$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa File: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (raw, json) Hash identifier: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI= Subject key identifier: 13:A8:D7:E0:06:0C:97:B0:8E:D6:D7:E9:6D:F8:2C:22:BB:D0:FD:DF Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 78A07EB655B880D1C6E8CA8671CCE0DC49B6C9FA Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa Signing time: Wed 09 Apr 2025 10:00:51 +0000 ROA not before: Wed 09 Apr 2025 09:55:51 +0000 ROA not after: Wed 08 Apr 2026 10:00:51 +0000 asID: 151000 IP address blocks: 103.153.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a0:7e:b6:55:b8:80:d1:c6:e8:ca:86:71:cc:e0:dc:49:b6:c9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Apr 9 09:55:51 2025 GMT Not After : Apr 8 10:00:51 2026 GMT Subject: CN=13A8D7E0060C97B08ED6D7E96DF82C22BBD0FDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:05:29:68:6c:3f:cd:6a:59:6b:03:96:b1: dd:34:5f:73:d9:c2:ab:63:f9:b5:95:02:25:f1:22: 03:c5:ce:2b:b5:06:f5:e1:51:a5:c9:6f:17:0a:5c: 43:5c:60:9e:0b:e5:50:26:ce:49:16:db:af:9c:29: bd:3b:ee:c3:d1:f2:15:e0:0c:88:ad:7e:0c:c0:64: d0:91:bd:69:20:28:d7:68:4b:c4:c9:e8:19:54:1c: f0:cd:00:af:d4:42:3c:88:42:ff:4f:95:9d:98:4a: 20:85:e0:31:6a:1e:30:3b:2f:c5:f4:b4:52:9d:94: 43:95:19:41:95:b5:16:41:c3:9a:c4:54:07:cb:12: 47:86:fa:85:b6:43:18:d4:e6:c4:c1:60:e6:b1:96: 43:d4:0a:0c:a3:74:8b:44:cd:fa:04:bf:b2:02:75: ed:f6:6c:31:c5:82:e9:8e:8d:27:d3:92:06:3d:7b: 0b:21:d6:e7:1b:06:ec:b9:1f:74:38:61:3d:89:10: fc:2e:37:93:a4:e6:d9:72:47:ad:3d:8d:66:3a:48: 6b:17:7c:5a:4f:bf:cf:db:95:13:40:b4:13:26:7d: a1:a6:ae:b8:73:54:26:06:bb:10:1a:93:20:ed:c5: bd:72:b7:59:7e:3f:99:ec:9d:0c:b2:56:09:d1:76: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A8:D7:E0:06:0C:97:B0:8E:D6:D7:E9:6D:F8:2C:22:BB:D0:FD:DF X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.188.0/23 Signature Algorithm: sha256WithRSAEncryption 85:32:a2:e1:a6:c9:f7:a0:13:ee:ea:a3:d8:07:b0:0c:ba:7e: 96:3b:c1:e0:87:f9:0a:8a:63:0f:e2:23:7e:df:fe:92:d9:e7: 97:86:7c:d4:4b:3f:df:ee:6a:a9:c8:ed:dd:26:e6:82:30:96: 48:46:f0:cf:1d:d0:0d:50:f5:a0:4a:97:cd:87:59:fe:07:d7: 44:52:cc:51:57:bf:75:80:a9:ab:c6:f7:1d:22:bb:d0:4d:88: 02:0e:79:12:c3:8e:61:7c:2c:a3:dc:27:d5:dc:bc:ad:fd:64: 53:ce:fd:f0:de:5c:ea:4f:d7:68:18:b8:b9:2c:d2:fb:ff:4d: 1a:37:49:8c:5c:52:c5:25:7e:37:86:2a:b2:ba:49:e5:b0:2e: 31:a5:70:f7:95:3c:70:f0:f5:3f:ee:7f:1a:db:6f:31:61:a6: 6a:c8:c5:24:ae:8d:c3:4d:40:35:a7:f0:13:ae:6b:de:0b:0e: 83:d4:15:1a:4a:c5:b3:f7:7b:cb:dc:e7:6f:69:6d:6f:08:b0: e0:22:9b:b2:68:3f:7b:14:36:51:df:e6:3d:a2:26:2d:57:1f: a4:b2:4d:22:e7:d4:1f:55:32:70:13:bf:09:c8:96:4e:aa:ff: e0:90:ee:f8:1b:94:22:5e:36:c5:d5:eb:06:9f:06:7f:30:cc: 40:e7:17:80 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUeKB+tlW4gNHG6MqGcczg3Em2yfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNTA0MDkwOTU1NTFaFw0yNjA0MDgxMDAwNTFaMDMxMTAvBgNV BAMTKDEzQThEN0UwMDYwQzk3QjA4RUQ2RDdFOTZERjgyQzIyQkJEMEZEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftwUpaGw/zWpZawOWsd00X3PZ wqtj+bWVAiXxIgPFziu1BvXhUaXJbxcKXENcYJ4L5VAmzkkW26+cKb077sPR8hXg DIitfgzAZNCRvWkgKNdoS8TJ6BlUHPDNAK/UQjyIQv9PlZ2YSiCF4DFqHjA7L8X0 tFKdlEOVGUGVtRZBw5rEVAfLEkeG+oW2QxjU5sTBYOaxlkPUCgyjdItEzfoEv7IC de32bDHFgumOjSfTkgY9ewsh1ucbBuy5H3Q4YT2JEPwuN5Ok5tlyR609jWY6SGsX fFpPv8/blRNAtBMmfaGmrrhzVCYGuxAakyDtxb1yt1l+P5nsnQyyVgnRdo/9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUE6jX4AYMl7CO1tfpbfgsIrvQ/d8wHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwZjYyMTc2LWUxNjQtNDkyYy04 YTcyLTk5YzFlMTYxYjJkZi8wLzMxMzAzMzJlMzEzNTMzMmUzMTM4MzgyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnmbwwDQYJ KoZIhvcNAQELBQADggEBAIUyouGmyfegE+7qo9gHsAy6fpY7weCH+QqKYw/iI37f /pLZ55eGfNRLP9/uaqnI7d0m5oIwlkhG8M8d0A1Q9aBKl82HWf4H10RSzFFXv3WA qavG9x0iu9BNiAIOeRLDjmF8LKPcJ9XcvK39ZFPO/fDeXOpP12gYuLks0vv/TRo3 SYxcUsUlfjeGKrK6SeWwLjGlcPeVPHDw9T/ufxrbbzFhpmrIxSSujcNNQDWn8BOu a94LDoPUFRpKxbP3e8vc529pbW8IsOAim7JoP3sUNlHf5j2iJi1XH6SyTSLn1B9V MnATvwnIlk6q/+CQ7vgblCJeNsXV6wafBn8wzEDnF4A= -----END CERTIFICATE-----Generated at Tue Nov 4 17:15:25 2025 by rpki-client