$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa File: 3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (raw, json) Hash identifier: Vs1FTC3BQhyPN7a1ZVTDru9DdXSQAi1xdx6hZB8HzW4= Subject key identifier: E4:9E:0D:15:FB:4B:C0:1F:B6:DF:96:2A:70:9E:0B:CB:F2:DD:62:4B Certificate issuer: /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Certificate serial: 34386FE899994ACB49AF9C30333C055E7435A21D Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa Signing time: Fri 25 Jul 2025 16:00:01 +0000 ROA not before: Fri 25 Jul 2025 15:55:01 +0000 ROA not after: Fri 24 Jul 2026 16:00:01 +0000 asID: 63883 IP address blocks: 103.62.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:38:6f:e8:99:99:4a:cb:49:af:9c:30:33:3c:05:5e:74:35:a2:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5 Validity Not Before: Jul 25 15:55:01 2025 GMT Not After : Jul 24 16:00:01 2026 GMT Subject: CN=E49E0D15FB4BC01FB6DF962A709E0BCBF2DD624B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:bc:c3:d4:25:5b:a5:5a:52:db:9a:a6:49: 09:21:7a:ba:e9:59:39:dc:d5:83:13:e9:dd:6c:c0: 9a:99:ca:3c:ff:90:3d:6e:10:73:3c:51:d6:bf:8d: 90:27:1d:54:65:13:a4:55:94:8d:1b:a1:47:51:cb: 5a:0c:bf:76:d1:24:6a:53:35:aa:d7:6d:4e:ff:51: 9e:9e:01:06:2a:1e:4d:ec:d4:79:2f:36:ed:fe:7b: 20:37:79:55:f6:ef:5a:32:0c:62:0c:cd:a0:c0:f2: 0a:af:1c:35:c6:41:6a:63:95:e5:51:67:61:b2:aa: bd:d4:f6:2c:df:46:53:c6:33:b5:82:8e:b0:df:2f: c8:69:0c:7c:3c:28:fb:6e:23:10:54:34:fa:fb:13: 25:70:d5:f1:9b:03:4f:5f:8b:e3:e6:b1:8c:3d:b4: 7e:0a:c7:2a:2e:5a:3b:80:2d:e7:ec:0a:6e:ff:ec: c7:f5:7a:c0:0e:64:f1:fb:9e:cc:7d:49:9d:1e:bc: 4f:f5:68:19:eb:d9:fe:86:77:b3:f9:90:a7:aa:13: ea:26:18:dd:8b:d3:09:e3:99:73:ad:4a:b7:9f:dd: c8:5b:b4:ff:1f:94:56:6c:ed:6c:de:58:7f:32:63: 29:4a:c4:70:3b:bb:83:73:f6:30:26:b8:f8:33:50: af:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:0D:15:FB:4B:C0:1F:B6:DF:96:2A:70:9E:0B:CB:F2:DD:62:4B X509v3 Authority Key Identifier: keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.62.202.0/23 Signature Algorithm: sha256WithRSAEncryption 99:4d:73:35:c7:ab:91:64:a9:6f:d8:bb:19:f7:a0:4c:f2:1f: 05:35:b2:d9:6b:bf:ea:e8:1f:e6:4c:42:c8:b9:44:50:63:9c: 29:7c:dc:32:0b:08:56:04:e5:2b:5f:01:75:dc:e8:41:3d:d2: d4:b4:3b:e9:d9:1b:f2:c4:ac:43:1c:c7:ee:dc:bd:24:40:ed: 34:c0:ba:08:fb:63:24:ef:30:a7:4d:50:bb:00:b6:4f:f1:56: a3:7e:71:44:86:24:b3:96:b3:21:fc:26:63:0f:11:0c:c0:fd: e6:27:f7:2f:54:37:4a:27:18:0b:3e:b4:1b:3d:b2:b6:0c:42: b4:c4:5a:00:69:08:fa:ee:44:ec:c1:79:83:d3:8e:90:bd:2d: 64:3f:aa:97:33:ff:43:24:f8:87:7c:f7:c4:ce:84:ac:ce:94: 29:b2:1f:ae:2e:e0:99:33:1c:b1:2b:d3:ef:c0:65:d2:70:17: af:ac:d8:f0:90:63:0b:c3:dd:85:48:8f:7c:1b:16:e1:12:6a: 96:28:59:c4:83:9e:4d:6a:dd:6f:8c:a7:a8:55:85:da:cb:ce: 89:34:82:16:c4:70:3e:bd:c2:dc:3a:de:51:36:cb:de:31:73: ed:6a:ff:31:d4:73:c3:11:b8:44:26:70:8d:76:a7:a5:4b:66: 28:03:a1:48 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNDhv6JmZSstJr5wwMzwFXnQ1oh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVG M0EyNzJFNTAeFw0yNTA3MjUxNTU1MDFaFw0yNjA3MjQxNjAwMDFaMDMxMTAvBgNV BAMTKEU0OUUwRDE1RkI0QkMwMUZCNkRGOTYyQTcwOUUwQkNCRjJERDYyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jLzD1CVbpVpS25qmSQkherrp WTnc1YMT6d1swJqZyjz/kD1uEHM8Uda/jZAnHVRlE6RVlI0boUdRy1oMv3bRJGpT NarXbU7/UZ6eAQYqHk3s1HkvNu3+eyA3eVX271oyDGIMzaDA8gqvHDXGQWpjleVR Z2Gyqr3U9izfRlPGM7WCjrDfL8hpDHw8KPtuIxBUNPr7EyVw1fGbA09fi+PmsYw9 tH4KxyouWjuALefsCm7/7Mf1esAOZPH7nsx9SZ0evE/1aBnr2f6Gd7P5kKeqE+om GN2L0wnjmXOtSref3chbtP8flFZs7WzeWH8yYylKxHA7u4Nz9jAmuPgzUK/PAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5J4NFftLwB+235YqcJ4Ly/LdYkswHwYDVR0j BBgwFoAUgJmRdHUBo81YpDiorf/NnvOicuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODFmNDRhYS04OWEzLTRiYzMtYmIyOS1kYjZjOTgyYTEzNmIvMC84MDk5OTE3NDc1 MDFBM0NENThBNDM4QThBREZGQ0Q5RUYzQTI3MkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA5OTkxNzQ3NTAxQTNDRDU4QTQzOEE4QURGRkNEOUVGM0Ey NzJFNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4MWY0NGFhLTg5YTMtNGJjMy1i YjI5LWRiNmM5ODJhMTM2Yi8wLzMxMzAzMzJlMzYzMjJlMzIzMDMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzYzMzM4MzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc+yjANBgkqhkiG 9w0BAQsFAAOCAQEAmU1zNcerkWSpb9i7GfegTPIfBTWy2Wu/6ugf5kxCyLlEUGOc KXzcMgsIVgTlK18BddzoQT3S1LQ76dkb8sSsQxzH7ty9JEDtNMC6CPtjJO8wp01Q uwC2T/FWo35xRIYks5azIfwmYw8RDMD95if3L1Q3SicYCz60Gz2ytgxCtMRaAGkI +u5E7MF5g9OOkL0tZD+qlzP/QyT4h3z3xM6ErM6UKbIfri7gmTMcsSvT78Bl0nAX r6zY8JBjC8PdhUiPfBsW4RJqlihZxIOeTWrdb4ynqFWF2svOiTSCFsRwPr3C3Dre UTbL3jFz7Wr/MdRzwxG4RCZwjXanpUtmKAOhSA== -----END CERTIFICATE-----Generated at Thu Aug 7 20:24:27 2025 by rpki-client