$ rpki-client -vvf repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa File: 3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa (raw, json) Hash identifier: RgUZ5nKp1y6B4wGbZAJZc0wqoSvvaefcSdZlerUoVrA= Subject key identifier: DE:98:9E:F2:B3:F7:36:B7:94:A4:B3:BE:5C:B8:1F:A6:09:86:B7:67 Certificate issuer: /CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Certificate serial: 256CE3733E6EBF45BC582D2337A023DFD8891E6A Authority key identifier: 35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa Signing time: Thu 17 Jul 2025 04:01:59 +0000 ROA not before: Thu 17 Jul 2025 03:56:59 +0000 ROA not after: Thu 16 Jul 2026 04:01:59 +0000 asID: 58404 IP address blocks: 103.102.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6c:e3:73:3e:6e:bf:45:bc:58:2d:23:37:a0:23:df:d8:89:1e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=356EA38801BC51EF3EDB8730387F8EDEBD11898F Validity Not Before: Jul 17 03:56:59 2025 GMT Not After : Jul 16 04:01:59 2026 GMT Subject: CN=DE989EF2B3F736B794A4B3BE5CB81FA60986B767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:86:12:48:ae:70:b4:44:4c:5b:57:2a:9a:a3: 29:d4:bd:23:be:b9:1b:c2:a0:fe:8d:e7:3c:48:fa: 0f:0e:7f:ff:cd:9e:58:51:df:f6:ef:f8:c6:2c:10: b2:89:12:f7:65:96:ff:66:08:ac:c3:53:47:5a:ee: 0c:52:b7:53:27:19:fb:62:63:1d:26:02:61:4c:ec: ef:77:db:af:cf:a9:a2:99:d9:25:fc:d3:f9:a0:c6: 5c:1e:63:90:bc:46:83:2d:5b:51:d6:f1:84:9a:ba: b9:a4:c6:02:6a:69:d5:9a:18:42:af:a1:ab:3b:2c: 09:11:cf:82:a2:e8:42:3f:ce:1b:86:2b:1e:7e:49: 50:c0:af:13:70:fe:0f:87:ff:81:d0:68:8e:c6:40: b3:8b:fe:36:70:56:bd:a5:ba:a7:27:a9:a4:a8:f4: 91:d5:99:a8:10:cf:24:32:1f:b7:ab:de:44:74:2b: 17:ae:c9:fa:ae:c6:26:d1:6a:65:b0:3f:fc:36:94: 23:a5:3b:b4:fb:55:fc:fb:a8:a8:b6:7c:63:1c:71: d6:72:06:50:10:be:ef:19:e8:e7:7f:37:1d:61:c8: 8b:80:72:c8:f1:0a:ef:f1:2a:b0:7a:90:31:22:2e: 07:27:59:17:60:77:67:23:d2:44:6c:32:20:13:35: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:98:9E:F2:B3:F7:36:B7:94:A4:B3:BE:5C:B8:1F:A6:09:86:B7:67 X509v3 Authority Key Identifier: keyid:35:6E:A3:88:01:BC:51:EF:3E:DB:87:30:38:7F:8E:DE:BD:11:89:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/356EA38801BC51EF3EDB8730387F8EDEBD11898F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/356EA38801BC51EF3EDB8730387F8EDEBD11898F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f2b6ed2-cc58-45c5-bd88-cb9550716a04/0/3130332e3130322e3135322e302f32322d3234203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.152.