$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa File: 3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa (raw, json) Hash identifier: L9UqHBOT0KM8Y3HKq7TuZiV7NwWM18YFSbtkcApuAS0= Subject key identifier: 4B:9A:B4:71:C7:37:AC:7C:54:70:2B:89:7E:AF:E0:21:02:A0:03:47 Certificate issuer: /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Certificate serial: 04EF06E68927B77C2E26BBA35BE2FC959E61599D Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa Signing time: Tue 15 Apr 2025 04:00:01 +0000 ROA not before: Tue 15 Apr 2025 03:55:01 +0000 ROA not after: Tue 14 Apr 2026 04:00:01 +0000 asID: 142366 IP address blocks: 103.170.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 19:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ef:06:e6:89:27:b7:7c:2e:26:bb:a3:5b:e2:fc:95:9e:61:59:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Validity Not Before: Apr 15 03:55:01 2025 GMT Not After : Apr 14 04:00:01 2026 GMT Subject: CN=4B9AB471C737AC7C54702B897EAFE02102A00347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:3a:08:41:02:5e:96:e1:e1:f9:9d:3f:6e: d3:63:f2:15:40:a6:e3:6c:ec:d1:1a:dc:12:98:9c: 37:13:ad:0b:6b:47:52:9a:6b:fd:74:e8:28:d7:63: e6:85:37:0f:0b:3c:c1:37:2f:71:01:e1:0f:21:3c: cd:a3:3e:ce:1d:20:96:0b:64:07:bb:43:01:6a:18: f0:bd:ea:04:0e:e6:4f:ef:e1:dc:a6:37:af:08:f5: 0f:b7:e8:97:b1:a5:a1:1c:f7:a1:a5:6c:75:ae:7a: f9:e3:d3:42:63:09:aa:1d:9a:5d:a2:c0:ff:6e:c1: 37:5a:04:66:80:12:c1:9d:77:ed:31:66:48:14:59: f0:a1:5f:21:1c:94:64:eb:2a:63:66:d3:c0:5b:64: a5:10:46:5a:b2:98:e0:37:11:f1:3b:ce:a6:1c:62: 46:ee:9b:0f:48:71:f6:a4:2a:9e:c7:b8:a3:d2:08: b2:f3:82:78:6b:f7:12:24:30:c5:d3:69:51:ad:57: 7c:fc:b7:84:8b:34:47:c2:a9:ee:27:df:49:75:ae: 1a:29:a0:f6:d0:e2:74:4c:38:84:ec:9e:88:ea:6a: 7c:2e:16:67:ba:a5:7c:8b:c8:aa:ca:a5:83:61:7b: 78:1b:2f:c5:31:88:67:bf:c6:5c:25:2a:ba:85:7f: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9A:B4:71:C7:37:AC:7C:54:70:2B:89:7E:AF:E0:21:02:A0:03:47 X509v3 Authority Key Identifier: keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32342d3234203d3e20313432333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.30.0/24 Signature Algorithm: sha256WithRSAEncryption ab:e5:17:48:32:6f:e1:e6:56:b5:ad:2b:6a:95:03:f8:d8:e1: 55:79:e9:60:79:51:3a:9e:9e:cf:fe:8c:f7:a4:6e:ff:a6:98: 43:8d:54:f2:eb:2f:13:36:e8:eb:6e:ab:e7:01:ad:ba:3c:a2: 6b:26:0b:25:aa:ec:57:34:e4:6e:3d:11:8a:ee:96:f3:49:96: b2:01:c2:5d:f2:0f:8c:88:93:b8:77:91:73:54:3f:fd:f7:70: 72:59:92:8f:f9:54:e6:17:9e:ee:a9:76:c8:44:de:0f:50:81: bc:47:d0:fb:4d:5a:0c:60:79:e1:6d:f0:a3:7b:e2:06:90:7b: fe:7d:99:35:4d:2f:c0:70:8e:fe:a1:13:a8:30:aa:f7:60:d9: ea:ab:c7:a4:33:f0:83:a5:05:18:a7:89:d2:20:52:57:93:68: 2a:3b:58:f3:08:53:08:d7:dc:25:78:ad:ee:bd:a2:7f:a2:cf: 63:a1:22:7d:e4:a7:13:e4:60:56:09:06:cf:60:74:64:05:b1: 5a:19:ae:54:0d:8b:83:be:30:23:87:9f:26:e5:b5:47:ea:a9: 05:fc:f5:da:ad:df:f7:ce:c7:01:ba:7c:ec:e1:8d:76:d5:4f: d8:b4:ad:02:bf:f4:5a:0d:8a:33:a1:62:b2:1e:6e:d7:c1:0d: f9:66:ef:4b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBO8G5oknt3wuJrujW+L8lZ5hWZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5 NTc3RDMxQzAeFw0yNTA0MTUwMzU1MDFaFw0yNjA0MTQwNDAwMDFaMDMxMTAvBgNV BAMTKDRCOUFCNDcxQzczN0FDN0M1NDcwMkI4OTdFQUZFMDIxMDJBMDAzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+ToIQQJeluHh+Z0/btNj8hVA puNs7NEa3BKYnDcTrQtrR1Kaa/106CjXY+aFNw8LPME3L3EB4Q8hPM2jPs4dIJYL ZAe7QwFqGPC96gQO5k/v4dymN68I9Q+36JexpaEc96GlbHWuevnj00JjCaodml2i wP9uwTdaBGaAEsGdd+0xZkgUWfChXyEclGTrKmNm08BbZKUQRlqymOA3EfE7zqYc Ykbumw9IcfakKp7HuKPSCLLzgnhr9xIkMMXTaVGtV3z8t4SLNEfCqe4n30l1rhop oPbQ4nRMOITsnojqanwuFme6pXyLyKrKpYNhe3gbL8UxiGe/xlwlKrqFfymxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUS5q0ccc3rHxUcCuJfq/gIQKgA0cwHwYDVR0j BBgwFoAUARCnwsXnt0yJsDb/94l0YZV30xwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMC8wMTEwQTdDMkM1 RTdCNzRDODlCMDM2RkZGNzg5NzQ2MTk1NzdEMzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDExMEE3QzJDNUU3Qjc0Qzg5QjAzNkZGRjc4OTc0NjE5NTc3 RDMxQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVhLTg0NWUtNGRkZi1h Y2E3LWE5YjMxYzMxZGZmNC8wLzMxMzAzMzJlMzEzNzMwMmUzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMyMzMzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6oeMA0GCSqG SIb3DQEBCwUAA4IBAQCr5RdIMm/h5la1rStqlQP42OFVeelgeVE6np7P/oz3pG7/ pphDjVTy6y8TNujrbqvnAa26PKJrJgslquxXNORuPRGK7pbzSZayAcJd8g+MiJO4 d5FzVD/993ByWZKP+VTmF57uqXbIRN4PUIG8R9D7TVoMYHnhbfCje+IGkHv+fZk1 TS/AcI7+oROoMKr3YNnqq8ekM/CDpQUYp4nSIFJXk2gqO1jzCFMI19wleK3uvaJ/ os9joSJ95KcT5GBWCQbPYHRkBbFaGa5UDYuDvjAjh58m5bVH6qkF/PXard/3zscB unzs4Y121U/YtK0Cv/RaDYozoWKyHm7XwQ35Zu9L -----END CERTIFICATE-----Generated at Wed Nov 5 20:45:24 2025 by rpki-client