$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa File: 3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa (raw, json) Hash identifier: 8QPIleK9jMxRrZo8MGpSwWvTnJ7WLwlPDZ1i0haixbA= Subject key identifier: 17:19:A4:01:C5:91:A7:40:E8:1A:DC:5F:E4:41:15:15:7E:63:95:25 Certificate issuer: /CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Certificate serial: 0C06281A1B46098BB2C5596C602CEB5F3A9D94F3 Authority key identifier: CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa Signing time: Sat 26 Jul 2025 10:00:00 +0000 ROA not before: Sat 26 Jul 2025 09:55:00 +0000 ROA not after: Sat 25 Jul 2026 10:00:00 +0000 asID: 23951 IP address blocks: 103.101.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:06:28:1a:1b:46:09:8b:b2:c5:59:6c:60:2c:eb:5f:3a:9d:94:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F Validity Not Before: Jul 26 09:55:00 2025 GMT Not After : Jul 25 10:00:00 2026 GMT Subject: CN=1719A401C591A740E81ADC5FE44115157E639525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:ca:d2:18:b8:75:8f:dc:ff:70:fd:43:ae: 49:ee:e4:d5:d4:e7:81:84:ae:a6:3c:45:08:29:a8: 89:8b:e3:e6:26:f3:a5:99:58:94:c5:20:52:f6:18: 2d:43:1b:fd:87:e1:f4:b3:26:92:9c:cf:dc:92:84: 45:3f:06:a9:63:4d:dc:bb:fb:6f:e1:59:08:0d:7b: c7:61:25:55:11:8e:b4:27:1b:3a:9d:6d:63:b6:d2: 5b:98:4a:53:fb:2a:a5:db:dc:02:ef:d9:f3:e6:81: 7f:28:22:1a:f2:f1:42:49:af:ce:0e:aa:8e:0c:39: 4a:5f:a5:24:62:ad:1a:26:d0:70:7c:a0:44:e1:1f: 88:02:6a:01:3b:19:c8:24:15:8a:14:36:03:8c:74: df:e2:19:96:aa:b5:84:ca:5c:1b:5a:ee:30:b8:b7: e2:3d:ae:1d:07:40:d1:c5:98:22:50:43:b3:3f:c5: a7:8f:2d:83:b3:66:8b:4a:67:e7:71:0a:02:ab:39: 6f:48:46:4e:a8:36:fa:d4:01:0f:0f:6f:07:6e:d8: fc:c9:84:4e:ee:20:e6:79:b0:ae:70:c8:e7:39:0b: 7c:94:24:d8:b1:09:98:1f:77:44:57:91:50:b2:11: 0a:4e:df:37:1d:bf:02:41:7d:fb:3a:6e:09:2a:e9: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:19:A4:01:C5:91:A7:40:E8:1A:DC:5F:E4:41:15:15:7E:63:95:25 X509v3 Authority Key Identifier: keyid:CA:35:BA:C7:A4:05:DF:1E:D9:ED:62:F0:9D:2F:4F:2E:14:3C:8E:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA35BAC7A405DF1ED9ED62F09D2F4F2E143C8E8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6a7e46-b6ad-4a7d-b930-1ab0bf02dd5d/0/3130332e3130312e3133362e302f32332d3233203d3e203233393531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.136.0/23 Signature Algorithm: sha256WithRSAEncryption 81:12:c8:6f:f8:95:e7:66:f5:85:d7:0e:b9:05:c3:e7:c6:f8: a7:85:97:3b:2f:12:ee:ff:17:a6:f6:38:48:66:4f:ef:ed:3c: 