$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa File: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (raw, json) Hash identifier: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo= Subject key identifier: CF:25:B4:1F:B8:27:FB:48:84:41:92:C4:99:B1:0E:9F:27:F8:50:A7 Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 68B8BD61565F2359E115AA1E7C8442CF46AE1956 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa Signing time: Tue 22 Jul 2025 07:00:02 +0000 ROA not before: Tue 22 Jul 2025 06:55:02 +0000 ROA not after: Tue 21 Jul 2026 07:00:02 +0000 asID: 132652 IP address blocks: 103.25.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b8:bd:61:56:5f:23:59:e1:15:aa:1e:7c:84:42:cf:46:ae:19:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Jul 22 06:55:02 2025 GMT Not After : Jul 21 07:00:02 2026 GMT Subject: CN=CF25B41FB827FB48844192C499B10E9F27F850A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:ba:6c:fa:14:5a:50:aa:60:bb:8d:b6:b6: c8:b9:66:0f:8b:50:a8:64:0d:33:50:8a:63:90:89: e8:ec:85:b7:46:da:c5:cf:64:00:9e:f9:1b:fa:18: 67:64:30:44:a2:1b:0e:74:e0:b0:10:b4:03:f9:21: cf:36:36:27:de:cd:eb:68:d2:52:e5:ee:72:08:e7: 67:bf:d1:5c:d3:01:c2:90:b9:44:32:17:3f:f5:72: 2d:bb:b6:b2:2f:ee:d0:a4:bc:18:bd:5c:ab:5c:32: 14:a3:1e:e2:d5:bb:f1:ae:57:4c:d8:45:b7:c4:12: 89:2d:e4:d3:11:48:cd:7c:7f:f7:0c:2e:9b:f3:3c: 4c:99:ab:68:98:db:3c:72:01:2c:7b:d1:68:f2:f2: 03:e2:3d:f7:7d:39:ec:cf:a2:dd:27:38:f0:97:f9: 3b:ec:07:1f:4b:4f:47:80:fe:7f:c7:fd:f0:d0:ac: 9d:25:9a:19:e6:9c:76:5e:d7:c4:19:f2:83:9a:bf: c0:c4:6f:23:8e:9d:57:e5:73:63:33:17:13:21:e4: c4:ca:06:bc:4b:3a:1c:f0:72:b0:fe:10:c7:48:99: 65:5a:28:c3:34:be:27:de:88:20:9b:fa:cc:58:63: 2c:da:6b:ec:ed:57:7c:50:6b:c3:06:a6:76:12:b6: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:25:B4:1F:B8:27:FB:48:84:41:92:C4:99:B1:0E:9F:27:F8:50:A7 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.25.192.0/22 Signature Algorithm: sha256WithRSAEncryption 99:85:b1:19:3c:28:b1:ff:90:3d:74:01:f0:cf:d8:82:39:f9: 06:e9:ee:66:91:45:fb:f5:5f:00:21:44:fd:2a:79:7f:88:d3: 77:4a:89:80:a2:f0:96:78:88:33:01:33:51:e2:f4:ab:73:33: bb:2d:93:49:56:a1:89:aa:a2:34:c0:79:5f:04:b8:8c:d5:10: bc:cb:63:f8:a2:a3:6c:6c:aa:03:76:61:85:a7:b2:b8:53:04: 20:5f:2d:fa:db:9c:25:34:9a:de:e6:b3:d2:29:9b:93:8d:8f: c4:48:0f:c5:6a:0b:93:eb:9a:21:ae:8c:d1:de:57:2d:bb:8a: 4d:dd:cb:8c:09:e5:45:97:8e:96:da:b4:d4:41:ea:f0:bb:95: 09:98:e1:e0:47:4b:99:5a:a7:d4:8b:3e:f0:57:fa:7f:0d:c5: 3e:0b:4b:73:0d:db:21:08:62:08:e5:a7:8a:ab:99:a5:84:76: fc:d8:ac:b9:99:db:1f:e5:db:2a:b2:35:1e:6f:45:bc:ae:8f: f1:4f:d3:53:4d:e8:b1:21:5e:17:cf:6b:da:04:57:62:b3:13: 0d:b9:af:57:d2:d9:4c:d2:79:8c:39:19:40:bf:d8:89:56:50: 8c:a9:85:77:58:44:8e:71:53:d9:44:dc:81:da:7e:3c:cc:8f: 93:12:90:68 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaLi9YVZfI1nhFaoefIRCz0auGVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTA3MjIwNjU1MDJaFw0yNjA3MjEwNzAwMDJaMDMxMTAvBgNV BAMTKENGMjVCNDFGQjgyN0ZCNDg4NDQxOTJDNDk5QjEwRTlGMjdGODUwQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVcrps+hRaUKpgu422tsi5Zg+L UKhkDTNQimOQiejshbdG2sXPZACe+Rv6GGdkMESiGw504LAQtAP5Ic82Nifezeto 0lLl7nII52e/0VzTAcKQuUQyFz/1ci27trIv7tCkvBi9XKtcMhSjHuLVu/GuV0zY RbfEEokt5NMRSM18f/cMLpvzPEyZq2iY2zxyASx70Wjy8gPiPfd9OezPot0nOPCX +TvsBx9LT0eA/n/H/fDQrJ0lmhnmnHZe18QZ8oOav8DEbyOOnVflc2MzFxMh5MTK BrxLOhzwcrD+EMdImWVaKMM0vifeiCCb+sxYYyzaa+ztV3xQa8MGpnYStr77AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzyW0H7gn+0iEQZLEmbEOnyf4UKcwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiNjMyYTJjLTQwNmUtNDVkNy1h MDI4LTI2MDQ3NGM3NzAzOC8wLzMxMzAzMzJlMzIzNTJlMzEzOTMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxnAMA0GCSqG SIb3DQEBCwUAA4IBAQCZhbEZPCix/5A9dAHwz9iCOfkG6e5mkUX79V8AIUT9Knl/ iNN3SomAovCWeIgzATNR4vSrczO7LZNJVqGJqqI0wHlfBLiM1RC8y2P4oqNsbKoD dmGFp7K4UwQgXy3625wlNJre5rPSKZuTjY/ESA/FaguT65ohrozR3lctu4pN3cuM CeVFl46W2rTUQerwu5UJmOHgR0uZWqfUiz7wV/p/DcU+C0tzDdshCGII5aeKq5ml hHb82Ky5mdsf5dsqsjUeb0W8ro/xT9NTTeixIV4Xz2vaBFdisxMNua9X0tlM0nmM ORlAv9iJVlCMqYV3WESOcVPZRNyB2n48zI+TEpBo -----END CERTIFICATE-----Generated at Thu Aug 7 14:46:42 2025 by rpki-client