$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa File: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (raw, json) Hash identifier: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0= Subject key identifier: 78:2E:74:08:4C:C1:C5:A0:7A:E2:1E:DE:2C:21:A0:4D:08:41:02:4A Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 4CFA9E64300D8865C711953AEDE2A9E2AD476C6D Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa Signing time: Sun 20 Jul 2025 10:02:24 +0000 ROA not before: Sun 20 Jul 2025 09:57:24 +0000 ROA not after: Sun 19 Jul 2026 10:02:24 +0000 asID: 17995 IP address blocks: 103.139.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fa:9e:64:30:0d:88:65:c7:11:95:3a:ed:e2:a9:e2:ad:47:6c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Jul 20 09:57:24 2025 GMT Not After : Jul 19 10:02:24 2026 GMT Subject: CN=782E74084CC1C5A07AE21EDE2C21A04D0841024A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:59:c5:21:15:0e:50:92:4e:40:b6:10:db: b7:e6:e4:b1:75:b5:22:60:80:a0:29:c5:6a:4a:04: 10:61:eb:35:5d:c4:8c:9c:5e:76:72:36:2d:6d:82: 08:d4:08:70:8f:0b:cf:25:5a:d7:54:b9:0a:01:60: 0b:13:db:d4:de:8a:9e:ec:c5:a1:b3:52:75:ad:51: fd:7b:05:e4:ad:8d:80:36:36:c5:8d:54:16:a3:43: 26:58:5c:44:87:27:de:36:77:c5:e8:76:58:28:99: 07:24:fc:c4:4e:97:c7:c6:82:5b:7d:c8:1b:e4:de: 89:e7:a8:04:e1:a3:ad:74:0a:ad:d6:79:30:eb:74: f2:52:23:02:c8:c0:b3:02:0b:c6:99:0a:3f:ac:2c: f9:33:2a:90:5f:0b:10:c1:e2:33:ce:be:bb:f5:9a: 3c:81:86:69:90:5e:b7:22:42:8f:84:ef:c8:14:d2: c3:3a:71:35:47:3c:4e:d0:a1:01:9e:f6:1a:aa:82: 12:82:b2:0a:ce:cc:32:ba:42:74:f9:de:b9:55:ae: a7:02:ae:ea:18:07:6d:7f:05:a0:16:08:9d:b8:60: ad:8c:10:b3:40:1f:00:c3:28:3b:e4:9a:67:94:21: c9:57:36:16:d5:b2:f4:0e:7f:46:45:90:91:de:e9: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2E:74:08:4C:C1:C5:A0:7A:E2:1E:DE:2C:21:A0:4D:08:41:02:4A X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.47.0/24 Signature Algorithm: sha256WithRSAEncryption db:9b:7f:15:fa:65:ab:8f:62:62:ba:01:e1:31:78:da:ac:8c: df:78:24:86:a7:02:2c:a0:c1:04:8e:bc:b7:ea:43:71:b5:60: 05:41:78:82:91:1a:6f:9f:3d:82:fa:91:a2:a9:c3:82:47:68: 09:86:ff:41:66:16:7e:7a:d3:8b:42:e7:c1:f0:2f:46:7e:34: 35:0b:f8:d7:41:9f:a3:73:c5:1b:a8:47:64:dd:9a:70:e3:31: 50:a6:27:08:0a:e3:b9:93:a7:90:b2:44:6c:57:bb:91:db:6b: 5d:11:3b:80:8c:7b:f3:6a:b0:ca:ae:a3:74:3a:d2:f5:e9:ca: 9c:ba:b0:8b:18:7b:2b:70:77:51:b4:60:d5:dd:ca:e3:d2:1d: 60:11:86:c5:bb:3e:4d:98:bc:24:5f:f7:9e:37:59:2e:78:e7: 8d:e5:c8:c0:b0:af:9b:88:af:1c:3a:f7:1d:eb:29:d0:42:63: 6b:24:6b:4a:c7:71:68:44:41:a3:9b:88:41:64:48:88:cc:c3: 92:5a:10:da:bd:bb:70:ed:92:08:8e:a7:68:78:7e:29:12:1a: b4:28:f6:c7:bb:bd:f6:31:a9:d0:82:3b:93:80:91:81:4a:ef: 45:47:3e:8c:68:30:1e:4a:dd:c1:07:2b:2b:5e:bf:8a:47:d7: 0a:65:7c:85 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTPqeZDANiGXHEZU67eKp4q1HbG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTA3MjAwOTU3MjRaFw0yNjA3MTkxMDAyMjRaMDMxMTAvBgNV BAMTKDc4MkU3NDA4NENDMUM1QTA3QUUyMUVERTJDMjFBMDREMDg0MTAyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTFnFIRUOUJJOQLYQ27fm5LF1 tSJggKApxWpKBBBh6zVdxIycXnZyNi1tggjUCHCPC88lWtdUuQoBYAsT29Teip7s xaGzUnWtUf17BeStjYA2NsWNVBajQyZYXESHJ942d8XodlgomQck/MROl8fGglt9 yBvk3onnqATho610Cq3WeTDrdPJSIwLIwLMCC8aZCj+sLPkzKpBfCxDB4jPOvrv1 mjyBhmmQXrciQo+E78gU0sM6cTVHPE7QoQGe9hqqghKCsgrOzDK6QnT53rlVrqcC ruoYB21/BaAWCJ24YK2MELNAHwDDKDvkmmeUIclXNhbVsvQOf0ZFkJHe6UqrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeC50CEzBxaB64h7eLCGgTQhBAkowHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyMzA3MzkwLTZlZjMtNDQ3Ni1h NmFhLWQwYzU3ODNlMWYzNy8wLzMxMzAzMzJlMzEzMzM5MmUzNDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeLLzANBgkqhkiG 9w0BAQsFAAOCAQEA25t/Ffplq49iYroB4TF42qyM33gkhqcCLKDBBI68t+pDcbVg BUF4gpEab589gvqRoqnDgkdoCYb/QWYWfnrTi0LnwfAvRn40NQv410Gfo3PFG6hH ZN2acOMxUKYnCArjuZOnkLJEbFe7kdtrXRE7gIx782qwyq6jdDrS9enKnLqwixh7 K3B3UbRg1d3K49IdYBGGxbs+TZi8JF/3njdZLnjnjeXIwLCvm4ivHDr3Hesp0EJj ayRrSsdxaERBo5uIQWRIiMzDkloQ2r27cO2SCI6naHh+KRIatCj2x7u99jGp0II7 k4CRgUrvRUc+jGgwHkrdwQcrK16/ikfXCmV8hQ== -----END CERTIFICATE-----Generated at Thu Aug 7 20:28:02 2025 by rpki-client