5c:1d:2c:0e:0f:00:ba:22:55:8b:47:a0:d8:11:47:ad:87:97: 9d:8b:ba:f2:65:a0:e4:0b:24:fd:d9:ae:18:df:8a:70:89:02: 0b:9d:1a:14:fa:9a:95:42:e7:d0:ac:ec:0f:87:7c:2d:a5:5c: d3:c5:af:85:b7:d8:92:4b:dd:37:53:ff:11:57:f8:4a:f6:82: 80:57:8e:bc:89:40:d5:f5:b8:7c:99:3e:67:5c:d4:0a:83:87: 3b:3e:a9:1a:cd:4d:6a:a5:09:83:e7:f0:ff:13:95:84:4c:64: b6:4b:2a:a0:82:de:05:7c:1c:5a:2f:70:e2:3e:e3:ee:7c:05: d9:62:f5:9a:3d:40:21:9d:35:cd:7e:f4:06:95:aa:a3:4c:de: bb:66:61:b1:f4:11:d6:cf:04:5c:5d:f0:a6:ad:3b:3c:58:23: c3:33:0b:80:16:49:02:a1:6b:31:a6:64:78:eb:5c:c4:f6:75: 37:bc:00:5a:79:e9:fa:fd:64:46:55:fe:ec:44:7a:eb:8c:15: a3:83:29:73:2f:3b:85:db:e3:b2:39:6d:2b:c1:1e:54:cd:9c: a2:7d:3c:11 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDAYoGhtGCYuyxVlsYCzrXzqdlPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUx NDNDOEU4RjAeFw0yNTA3MjYwOTU1MDBaFw0yNjA3MjUxMDAwMDBaMDMxMTAvBgNV BAMTKDE3MTlBNDAxQzU5MUE3NDBFODFBREM1RkU0NDExNTE1N0U2Mzk1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGMrSGLh1j9z/cP1Drknu5NXU 54GErqY8RQgpqImL4+Ym86WZWJTFIFL2GC1DG/2H4fSzJpKcz9yShEU/BqljTdy7 +2/hWQgNe8dhJVURjrQnGzqdbWO20luYSlP7KqXb3ALv2fPmgX8oIhry8UJJr84O qo4MOUpfpSRirRom0HB8oEThH4gCagE7GcgkFYoUNgOMdN/iGZaqtYTKXBta7jC4 t+I9rh0HQNHFmCJQQ7M/xaePLYOzZotKZ+dxCgKrOW9IRk6oNvrUAQ8Pbwdu2PzJ hE7uIOZ5sK5wyOc5C3yUJNixCZgfd0RXkVCyEQpO3zcdvwJBffs6bgkq6a6/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFxmkAcWRp0DoGtxf5EEVFX5jlSUwHwYDVR0j BBgwFoAUyjW6x6QF3x7Z7WLwnS9PLhQ8jo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZhN2U0Ni1iNmFkLTRhN2QtYjkzMC0xYWIwYmYwMmRkNWQvMC9DQTM1QkFDN0E0 MDVERjFFRDlFRDYyRjA5RDJGNEYyRTE0M0M4RThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzNUJBQzdBNDA1REYxRUQ5RUQ2MkYwOUQyRjRGMkUxNDND OEU4Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlNmE3ZTQ2LWI2YWQtNGE3ZC1i OTMwLTFhYjBiZjAyZGQ1ZC8wLzMxMzAzMzJlMzEzMDMxMmUzMTMzMzYyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMjMzMzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2WIMA0GCSqG SIb3DQEBCwUAA4IBAQCBEshv+JXnZvWF1w65BcPnxvinhZc7LxLu/xem9jhIZk/v 7TxcHSwODwC6IlWLR6DYEUeth5edi7ryZaDkCyT92a4Y34pwiQILnRoU+pqVQufQ rOwPh3wtpVzTxa+Ft9iSS903U/8RV/hK9oKAV468iUDV9bh8mT5nXNQKg4c7Pqka zU1qpQmD5/D/E5WETGS2Syqggt4FfBxaL3DiPuPufAXZYvWaPUAhnTXNfvQGlaqj TN67ZmGx9BHWzwRcXfCmrTs8WCPDMwuAFkkCoWsxpmR461zE9nU3vABaeen6/WRG Vf7sRHrrjBWjgylzLzuF2+OyOW0rwR5UzZyifTwR -----END CERTIFICATE-----Generated at Thu Aug 7 20:10:11 2025 by rpki-client