$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa File: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (raw, json) Hash identifier: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k= Subject key identifier: 18:C3:C3:13:87:BE:8D:71:16:C6:21:0E:33:A0:01:4C:B9:7B:AF:0F Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 3EF15177AB67B687542F3B7CBB719FCF5E571127 Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa Signing time: Wed 09 Apr 2025 15:00:00 +0000 ROA not before: Wed 09 Apr 2025 14:55:00 +0000 ROA not after: Wed 08 Apr 2026 15:00:00 +0000 asID: 142343 IP address blocks: 103.169.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f1:51:77:ab:67:b6:87:54:2f:3b:7c:bb:71:9f:cf:5e:57:11:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Apr 9 14:55:00 2025 GMT Not After : Apr 8 15:00:00 2026 GMT Subject: CN=18C3C31387BE8D7116C6210E33A0014CB97BAF0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1c:95:bb:f1:06:bd:0d:c4:69:46:63:13:16: 50:1e:b3:2c:06:ec:19:6e:31:cc:b6:8c:0c:ef:3d: 33:be:68:36:9b:32:03:2e:b9:17:35:12:16:ea:cb: a5:23:1b:ee:7e:96:f9:b0:c5:ae:ba:0f:0b:2c:8b: e2:ba:40:68:6a:80:31:49:0d:86:2d:dc:63:6e:13: 0e:6c:2a:cb:58:70:60:0d:55:13:d3:13:1e:7d:8d: 6c:e3:ec:3d:8a:0f:5b:cd:32:ad:4e:11:ee:41:12: b6:0f:f9:4e:2a:bc:b6:8b:e9:52:5b:cd:bf:5e:25: 2d:bf:b6:ab:71:60:c2:58:bf:eb:80:df:5e:ca:07: 71:89:7f:08:b1:a5:54:48:9d:71:d4:a2:c7:db:c4: eb:06:bc:5f:92:a1:79:0b:4b:dd:9d:ac:c1:a1:cc: 42:24:41:46:4b:33:85:a4:15:5e:38:d7:79:06:b6: a1:1b:18:93:7e:29:61:45:1d:bf:17:b5:56:d5:7f: f1:d9:42:64:a5:b5:1b:cd:57:f6:13:5e:71:99:35: 97:2c:7b:1c:a5:d9:9c:21:34:32:04:11:80:cb:93: ae:aa:98:01:4d:3c:8f:47:f4:29:ec:41:75:dd:12: 07:8d:63:c4:58:8e:ea:95:da:c7:25:78:24:a1:33: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C3:C3:13:87:BE:8D:71:16:C6:21:0E:33:A0:01:4C:B9:7B:AF:0F X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.138.0/23 Signature Algorithm: sha256WithRSAEncryption a0:68:71:eb:ad:37:00:75:9f:0e:11:04:e8:c6:83:ff:83:66: 84:c3:80:e2:6c:d0:3e:0a:98:ed:bf:1e:ac:b5:75:de:13:40: 0c:c7:08:96:f1:fe:fd:f6:fe:19:c6:ac:b0:b0:84:53:94:23: 55:11:8a:bf:6d:a5:f1:3a:aa:01:1b:68:e6:13:e5:3c:77:66: 97:8c:6b:ba:a7:96:82:20:67:1e:44:4d:58:84:00:70:ff:c4: 81:29:66:8b:18:14:36:4b:ee:6a:4f:ab:df:20:0f:96:65:0b: 3c:90:14:09:4c:fc:ee:61:95:c9:76:43:7f:3b:3f:7c:6f:f2: 5a:58:8c:20:c9:89:82:9f:d2:a5:35:d8:3a:d8:40:71:f8:19: 6a:39:d9:df:64:6a:7d:8c:01:1a:ae:93:4a:90:50:89:4c:2c: f8:d1:63:7e:85:d6:cf:8e:c1:19:86:ec:ce:3d:1a:72:81:e3: fe:ba:1c:75:09:23:33:4d:4c:5c:d3:98:f8:71:5c:fd:46:27: f5:d2:fe:3e:9c:fe:b7:66:81:83:a4:ff:5f:b2:8a:44:20:56: e1:a2:ea:e8:a0:7f:db:27:8a:0f:6d:43:9e:2b:8d:d0:12:34: c4:33:c4:ab:5b:74:b6:c6:f4:43:e4:02:84:53:c4:b0:3c:4a: c3:47:a1:19 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPvFRd6tntodULzt8u3Gfz15XEScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNTA0MDkxNDU1MDBaFw0yNjA0MDgxNTAwMDBaMDMxMTAvBgNV BAMTKDE4QzNDMzEzODdCRThENzExNkM2MjEwRTMzQTAwMTRDQjk3QkFGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHJW78Qa9DcRpRmMTFlAesywG 7BluMcy2jAzvPTO+aDabMgMuuRc1Ehbqy6UjG+5+lvmwxa66Dwssi+K6QGhqgDFJ DYYt3GNuEw5sKstYcGANVRPTEx59jWzj7D2KD1vNMq1OEe5BErYP+U4qvLaL6VJb zb9eJS2/tqtxYMJYv+uA317KB3GJfwixpVRInXHUosfbxOsGvF+SoXkLS92drMGh zEIkQUZLM4WkFV4413kGtqEbGJN+KWFFHb8XtVbVf/HZQmSltRvNV/YTXnGZNZcs exyl2ZwhNDIEEYDLk66qmAFNPI9H9CnsQXXdEgeNY8RYjuqV2scleCShM8yhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUGMPDE4e+jXEWxiEOM6ABTLl7rw8wHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0Y2E1ODY4LTU3ZTktNDliOS1i ZmUxLTQ4ZDc4MzM0YTE4Yy8wLzMxMzAzMzJlMzEzNjM5MmUzMTMzMzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0MzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqYowDQYJ KoZIhvcNAQELBQADggEBAKBoceutNwB1nw4RBOjGg/+DZoTDgOJs0D4KmO2/Hqy1 dd4TQAzHCJbx/v32/hnGrLCwhFOUI1URir9tpfE6qgEbaOYT5Tx3ZpeMa7qnloIg Zx5ETViEAHD/xIEpZosYFDZL7mpPq98gD5ZlCzyQFAlM/O5hlcl2Q387P3xv8lpY jCDJiYKf0qU12DrYQHH4GWo52d9kan2MARquk0qQUIlMLPjRY36F1s+OwRmG7M49 GnKB4/66HHUJIzNNTFzTmPhxXP1GJ/XS/j6c/rdmgYOk/1+yikQgVuGi6uigf9sn ig9tQ54rjdASNMQzxKtbdLbG9EPkAoRTxLA8SsNHoRk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:18:28 2025 by rpki-client