$ rpki-client -vvf repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa File: 3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa (raw, json) Hash identifier: tArDMQ0CljWlxInpOnDNWhLbYH4HF1sjePzkXRXnEac= Subject key identifier: 1E:31:C1:31:17:CA:A1:88:B7:3A:4D:3F:55:E0:2C:39:E1:FA:D8:90 Certificate issuer: /CN=D68CA7C6F514D7168C00790717FB869AF68B125E Certificate serial: 43030605A2A1294C2FE424C7C67E7F8A47D135B1 Authority key identifier: D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa Signing time: Wed 06 Aug 2025 11:00:00 +0000 ROA not before: Wed 06 Aug 2025 10:55:00 +0000 ROA not after: Wed 05 Aug 2026 11:00:00 +0000 asID: 139381 IP address blocks: 103.142.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:03:06:05:a2:a1:29:4c:2f:e4:24:c7:c6:7e:7f:8a:47:d1:35:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D68CA7C6F514D7168C00790717FB869AF68B125E Validity Not Before: Aug 6 10:55:00 2025 GMT Not After : Aug 5 11:00:00 2026 GMT Subject: CN=1E31C13117CAA188B73A4D3F55E02C39E1FAD890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:e6:9c:a6:5e:e3:ae:f6:79:05:59:03:9a: 4d:89:c9:40:2d:43:f4:02:ab:de:a0:03:37:70:0b: 90:34:75:65:e3:1e:2c:c8:a2:6d:fb:c8:e4:30:24: 9e:e1:52:e0:50:9c:fa:2f:ab:39:b0:90:bb:8a:88: 3c:f3:a1:88:bf:72:86:1c:8c:f7:2a:32:ef:79:5e: bb:7f:04:2f:76:54:be:aa:bb:ad:14:1f:52:4b:f7: ac:73:2d:b0:8a:6d:82:32:23:7a:ba:ca:8d:fa:7c: 84:68:67:42:bd:5f:ec:1e:2b:9e:d1:b9:58:ba:49: 10:cf:fb:bf:3c:0f:ec:37:14:0d:58:52:d4:c9:e0: ac:ae:59:da:b6:a2:4f:2a:7e:eb:65:92:b6:21:bb: d4:89:6a:81:d8:ea:36:ac:5d:fe:09:14:00:42:f1: 04:fc:3d:87:73:56:b9:7f:4f:53:49:f4:a4:62:57: 7e:6b:3f:fa:53:42:44:15:13:0b:30:02:2b:71:5e: 94:40:10:6f:12:a5:de:e4:07:61:66:70:80:94:22: df:ea:06:1e:2e:4b:32:f6:fe:a5:ae:8f:35:1b:42: 6e:41:00:55:b8:ee:60:cc:05:01:33:3c:5a:23:35: dc:36:a1:d6:3c:ab:64:f9:96:22:7b:7b:bf:e3:a2: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:31:C1:31:17:CA:A1:88:B7:3A:4D:3F:55:E0:2C:39:E1:FA:D8:90 X509v3 Authority Key Identifier: keyid:D6:8C:A7:C6:F5:14:D7:16:8C:00:79:07:17:FB:86:9A:F6:8B:12:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/D68CA7C6F514D7168C00790717FB869AF68B125E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D68CA7C6F514D7168C00790717FB869AF68B125E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ddc1dd8-6d25-47c7-aaa4-bddf1b9d677e/0/3130332e3134322e3235352e302f32342d3234203d3e20313339333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.255.0/24 Signature Algorithm: