$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa File: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (raw, json) Hash identifier: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4= Subject key identifier: E1:39:EA:8F:8C:43:00:99:84:F6:96:55:F1:67:BC:87:88:1A:EB:87 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 3DA328DBA5F7DA07ACFFA2BF7A2635C86266A159 Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa Signing time: Mon 04 Aug 2025 19:00:00 +0000 ROA not before: Mon 04 Aug 2025 18:55:00 +0000 ROA not after: Mon 03 Aug 2026 19:00:00 +0000 asID: 142400 IP address blocks: 103.172.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a3:28:db:a5:f7:da:07:ac:ff:a2:bf:7a:26:35:c8:62:66:a1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Aug 4 18:55:00 2025 GMT Not After : Aug 3 19:00:00 2026 GMT Subject: CN=E139EA8F8C43009984F69655F167BC87881AEB87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:61:3e:a1:7f:4d:59:50:90:fc:f4:03:a7: 58:63:78:7f:54:90:33:de:64:d7:d8:df:04:cd:43: ac:78:39:bc:62:57:2d:0d:cc:40:28:e8:c7:7e:ad: 94:79:39:31:d0:72:a1:90:fb:47:8b:64:44:b1:71: e0:ad:6b:fa:45:5a:88:41:c0:4e:75:51:8e:12:41: a8:5e:b3:25:54:5e:43:ee:d4:ac:6c:44:ee:37:53: 19:5d:b9:ea:c1:a0:ae:8f:0c:bf:ee:ff:e9:16:12: 3c:60:b6:87:a0:8d:cc:77:c2:c8:bc:67:01:53:aa: a0:d8:da:0a:1a:fc:8d:ad:04:2b:85:e3:87:cb:d5: 0c:52:b1:4b:7e:59:ec:b5:80:3a:7a:55:91:22:21: d3:36:c4:90:43:d2:85:e2:c5:9f:a5:04:b6:64:8b: ca:09:39:cf:ec:11:32:fb:6a:d4:af:57:f9:bf:7e: 2a:77:89:ff:2f:ae:13:dc:ba:3f:85:5d:b0:c7:17: d2:23:ca:21:49:bb:21:be:b8:0b:8e:2f:d1:e5:ad: 75:10:31:f4:70:2a:71:c4:d1:5d:da:17:ea:49:66: 9b:77:41:90:88:52:11:26:6d:e9:bf:fd:3b:8c:24: b5:42:fb:a3:a6:be:0f:4b:76:54:be:ec:4b:65:b1: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:39:EA:8F:8C:43:00:99:84:F6:96:55:F1:67:BC:87:88:1A:EB:87 X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.187.0/24 Signature Algorithm: sha256WithRSAEncryption a0:9d:e9:e7:f5:ac:52:7f:00:15:e0:d0:13:3c:68:33:a7:47: 5a:c8:5a:a5:1a:7c:f5:04:76:33:96:86:70:c6:b1:43:30:95: 1e:02:5e:61:f3:9e:06:2b:1f:f6:dc:50:5e:c0:2e:76:76:d2: 77:15:ab:1f:40:39:ea:80:88:9d:9b:3b:f9:49:e5:53:d9:cb: 79:93:89:93:a7:ae:75:fb:8b:63:79:02:04:d0:00:90:4e:b7: 1d:11:b5:f2:e2:a9:f0:f1:da:b6:c1:ff:43:96:28:57:02:fe: a0:f2:ca:cb:9d:95:8f:6e:1a:8b:b2:92:81:cd:8e:31:66:02: 52:c4:af:d4:37:ca:d7:16:5e:5e:69:a7:ad:fd:d6:de:8c:1f: 14:c0:da:e7:8a:12:b5:b6:7d:52:9d:3d:8b:44:10:07:79:bb: 31:16:12:87:8c:71:f0:92:e1:0f:3d:6c:fd:33:3e:68:0a:c2: c3:28:40:e6:c3:f8:82:e4:de:20:cc:ac:c0:87:bc:6d:d6:9e: 75:c5:44:22:ad:0c:fa:44:43:2a:c4:26:f1:e5:5e:6e:22:79: 37:e0:82:7b:79:5f:07:63:b0:1c:b0:fa:20:e4:a9:aa:52:32: 45:39:dc:c4:48:13:10:53:aa:6a:df:4f:d4:4a:78:a0:10:71: c4:a0:48:32 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPaMo26X32ges/6K/eiY1yGJmoVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTA4MDQxODU1MDBaFw0yNjA4MDMxOTAwMDBaMDMxMTAvBgNV BAMTKEUxMzlFQThGOEM0MzAwOTk4NEY2OTY1NUYxNjdCQzg3ODgxQUVCODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgWE+oX9NWVCQ/PQDp1hjeH9U kDPeZNfY3wTNQ6x4ObxiVy0NzEAo6Md+rZR5OTHQcqGQ+0eLZESxceCta/pFWohB wE51UY4SQahesyVUXkPu1KxsRO43UxlduerBoK6PDL/u/+kWEjxgtoegjcx3wsi8 ZwFTqqDY2goa/I2tBCuF44fL1QxSsUt+Wey1gDp6VZEiIdM2xJBD0oXixZ+lBLZk i8oJOc/sETL7atSvV/m/fip3if8vrhPcuj+FXbDHF9IjyiFJuyG+uAuOL9HlrXUQ MfRwKnHE0V3aF+pJZpt3QZCIUhEmbem//TuMJLVC+6Omvg9LdlS+7Etlsdy7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU4Tnqj4xDAJmE9pZV8We8h4ga64cwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyZjVmMDdjLWYwN2ItNGFhYS1h MGMyLWRmMTdjOTEwYzU4Ni8wLzMxMzAzMzJlMzEzNzMyMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzNDMwMzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrLswDQYJ KoZIhvcNAQELBQADggEBAKCd6ef1rFJ/ABXg0BM8aDOnR1rIWqUafPUEdjOWhnDG sUMwlR4CXmHzngYrH/bcUF7ALnZ20ncVqx9AOeqAiJ2bO/lJ5VPZy3mTiZOnrnX7 i2N5AgTQAJBOtx0RtfLiqfDx2rbB/0OWKFcC/qDyysudlY9uGouykoHNjjFmAlLE r9Q3ytcWXl5pp6391t6MHxTA2ueKErW2fVKdPYtEEAd5uzEWEoeMcfCS4Q89bP0z PmgKwsMoQObD+ILk3iDMrMCHvG3WnnXFRCKtDPpEQyrEJvHlXm4ieTfggnt5Xwdj sByw+iDkqapSMkU53MRIExBTqmrfT9RKeKAQccSgSDI= -----END CERTIFICATE-----Generated at Sun Aug 10 19:49:00 2025 by rpki-client