$ rpki-client -vvf repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa File: 3130332e33312e3230342e302f32332d3234203d3e203435373138.roa (raw, json) Hash identifier: VoMnlv1vt+phfoqqSj3NlhfZbmojrA8l7T65WTVbYMM= Subject key identifier: 4F:80:16:CC:7A:91:AB:C1:7E:0E:14:48:BC:1D:49:8C:74:A4:35:D9 Certificate issuer: /CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Certificate serial: 78DB799815C944B84BBD82305170732793C1D675 Authority key identifier: E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa Signing time: Sat 22 Mar 2025 09:00:01 +0000 ROA not before: Sat 22 Mar 2025 08:55:01 +0000 ROA not after: Sat 21 Mar 2026 09:00:01 +0000 asID: 45718 IP address blocks: 103.31.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:db:79:98:15:c9:44:b8:4b:bd:82:30:51:70:73:27:93:c1:d6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E475A8B018BAE58448DDE55D9487442B3BD31D1D Validity Not Before: Mar 22 08:55:01 2025 GMT Not After : Mar 21 09:00:01 2026 GMT Subject: CN=4F8016CC7A91ABC17E0E1448BC1D498C74A435D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:5d:b9:81:17:f2:0a:77:0b:42:f8:b0:1e: 13:f4:4e:15:ca:38:38:7f:54:cc:8b:73:34:10:21: da:4d:49:33:fc:14:f8:57:2f:31:0f:cf:44:30:ea: 1e:f2:ab:ec:45:5b:24:0d:94:93:09:ad:3d:64:99: 5d:4b:d7:30:12:b2:ce:cd:f3:bd:16:72:16:cc:3e: 49:72:4f:d7:ae:ef:2c:f4:b2:49:b4:03:cf:c8:a6: dd:dc:17:1a:ef:ce:e2:76:ff:f9:2f:30:73:74:a5: f9:a6:fc:34:84:75:69:dd:00:3b:c8:85:6e:c4:a4: 85:66:7f:b5:29:ff:34:8a:b5:bd:4d:7e:81:0a:b9: 23:d1:a6:a3:7d:24:a9:bc:7c:f0:d8:df:a6:15:dc: 7a:aa:e8:45:cb:29:4b:c5:71:a0:9d:40:b3:6c:07: 22:12:e2:46:d8:ec:2b:5a:b6:61:d0:b7:a9:79:5e: 00:53:69:0d:2b:f5:86:55:3c:21:18:53:3c:1f:3f: c4:79:13:0b:bb:b7:be:98:24:04:e4:cf:3f:4e:76: 29:2f:f6:f3:6c:9e:28:19:eb:ad:d0:c2:29:f0:2f: 69:99:ae:c1:96:1c:94:47:1a:96:7c:3c:a1:7c:6a: 97:10:13:76:79:58:7e:70:19:45:c1:06:18:c0:da: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:80:16:CC:7A:91:AB:C1:7E:0E:14:48:BC:1D:49:8C:74:A4:35:D9 X509v3 Authority Key Identifier: keyid:E4:75:A8:B0:18:BA:E5:84:48:DD:E5:5D:94:87:44:2B:3B:D3:1D:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/E475A8B018BAE58448DDE55D9487442B3BD31D1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E475A8B018BAE58448DDE55D9487442B3BD31D1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2049c210-f365-432f-a7ca-0b5eb86b01c6/0/3130332e33312e3230342e302f32332d3234203d3e203435373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.204.