sha256WithRSAEncryption 77:70:4f:dc:85:ff:ae:5f:df:2b:eb:93:4a:28:50:29:7d:3f: d8:bc:53:28:c6:ca:a5:5e:4f:b2:2e:94:b7:84:e5:67:2d:48: 72:f6:13:6b:fc:a3:c2:74:5e:4d:c6:ba:51:d0:5e:68:61:8d: 59:4f:12:24:fd:98:e2:34:97:36:ec:a4:33:d9:20:da:f9:30: 25:2c:8b:ed:10:0b:fa:51:47:21:fe:49:85:ff:14:e9:5b:29: 3b:93:62:ac:ac:37:b8:5b:80:7a:2d:a1:c0:e9:eb:60:39:10: 89:8c:1e:72:27:39:6d:70:d6:db:ea:c8:73:b8:cd:5e:24:39: 98:78:32:ae:ef:08:24:95:7b:42:73:72:b2:7f:f0:bc:30:c4: f7:03:8e:6d:56:96:68:91:5d:0f:f1:c8:7a:73:f6:47:b4:5d: 0a:a0:ed:d9:7b:a6:b4:d3:ff:33:2e:a9:97:2e:63:cd:c7:67: 81:af:53:56:c2:07:82:c0:b1:3e:47:a1:ce:93:86:87:c6:cc: 87:53:cd:73:ff:68:4a:f5:41:e3:b5:bb:b9:04:ae:75:36:bd: 30:e6:cf:b2:a9:54:e1:f8:d7:4a:d3:33:2c:11:6a:cc:44:b6: 50:7f:56:a9:8e:a7:f0:5f:5c:ed:56:3c:48:da:bd:cd:7f:c4: 2c:91:8d:a4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQwMGBaKhKUwv5CTHxn5/ikfRNbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFG NjhCMTI1RTAeFw0yNTA4MDYxMDU1MDBaFw0yNjA4MDUxMTAwMDBaMDMxMTAvBgNV BAMTKDFFMzFDMTMxMTdDQUExODhCNzNBNEQzRjU1RTAyQzM5RTFGQUQ4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQOacpl7jrvZ5BVkDmk2JyUAt Q/QCq96gAzdwC5A0dWXjHizIom37yOQwJJ7hUuBQnPovqzmwkLuKiDzzoYi/coYc jPcqMu95Xrt/BC92VL6qu60UH1JL96xzLbCKbYIyI3q6yo36fIRoZ0K9X+weK57R uVi6SRDP+788D+w3FA1YUtTJ4KyuWdq2ok8qfutlkrYhu9SJaoHY6jasXf4JFABC 8QT8PYdzVrl/T1NJ9KRiV35rP/pTQkQVEwswAitxXpRAEG8Spd7kB2FmcICUIt/q Bh4uSzL2/qWujzUbQm5BAFW47mDMBQEzPFojNdw2odY8q2T5liJ7e7/joq0NAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUHjHBMRfKoYi3Ok0/VeAsOeH62JAwHwYDVR0j BBgwFoAU1oynxvUU1xaMAHkHF/uGmvaLEl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGRjMWRkOC02ZDI1LTQ3YzctYWFhNC1iZGRmMWI5ZDY3N2UvMC9ENjhDQTdDNkY1 MTRENzE2OEMwMDc5MDcxN0ZCODY5QUY2OEIxMjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4Q0E3QzZGNTE0RDcxNjhDMDA3OTA3MTdGQjg2OUFGNjhC MTI1RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZGMxZGQ4LTZkMjUtNDdjNy1h YWE0LWJkZGYxYjlkNjc3ZS8wLzMxMzAzMzJlMzEzNDMyMmUzMjM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjv8wDQYJ KoZIhvcNAQELBQADggEBAHdwT9yF/65f3yvrk0ooUCl9P9i8UyjGyqVeT7IulLeE 5WctSHL2E2v8o8J0Xk3GulHQXmhhjVlPEiT9mOI0lzbspDPZINr5MCUsi+0QC/pR RyH+SYX/FOlbKTuTYqysN7hbgHotocDp62A5EImMHnInOW1w1tvqyHO4zV4kOZh4 Mq7vCCSVe0JzcrJ/8LwwxPcDjm1WlmiRXQ/xyHpz9ke0XQqg7dl7prTT/zMuqZcu Y83HZ4GvU1bCB4LAsT5Hoc6ThofGzIdTzXP/aEr1QeO1u7kErnU2vTDmz7KpVOH4 10rTMywRasxEtlB/VqmOp/BfXO1WPEjavc1/xCyRjaQ= -----END CERTIFICATE-----Generated at Fri Aug 8 00:19:01 2025 by rpki-client