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:a2:90:ba:34:05:c7:86:d4:d8:1a:a0:84:c3:9f:17:db:d2: ee:aa:33:ea:5c:94:6d:65:f6:51:2d:28:9b:b5:e7:d0:ef:51: 2b:be:c1:10:a5:9c:ac:be:ba:e4:78:f8:71:82:b9:eb:1d:18: cf:41:60:62:ce:11:61:88:d9:7c:24:19:6e:18:98:1b:a5:bf: 66:9e:17:c7:fc:f4:48:6c:fe:0b:e5:fe:d5:b8:26:c1:94:1c: c1:a1:b7:61:bb:8f:40:45:5f:c8:72:55:95:7b:39:ec:68:55: b7:db:3e:96:c3:23:ab:57:8a:08:ac:28:0e:01:ea:7d:77:89: 34:79:31:84:2a:45:87:91:bf:cf:15:68:b2:d4:04:28:dd:68: c1:f3:1e:cf:1e:82:5f:47:37:17:b8:be:cf:02:6c:a6:86:7f: 39:1f:7c:f7:68:d2:ea:b7:9c:9c:cc:69:5c:13:ba:23:49:c6: c8:a5:d5:42:da:e1:e3:8c:4b:cd:83:f5:2f:90:cc:66:12:0c: b3:10:9a:24:ec:51:a3:3b:1c:5b:8e:57:dd:d9:56:46:9e:8c: b2:a3:00:2e:cc:08:0c:c4:bf:31:26:8c:49:fd:1c:e1:06:cc: ec:6c:ed:a2:50:78:19:26:d1:42:ee:ff:0b:22:0a:80:10:21: 48:29:1e:35 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJWzjcz5uv0W8WC0jN6Aj39iJHmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVC RDExODk4RjAeFw0yNTA3MTcwMzU2NTlaFw0yNjA3MTYwNDAxNTlaMDMxMTAvBgNV BAMTKERFOTg5RUYyQjNGNzM2Qjc5NEE0QjNCRTVDQjgxRkE2MDk4NkI3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhhJIrnC0RExbVyqaoynUvSO+ uRvCoP6N5zxI+g8Of//NnlhR3/bv+MYsELKJEvdllv9mCKzDU0da7gxSt1MnGfti Yx0mAmFM7O9326/PqaKZ2SX80/mgxlweY5C8RoMtW1HW8YSaurmkxgJqadWaGEKv oas7LAkRz4Ki6EI/zhuGKx5+SVDArxNw/g+H/4HQaI7GQLOL/jZwVr2luqcnqaSo 9JHVmagQzyQyH7er3kR0KxeuyfquxibRamWwP/w2lCOlO7T7Vfz7qKi2fGMccdZy BlAQvu8Z6Od/Nx1hyIuAcsjxCu/xKrB6kDEiLgcnWRdgd2cj0kRsMiATNZKxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3pie8rP3NreUpLO+XLgfpgmGt2cwHwYDVR0j BBgwFoAUNW6jiAG8Ue8+24cwOH+O3r0RiY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjJiNmVkMi1jYzU4LTQ1YzUtYmQ4OC1jYjk1NTA3MTZhMDQvMC8zNTZFQTM4ODAx QkM1MUVGM0VEQjg3MzAzODdGOEVERUJEMTE4OThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU2RUEzODgwMUJDNTFFRjNFREI4NzMwMzg3RjhFREVCRDEx ODk4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmMmI2ZWQyLWNjNTgtNDVjNS1i ZDg4LWNiOTU1MDcxNmEwNC8wLzMxMzAzMzJlMzEzMDMyMmUzMTM1MzIyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNTM4MzQzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2aYMA0GCSqG SIb3DQEBCwUAA4IBAQCMopC6NAXHhtTYGqCEw58X29LuqjPqXJRtZfZRLSibtefQ 71ErvsEQpZysvrrkePhxgrnrHRjPQWBizhFhiNl8JBluGJgbpb9mnhfH/PRIbP4L 5f7VuCbBlBzBobdhu49ARV/IclWVeznsaFW32z6WwyOrV4oIrCgOAep9d4k0eTGE KkWHkb/PFWiy1AQo3WjB8x7PHoJfRzcXuL7PAmymhn85H3z3aNLqt5yczGlcE7oj ScbIpdVC2uHjjEvNg/UvkMxmEgyzEJok7FGjOxxbjlfd2VZGnoyyowAuzAgMxL8x JoxJ/RzhBszsbO2iUHgZJtFC7v8LIgqAECFIKR41 -----END CERTIFICATE-----Generated at Fri Aug 8 00:12:50 2025 by rpki-client