$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3130332e32332e3234302e302f32322d3234203d3e203138313033.roa File: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (raw, json) Hash identifier: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg= Subject key identifier: C1:6D:B9:75:9B:D9:2F:42:BD:80:DA:AD:E4:2C:C8:F8:74:E8:95:0E Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 1D5249C78C0A88865D0551445B8CADB53BCB96A5 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3130332e32332e3234302e302f32322d3234203d3e203138313033.roa Signing time: Wed 23 Jul 2025 11:00:01 +0000 ROA not before: Wed 23 Jul 2025 10:55:01 +0000 ROA not after: Wed 22 Jul 2026 11:00:01 +0000 asID: 18103 IP address blocks: 103.23.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 12:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:52:49:c7:8c:0a:88:86:5d:05:51:44:5b:8c:ad:b5:3b:cb:96:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Jul 23 10:55:01 2025 GMT Not After : Jul 22 11:00:01 2026 GMT Subject: CN=C16DB9759BD92F42BD80DAADE42CC8F874E8950E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:e7:f2:bc:7e:20:61:99:b0:96:f2:38:00: 43:62:94:1f:9b:e3:59:6a:c4:c0:8b:9d:16:02:3e: a0:b7:84:9c:a2:bf:47:b4:36:77:9b:e8:9d:52:9f: ba:c2:c8:e0:ce:00:b3:4d:1c:99:b0:3a:35:42:6a: bc:a1:75:b3:64:f2:64:4a:04:98:66:62:84:20:a3: f5:79:64:ec:31:10:d8:6e:bb:d4:92:70:d9:05:c4: 22:a4:8e:3c:cc:cd:43:42:2e:43:60:7b:1e:d0:9b: 18:1a:8e:67:12:22:eb:87:15:6f:7d:14:61:89:5a: 3f:71:40:27:06:2b:a6:0a:d1:2d:cf:c8:1b:b7:58: 0b:68:b6:c5:e5:78:e7:88:55:6f:d9:62:5b:9c:17: df:96:7f:b4:b1:35:fe:42:a2:5f:47:4a:ad:10:1b: f8:3b:90:13:33:f2:33:c7:ac:71:4c:27:98:06:d3: 1a:c9:43:2a:c0:68:5e:82:37:e8:48:34:54:36:93: 75:a2:ae:a0:e2:f5:6c:b2:94:7c:8c:25:9b:31:55: 8b:dd:f2:31:53:bf:eb:d7:ce:ac:b2:0a:f7:29:ce: d8:42:2b:5d:84:b3:2b:17:29:79:55:17:ca:a2:5e: 00:db:df:19:f3:a2:49:47:7f:8d:e6:0a:66:87:cc: 05:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6D:B9:75:9B:D9:2F:42:BD:80:DA:AD:E4:2C:C8:F8:74:E8:95:0E X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3130332e32332e3234302e302f32322d3234203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.240.0/22 Signature Algorithm: sha256WithRSAEncryption 87:5f:05:73:40:53:1c:42:69:18:04:e5:f4:ba:f3:3e:e0:03: 32:db:db:01:34:80:72:b4:c2:88:c6:29:cb:ca:ad:64:ba:6e: 80:71:ae:7b:41:d1:a9:3d:df:9b:ba:2d:27:d9:15:a5:dc:7e: ba:ba:99:65:5f:17:86:78:36:59:ea:19:db:a9:7e:5c:86:e9: 9c:1b:39:ff:54:d1:14:3a:1a:53:98:eb:ae:f2:c0:80:d2:d9: 03:b6:a3:22:6b:63:c3:59:7c:e9:da:05:67:64:a3:ab:08:e5: 7e:71:4c:51:b3:36:38:93:3d:ba:f6:46:31:75:0b:dc:0f:16: 5b:8b:0d:c9:84:80:3e:8c:00:a7:5e:2a:37:18:ba:87:70:b0: d3:11:f1:0b:62:78:41:b9:69:3b:a0:0b:29:42:e6:5d:76:cc: d3:38:f5:fb:58:e0:49:ff:96:83:ae:54:44:0e:9c:83:59:70: 0a:08:f6:f9:77:dd:29:2b:69:43:84:21:af:4d:ff:c6:6e:d1: 23:dd:25:a2:41:b8:4c:a8:66:4d:90:ef:6a:fc:7b:a6:9c:48: a9:f6:5a:2e:0c:a3:e3:1a:30:42:82:5c:dc:fa:bd:23:49:4c: 8e:6a:9f:39:5b:05:c4:04:95:84:a7:15:d4:11:f1:12:1a:6d: 82:4c:ec:6b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHVJJx4wKiIZdBVFEW4yttTvLlqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA3MjMxMDU1MDFaFw0yNjA3MjIxMTAwMDFaMDMxMTAvBgNV BAMTKEMxNkRCOTc1OUJEOTJGNDJCRDgwREFBREU0MkNDOEY4NzRFODk1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OufyvH4gYZmwlvI4AENilB+b 41lqxMCLnRYCPqC3hJyiv0e0Nneb6J1Sn7rCyODOALNNHJmwOjVCaryhdbNk8mRK BJhmYoQgo/V5ZOwxENhuu9SScNkFxCKkjjzMzUNCLkNgex7QmxgajmcSIuuHFW99 FGGJWj9xQCcGK6YK0S3PyBu3WAtotsXleOeIVW/ZYlucF9+Wf7SxNf5Col9HSq0Q G/g7kBMz8jPHrHFMJ5gG0xrJQyrAaF6CN+hINFQ2k3WirqDi9WyylHyMJZsxVYvd 8jFTv+vXzqyyCvcpzthCK12EsysXKXlVF8qiXgDb3xnzoklHf43mCmaHzAW/AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwW25dZvZL0K9gNqt5CzI+HTolQ4wHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i YTAzLWEzZTFjZGQ4YWVlMC8wLzMxMzAzMzJlMzIzMzJlMzIzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzODMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcX8DANBgkqhkiG 9w0BAQsFAAOCAQEAh18Fc0BTHEJpGATl9LrzPuADMtvbATSAcrTCiMYpy8qtZLpu gHGue0HRqT3fm7otJ9kVpdx+urqZZV8Xhng2WeoZ26l+XIbpnBs5/1TRFDoaU5jr rvLAgNLZA7ajImtjw1l86doFZ2SjqwjlfnFMUbM2OJM9uvZGMXUL3A8WW4sNyYSA PowAp14qNxi6h3Cw0xHxC2J4QblpO6ALKULmXXbM0zj1+1jgSf+Wg65URA6cg1lw Cgj2+XfdKStpQ4Qhr03/xm7RI90lokG4TKhmTZDvavx7ppxIqfZaLgyj4xowQoJc 3Pq9I0lMjmqfOVsFxASVhKcV1BHxEhptgkzsaw== -----END CERTIFICATE-----Generated at Fri Nov 7 12:25:53 2025 by rpki-client