$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa File: 3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa (raw, json) Hash identifier: mBtquOb/Z5LghTTZd9Pb+kXQ6K/DQevd9P5nIEvxaXs= Subject key identifier: 76:74:2E:E6:7A:FD:11:5D:A9:11:D2:25:2D:76:69:D4:DF:45:E6:88 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 165DE18E45324E8969B52D662E0E1D1856359A9B Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa Signing time: Thu 30 Oct 2025 12:00:01 +0000 ROA not before: Thu 30 Oct 2025 11:55:01 +0000 ROA not after: Thu 29 Oct 2026 12:00:01 +0000 asID: 139431 IP address blocks: 103.143.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5d:e1:8e:45:32:4e:89:69:b5:2d:66:2e:0e:1d:18:56:35:9a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Oct 30 11:55:01 2025 GMT Not After : Oct 29 12:00:01 2026 GMT Subject: CN=76742EE67AFD115DA911D2252D7669D4DF45E688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cb:e3:74:89:13:c2:ef:7b:7c:98:9e:81:35: e8:ea:db:c2:fa:a4:cb:43:61:6b:89:3a:70:e1:a5: 76:8a:f9:df:a6:b8:ba:93:ae:78:f4:b0:1b:14:7b: fb:21:22:ec:04:dc:ba:b7:6f:00:ba:8e:e6:81:44: b7:9f:7a:0a:ff:13:e0:76:55:69:42:ff:b1:65:c2: d2:f3:75:7f:77:a0:02:b3:79:10:e0:48:34:4f:42: 3c:88:1a:35:6f:32:39:44:29:76:44:75:fb:9b:d4: 65:5a:75:66:28:30:28:ce:03:8e:37:3c:d4:74:89: f6:7a:7c:f9:a0:36:ee:78:93:8e:be:62:e6:31:41: 8b:40:4e:62:4a:5b:d6:00:1a:9f:82:4e:61:ce:d5: e3:b7:c7:ed:98:b9:99:28:7c:d1:76:ee:5a:92:82: 7e:f8:90:73:4f:18:1b:fd:9c:5a:5d:32:80:34:f0: 64:59:7a:e3:35:68:ec:87:a9:82:57:42:ea:d2:ca: 83:c5:ef:df:c7:2c:ca:36:b1:1a:0e:7f:f1:8d:cf: 21:be:9f:0f:7d:a8:dd:29:78:e4:0f:84:8c:6b:b0: b0:51:04:a0:66:a3:5e:b6:52:16:8f:21:ea:b2:3b: 73:91:b3:ca:7f:00:85:84:97:57:8d:a0:8b:96:90: 26:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:74:2E:E6:7A:FD:11:5D:A9:11:D2:25:2D:76:69:D4:DF:45:E6:88 X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32322e302f32342d3234203d3e20313339343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.22.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:cc:98:06:ee:bb:08:fd:34:69:2a:d0:2b:78:78:a5:63:0e: f6:15:c6:88:cb:6f:72:fb:5f:f1:f8:fd:f8:18:46:18:2c:45: 18:48:ea:75:8a:a7:f3:ff:bb:98:f1:88:55:cc:4f:a7:5d:11: 09:9c:f8:06:b1:0c:81:be:4c:31:d9:99:e1:46:78:f4:43:f8: a7:6f:ee:c3:e6:19:01:83:b5:54:bc:67:f0:91:9f:2e:33:fe: 95:17:26:52:0d:c2:47:6c:5b:ad:27:f5:72:16:d2:ff:99:01: 51:b8:cb:4a:bc:a0:16:54:60:7f:5e:a6:88:48:8a:4c:ff:72: 6a:4e:26:27:c2:43:4d:85:48:1a:e6:b8:60:28:30:63:f1:de: 74:eb:88:a5:03:2a:8b:7e:fc:4c:44:bd:73:25:cd:93:35:e2: 7b:d0:96:6f:31:09:97:c1:9e:f0:72:a3:4e:38:41:30:60:49: 58:8b:c0:99:fe:2a:40:6c:28:4f:53:66:5d:e0:df:72:6e:fc: 19:27:c5:48:6c:98:27:f9:1d:40:33:b0:60:78:2d:42:7c:17: 88:e3:51:9c:b9:0b:0f:02:c4:ac:79:5a:22:eb:62:61:81:58: 0e:b3:41:09:58:7c:f4:65:91:70:98:1e:80:c4:6c:1d:16:82: 98:ab:6f:58 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFl3hjkUyTolptS1mLg4dGFY1mpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNTEwMzAxMTU1MDFaFw0yNjEwMjkxMjAwMDFaMDMxMTAvBgNV BAMTKDc2NzQyRUU2N0FGRDExNURBOTExRDIyNTJENzY2OUQ0REY0NUU2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiy+N0iRPC73t8mJ6BNejq28L6 pMtDYWuJOnDhpXaK+d+muLqTrnj0sBsUe/shIuwE3Lq3bwC6juaBRLefegr/E+B2 VWlC/7FlwtLzdX93oAKzeRDgSDRPQjyIGjVvMjlEKXZEdfub1GVadWYoMCjOA443 PNR0ifZ6fPmgNu54k46+YuYxQYtATmJKW9YAGp+CTmHO1eO3x+2YuZkofNF27lqS gn74kHNPGBv9nFpdMoA08GRZeuM1aOyHqYJXQurSyoPF79/HLMo2sRoOf/GNzyG+ nw99qN0peOQPhIxrsLBRBKBmo162UhaPIeqyO3ORs8p/AIWEl1eNoIuWkCabAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdnQu5nr9EV2pEdIlLXZp1N9F5ogwHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NmYzM2YyLWYwNmUtNGViNi1h ZTYxLTU1MjliY2ExY2RjZC8wLzMxMzAzMzJlMzEzNDMzMmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ48WMA0GCSqG SIb3DQEBCwUAA4IBAQB+zJgG7rsI/TRpKtAreHilYw72FcaIy29y+1/x+P34GEYY LEUYSOp1iqfz/7uY8YhVzE+nXREJnPgGsQyBvkwx2ZnhRnj0Q/inb+7D5hkBg7VU vGfwkZ8uM/6VFyZSDcJHbFutJ/VyFtL/mQFRuMtKvKAWVGB/XqaISIpM/3JqTiYn wkNNhUga5rhgKDBj8d5064ilAyqLfvxMRL1zJc2TNeJ70JZvMQmXwZ7wcqNOOEEw YElYi8CZ/ipAbChPU2Zd4N9ybvwZJ8VIbJgn+R1AM7BgeC1CfBeI41GcuQsPAsSs eVoi62JhgVgOs0EJWHz0ZZFwmB6AxGwdFoKYq29Y -----END CERTIFICATE-----Generated at Tue Nov 4 16:52:39 2025 by rpki-client