$ rpki-client -vvf repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa File: 3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa (raw, json) Hash identifier: +6dOkqtOYym+orh3YOVIsqZdYCOBqAsCXYd1nxy46No= Subject key identifier: DE:F9:3E:CA:9D:4C:BA:3F:F1:AE:5B:81:02:B0:8D:77:4E:7C:77:91 Certificate issuer: /CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Certificate serial: 382EE569FF1753F0D7B3DB6924D634EEB0A96899 Authority key identifier: 53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa Signing time: Thu 30 Oct 2025 12:00:01 +0000 ROA not before: Thu 30 Oct 2025 11:55:01 +0000 ROA not after: Thu 29 Oct 2026 12:00:01 +0000 asID: 139431 IP address blocks: 103.143.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2e:e5:69:ff:17:53:f0:d7:b3:db:69:24:d6:34:ee:b0:a9:68:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535D46F4044E2CC21293CC061A2783074BDF7AE7 Validity Not Before: Oct 30 11:55:01 2025 GMT Not After : Oct 29 12:00:01 2026 GMT Subject: CN=DEF93ECA9D4CBA3FF1AE5B8102B08D774E7C7791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:52:59:35:a7:30:0e:7e:a2:5b:86:a0:22: d1:5c:d4:41:f5:c4:8d:a0:d9:30:31:6a:5a:d1:1f: dc:4e:c6:52:e3:f5:fc:dd:c2:e4:08:0a:11:6b:1d: dd:af:52:99:e0:3f:4c:0e:a0:2b:8c:95:1d:60:3e: 0d:91:0e:ac:b1:07:41:f8:e6:ad:51:17:5a:fd:cd: ba:b9:31:78:3f:53:d7:38:26:71:25:81:61:fc:a2: 39:ee:c8:18:fe:70:0a:2a:89:03:4c:1f:cd:5e:23: 60:ec:0d:09:7a:01:e5:6e:8c:ec:bd:f4:97:85:4d: 1b:75:07:8b:f7:d3:5d:3e:7f:e0:63:cd:c2:9a:c7: 88:45:9c:22:90:0d:4f:e3:3e:49:e1:27:eb:2e:a8: 0c:72:91:64:0a:b5:b1:70:6d:a0:06:d7:36:fd:b5: 9f:70:79:36:53:03:15:1f:4e:d7:cb:e3:95:8c:ad: 95:76:42:e6:78:a3:f4:1c:9f:91:a9:2d:cd:2a:67: c8:2d:03:c0:bd:23:dd:3b:ac:fa:47:3d:c2:70:1e: 89:c6:47:ca:a3:11:ce:3d:ac:fc:e0:7f:3f:4d:fd: 63:9f:db:67:23:7a:e0:93:08:59:22:16:35:c6:94: c6:53:88:37:03:53:07:32:d5:cc:5e:bf:e8:db:cc: f2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F9:3E:CA:9D:4C:BA:3F:F1:AE:5B:81:02:B0:8D:77:4E:7C:77:91 X509v3 Authority Key Identifier: keyid:53:5D:46:F4:04:4E:2C:C2:12:93:CC:06:1A:27:83:07:4B:DF:7A:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/535D46F4044E2CC21293CC061A2783074BDF7AE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535D46F4044E2CC21293CC061A2783074BDF7AE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/146f33f2-f06e-4eb6-ae61-5529bca1cdcd/0/3130332e3134332e32332e302f32342d3234203d3e20313339343331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.23.