$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa File: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (raw, json) Hash identifier: t+CPpE2TC/5JImEcRiXdAKKegyxY7qwMPfKY4AYQh6I= Subject key identifier: 73:19:4A:74:5C:C7:BC:58:9F:F4:3C:15:4E:0A:AB:19:63:74:82:59 Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 12E5FB33359A3669907F82A047EB687893CBBDBB Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa Signing time: Tue 25 Feb 2025 12:11:23 +0000 ROA not before: Tue 25 Feb 2025 12:06:23 +0000 ROA not after: Tue 24 Feb 2026 12:11:23 +0000 asID: 149928 IP address blocks: 103.186.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e5:fb:33:35:9a:36:69:90:7f:82:a0:47:eb:68:78:93:cb:bd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Feb 25 12:06:23 2025 GMT Not After : Feb 24 12:11:23 2026 GMT Subject: CN=73194A745CC7BC589FF43C154E0AAB1963748259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8f:90:7a:42:36:4d:f4:09:57:3c:38:49:03: 52:56:00:66:92:c8:f2:5c:92:c0:5b:03:d8:82:dc: 96:22:1d:a8:92:b6:0a:f4:52:bc:15:78:4b:b1:f4: af:50:51:20:3f:19:61:b6:34:e8:26:57:bb:9a:8f: ca:85:44:96:6f:d9:cd:be:31:e6:b9:ce:3d:46:b6: 55:02:97:f3:36:62:0f:49:da:72:33:eb:85:a9:31: bd:5e:7c:12:53:1d:80:08:b1:d1:c0:78:ac:f5:f8: bf:73:f3:aa:6e:4c:6a:bb:99:f7:97:6b:e2:f2:f3: c0:bf:76:51:eb:bd:fc:78:d9:a6:6e:f8:47:f3:4f: 54:28:f5:5e:57:43:a0:d5:39:16:c2:2d:79:14:95: 36:3c:11:c1:23:65:c8:7f:62:5e:58:8e:7a:d5:b9: 0f:f8:9d:4a:77:a9:03:b4:cc:bc:fc:57:4e:eb:22: f8:f2:20:4b:83:9c:f6:c4:65:58:7a:be:42:d4:da: 98:5e:4e:e6:0e:c1:23:54:6e:11:3d:57:70:4b:75: 54:8b:6d:bc:f1:d0:93:4c:28:92:23:63:8f:dc:85: e1:c7:a2:f3:f9:85:9f:5c:44:5b:dc:9d:48:87:f1: 82:03:da:c9:1f:da:fe:2e:30:38:6e:5e:c7:fb:a2: 49:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:19:4A:74:5C:C7:BC:58:9F:F4:3C:15:4E:0A:AB:19:63:74:82:59 X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.192.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:03:bf:12:ad:79:d2:08:71:e4:0d:2c:ef:ca:d3:13:f1:95: c4:ce:7a:ca:33:ac:fb:c5:77:6a:d0:8f:28:46:89:8c:e3:9e: b4:0e:09:69:05:db:1f:c9:7c:ee:49:29:df:32:e0:ff:12:44: 27:d8:85:bf:f1:08:50:a0:cd:17:b0:2e:4d:16:75:ef:76:78: 23:19:8b:b0:2d:d3:a2:2a:cb:d2:72:21:34:9f:4a:29:c9:58: 84:dd:6e:2a:cb:ba:49:b6:68:6b:79:2b:4e:52:a7:db:bd:93: 4d:af:fd:dc:b0:73:63:69:50:65:20:36:be:32:36:de:ee:d6: 57:bb:d1:93:a0:ca:0c:7f:86:3e:60:85:cc:af:f5:32:8c:77: 47:49:fc:48:e1:1e:28:de:50:21:fb:70:b2:27:ee:b0:a6:99: d1:8d:c9:25:8c:ae:4c:6b:0b:76:85:4d:6d:13:e8:7e:ba:3c: f1:fc:44:b8:fa:a7:73:81:9c:aa:2c:cf:02:56:a5:7c:91:47: 3c:52:b5:ad:27:18:13:3e:f7:6c:32:8a:b3:a3:a9:7f:ab:7c: 08:da:24:f5:4c:10:f7:95:dc:72:90:5a:40:d0:a9:9a:b5:68: c9:f9:bb:06:d2:4c:11:7f:a0:d0:4c:58:e0:dd:27:88:92:b2: 98:df:20:8c -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUEuX7MzWaNmmQf4KgR+toeJPLvbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNTAyMjUxMjA2MjNaFw0yNjAyMjQxMjExMjNaMDMxMTAvBgNV BAMTKDczMTk0QTc0NUNDN0JDNTg5RkY0M0MxNTRFMEFBQjE5NjM3NDgyNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVj5B6QjZN9AlXPDhJA1JWAGaS yPJcksBbA9iC3JYiHaiStgr0UrwVeEux9K9QUSA/GWG2NOgmV7uaj8qFRJZv2c2+ Mea5zj1GtlUCl/M2Yg9J2nIz64WpMb1efBJTHYAIsdHAeKz1+L9z86puTGq7mfeX a+Ly88C/dlHrvfx42aZu+EfzT1Qo9V5XQ6DVORbCLXkUlTY8EcEjZch/Yl5YjnrV uQ/4nUp3qQO0zLz8V07rIvjyIEuDnPbEZVh6vkLU2pheTuYOwSNUbhE9V3BLdVSL bbzx0JNMKJIjY4/cheHHovP5hZ9cRFvcnUiH8YID2skf2v4uMDhuXsf7okkNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUcxlKdFzHvFif9DwVTgqrGWN0glkwHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzNWE5ZGRmLWMxMDktNGZjMS1h MzBkLThmMDRiODMzODFiZS8wLzMxMzAzMzJlMzEzODM2MmUzMTM5MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnusAwDQYJ KoZIhvcNAQELBQADggEBAFsDvxKtedIIceQNLO/K0xPxlcTOesozrPvFd2rQjyhG iYzjnrQOCWkF2x/JfO5JKd8y4P8SRCfYhb/xCFCgzRewLk0Wde92eCMZi7At06Iq y9JyITSfSinJWITdbirLukm2aGt5K05Sp9u9k02v/dywc2NpUGUgNr4yNt7u1le7 0ZOgygx/hj5ghcyv9TKMd0dJ/EjhHijeUCH7cLIn7rCmmdGNySWMrkxrC3aFTW0T 6H66PPH8RLj6p3OBnKoszwJWpXyRRzxSta0nGBM+92wyirOjqX+rfAjaJPVMEPeV 3HKQWkDQqZq1aMn5uwbSTBF/oNBMWODdJ4iSspjfIIw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:43:20 2025 by rpki-client