$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa File: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (raw, json) Hash identifier: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g= Subject key identifier: C7:02:F5:3A:DC:1C:FC:DE:D1:BC:F6:1C:2A:B1:A8:1A:4C:01:F1:3B Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 7EEE884E6E01D211E9AA6BE71A993CB7B6D47CA1 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa Signing time: Wed 14 May 2025 07:01:11 +0000 ROA not before: Wed 14 May 2025 06:56:11 +0000 ROA not after: Wed 13 May 2026 07:01:11 +0000 asID: 141909 IP address blocks: 103.164.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ee:88:4e:6e:01:d2:11:e9:aa:6b:e7:1a:99:3c:b7:b6:d4:7c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: May 14 06:56:11 2025 GMT Not After : May 13 07:01:11 2026 GMT Subject: CN=C702F53ADC1CFCDED1BCF61C2AB1A81A4C01F13B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:62:4e:3d:9b:4d:5f:44:29:7b:a6:d0:52:53: a8:87:57:91:eb:8a:ef:eb:a5:39:6e:8d:0a:11:42: cc:d7:7a:40:34:0c:21:80:59:c1:15:37:14:48:ec: fa:26:25:ee:08:e0:a7:d7:16:c1:e1:fb:93:a2:90: 6c:8e:f0:e7:22:a6:03:34:59:7c:37:27:21:3a:2f: 07:71:16:8e:07:d2:d8:e3:de:a5:8a:a6:6b:0e:e7: b9:c2:b0:8d:3d:e5:b8:aa:d7:65:71:ff:9d:4c:b4: 5e:83:7a:5f:5c:ab:ee:26:0e:b7:ec:e3:18:64:c4: e9:8f:4f:3c:4e:61:ae:a0:ba:20:ac:8d:3c:13:f8: 20:12:2c:f9:21:e8:00:91:bb:71:1d:eb:db:44:f4: 84:01:bb:16:20:f4:4e:25:af:b0:e5:b1:9b:78:44: ce:6c:9c:03:28:c1:f2:61:a1:1a:f8:bd:a3:84:66: 4b:91:f0:d4:22:ee:03:4c:ea:ae:c7:90:72:35:2d: 17:41:bc:2e:0c:f4:cb:ea:7a:90:a3:30:6e:68:10: 2b:43:50:82:13:54:2b:39:f3:82:7e:c8:18:02:e7: 83:0d:68:ec:c0:1b:cf:95:66:8a:c4:ed:90:51:36: 67:38:a8:08:62:9b:61:8c:ec:b2:ae:95:01:8e:48: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:02:F5:3A:DC:1C:FC:DE:D1:BC:F6:1C:2A:B1:A8:1A:4C:01:F1:3B X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.150.0/24 Signature Algorithm: sha256WithRSAEncryption b7:80:43:50:e9:31:76:0c:eb:c5:e6:ad:60:9b:04:7c:7b:32: 5a:ab:95:86:66:f6:2c:e1:31:7e:73:8c:7f:d5:b9:40:04:10: a4:e7:19:98:9f:0c:bb:d3:9d:a5:47:69:e8:b3:aa:6a:52:3a: 9a:4e:57:27:2c:d6:ee:e5:25:f2:34:e4:69:d0:f8:cb:62:34: 72:e2:6f:44:44:d8:7d:ea:bd:d3:99:8c:3f:19:64:3e:fe:f0: 7b:63:0e:a6:31:e0:a6:b9:37:5e:06:24:23:2c:25:4b:fe:dc: 9a:71:6e:fd:21:51:a4:a4:8a:ea:94:8a:ab:f4:ed:ea:ed:50: 38:7a:6a:51:59:96:73:d3:06:98:3f:5c:bd:c3:0f:bc:0a:71: e4:90:3a:0b:1a:7c:21:92:03:54:c0:ad:28:a5:e1:e3:ca:60: 87:9d:6c:82:2e:78:25:a9:0e:5c:81:9f:07:50:a1:c6:61:22: a5:fd:59:7c:1a:9e:90:52:4b:34:2e:e1:04:6c:75:3c:d8:e6: 30:41:6d:62:d1:d1:72:1b:ff:a0:59:5c:58:5a:cc:bd:99:dd: 5b:43:af:8d:01:65:a1:f6:13:71:0e:9d:2b:b1:ae:ea:80:a0: 4b:3e:46:ca:a5:e4:a4:66:14:a3:86:5d:51:86:aa:38:9c:b5: b3:da:8d:ae -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfu6ITm4B0hHpqmvnGpk8t7bUfKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNTA1MTQwNjU2MTFaFw0yNjA1MTMwNzAxMTFaMDMxMTAvBgNV BAMTKEM3MDJGNTNBREMxQ0ZDREVEMUJDRjYxQzJBQjFBODFBNEMwMUYxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYk49m01fRCl7ptBSU6iHV5Hr iu/rpTlujQoRQszXekA0DCGAWcEVNxRI7PomJe4I4KfXFsHh+5OikGyO8OcipgM0 WXw3JyE6LwdxFo4H0tjj3qWKpmsO57nCsI095biq12Vx/51MtF6Del9cq+4mDrfs 4xhkxOmPTzxOYa6guiCsjTwT+CASLPkh6ACRu3Ed69tE9IQBuxYg9E4lr7DlsZt4 RM5snAMowfJhoRr4vaOEZkuR8NQi7gNM6q7HkHI1LRdBvC4M9MvqepCjMG5oECtD UIITVCs584J+yBgC54MNaOzAG8+VZorE7ZBRNmc4qAhim2GM7LKulQGOSAcJAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUxwL1Otwc/N7RvPYcKrGoGkwB8TswHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjODg0NDJiLWM0OGUtNGJhMC04 YWQ3LTU4ZTEyNjNjNmRjNy8wLzMxMzAzMzJlMzEzNjM0MmUzMTM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpJYwDQYJ KoZIhvcNAQELBQADggEBALeAQ1DpMXYM68XmrWCbBHx7MlqrlYZm9izhMX5zjH/V uUAEEKTnGZifDLvTnaVHaeizqmpSOppOVycs1u7lJfI05GnQ+MtiNHLib0RE2H3q vdOZjD8ZZD7+8HtjDqYx4Ka5N14GJCMsJUv+3Jpxbv0hUaSkiuqUiqv07ertUDh6 alFZlnPTBpg/XL3DD7wKceSQOgsafCGSA1TArSil4ePKYIedbIIueCWpDlyBnwdQ ocZhIqX9WXwanpBSSzQu4QRsdTzY5jBBbWLR0XIb/6BZXFhazL2Z3VtDr40BZaH2 E3EOnSuxruqAoEs+Rsql5KRmFKOGXVGGqjictbPaja4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:51 2025 by rpki-client