$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa File: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (raw, json) Hash identifier: HMKdgPohDB0xWBN1Oc1VU1UzcfxKyNuGEiE2CnpRGEY= Subject key identifier: D5:2A:49:49:B9:80:16:88:8A:FA:39:CD:11:F9:54:E3:29:9E:58:C9 Certificate issuer: /CN=454DBC52C30315358534B20532037D549238F4C9 Certificate serial: 67885582857EDB6CDE7C2B3A057CD19BA4737380 Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa Signing time: Sat 22 Feb 2025 07:45:12 +0000 ROA not before: Sat 22 Feb 2025 07:40:12 +0000 ROA not after: Sat 21 Feb 2026 07:45:12 +0000 asID: 147155 IP address blocks: 103.177.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:88:55:82:85:7e:db:6c:de:7c:2b:3a:05:7c:d1:9b:a4:73:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454DBC52C30315358534B20532037D549238F4C9 Validity Not Before: Feb 22 07:40:12 2025 GMT Not After : Feb 21 07:45:12 2026 GMT Subject: CN=D52A4949B98016888AFA39CD11F954E3299E58C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:96:87:89:73:73:4d:06:ac:9e:d5:f9:9e:44: d4:60:c5:a5:5d:25:f1:a4:50:6c:8f:69:9e:5b:f2: 5b:89:84:b3:13:a5:df:16:a9:9b:55:4c:86:f5:58: 23:76:5b:7f:ad:3d:ac:6b:35:f4:50:1b:22:a2:4e: ad:87:d6:ee:3f:3e:f6:b0:87:e1:80:1d:f4:ab:21: 2f:54:b6:2c:7c:7b:5a:ca:17:54:6b:fe:db:96:c1: 2f:ba:28:6b:47:93:01:48:2e:34:cd:69:04:27:7b: a0:f8:58:4c:af:7e:0d:1d:67:7d:04:f1:af:3c:05: b4:ec:1c:a1:db:56:84:ac:59:53:c1:9f:35:bd:16: c5:e8:c9:ca:ed:52:de:0c:ed:88:c1:6c:81:88:49: 84:ed:6d:49:63:bb:11:b0:e6:0d:9a:2a:89:ae:53: dc:f9:5e:a5:24:8f:0d:0e:1a:92:c5:74:8e:58:98: 30:52:2c:8e:ae:b4:b2:f9:d7:34:85:99:f9:51:d0: e4:31:72:e4:51:71:0b:36:df:82:4a:13:a2:e6:63: e4:e8:bd:9d:00:db:7f:e3:21:87:6a:4f:de:8e:16: a1:e6:25:96:71:fc:cc:b9:b8:b8:9a:0b:1c:b6:a7: 5e:48:e8:c6:16:74:90:98:90:1b:c9:6b:c6:46:d1: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:49:49:B9:80:16:88:8A:FA:39:CD:11:F9:54:E3:29:9E:58:C9 X509v3 Authority Key Identifier: keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.144.0/23 Signature Algorithm: sha256WithRSAEncryption 26:2b:ab:22:28:55:f2:77:24:2d:66:c6:a1:de:4a:90:a8:87: d6:d1:9a:9b:34:04:d5:b7:ba:a4:09:24:d6:b1:af:a0:87:f7: bc:a0:a2:a4:b8:06:65:4a:af:57:45:30:82:96:59:64:79:65: 52:04:88:a5:5f:96:f4:08:1c:aa:b4:e1:6e:6a:84:b9:eb:1f: 13:47:49:a7:7b:eb:30:88:e6:7e:48:7b:f1:b5:19:97:08:60: 71:cd:61:cb:87:6d:33:c9:5c:72:ed:88:60:46:e1:81:3e:67: 08:7f:6e:58:bb:9b:5e:b3:88:1a:96:16:0f:4f:fb:63:68:1e: 6c:02:bb:98:65:55:d8:ee:40:38:b8:70:f9:1d:70:48:44:fe: ba:d4:ff:0f:31:e7:fa:9c:07:d8:7c:39:b2:ea:21:7c:6f:21: 78:22:e9:4b:87:48:4c:c0:52:fe:c0:ca:c1:81:e7:b7:66:33: a6:90:24:38:83:ce:7b:30:3f:cb:9b:c9:f3:e9:99:2d:f8:c9: cb:70:3f:80:4f:ca:20:f5:6a:83:90:50:56:ec:0c:46:81:f0: df:57:10:88:b5:69:45:9b:a5:2b:fe:fd:3e:de:82:01:b9:05: c4:1d:b9:44:8d:f9:de:f9:54:60:b6:31:98:06:05:b1:3c:fb: 03:fa:f2:97 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZ4hVgoV+22zefCs6BXzRm6Rzc4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5 MjM4RjRDOTAeFw0yNTAyMjIwNzQwMTJaFw0yNjAyMjEwNzQ1MTJaMDMxMTAvBgNV BAMTKEQ1MkE0OTQ5Qjk4MDE2ODg4QUZBMzlDRDExRjk1NEUzMjk5RTU4QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+loeJc3NNBqye1fmeRNRgxaVd JfGkUGyPaZ5b8luJhLMTpd8WqZtVTIb1WCN2W3+tPaxrNfRQGyKiTq2H1u4/Pvaw h+GAHfSrIS9Utix8e1rKF1Rr/tuWwS+6KGtHkwFILjTNaQQne6D4WEyvfg0dZ30E 8a88BbTsHKHbVoSsWVPBnzW9FsXoycrtUt4M7YjBbIGISYTtbUljuxGw5g2aKomu U9z5XqUkjw0OGpLFdI5YmDBSLI6utLL51zSFmflR0OQxcuRRcQs234JKE6LmY+To vZ0A23/jIYdqT96OFqHmJZZx/My5uLiaCxy2p15I6MYWdJCYkBvJa8ZG0bQVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU1SpJSbmAFoiK+jnNEflU4ymeWMkwHwYDVR0j BBgwFoAURU28UsMDFTWFNLIFMgN9VJI49MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTc3OTViNi0wZGY1LTQ3MWItYjc4OC03MjVmOWVmN2MwOGQvMC80NTREQkM1MkMz MDMxNTM1ODUzNEIyMDUzMjAzN0Q1NDkyMzhGNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5MjM4 RjRDOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxNzc5NWI2LTBkZjUtNDcxYi1i Nzg4LTcyNWY5ZWY3YzA4ZC8wLzMxMzAzMzJlMzEzNzM3MmUzMTM0MzQyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzczMTM1MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnsZAwDQYJ KoZIhvcNAQELBQADggEBACYrqyIoVfJ3JC1mxqHeSpCoh9bRmps0BNW3uqQJJNax r6CH97ygoqS4BmVKr1dFMIKWWWR5ZVIEiKVflvQIHKq04W5qhLnrHxNHSad76zCI 5n5Ie/G1GZcIYHHNYcuHbTPJXHLtiGBG4YE+Zwh/bli7m16ziBqWFg9P+2NoHmwC u5hlVdjuQDi4cPkdcEhE/rrU/w8x5/qcB9h8ObLqIXxvIXgi6UuHSEzAUv7AysGB 57dmM6aQJDiDznswP8ubyfPpmS34yctwP4BPyiD1aoOQUFbsDEaB8N9XEIi1aUWb pSv+/T7eggG5BcQduUSN+d75VGC2MZgGBbE8+wP68pc= -----END CERTIFICATE-----Generated at Wed Nov 5 05:58:08 2025 by rpki-client