$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa File: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (raw, json) Hash identifier: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI= Subject key identifier: 14:8E:60:1A:D2:11:B0:99:22:BA:73:CC:2A:1B:62:16:42:49:72:DA Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 30B84FE37E5559333DECF6FA513DEAC1B51EE8D5 Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa Signing time: Mon 03 Nov 2025 06:00:01 +0000 ROA not before: Mon 03 Nov 2025 05:55:01 +0000 ROA not after: Mon 02 Nov 2026 06:00:01 +0000 asID: 150519 IP address blocks: 103.141.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 12:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b8:4f:e3:7e:55:59:33:3d:ec:f6:fa:51:3d:ea:c1:b5:1e:e8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Nov 3 05:55:01 2025 GMT Not After : Nov 2 06:00:01 2026 GMT Subject: CN=148E601AD211B09922BA73CC2A1B6216424972DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:8e:88:3f:6b:f8:64:d0:ff:55:a5:f5:5c: 1e:f7:c1:38:d1:39:0c:68:cf:10:6c:7b:3e:24:bc: a9:e9:0a:b3:0b:b7:ec:ba:e5:1e:a3:ab:e5:d3:87: b5:e3:0c:72:86:17:ef:03:ec:ad:c7:94:fc:dd:2e: 67:d3:0e:fd:c7:73:a0:19:40:ac:a6:5e:d0:a1:d5: e8:87:10:ea:28:06:dc:2a:9d:57:3b:05:cf:df:f1: 97:3b:0c:05:c5:a1:e0:b6:7b:9e:c0:b6:a3:63:69: e9:31:00:34:b3:0e:86:c0:c6:75:a1:cc:f3:09:ac: 84:08:84:44:0b:d0:de:5a:3b:2a:c9:dc:c8:95:37: 49:c2:9e:a7:72:dd:8f:f3:ea:33:a9:ba:34:9c:b4: 4e:61:e2:3d:7a:85:8d:e2:49:23:a9:6a:98:56:7f: 4b:77:8c:ba:47:c2:10:b3:ee:59:b4:e0:51:4e:66: 36:39:e5:64:06:25:56:78:f4:70:32:23:e5:5f:43: dd:eb:0a:62:7a:77:7c:39:e4:b5:e9:30:e4:8c:68: d4:a4:e0:52:a2:a2:c5:fe:85:9a:53:16:4f:b9:65: 6b:24:c5:39:8c:59:f4:9f:0a:b1:33:2c:ca:a9:8e: 94:7a:cb:b9:82:69:df:1d:67:fd:14:5a:32:7f:a0: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8E:60:1A:D2:11:B0:99:22:BA:73:CC:2A:1B:62:16:42:49:72:DA X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.170.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:2f:91:d8:a5:4c:e5:6d:0e:db:71:9d:a5:d5:8b:63:aa:81: a1:21:19:1c:55:fe:1c:76:76:f9:eb:8b:b9:0f:57:ef:74:c0: 9c:73:ce:e6:93:2d:7c:65:e2:e1:40:a0:71:01:09:18:af:eb: cc:e1:83:65:42:b1:82:57:d7:66:9f:3f:1e:b0:0b:ee:48:5a: 87:5a:e5:d0:ca:0b:c9:cb:82:46:a6:0d:a2:de:e9:65:c5:e9: fd:16:91:9c:fe:8f:cb:0b:ab:0f:79:1f:c1:fd:ed:26:09:b5: 1e:1b:85:07:8e:ad:f7:d0:86:80:8e:03:b6:18:f8:22:40:b0: cb:8c:32:7f:df:35:aa:b6:85:32:e9:1c:8c:28:5e:be:01:84: 06:a9:ff:e3:2c:33:15:92:cc:a0:29:df:ff:b1:fc:6e:f3:4a: db:a3:62:86:ad:2c:98:47:b9:3b:1a:b0:90:54:c9:fe:8f:b5: 05:6c:c9:dc:44:6c:c6:bc:a2:0c:ee:93:09:5f:83:b7:60:48: ba:d4:e9:2d:e7:49:7e:26:d4:dc:c5:57:22:37:9b:c1:ff:fb: 07:80:ad:cd:c7:ae:ee:e8:9c:49:56:cb:9b:10:83:39:ec:f0: b1:51:82:3f:37:32:f5:21:3d:3d:8e:03:37:8c:85:c0:e3:3a: 38:1a:57:de -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUMLhP435VWTM97Pb6UT3qwbUe6NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTExMDMwNTU1MDFaFw0yNjExMDIwNjAwMDFaMDMxMTAvBgNV BAMTKDE0OEU2MDFBRDIxMUIwOTkyMkJBNzNDQzJBMUI2MjE2NDI0OTcyREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFo6IP2v4ZND/VaX1XB73wTjR OQxozxBsez4kvKnpCrMLt+y65R6jq+XTh7XjDHKGF+8D7K3HlPzdLmfTDv3Hc6AZ QKymXtCh1eiHEOooBtwqnVc7Bc/f8Zc7DAXFoeC2e57AtqNjaekxADSzDobAxnWh zPMJrIQIhEQL0N5aOyrJ3MiVN0nCnqdy3Y/z6jOpujSctE5h4j16hY3iSSOpaphW f0t3jLpHwhCz7lm04FFOZjY55WQGJVZ49HAyI+VfQ93rCmJ6d3w55LXpMOSMaNSk 4FKiosX+hZpTFk+5ZWskxTmMWfSfCrEzLMqpjpR6y7mCad8dZ/0UWjJ/oHVNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUFI5gGtIRsJkiunPMKhtiFkJJctowHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjNmY4YzBhLWUwM2YtNDE0MC1i YTE2LTgzM2FjMjI0MWFmYi8wLzMxMzAzMzJlMzEzNDMxMmUzMTM3MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzNTMxMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjaowDQYJ KoZIhvcNAQELBQADggEBAI8vkdilTOVtDttxnaXVi2OqgaEhGRxV/hx2dvnri7kP V+90wJxzzuaTLXxl4uFAoHEBCRiv68zhg2VCsYJX12afPx6wC+5IWoda5dDKC8nL gkamDaLe6WXF6f0WkZz+j8sLqw95H8H97SYJtR4bhQeOrffQhoCOA7YY+CJAsMuM Mn/fNaq2hTLpHIwoXr4BhAap/+MsMxWSzKAp3/+x/G7zStujYoatLJhHuTsasJBU yf6PtQVsydxEbMa8ogzukwlfg7dgSLrU6S3nSX4m1NzFVyI3m8H/+weArc3Hru7o nElWy5sQgzns8LFRgj83MvUhPT2OAzeMhcDjOjgaV94= -----END CERTIFICATE-----Generated at Wed Nov 5 13:12:55 2025 by rpki-client