$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa File: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (raw, json) Hash identifier: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68= Subject key identifier: 3A:DE:95:81:D6:39:49:D1:9E:4C:A3:83:DA:50:D9:6E:61:62:7A:77 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 22D83B5A1746708B2EA26A96EA1379BE9648727B Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa Signing time: Sat 14 Jun 2025 12:02:02 +0000 ROA not before: Sat 14 Jun 2025 11:57:02 +0000 ROA not after: Sat 13 Jun 2026 12:02:02 +0000 asID: 136856 IP address blocks: 103.102.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d8:3b:5a:17:46:70:8b:2e:a2:6a:96:ea:13:79:be:96:48:72:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Jun 14 11:57:02 2025 GMT Not After : Jun 13 12:02:02 2026 GMT Subject: CN=3ADE9581D63949D19E4CA383DA50D96E61627A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5a:a7:f1:02:f0:1a:61:71:22:76:f4:6c:9a: 17:5a:8d:07:34:9a:85:af:6c:d0:6a:61:77:3f:41: 32:3c:38:73:25:89:03:c5:0f:07:44:01:ae:b6:27: 08:18:7d:5f:bc:a1:b6:89:71:6a:4b:32:3b:59:dc: 25:ce:e8:44:93:b7:4c:d8:c5:fe:c1:93:87:3c:84: 83:ce:bc:fa:36:c5:b2:87:56:7d:c4:ea:c7:15:27: 16:aa:d9:3f:95:62:5c:22:73:30:65:97:9f:91:b3: e4:aa:2f:20:bf:cf:4a:2d:39:a6:ad:a6:ca:c6:d7: df:1b:33:12:b0:6b:22:cf:1d:d7:4e:77:4e:cd:5d: 85:5f:ee:54:3f:42:56:18:f5:b3:d3:72:bd:8e:a8: a2:be:b7:8c:84:ce:07:53:98:df:ae:04:45:50:3b: 42:68:a2:ee:b8:aa:ca:30:97:f1:63:09:eb:98:1c: 51:32:ad:bc:c3:79:24:78:4d:e5:a3:72:75:70:12: 90:f4:c0:4d:f4:d1:3f:f4:94:ad:eb:a9:3f:00:d6: 8c:0d:a1:0d:da:69:0f:5a:aa:dc:4d:60:95:d5:e6: 80:cc:7d:1b:e5:f8:e8:24:e5:a5:b1:9b:81:1b:1b: 6f:40:c1:86:79:fa:56:5f:95:18:12:ca:56:c7:bf: ba:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:95:81:D6:39:49:D1:9E:4C:A3:83:DA:50:D9:6E:61:62:7A:77 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.114.0/23 Signature Algorithm: sha256WithRSAEncryption a3:6c:d0:12:7d:6a:f5:a5:d9:3e:c0:ce:5d:0d:82:69:e2:0a: 56:30:c3:06:0d:31:11:dc:80:df:c6:65:4b:98:82:38:b8:ce: 6f:25:f0:9d:bc:49:77:29:8b:ac:a7:76:ef:70:e6:51:07:c9: fc:67:f7:92:a3:9e:74:94:e8:30:8e:7a:49:32:c3:0b:74:33: 5a:d1:3e:b6:dc:0d:42:35:6e:0d:c6:24:f8:02:62:b6:04:47: 0a:0e:e9:b1:56:2d:15:0c:da:bc:3d:12:d6:19:7a:3b:fd:74: d5:de:c4:2b:6e:3a:5f:c2:32:44:0d:e5:48:5f:78:df:eb:60: 0b:16:1c:1c:8a:c3:ae:3b:9a:00:24:ae:89:b6:01:bf:b9:fe: 45:56:2a:7a:eb:ae:62:62:ca:c2:04:96:29:d5:b9:f1:53:1d: ca:4c:84:fb:7b:f3:05:8b:90:3a:49:ec:1e:76:f7:df:cd:8c: 8a:60:ad:f1:1f:37:57:33:81:a2:05:fb:3f:39:71:15:10:fb: 5b:f7:68:89:b1:53:4e:13:f1:50:44:0a:70:8a:85:14:57:10: df:81:53:7b:06:ec:a7:00:37:07:6c:fc:e2:87:86:0a:f2:76: ad:41:f8:dd:75:64:dd:c7:38:f0:58:7e:05:32:82:76:da:68: 2e:fe:47:49 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUItg7WhdGcIsuomqW6hN5vpZIcnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNTA2MTQxMTU3MDJaFw0yNjA2MTMxMjAyMDJaMDMxMTAvBgNV BAMTKDNBREU5NTgxRDYzOTQ5RDE5RTRDQTM4M0RBNTBEOTZFNjE2MjdBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WqfxAvAaYXEidvRsmhdajQc0 moWvbNBqYXc/QTI8OHMliQPFDwdEAa62JwgYfV+8obaJcWpLMjtZ3CXO6ESTt0zY xf7Bk4c8hIPOvPo2xbKHVn3E6scVJxaq2T+VYlwiczBll5+Rs+SqLyC/z0otOaat psrG198bMxKwayLPHddOd07NXYVf7lQ/QlYY9bPTcr2OqKK+t4yEzgdTmN+uBEVQ O0Joou64qsowl/FjCeuYHFEyrbzDeSR4TeWjcnVwEpD0wE300T/0lK3rqT8A1owN oQ3aaQ9aqtxNYJXV5oDMfRvl+Ogk5aWxm4EbG29AwYZ5+lZflRgSylbHv7pFAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOt6VgdY5SdGeTKOD2lDZbmFiencwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1YzdhNDA0LWViM2YtNGNmMS05 OWY5LTgyNzk2MTY2MWYzMS8wLzMxMzAzMzJlMzEzMDMyMmUzMTMxMzQyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzYzODM1MzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnZnIwDQYJ KoZIhvcNAQELBQADggEBAKNs0BJ9avWl2T7Azl0NgmniClYwwwYNMRHcgN/GZUuY gji4zm8l8J28SXcpi6yndu9w5lEHyfxn95KjnnSU6DCOekkywwt0M1rRPrbcDUI1 bg3GJPgCYrYERwoO6bFWLRUM2rw9EtYZejv9dNXexCtuOl/CMkQN5UhfeN/rYAsW HByKw647mgAkrom2Ab+5/kVWKnrrrmJiysIElinVufFTHcpMhPt78wWLkDpJ7B52 99/NjIpgrfEfN1czgaIF+z85cRUQ+1v3aImxU04T8VBECnCKhRRXEN+BU3sG7KcA Nwds/OKHhgrydq1B+N11ZN3HOPBYfgUygnbaaC7+R0k= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:08 2025 by rpki-client