$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa File: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (raw, json) Hash identifier: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY= Subject key identifier: A7:29:31:F3:B6:78:D6:CF:6A:AE:65:EB:9B:AE:1E:27:1D:94:27:38 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 2C65B5A2E37B9EA11DB510B46D6791192D53DD98 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa Signing time: Sat 06 Sep 2025 10:00:02 +0000 ROA not before: Sat 06 Sep 2025 09:55:02 +0000 ROA not after: Sat 05 Sep 2026 10:00:02 +0000 asID: 141071 IP address blocks: 103.155.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:65:b5:a2:e3:7b:9e:a1:1d:b5:10:b4:6d:67:91:19:2d:53:dd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Sep 6 09:55:02 2025 GMT Not After : Sep 5 10:00:02 2026 GMT Subject: CN=A72931F3B678D6CF6AAE65EB9BAE1E271D942738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4b:9c:71:46:23:99:81:db:45:a3:3f:b2:32: 14:ec:3e:64:ab:8d:68:1e:53:11:86:41:c2:fb:3b: f0:95:1a:1f:15:32:ae:e3:b0:13:cf:97:d7:ba:69: bf:13:00:21:97:9a:83:b8:cd:18:fe:92:23:62:52: 50:71:a1:8c:8a:50:83:45:43:9b:1f:fb:96:c7:fe: 87:95:9a:a6:01:cc:79:93:cd:5f:bc:4c:a8:eb:f6: 53:7d:3b:3e:ed:c8:ad:54:0b:92:e4:32:d7:53:11: 2c:28:a8:92:b7:c5:47:0b:2e:db:87:0f:94:08:80: 54:df:4b:60:48:23:3f:2a:e4:f4:04:dd:ea:c3:fd: 7b:9c:73:48:cb:f2:58:2a:6f:67:4b:ae:e9:5f:ce: 36:1a:73:1a:e8:ac:72:e7:40:f4:b0:11:3b:53:4b: 17:53:3f:40:ae:66:1b:15:08:5d:c9:67:c8:9a:8f: 17:9b:55:cb:d4:9f:ff:fe:ba:38:94:7f:10:f8:c1: ae:80:ed:04:28:57:c2:e9:92:59:cb:11:38:1a:2b: 2c:85:4d:43:d7:2d:e8:df:83:48:39:e2:60:12:02: 5a:6d:c7:87:8e:eb:d8:ef:6a:3c:8e:f2:1f:1a:75: 19:fb:fc:9c:b9:1c:3e:df:cb:a2:3c:41:55:55:73: 3b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:29:31:F3:B6:78:D6:CF:6A:AE:65:EB:9B:AE:1E:27:1D:94:27:38 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.197.0/24 Signature Algorithm: sha256WithRSAEncryption 53:cc:cf:0a:7e:f4:fe:e5:1b:66:41:45:e9:29:37:37:53:07: 7a:e2:9b:8d:29:07:d3:11:09:fb:89:36:71:62:02:4f:bc:d7: 27:f4:2f:8d:46:a0:6d:b6:ac:89:0a:a1:83:f7:dc:dc:c9:46: 65:ea:ce:0e:08:7b:f7:79:24:96:f7:9b:f3:59:9d:30:75:bb: b7:95:9c:af:29:29:4d:61:89:77:e0:17:02:e8:cd:72:93:fe: 1e:e0:0d:da:8f:21:86:91:1c:27:37:a5:04:40:48:c7:a3:59: a6:35:7f:e4:9a:6b:90:ea:42:89:f9:f7:f8:b2:23:9a:ca:ef: 39:66:2b:86:e4:a3:27:b9:17:f8:dd:25:bb:05:39:ec:41:98: 80:d3:e1:ff:70:6f:8a:cf:7d:1f:f5:03:12:ed:88:aa:0e:56: dc:28:dd:3a:f6:3f:05:54:49:51:2c:79:16:ae:6d:04:42:49: 19:16:35:d9:c6:e6:f2:61:27:af:37:c2:9b:f4:68:a0:a9:e7: fd:14:d8:3e:31:26:0f:4f:56:ec:df:12:c3:8c:45:4f:ae:80: 57:e7:72:db:f9:bb:39:84:9c:92:18:a1:4c:26:45:76:78:b4: 9f:d9:11:8d:70:02:43:a4:06:5e:41:bc:b4:ce:c8:1a:7d:95: 79:82:a7:36 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULGW1ouN7nqEdtRC0bWeRGS1T3ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTA5MDYwOTU1MDJaFw0yNjA5MDUxMDAwMDJaMDMxMTAvBgNV BAMTKEE3MjkzMUYzQjY3OEQ2Q0Y2QUFFNjVFQjlCQUUxRTI3MUQ5NDI3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPS5xxRiOZgdtFoz+yMhTsPmSr jWgeUxGGQcL7O/CVGh8VMq7jsBPPl9e6ab8TACGXmoO4zRj+kiNiUlBxoYyKUINF Q5sf+5bH/oeVmqYBzHmTzV+8TKjr9lN9Oz7tyK1UC5LkMtdTESwoqJK3xUcLLtuH D5QIgFTfS2BIIz8q5PQE3erD/Xucc0jL8lgqb2dLrulfzjYacxrorHLnQPSwETtT SxdTP0CuZhsVCF3JZ8iajxebVcvUn//+ujiUfxD4wa6A7QQoV8LpklnLETgaKyyF TUPXLejfg0g54mASAlptx4eO69jvajyO8h8adRn7/Jy5HD7fy6I8QVVVczvhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUpykx87Z41s9qrmXrm64eJx2UJzgwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5Y2UwYzk0LTBkNmMtNDViMy1h YWM2LTM0ZDBjZTliMWYwOC8wLzMxMzAzMzJlMzEzNTM1MmUzMTM5MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM3MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm8UwDQYJ KoZIhvcNAQELBQADggEBAFPMzwp+9P7lG2ZBRekpNzdTB3rim40pB9MRCfuJNnFi Ak+81yf0L41GoG22rIkKoYP33NzJRmXqzg4Ie/d5JJb3m/NZnTB1u7eVnK8pKU1h iXfgFwLozXKT/h7gDdqPIYaRHCc3pQRASMejWaY1f+Saa5DqQon59/iyI5rK7zlm K4bkoye5F/jdJbsFOexBmIDT4f9wb4rPfR/1AxLtiKoOVtwo3Tr2PwVUSVEseRau bQRCSRkWNdnG5vJhJ683wpv0aKCp5/0U2D4xJg9PVuzfEsOMRU+ugFfnctv5uzmE nJIYoUwmRXZ4tJ/ZEY1wAkOkBl5BvLTOyBp9lXmCpzY= -----END CERTIFICATE-----Generated at Wed Nov 5 03:42:07 2025 by rpki-client