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:e1:32:bc:3e:bf:ee:71:b0:70:41:f9:cb:63:c9:16:25:a2: f5:4a:3f:73:e0:ff:ab:13:73:c0:42:a2:1e:bd:25:89:62:d7: fa:34:e7:9a:da:97:8c:02:8d:1d:1f:1b:2e:30:f7:2e:ed:82: a2:f8:92:ad:93:93:5f:6f:68:93:f5:90:bf:67:96:36:f1:76: 83:7e:2c:64:90:65:f3:bf:25:dd:cb:f0:7d:dc:af:fe:bb:4d: 6c:dd:0b:d6:70:05:52:f1:5b:a7:4d:c8:ca:ba:74:8b:3b:c0: c8:dc:df:39:1a:c9:09:5c:65:af:6e:81:51:15:4d:5f:b8:e2: 62:02:55:6d:53:b1:3f:bd:e1:d5:7f:8c:8e:08:2c:41:3d:43: 64:8e:3a:53:7f:89:98:dd:25:9c:3d:4a:1e:2a:26:fa:cb:0a: f7:d7:9c:5d:6d:eb:1b:e9:0b:ec:e5:cd:eb:f7:b5:6a:12:79: 01:ce:07:4a:25:06:a9:6b:f9:1f:fd:04:cb:a8:7a:cc:bb:8d: 32:ff:bf:5d:3a:4e:eb:67:14:2a:33:b3:76:d7:44:14:b9:b0: c1:cf:1b:c0:4d:7c:2c:12:80:12:3f:c4:24:39:49:ec:e8:0e: 83:65:6d:d4:bb:41:02:28:8f:0e:67:26:d2:24:a6:fc:1f:c5: 15:97:55:cc -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUeNt5mBXJRLhLvYIwUXBzJ5PB1nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIz QkQzMUQxRDAeFw0yNTAzMjIwODU1MDFaFw0yNjAzMjEwOTAwMDFaMDMxMTAvBgNV BAMTKDRGODAxNkNDN0E5MUFCQzE3RTBFMTQ0OEJDMUQ0OThDNzRBNDM1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6V25gRfyCncLQviwHhP0ThXK ODh/VMyLczQQIdpNSTP8FPhXLzEPz0Qw6h7yq+xFWyQNlJMJrT1kmV1L1zASss7N 870WchbMPklyT9eu7yz0skm0A8/Ipt3cFxrvzuJ2//kvMHN0pfmm/DSEdWndADvI hW7EpIVmf7Up/zSKtb1NfoEKuSPRpqN9JKm8fPDY36YV3Hqq6EXLKUvFcaCdQLNs ByIS4kbY7CtatmHQt6l5XgBTaQ0r9YZVPCEYUzwfP8R5Ewu7t76YJATkzz9Odikv 9vNsnigZ663QwinwL2mZrsGWHJRHGpZ8PKF8apcQE3Z5WH5wGUXBBhjA2vSFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUT4AWzHqRq8F+DhRIvB1JjHSkNdkwHwYDVR0j BBgwFoAU5HWosBi65YRI3eVdlIdEKzvTHR0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDQ5YzIxMC1mMzY1LTQzMmYtYTdjYS0wYjVlYjg2YjAxYzYvMC9FNDc1QThCMDE4 QkFFNTg0NDhEREU1NUQ5NDg3NDQyQjNCRDMxRDFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ3NUE4QjAxOEJBRTU4NDQ4RERFNTVEOTQ4NzQ0MkIzQkQz MUQxRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNDljMjEwLWYzNjUtNDMyZi1h N2NhLTBiNWViODZiMDFjNi8wLzMxMzAzMzJlMzMzMTJlMzIzMDM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzQzNTM3MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcfzDANBgkqhkiG 9w0BAQsFAAOCAQEAPeEyvD6/7nGwcEH5y2PJFiWi9Uo/c+D/qxNzwEKiHr0liWLX +jTnmtqXjAKNHR8bLjD3Lu2CoviSrZOTX29ok/WQv2eWNvF2g34sZJBl878l3cvw fdyv/rtNbN0L1nAFUvFbp03Iyrp0izvAyNzfORrJCVxlr26BURVNX7jiYgJVbVOx P73h1X+MjggsQT1DZI46U3+JmN0lnD1KHiom+ssK99ecXW3rG+kL7OXN6/e1ahJ5 Ac4HSiUGqWv5H/0Ey6h6zLuNMv+/XTpO62cUKjOzdtdEFLmwwc8bwE18LBKAEj/E JDlJ7OgOg2Vt1LtBAiiPDmcm0iSm/B/FFZdVzA== -----END CERTIFICATE-----Generated at Tue Nov 4 16:43:24 2025 by rpki-client