$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa File: 3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (raw, json) Hash identifier: DC1WzlYzoLRsGjbVoxuqgztNqkwtiD8GKj7bCCztmOc= Subject key identifier: 56:8E:4A:40:87:F0:8E:C8:44:49:B1:10:E6:B9:4A:09:44:34:46:62 Certificate issuer: /CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Certificate serial: 606813BB69A1C8ECA8DBCF7A2B5112C3EA2B4312 Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa Signing time: Thu 23 Oct 2025 10:00:02 +0000 ROA not before: Thu 23 Oct 2025 09:55:02 +0000 ROA not after: Thu 22 Oct 2026 10:00:02 +0000 asID: 141898 IP address blocks: 103.158.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:68:13:bb:69:a1:c8:ec:a8:db:cf:7a:2b:51:12:c3:ea:2b:43:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471 Validity Not Before: Oct 23 09:55:02 2025 GMT Not After : Oct 22 10:00:02 2026 GMT Subject: CN=568E4A4087F08EC84449B110E6B94A0944344662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:78:5c:a3:5f:35:6a:3a:47:aa:c8:9f:c0: 27:13:2d:74:42:17:f7:0d:71:13:71:05:45:b1:bc: 5d:cb:12:34:80:f8:96:14:e1:ac:98:40:c4:76:27: 15:b9:52:28:94:c0:ab:70:9f:de:51:24:88:34:73: a3:63:1a:cf:54:d7:68:d5:6c:ba:4f:b1:3a:0d:84: be:d1:81:31:f6:6a:5e:53:c9:45:d6:5e:b2:83:52: 75:06:d4:0e:c4:2a:84:e0:fc:91:92:41:bd:fe:df: 97:07:55:b4:bf:4c:88:a8:ab:95:8f:dd:47:22:5d: dc:04:57:c7:d0:21:75:d7:8a:84:13:b7:26:e7:1d: e3:93:a3:10:01:f6:85:9f:34:96:80:24:52:8a:f5: b0:f0:c9:75:77:3a:23:1e:7a:c4:06:27:fc:a2:c7: c4:6b:99:88:14:6e:7e:3a:94:d8:a4:cd:03:44:5f: 04:db:31:97:58:79:64:c2:ba:9f:15:31:ca:b6:63: 67:15:e2:54:08:d1:1b:97:50:20:b9:52:ed:0b:e7: 1c:d4:da:b7:19:d2:51:2c:1f:81:53:fb:98:f3:61: 5f:e1:60:7c:c0:f1:3c:41:9d:8f:e3:6a:e2:ab:9c: 04:23:45:80:28:01:22:bc:dc:a8:15:29:ee:15:5b: 9b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8E:4A:40:87:F0:8E:C8:44:49:B1:10:E6:B9:4A:09:44:34:46:62 X509v3 Authority Key Identifier: keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.234.0/24 Signature Algorithm: sha256WithRSAEncryption 98:3b:7f:bb:f2:a5:67:46:c7:fa:27:3f:2a:ec:3b:b7:cb:ab: f1:f1:1b:4b:a7:ae:35:b3:8f:2a:df:ff:6d:14:da:70:49:5e: c7:c0:2f:c0:e2:9c:6c:7e:7e:0d:41:b4:cb:93:d7:de:5f:c3: fe:d0:bf:4b:4d:f0:e5:55:29:da:fc:54:1c:e9:cc:c2:5a:66: 01:e7:65:3b:f5:f1:8b:ff:1f:68:60:9c:80:04:33:79:9c:f4: 37:9c:f5:35:60:f0:e2:a5:18:45:a8:fd:3f:1a:52:6e:64:48: 92:75:55:9b:22:c1:d2:46:8d:52:6f:2b:45:3a:4a:90:2a:08: 10:81:c3:45:8e:90:80:68:7c:90:cf:ef:53:ed:c4:73:96:61: 80:77:86:03:9f:b9:e5:ff:52:b4:40:51:38:28:f5:71:f8:e0: 32:bd:64:0a:fb:87:69:18:de:dc:d5:4e:4b:ac:16:8d:74:ca: 9a:16:0d:c3:59:c2:e3:8c:7e:34:67:aa:18:4f:39:33:49:2e: 9c:74:9f:73:8f:7c:9a:58:74:12:e2:4a:0b:b8:c9:7e:a8:b2: 09:22:84:5d:3a:d8:39:c7:e2:90:ab:90:80:51:0b:8b:e8:bd: dd:3d:1a:32:74:b3:fe:4a:59:56:fc:45:0c:ef:48:38:ec:23: 29:67:74:55 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYGgTu2mhyOyo2896K1ESw+orQxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3 OUFCMDQ3MTAeFw0yNTEwMjMwOTU1MDJaFw0yNjEwMjIxMDAwMDJaMDMxMTAvBgNV BAMTKDU2OEU0QTQwODdGMDhFQzg0NDQ5QjExMEU2Qjk0QTA5NDQzNDQ2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVnhco181ajpHqsifwCcTLXRC F/cNcRNxBUWxvF3LEjSA+JYU4ayYQMR2JxW5UiiUwKtwn95RJIg0c6NjGs9U12jV bLpPsToNhL7RgTH2al5TyUXWXrKDUnUG1A7EKoTg/JGSQb3+35cHVbS/TIioq5WP 3UciXdwEV8fQIXXXioQTtybnHeOToxAB9oWfNJaAJFKK9bDwyXV3OiMeesQGJ/yi x8RrmYgUbn46lNikzQNEXwTbMZdYeWTCup8VMcq2Y2cV4lQI0RuXUCC5Uu0L5xzU 2rcZ0lEsH4FT+5jzYV/hYHzA8TxBnY/jauKrnAQjRYAoASK83KgVKe4VW5tNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUVo5KQIfwjshESbEQ5rlKCUQ0RmIwHwYDVR0j BBgwFoAUtWPXCKCUsk/DYe3RHJHueXmrBHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDM2ZTA3Yy04MjgzLTQzZDMtOTE2NC0zZTBlNmNhY2Y0OTkvMC9CNTYzRDcwOEEw OTRCMjRGQzM2MUVERDExQzkxRUU3OTc5QUIwNDcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU2M0Q3MDhBMDk0QjI0RkMzNjFFREQxMUM5MUVFNzk3OUFC MDQ3MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwMzZlMDdjLTgyODMtNDNkMy05 MTY0LTNlMGU2Y2FjZjQ5OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzODM5Mzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnnuowDQYJ KoZIhvcNAQELBQADggEBAJg7f7vypWdGx/onPyrsO7fLq/HxG0unrjWzjyrf/20U 2nBJXsfAL8DinGx+fg1BtMuT195fw/7Qv0tN8OVVKdr8VBzpzMJaZgHnZTv18Yv/ H2hgnIAEM3mc9Dec9TVg8OKlGEWo/T8aUm5kSJJ1VZsiwdJGjVJvK0U6SpAqCBCB w0WOkIBofJDP71PtxHOWYYB3hgOfueX/UrRAUTgo9XH44DK9ZAr7h2kY3tzVTkus Fo10ypoWDcNZwuOMfjRnqhhPOTNJLpx0n3OPfJpYdBLiSgu4yX6osgkihF062DnH 4pCrkIBRC4vovd09GjJ0s/5KWVb8RQzvSDjsIylndFU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:32:43 2025 by rpki-client