$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa File: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (raw, json) Hash identifier: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE= Subject key identifier: 61:1E:4C:04:94:01:D8:B5:FD:D9:FC:6C:CB:97:35:37:52:57:01:6D Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 3022AC30D92BA4E812E7B402B2900F3835374422 Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa Signing time: Thu 24 Jul 2025 08:00:00 +0000 ROA not before: Thu 24 Jul 2025 07:55:00 +0000 ROA not after: Thu 23 Jul 2026 08:00:00 +0000 asID: 140025 IP address blocks: 103.149.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 04:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:22:ac:30:d9:2b:a4:e8:12:e7:b4:02:b2:90:0f:38:35:37:44:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Jul 24 07:55:00 2025 GMT Not After : Jul 23 08:00:00 2026 GMT Subject: CN=611E4C049401D8B5FDD9FC6CCB9735375257016D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ee:52:ae:85:21:45:60:6c:84:21:92:7d:a0: a2:22:b5:a7:4e:00:57:c1:d2:0b:71:16:3b:de:6f: 92:78:eb:82:08:a5:f2:1f:84:40:45:2a:69:1b:dc: 97:ae:cd:7c:ba:42:74:eb:24:e7:29:f6:ec:c1:24: 28:7a:bd:69:1d:03:56:17:e5:a4:e0:16:ca:1f:b4: e8:6d:ac:d0:8f:2d:3b:73:87:98:d4:ed:c1:8d:09: 9b:af:06:1f:d1:d8:c5:9e:d9:eb:71:4f:ac:6c:68: ac:44:38:52:84:91:d0:75:6f:5e:0c:20:9c:8f:68: 02:af:f9:06:0b:0c:a9:a8:16:dc:62:ef:e8:28:3b: 92:1f:5a:ea:18:77:99:f2:bd:1f:6b:55:ec:d9:fe: 96:a2:1f:a7:63:49:7b:a2:52:26:55:66:57:42:d4: 15:30:43:8b:dc:d5:24:ce:ff:8a:29:71:fa:79:3e: 11:cc:62:6a:7c:d0:98:d6:7e:aa:49:2a:3c:a5:30: 3d:61:77:aa:17:c4:43:e4:b9:7a:69:9b:95:f1:ab: 16:c2:e1:57:de:7a:bf:d2:49:f0:10:74:26:ce:06: 1c:2e:82:80:81:ff:15:51:66:f3:ce:89:20:b6:99: 00:33:22:fb:8f:53:25:29:d9:b0:0f:71:7f:79:ca: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1E:4C:04:94:01:D8:B5:FD:D9:FC:6C:CB:97:35:37:52:57:01:6D X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.22.0/24 Signature Algorithm: sha256WithRSAEncryption 18:cc:ab:20:b9:b8:12:c7:d4:be:62:1e:73:5a:5c:69:e9:1b: b5:13:c3:d5:91:d5:44:18:b4:19:5e:99:97:2d:22:2b:0e:5c: 68:89:9e:52:f2:c5:65:8c:b9:07:25:fb:3e:e4:92:0d:33:27: 00:66:d0:42:37:a4:66:bf:f0:e6:ec:e4:a1:56:04:3c:0b:cd: 22:14:32:ad:d4:45:af:2b:c4:07:22:56:dc:7e:e0:2c:5f:88: 03:5c:0a:b7:91:1b:1a:57:cb:4b:07:76:a8:96:4f:b8:03:2b: 33:dd:05:ef:b7:bd:77:2a:a2:3c:62:ef:ec:7a:e7:2d:aa:7a: 34:11:e0:b5:d8:23:fb:7a:65:2c:a1:ed:33:33:1f:03:c4:a3: 28:81:81:1a:b0:b6:69:ca:96:07:86:a8:34:87:23:01:60:e9: d0:56:62:57:59:2e:ae:e5:be:7c:b0:9d:20:c3:a9:c3:68:08: fb:08:fa:0a:93:ee:eb:2e:3c:0a:ec:a9:81:ab:99:ad:e2:0e: b7:71:f5:71:a9:c5:c1:10:3d:57:9b:87:a8:0f:37:87:67:92: ed:7c:35:26:18:35:d8:86:ba:ad:18:79:19:6f:fb:cd:db:37: 2c:8a:20:b6:78:a1:3f:c9:2c:d3:45:91:1b:ef:ca:06:3e:18: 58:53:80:dc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMCKsMNkrpOgS57QCspAPODU3RCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTA3MjQwNzU1MDBaFw0yNjA3MjMwODAwMDBaMDMxMTAvBgNV BAMTKDYxMUU0QzA0OTQwMUQ4QjVGREQ5RkM2Q0NCOTczNTM3NTI1NzAxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7lKuhSFFYGyEIZJ9oKIitadO AFfB0gtxFjveb5J464IIpfIfhEBFKmkb3JeuzXy6QnTrJOcp9uzBJCh6vWkdA1YX 5aTgFsoftOhtrNCPLTtzh5jU7cGNCZuvBh/R2MWe2etxT6xsaKxEOFKEkdB1b14M IJyPaAKv+QYLDKmoFtxi7+goO5IfWuoYd5nyvR9rVezZ/paiH6djSXuiUiZVZldC 1BUwQ4vc1STO/4opcfp5PhHMYmp80JjWfqpJKjylMD1hd6oXxEPkuXppm5XxqxbC 4Vfeer/SSfAQdCbOBhwugoCB/xVRZvPOiSC2mQAzIvuPUyUp2bAPcX95yuwNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUYR5MBJQB2LX92fxsy5c1N1JXAW0wHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjOTNjMjVjLWNlNTUtNDg3MC04 MTY5LTVlYWU4ZDlkZmJjMS8wLzMxMzAzMzJlMzEzNDM5MmUzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5UWMA0GCSqG SIb3DQEBCwUAA4IBAQAYzKsgubgSx9S+Yh5zWlxp6Ru1E8PVkdVEGLQZXpmXLSIr DlxoiZ5S8sVljLkHJfs+5JINMycAZtBCN6Rmv/Dm7OShVgQ8C80iFDKt1EWvK8QH IlbcfuAsX4gDXAq3kRsaV8tLB3aolk+4Aysz3QXvt713KqI8Yu/seuctqno0EeC1 2CP7emUsoe0zMx8DxKMogYEasLZpypYHhqg0hyMBYOnQVmJXWS6u5b58sJ0gw6nD aAj7CPoKk+7rLjwK7KmBq5mt4g63cfVxqcXBED1Xm4eoDzeHZ5LtfDUmGDXYhrqt GHkZb/vN2zcsiiC2eKE/ySzTRZEb78oGPhhYU4Dc -----END CERTIFICATE-----Generated at Mon Aug 11 01:45:22 2025 by rpki-client