$ rpki-client -vvf repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa File: 3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa (raw, json) Hash identifier: xce0AmVhdIuoA0s5G07BTYqxfWM/i2bbCDllzfV1P80= Subject key identifier: 85:21:79:19:B3:84:BB:FC:C9:ED:F3:AE:CA:22:19:BF:52:A5:EB:59 Certificate issuer: /CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Certificate serial: 1A2C161177B3806B4056A60FF8A61882C6CF7C27 Authority key identifier: 30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa Signing time: Sat 26 Jul 2025 03:00:01 +0000 ROA not before: Sat 26 Jul 2025 02:55:01 +0000 ROA not after: Sat 25 Jul 2026 03:00:01 +0000 asID: 141966 IP address blocks: 103.166.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2c:16:11:77:b3:80:6b:40:56:a6:0f:f8:a6:18:82:c6:cf:7c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45 Validity Not Before: Jul 26 02:55:01 2025 GMT Not After : Jul 25 03:00:01 2026 GMT Subject: CN=85217919B384BBFCC9EDF3AECA2219BF52A5EB59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:e0:d0:1b:20:8c:fb:b3:98:83:72:5a:2f: 42:75:05:78:7e:61:c8:11:41:13:d0:27:bc:49:21: f5:a9:c5:06:49:44:c6:f9:5b:bd:97:f0:58:8f:81: b3:f7:2b:83:47:20:d1:fd:39:7f:55:df:93:ef:ff: be:ae:14:32:ba:0e:9a:85:40:07:5c:6c:90:07:1f: 75:3c:82:51:94:5a:a6:39:c2:4a:ed:b2:b4:15:b5: e0:35:d0:13:71:35:6a:a5:04:5f:4c:82:ca:0c:6d: 50:f2:9c:15:66:af:cf:5c:48:ff:99:64:fb:c9:fc: 8a:77:08:6b:71:97:c9:04:09:8a:64:e2:31:aa:9f: 4b:98:4b:68:ad:eb:25:59:39:ea:99:86:6a:75:8a: c9:35:dc:8d:78:89:7b:7c:47:b0:9d:79:ec:d7:0e: 3a:38:6b:3d:20:53:c4:53:5d:4a:d6:bc:52:0f:f0: 99:80:1e:65:d5:cf:dd:f9:0e:eb:46:f8:b4:6a:60: 0a:86:16:5f:6d:3d:4b:56:0f:2d:dd:7a:d1:c8:37: ef:b7:0e:3f:5a:da:57:b6:12:a1:03:a6:d3:a4:ee: 31:aa:76:7b:97:8d:ce:67:1f:74:d7:9d:f8:c8:da: c7:49:73:73:7b:26:1a:24:2f:5e:f9:f3:9e:04:36: 47:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:21:79:19:B3:84:BB:FC:C9:ED:F3:AE:CA:22:19:BF:52:A5:EB:59 X509v3 Authority Key Identifier: keyid:30:E2:B4:61:7B:8B:9C:FC:4F:C5:7B:1C:5A:4D:74:FC:7E:91:2D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/30E2B4617B8B9CFC4FC57B1C5A4D74FC7E912D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/429f8902-1a06-45a8-a998-72e46aaae8fc/0/3130332e3136362e3235352e302f32342d3234203d3e20313431393636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.255.0/24 Signature Algorithm: sha256WithRSAEncryption bb:d2:27:c8:15:a0:ce:0b:27:8d:f5:6c:cc:68:d8:3d:04:a4: 