$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa File: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (raw, json) Hash identifier: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk= Subject key identifier: D0:D4:FC:AE:81:AB:47:44:F7:04:75:54:68:73:0D:31:09:2D:B6:D4 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 39B35D028482147F099D6E8C402A898FE2B8AF0B Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa Signing time: Fri 18 Jul 2025 08:43:26 +0000 ROA not before: Fri 18 Jul 2025 08:38:26 +0000 ROA not after: Fri 17 Jul 2026 08:43:26 +0000 asID: 133800 IP address blocks: 103.150.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b3:5d:02:84:82:14:7f:09:9d:6e:8c:40:2a:89:8f:e2:b8:af:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Jul 18 08:38:26 2025 GMT Not After : Jul 17 08:43:26 2026 GMT Subject: CN=D0D4FCAE81AB4744F704755468730D31092DB6D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:51:f6:1f:a5:a8:df:a2:6a:aa:2e:7d:d2: 9e:4f:14:f1:dd:4d:a7:21:cd:c9:e4:76:c0:2f:c0: 81:42:a8:56:0b:33:65:35:b4:83:c6:26:2b:e1:c5: 19:d9:7a:42:39:07:5a:10:38:1c:8c:a5:33:4d:23: 7a:a5:69:dc:45:4e:c5:ef:6d:2a:51:0c:56:ed:77: 4d:d9:41:ce:87:b4:cf:1b:28:36:13:a1:ba:e9:0e: 4e:6d:1e:81:1e:8f:90:b1:0e:b2:34:35:40:a1:6e: a3:62:77:64:00:ad:a3:54:df:80:1e:8e:f3:83:94: 1d:70:7d:cb:82:81:98:76:8a:24:3c:4c:c2:69:4e: 67:d1:27:50:b0:12:d8:b5:89:75:4c:9a:9a:e8:9a: 36:36:35:cc:cc:73:73:9b:39:c6:c8:81:5c:b9:ac: 16:5d:4f:44:05:10:dd:83:aa:d9:b5:da:2b:09:f3: fd:d5:6f:30:8a:53:05:6d:c5:20:4a:a5:fd:d0:ef: 9e:68:2a:82:22:0d:82:7c:5c:a4:10:a7:f1:0c:fd: 30:83:e3:51:b0:a4:e5:10:63:0e:9d:bb:d5:26:4e: c8:26:81:d4:c8:cf:73:b8:99:5a:3e:9c:dc:f5:43: ba:f2:ac:c1:84:cc:30:5f:b6:a0:03:18:ff:2c:65: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D4:FC:AE:81:AB:47:44:F7:04:75:54:68:73:0D:31:09:2D:B6:D4 X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.226.0/23 Signature Algorithm: sha256WithRSAEncryption 70:38:7f:ff:b0:72:ec:f7:f5:7d:f5:17:4a:8f:c0:e3:ff:4f: 98:bc:eb:70:ca:9d:0e:2a:5b:60:cf:69:64:9f:ba:a0:5a:df: e1:11:4b:6d:52:06:e6:0a:27:3e:a2:b3:67:32:65:50:55:cd: ee:26:73:ac:5d:16:59:2b:a4:c7:ff:ae:58:56:dd:02:ad:d0: ec:a3:3f:23:24:70:1f:9d:02:46:b3:77:d7:46:51:f4:be:67: f8:8d:b0:64:75:48:78:ff:12:e8:26:bd:b1:13:ab:3f:ef:3c: e5:79:1e:98:43:d3:9b:c0:dd:02:9f:a9:d5:56:51:0f:b5:e4: ae:4a:03:07:cc:41:04:17:d3:05:57:41:d5:0a:f8:dd:29:91: 7f:ca:ac:48:c0:82:2f:01:0c:b3:cb:b7:49:95:99:01:46:be: 38:2c:32:5f:e7:14:62:63:b5:f2:30:7c:31:43:b7:ad:fc:02: 90:70:a9:b7:da:cf:9e:ef:22:36:b2:49:10:2b:8f:de:66:14: 77:72:3e:13:6f:0b:f9:77:19:89:9c:b8:88:e7:9c:2b:00:d1: 47:53:fe:91:2d:0f:59:42:96:7c:03:a9:30:a3:8a:b4:f6:30: 41:be:02:bf:ec:e2:46:6f:d9:57:cf:4a:3b:2b:62:0d:07:df: 8d:ff:6d:7b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUObNdAoSCFH8JnW6MQCqJj+K4rwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTA3MTgwODM4MjZaFw0yNjA3MTcwODQzMjZaMDMxMTAvBgNV BAMTKEQwRDRGQ0FFODFBQjQ3NDRGNzA0NzU1NDY4NzMwRDMxMDkyREI2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeiFH2H6Wo36Jqqi590p5PFPHd TachzcnkdsAvwIFCqFYLM2U1tIPGJivhxRnZekI5B1oQOByMpTNNI3qladxFTsXv bSpRDFbtd03ZQc6HtM8bKDYTobrpDk5tHoEej5CxDrI0NUChbqNid2QAraNU34Ae jvODlB1wfcuCgZh2iiQ8TMJpTmfRJ1CwEti1iXVMmpromjY2NczMc3ObOcbIgVy5 rBZdT0QFEN2Dqtm12isJ8/3VbzCKUwVtxSBKpf3Q755oKoIiDYJ8XKQQp/EM/TCD 41GwpOUQYw6du9UmTsgmgdTIz3O4mVo+nNz1Q7ryrMGEzDBftqADGP8sZfdrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0NT8roGrR0T3BHVUaHMNMQktttQwHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyOWU3MDY0LWIzNTItNDNiNi05 ZjA5LTUxNGQ2OGEyNzM5ZS8wLzMxMzAzMzJlMzEzNTMwMmUzMjMyMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzMzODMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnluIwDQYJ KoZIhvcNAQELBQADggEBAHA4f/+wcuz39X31F0qPwOP/T5i863DKnQ4qW2DPaWSf uqBa3+ERS21SBuYKJz6is2cyZVBVze4mc6xdFlkrpMf/rlhW3QKt0OyjPyMkcB+d Akazd9dGUfS+Z/iNsGR1SHj/EugmvbETqz/vPOV5HphD05vA3QKfqdVWUQ+15K5K AwfMQQQX0wVXQdUK+N0pkX/KrEjAgi8BDLPLt0mVmQFGvjgsMl/nFGJjtfIwfDFD t638ApBwqbfaz57vIjaySRArj95mFHdyPhNvC/l3GYmcuIjnnCsA0UdT/pEtD1lC lnwDqTCjirT2MEG+Ar/s4kZv2VfPSjsrYg0H343/bXs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:21 2025 by rpki-client