$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa File: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (raw, json) Hash identifier: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ= Subject key identifier: 2F:95:CC:9D:23:76:03:0E:C8:4F:5E:67:D1:7B:E9:9E:FE:6B:42:05 Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 61FD64C49A876D41C49E3F9B456954A7F83C099C Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa Signing time: Sat 30 Aug 2025 07:00:02 +0000 ROA not before: Sat 30 Aug 2025 06:55:02 +0000 ROA not after: Sat 29 Aug 2026 07:00:02 +0000 asID: 140022 IP address blocks: 103.149.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fd:64:c4:9a:87:6d:41:c4:9e:3f:9b:45:69:54:a7:f8:3c:09:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Aug 30 06:55:02 2025 GMT Not After : Aug 29 07:00:02 2026 GMT Subject: CN=2F95CC9D2376030EC84F5E67D17BE99EFE6B4205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:87:32:63:63:53:1f:87:37:bb:91:57:2f: e1:54:0a:77:6f:60:35:1e:4b:52:a7:0c:56:10:1b: 3c:16:da:5b:68:23:c2:5b:d1:b7:93:3c:16:89:61: fe:b0:66:37:ec:35:09:f5:c2:95:4e:f0:ac:1e:3c: d5:12:9e:2c:48:fc:d3:58:52:c6:a3:b6:9d:32:13: 11:13:6f:af:f7:86:28:f9:49:64:91:ed:1b:f9:af: 44:1c:01:ae:6a:33:80:87:d3:51:8a:ac:05:9f:3e: e2:e4:af:9b:22:0b:ec:8f:79:ec:b3:b2:1c:58:c9: 7e:b5:d6:2a:d6:c6:ac:6e:85:a4:f8:df:f3:43:03: d1:6b:79:bd:26:b3:ac:75:94:ad:cb:18:3b:02:c2: 57:a1:07:80:49:ba:0f:dd:ea:8c:8d:d3:21:9a:3f: 5c:de:2b:8c:a2:65:71:7f:2f:32:c1:4a:04:9f:ba: c0:19:29:3e:49:a3:41:c7:cd:2c:7f:a2:e1:d8:cf: c7:d5:d0:3a:24:98:f9:c0:69:bc:db:0f:d8:5c:46: 8d:d5:f4:cd:bb:6e:e0:45:c1:72:4d:9e:dc:13:aa: a2:0e:74:b1:fb:e4:b6:5b:87:2d:c5:7a:7c:85:47: eb:08:50:54:4d:f2:4e:0d:30:47:b3:67:2a:9f:6d: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:95:CC:9D:23:76:03:0E:C8:4F:5E:67:D1:7B:E9:9E:FE:6B:42:05 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.164.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f9:a7:59:b2:bf:61:1b:bb:97:23:7f:52:bd:d6:a1:8b:fb: f0:c0:a5:3d:a1:91:6b:32:2c:e6:6e:03:c9:a4:99:b4:2a:f6: 4e:ed:f2:a7:77:80:e5:b5:45:71:8e:8e:df:da:d6:3f:30:ad: 8b:6d:1e:ba:22:3d:92:b7:c8:22:e8:74:1c:8d:0f:e6:54:d7: 40:c0:d4:e1:7d:c3:44:2c:86:c2:07:06:de:8c:dd:48:3a:a5: ac:f7:76:3e:bc:e6:26:2f:b4:55:e5:71:c9:94:4e:b2:fb:1b: bc:f6:48:bf:c5:38:1c:32:83:97:45:77:65:2d:b9:7e:46:5f: b4:9b:8e:4b:e7:5c:92:53:b0:f5:e5:78:00:ef:35:d2:14:51: 53:e8:e7:26:5b:21:d6:a6:4f:71:c4:1f:32:bb:e4:14:b8:3f: 8a:89:78:53:dc:26:70:06:01:67:1b:4b:29:f9:cc:d5:27:cc: 62:e2:d5:cd:e1:cb:e5:5f:ed:be:bc:af:9b:cc:64:d8:50:1f: 6c:80:11:37:7d:df:a3:3a:fc:23:d1:61:b8:05:8c:28:f9:e5: a2:bd:82:0c:ce:67:cd:71:c4:ae:83:c9:96:af:be:5a:9c:36: b6:5f:d1:74:4b:74:0a:cc:cc:82:9f:5f:e4:0f:85:bc:64:be: 35:e4:04:0b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYf1kxJqHbUHEnj+bRWlUp/g8CZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTA4MzAwNjU1MDJaFw0yNjA4MjkwNzAwMDJaMDMxMTAvBgNV BAMTKDJGOTVDQzlEMjM3NjAzMEVDODRGNUU2N0QxN0JFOTlFRkU2QjQyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWKocyY2NTH4c3u5FXL+FUCndv YDUeS1KnDFYQGzwW2ltoI8Jb0beTPBaJYf6wZjfsNQn1wpVO8KwePNUSnixI/NNY Usajtp0yExETb6/3hij5SWSR7Rv5r0QcAa5qM4CH01GKrAWfPuLkr5siC+yPeeyz shxYyX611irWxqxuhaT43/NDA9Freb0ms6x1lK3LGDsCwlehB4BJug/d6oyN0yGa P1zeK4yiZXF/LzLBSgSfusAZKT5Jo0HHzSx/ouHYz8fV0DokmPnAabzbD9hcRo3V 9M27buBFwXJNntwTqqIOdLH75LZbhy3FenyFR+sIUFRN8k4NMEezZyqfbcDnAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUL5XMnSN2Aw7IT15n0Xvpnv5rQgUwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmOWM0NDZmLWQ5NzEtNGI1ZS1i MjY5LTFlODNkM2ExNGZlZi8wLzMxMzAzMzJlMzEzNDM5MmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnlaQwDQYJ KoZIhvcNAQELBQADggEBAFn5p1myv2Ebu5cjf1K91qGL+/DApT2hkWsyLOZuA8mk mbQq9k7t8qd3gOW1RXGOjt/a1j8wrYttHroiPZK3yCLodByND+ZU10DA1OF9w0Qs hsIHBt6M3Ug6paz3dj685iYvtFXlccmUTrL7G7z2SL/FOBwyg5dFd2UtuX5GX7Sb jkvnXJJTsPXleADvNdIUUVPo5yZbIdamT3HEHzK75BS4P4qJeFPcJnAGAWcbSyn5 zNUnzGLi1c3hy+Vf7b68r5vMZNhQH2yAETd936M6/CPRYbgFjCj55aK9ggzOZ81x xK6DyZavvlqcNrZf0XRLdArMzIKfX+QPhbxkvjXkBAs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:13 2025 by rpki-client