3e:dc:40:60:f0:8c:b9:68:40:08:00:cf:f5:c8:d8:6b:13:b0: a7:f8:4e:f3:82:e0:39:3f:ce:af:c1:a3:06:72:42:75:8a:b5: 8f:f2:31:78:9e:d9:65:3e:ee:3e:a5:33:5f:33:4f:9b:d2:3e: 87:80:26:b2:08:62:fd:f1:62:45:50:c6:8d:b6:3b:70:68:04: 9a:34:d0:75:f2:27:35:86:a7:1d:9f:a8:55:41:ff:ac:dc:2d: aa:1e:0c:7b:d5:ac:9e:30:c1:6a:12:1d:03:38:b4:7c:b2:a9: ed:f0:04:8a:4d:48:24:e8:69:7a:00:27:2b:dc:b7:53:ce:6c: 16:63:bf:83:32:35:20:fb:56:09:92:36:77:bd:cc:1d:86:87: 64:6b:ff:b9:e8:ef:25:a0:13:9e:7d:0c:5d:20:1f:da:93:1e: ab:bc:64:20:b6:f0:48:eb:ad:cc:46:32:3c:0f:15:66:fc:dd: 25:5b:08:c9:db:33:6a:81:9a:7b:ef:97:39:8b:d9:f2:d9:29: 20:14:f3:36:24:3e:21:61:e9:f2:38:ba:2e:9e:bd:19:08:e6: 48:36:5c:f6:45:56:e1:d6:9e:9d:b1:a3:b1:6c:50:a6:a9:3e: e1:8c:ee:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGiwWEXezgGtAVqYP+KYYgsbPfCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3 RTkxMkQ0NTAeFw0yNTA3MjYwMjU1MDFaFw0yNjA3MjUwMzAwMDFaMDMxMTAvBgNV BAMTKDg1MjE3OTE5QjM4NEJCRkNDOUVERjNBRUNBMjIxOUJGNTJBNUVCNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0eDQGyCM+7OYg3JaL0J1BXh+ YcgRQRPQJ7xJIfWpxQZJRMb5W72X8FiPgbP3K4NHINH9OX9V35Pv/76uFDK6DpqF QAdcbJAHH3U8glGUWqY5wkrtsrQVteA10BNxNWqlBF9MgsoMbVDynBVmr89cSP+Z ZPvJ/Ip3CGtxl8kECYpk4jGqn0uYS2it6yVZOeqZhmp1isk13I14iXt8R7CdeezX Djo4az0gU8RTXUrWvFIP8JmAHmXVz935DutG+LRqYAqGFl9tPUtWDy3detHIN++3 Dj9a2le2EqEDptOk7jGqdnuXjc5nH3TXnfjI2sdJc3N7JhokL175854ENkeDAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhSF5GbOEu/zJ7fOuyiIZv1Kl61kwHwYDVR0j BBgwFoAUMOK0YXuLnPxPxXscWk10/H6RLUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjlmODkwMi0xYTA2LTQ1YTgtYTk5OC03MmU0NmFhYWU4ZmMvMC8zMEUyQjQ2MTdC OEI5Q0ZDNEZDNTdCMUM1QTRENzRGQzdFOTEyRDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzBFMkI0NjE3QjhCOUNGQzRGQzU3QjFDNUE0RDc0RkM3RTkx MkQ0NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyOWY4OTAyLTFhMDYtNDVhOC1h OTk4LTcyZTQ2YWFhZThmYy8wLzMxMzAzMzJlMzEzNjM2MmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM2MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpv8wDQYJ KoZIhvcNAQELBQADggEBALvSJ8gVoM4LJ431bMxo2D0EpD7cQGDwjLloQAgAz/XI 2GsTsKf4TvOC4Dk/zq/BowZyQnWKtY/yMXie2WU+7j6lM18zT5vSPoeAJrIIYv3x YkVQxo22O3BoBJo00HXyJzWGpx2fqFVB/6zcLaoeDHvVrJ4wwWoSHQM4tHyyqe3w BIpNSCToaXoAJyvct1PObBZjv4MyNSD7VgmSNne9zB2Gh2Rr/7no7yWgE559DF0g H9qTHqu8ZCC28EjrrcxGMjwPFWb83SVbCMnbM2qBmnvvlzmL2fLZKSAU8zYkPiFh 6fI4ui6evRkI5kg2XPZFVuHWnp2xo7FsUKapPuGM7jY= -----END CERTIFICATE-----Generated at Thu Nov 6 02:38:00 2025 by rpki-client