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:88:cd:89:6e:94:32:39:e7:6b:d3:ea:05:85:dd:79:5f:c5: 09:75:cc:d9:19:f2:32:44:f2:09:42:8b:fb:8e:06:02:38:8d: 1a:f7:36:5f:a7:1e:0f:a4:0b:b3:fc:c0:44:28:bb:2b:a4:6f: 5c:e9:50:fb:23:85:92:30:9d:47:8e:eb:80:43:69:b1:73:b0: 29:ba:52:a2:fa:3a:d6:b1:ad:66:9b:85:44:e7:0f:be:2c:36: 3b:43:b8:0b:83:3b:f2:72:a9:32:46:09:5d:a5:eb:38:73:b2: f5:02:4d:69:ac:61:c9:d1:23:e2:f0:75:a0:f3:77:06:65:62: 84:08:f4:cb:86:b2:f2:df:0b:2f:69:66:66:a7:24:15:a0:ab: d5:dd:b2:09:10:f5:5f:13:c0:0f:d7:b8:c9:19:97:69:81:6f: b2:56:ed:60:0f:d3:66:54:4e:57:94:a2:04:c8:33:b3:bb:59: 8b:51:32:9f:43:34:94:2f:55:19:95:9d:8c:f4:07:6d:72:4e: 82:84:90:21:99:53:11:be:26:60:57:50:8f:76:90:35:bd:94: 79:14:7e:d4:f9:a4:53:df:cf:ca:82:3c:17:42:7c:7b:54:96: 5c:84:22:7b:fc:8d:a9:4d:01:fd:15:2d:57:a1:8d:7f:aa:67: bd:d0:fe:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOC7laf8XU/DXs9tpJNY07rCpaJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0 QkRGN0FFNzAeFw0yNTEwMzAxMTU1MDFaFw0yNjEwMjkxMjAwMDFaMDMxMTAvBgNV BAMTKERFRjkzRUNBOUQ0Q0JBM0ZGMUFFNUI4MTAyQjA4RDc3NEU3Qzc3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHP1JZNacwDn6iW4agItFc1EH1 xI2g2TAxalrRH9xOxlLj9fzdwuQIChFrHd2vUpngP0wOoCuMlR1gPg2RDqyxB0H4 5q1RF1r9zbq5MXg/U9c4JnElgWH8ojnuyBj+cAoqiQNMH81eI2DsDQl6AeVujOy9 9JeFTRt1B4v3010+f+BjzcKax4hFnCKQDU/jPknhJ+suqAxykWQKtbFwbaAG1zb9 tZ9weTZTAxUfTtfL45WMrZV2QuZ4o/Qcn5GpLc0qZ8gtA8C9I907rPpHPcJwHonG R8qjEc49rPzgfz9N/WOf22cjeuCTCFkiFjXGlMZTiDcDUwcy1cxev+jbzPIlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3vk+yp1Muj/xrluBArCNd058d5EwHwYDVR0j BBgwFoAUU11G9AROLMISk8wGGieDB0vfeucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDZmMzNmMi1mMDZlLTRlYjYtYWU2MS01NTI5YmNhMWNkY2QvMC81MzVENDZGNDA0 NEUyQ0MyMTI5M0NDMDYxQTI3ODMwNzRCREY3QUU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1RDQ2RjQwNDRFMkNDMjEyOTNDQzA2MUEyNzgzMDc0QkRG N0FFNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NmYzM2YyLWYwNmUtNGViNi1h ZTYxLTU1MjliY2ExY2RjZC8wLzMxMzAzMzJlMzEzNDMzMmUzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ48XMA0GCSqG SIb3DQEBCwUAA4IBAQBtiM2JbpQyOedr0+oFhd15X8UJdczZGfIyRPIJQov7jgYC OI0a9zZfpx4PpAuz/MBEKLsrpG9c6VD7I4WSMJ1HjuuAQ2mxc7ApulKi+jrWsa1m m4VE5w++LDY7Q7gLgzvycqkyRgldpes4c7L1Ak1prGHJ0SPi8HWg83cGZWKECPTL hrLy3wsvaWZmpyQVoKvV3bIJEPVfE8AP17jJGZdpgW+yVu1gD9NmVE5XlKIEyDOz u1mLUTKfQzSUL1UZlZ2M9Adtck6ChJAhmVMRviZgV1CPdpA1vZR5FH7U+aRT38/K gjwXQnx7VJZchCJ7/I2pTQH9FS1XoY1/qme90P6I -----END CERTIFICATE-----Generated at Tue Nov 4 16:52:40 2025 by rpki-client