F63A4756E136B11D0BABB Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa Signing time: Thu 21 Aug 2025 20:00:00 +0000 ROA not before: Thu 21 Aug 2025 19:55:00 +0000 ROA not after: Thu 20 Aug 2026 20:00:00 +0000 asID: 138866 IP address blocks: 103.142.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 14:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:3b:a7:dc:59:1c:37:33:0c:2f:63:a4:75:6e:13:6b:11:d0:ba:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Aug 21 19:55:00 2025 GMT Not After : Aug 20 20:00:00 2026 GMT Subject: CN=94708BEE21623B5D044B7A689A9C8153ED3792A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:4f:f9:26:e6:7d:44:46:4f:80:6f:eb:22: 33:6e:86:6b:a5:d6:52:10:5d:45:b9:57:3d:dc:f8: 23:3b:4b:4f:08:0f:47:68:95:c5:a0:6c:22:f8:dc: 64:98:93:5f:73:cd:dc:61:94:ce:b2:3f:5b:45:cb: cc:d0:2f:b2:3d:21:ad:de:e8:51:9d:39:58:4a:2e: ca:28:cd:50:e1:ea:18:d7:b3:93:23:01:ba:0d:ea: 4e:e1:19:9f:cc:4a:f2:5a:6f:7f:22:1e:fd:90:35: 1f:47:c2:31:82:3a:94:be:21:00:ea:01:96:15:a8: c0:58:05:27:5a:79:c1:f1:de:c1:43:4c:6c:cd:d2: 19:3c:20:6a:2f:58:4a:ef:dc:0c:5c:78:11:ec:27: 1b:15:2f:d5:1b:83:4e:9e:7a:c3:24:3b:57:8d:60: 57:06:b2:79:2b:37:40:92:0c:1b:67:d4:2c:01:5a: 63:a8:4d:82:ca:41:8c:ec:6d:63:24:30:1f:2c:34: 96:17:cd:6e:e5:e9:8f:1f:84:50:87:8c:56:49:98: e6:fc:07:31:6c:a8:e8:34:c0:7e:9e:af:a9:f1:72: 60:bb:1d:9e:50:8f:34:e8:91:85:97:48:c4:93:bb: 9f:42:ba:1d:53:f6:e4:82:08:fa:a6:05:69:16:97: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:70:8B:EE:21:62:3B:5D:04:4B:7A:68:9A:9C:81:53:ED:37:92:A0 X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.194.0/24 Signature Algorithm: sha256WithRSAEncryption ce:77:6e:cd:da:8d:63:58:7b:db:1b:6a:0a:74:39:bb:7d:fa: 77:a1:ae:92:cb:50:39:62:7c:b5:45:a8:76:e0:cb:f1:55:d5: c6:ce:9c:0a:8d:5f:a3:0a:d0:77:94:6c:47:76:3b:ee:26:c4: 0a:87:31:5a:78:73:b5:79:26:70:a5:57:63:4d:56:9f:e1:24: bf:b4:b6:45:a7:52:33:d3:a0:94:bb:fc:62:d0:73:c9:8a:dc: da:3c:3c:07:fc:df:23:74:9e:1f:d4:b4:4f:8e:e5:0f:1a:f7: d9:fc:cb:4a:aa:9e:b8:1f:78:9a:13:3e:16:1c:77:f1:7c:3a: d5:3d:20:12:91:9a:66:fc:a5:96:a3:79:63:05:ee:12:8f:39: d5:67:83:b0:1f:a9:66:e1:ab:b7:01:21:04:e5:44:63:f4:f0: 94:3b:a0:ec:fc:e0:ac:f6:69:0a:7c:8f:4a:6b:11:5b:44:83: ac:03:99:95:e2:b8:e4:e9:ba:76:42:f8:49:99:ed:97:da:9b: ea:24:26:c7:20:59:b4:6a:1e:d5:1e:ea:19:08:48:95:e5:a8: e8:0e:dd:69:66:0b:92:0b:34:c2:21:23:c5:22:3d:0c:e9:9b: 98:6d:ca:1c:54:b6:7d:75:b4:72:8d:ce:08:c5:e9:4d:15:09: 1d:dc:c3:df -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBTun3FkcNzMML2OkdW4TaxHQurswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNTA4MjExOTU1MDBaFw0yNjA4MjAyMDAwMDBaMDMxMTAvBgNV BAMTKDk0NzA4QkVFMjE2MjNCNUQwNDRCN0E2ODlBOUM4MTUzRUQzNzkyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Y0/5JuZ9REZPgG/rIjNuhmul 1lIQXUW5Vz3c+CM7S08ID0dolcWgbCL43GSYk19zzdxhlM6yP1tFy8zQL7I9Ia3e 6FGdOVhKLsoozVDh6hjXs5MjAboN6k7hGZ/MSvJab38iHv2QNR9HwjGCOpS+IQDq AZYVqMBYBSdaecHx3sFDTGzN0hk8IGovWErv3AxceBHsJxsVL9Ubg06eesMkO1eN YFcGsnkrN0CSDBtn1CwBWmOoTYLKQYzsbWMkMB8sNJYXzW7l6Y8fhFCHjFZJmOb8 BzFsqOg0wH6er6nxcmC7HZ5QjzTokYWXSMSTu59Cuh1T9uSCCPqmBWkWlzWtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlHCL7iFiO10ES3pompyBU+03kqAwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyYWEyZDEwLTNmYWEtNDI3Mi1i ZTFmLTgxMDI5NTdiNjVlNi8wLzMxMzAzMzJlMzEzNDMyMmUzMTM5MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjsIwDQYJ KoZIhvcNAQELBQADggEBAM53bs3ajWNYe9sbagp0Obt9+nehrpLLUDlifLVFqHbg y/FV1cbOnAqNX6MK0HeUbEd2O+4mxAqHMVp4c7V5JnClV2NNVp/hJL+0tkWnUjPT oJS7/GLQc8mK3No8PAf83yN0nh/UtE+O5Q8a99n8y0qqnrgfeJoTPhYcd/F8OtU9 IBKRmmb8pZajeWMF7hKPOdVng7AfqWbhq7cBIQTlRGP08JQ7oOz84Kz2aQp8j0pr EVtEg6wDmZXiuOTpunZC+EmZ7Zfam+okJscgWbRqHtUe6hkISJXlqOgO3WlmC5IL NMIhI8UiPQzpm5htyhxUtn11tHKNzgjF6U0VCR3cw98= -----END CERTIFICATE-----Generated at Wed Oct 29 13:46:31 2025 by rpki-client