$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa File: 3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa (raw, json) Hash identifier: f+ByKlXqW9frC+wMCTfVgShsL7KvX9jzykdTW8fSJys= Subject key identifier: 1A:53:5A:3B:5F:51:4F:49:0A:B4:AB:3B:06:0C:AF:08:28:82:D3:16 Certificate issuer: /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Certificate serial: 05BA8AD2A1F12C8FE5CEA5799F6504DEF864F617 Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa Signing time: Fri 13 Jun 2025 09:02:06 +0000 ROA not before: Fri 13 Jun 2025 08:57:06 +0000 ROA not after: Fri 12 Jun 2026 09:02:06 +0000 asID: 140407 IP address blocks: 103.151.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ba:8a:d2:a1:f1:2c:8f:e5:ce:a5:79:9f:65:04:de:f8:64:f6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Validity Not Before: Jun 13 08:57:06 2025 GMT Not After : Jun 12 09:02:06 2026 GMT Subject: CN=1A535A3B5F514F490AB4AB3B060CAF082882D316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:00:06:5f:91:0b:bc:9d:35:9f:7d:dc:26:36: 2f:d4:95:79:b8:aa:cf:ee:2a:73:8c:52:bd:10:51: fb:37:e3:4b:24:9b:5a:ea:7e:73:b4:61:d1:21:77: 3e:ee:14:dd:34:6f:8a:67:e1:6c:66:63:92:14:82: d9:d0:16:ac:fe:ef:18:58:58:f2:a9:4a:f9:1c:7b: f4:00:2d:f5:0a:31:91:dc:46:bb:14:51:59:f5:7a: dc:65:28:1f:39:8a:9e:12:52:03:9c:d8:5e:a3:6f: 74:34:3a:61:05:c5:66:bd:6f:00:61:05:1a:d5:0f: e9:8a:b3:9e:87:8e:62:26:61:21:12:30:37:e4:38: 98:e9:15:da:70:55:1b:74:fe:74:c2:87:a1:fa:e4: dc:7e:bd:06:93:ea:1c:ec:da:04:10:79:61:fc:da: 04:fe:2c:47:da:18:07:9c:cb:59:ff:f1:a1:a8:04: 0e:b5:6a:90:b8:35:40:2c:11:2b:00:2a:93:c7:ef: 11:18:c6:3d:77:61:e9:d9:c8:da:ae:6f:a4:9e:fa: 95:8f:71:89:b4:71:9b:7a:51:bf:bd:9d:c7:46:86: 70:05:c7:ca:8a:d5:26:e8:b2:66:e5:94:f1:5f:0d: 81:8a:04:dd:1f:94:af:40:77:a1:e5:b4:dc:57:5d: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:53:5A:3B:5F:51:4F:49:0A:B4:AB:3B:06:0C:AF:08:28:82:D3:16 X509v3 Authority Key Identifier: keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/3130332e3135312e33322e302f32332d3233203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.32.0/23 Signature Algorithm: sha256WithRSAEncryption 73:b8:74:0d:a4:e8:f9:e7:19:d0:67:56:e0:67:40:64:42:33: 47:65:a9:d2:0d:04:5c:ff:30:bf:76:2e:f3:f5:50:fb:26:b5: d9:32:b6:b0:a2:bc:20:4b:01:44:b7:df:42:ff:d8:b6:cf:b2: 60:7f:eb:5b:7e:88:69:ca:8a:f5:ce:74:8d:33:5f:e5:1b:d2: c2:98:8b:e7:44:06:0a:ab:c5:d3:3a:55:54:e6:b6:60:f3:eb: 9a:de:b0:e6:ad:ee:59:26:ac:d7:7f:4a:4f:d8:f3:89:2e:fe: 24:5a:58:71:bb:5c:55:8a:c8:73:72:82:a2:14:43:77:2c:4d: e5:54:b7:6d:7b:88:9c:81:f5:79:ab:b9:b5:5f:49:35:d1:3a: bb:27:e9:0d:33:50:b6:1e:40:af:30:8b:f8:70:a5:a9:7f:17: 49:ea:79:d8:2a:c6:33:3c:de:d3:4d:d5:d1:64:fa:fc:2c:10: 9f:59:45:78:ab:a8:40:7d:74:23:d3:01:0d:bd:ca:72:c6:1b: 5e:6f:07:1d:ac:90:f9:49:af:0a:17:05:d2:31:74:0b:4e:70: d8:92:8d:ca:b2:51:94:d1:d8:67:89:de:d8:8f:d7:0d:81:ac: a0:a7:5d:de:14:64:af:be:2e:8a:b5:98:90:80:b2:90:de:e9: ed:36:6e:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBbqK0qHxLI/lzqV5n2UE3vhk9hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NE QTY2MkM1MzAeFw0yNTA2MTMwODU3MDZaFw0yNjA2MTIwOTAyMDZaMDMxMTAvBgNV BAMTKDFBNTM1QTNCNUY1MTRGNDkwQUI0QUIzQjA2MENBRjA4Mjg4MkQzMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjAAZfkQu8nTWffdwmNi/UlXm4 qs/uKnOMUr0QUfs340skm1rqfnO0YdEhdz7uFN00b4pn4WxmY5IUgtnQFqz+7xhY WPKpSvkce/QALfUKMZHcRrsUUVn1etxlKB85ip4SUgOc2F6jb3Q0OmEFxWa9bwBh BRrVD+mKs56HjmImYSESMDfkOJjpFdpwVRt0/nTCh6H65Nx+vQaT6hzs2gQQeWH8 2gT+LEfaGAecy1n/8aGoBA61apC4NUAsESsAKpPH7xEYxj13YenZyNqub6Se+pWP cYm0cZt6Ub+9ncdGhnAFx8qK1SbosmbllPFfDYGKBN0flK9Ad6HltNxXXZEbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGlNaO19RT0kKtKs7BgyvCCiC0xYwHwYDVR0j BBgwFoAU8Q3qhaGZE40K2W3E08tTfNpmLFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMC9GMTBERUE4NUEx OTkxMzhEMEFEOTZEQzREM0NCNTM3Q0RBNjYyQzUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjEwREVBODVBMTk5MTM4RDBBRDk2REM0RDNDQjUzN0NEQTY2 MkM1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1OTZiY2M4LTM4Y2QtNDQzNy04 MGIxLTViYWU5Zjg1NzkzNy8wLzMxMzAzMzJlMzEzNTMxMmUzMzMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5cgMA0GCSqG SIb3DQEBCwUAA4IBAQBzuHQNpOj55xnQZ1bgZ0BkQjNHZanSDQRc/zC/di7z9VD7 JrXZMraworwgSwFEt99C/9i2z7Jgf+tbfohpyor1znSNM1/lG9LCmIvnRAYKq8XT OlVU5rZg8+ua3rDmre5ZJqzXf0pP2POJLv4kWlhxu1xVishzcoKiFEN3LE3lVLdt e4icgfV5q7m1X0k10Tq7J+kNM1C2HkCvMIv4cKWpfxdJ6nnYKsYzPN7TTdXRZPr8 LBCfWUV4q6hAfXQj0wENvcpyxhtebwcdrJD5Sa8KFwXSMXQLTnDYko3KslGU0dhn id7Yj9cNgaygp13eFGSvvi6KtZiQgLKQ3untNm5m -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:14 2025 by rpki-client