$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa File: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (raw, json) Hash identifier: QO9yzDb4CC7G7ZrOt9x3m3LlZY080vHY8ADNw1G145c= Subject key identifier: 77:E1:71:B8:27:E6:5E:34:F0:35:BF:23:06:24:BB:1B:CC:EA:1C:D9 Certificate issuer: /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Certificate serial: 5849AA22B025661A30108FAECB1B620E1274F9A5 Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa Signing time: Sat 09 Aug 2025 16:00:01 +0000 ROA not before: Sat 09 Aug 2025 15:55:01 +0000 ROA not after: Sat 08 Aug 2026 16:00:01 +0000 asID: 147128 IP address blocks: 103.176.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 03:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:49:aa:22:b0:25:66:1a:30:10:8f:ae:cb:1b:62:0e:12:74:f9:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Validity Not Before: Aug 9 15:55:01 2025 GMT Not After : Aug 8 16:00:01 2026 GMT Subject: CN=77E171B827E65E34F035BF230624BB1BCCEA1CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cd:c8:5a:b7:58:b6:e1:01:a1:63:fe:d3:bb: 6c:55:c4:d3:36:e3:b2:11:7d:bc:35:43:89:35:c2: 77:cc:f8:b1:38:0c:0e:6a:67:f5:6a:f7:36:4a:6a: a9:62:34:70:80:0a:81:42:d8:44:11:97:d5:c6:3f: ec:af:19:05:97:fb:66:af:5d:43:99:d2:9e:51:bb: aa:50:17:1a:3f:ad:d5:9c:40:82:12:9b:0d:a6:ea: 13:7b:ec:7c:4f:6e:16:f8:0f:49:82:ee:32:02:a3: c0:ca:fb:69:c6:6d:43:90:72:90:69:56:25:f3:d9: 8e:b3:53:97:9a:0b:e6:06:39:8b:bf:be:fe:63:e0: a1:9d:76:41:bb:2d:1c:60:81:5f:3a:a5:39:b5:a5: 34:c7:2f:be:89:fc:a4:64:83:d8:fd:9e:87:cd:00: 8e:38:e8:24:47:59:84:86:dd:e6:1b:12:c3:65:3f: a5:49:4e:5b:48:7e:91:ca:b9:fe:28:34:fc:4b:2e: f9:bd:4a:ac:d9:87:9b:85:80:3f:92:11:94:6b:d4: 07:2b:61:f2:30:41:81:23:0d:67:51:2d:42:b6:da: b4:a3:8b:cd:7c:af:15:6a:ca:dd:d3:21:ef:33:7b: 79:93:eb:b7:de:83:b7:d0:5c:b5:9f:a5:53:8a:94: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E1:71:B8:27:E6:5E:34:F0:35:BF:23:06:24:BB:1B:CC:EA:1C:D9 X509v3 Authority Key Identifier: keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.45.0/24 Signature Algorithm: sha256WithRSAEncryption 06:34:f6:4b:10:2e:9c:64:9f:49:1c:f2:94:cd:9d:93:a9:9c: 27:78:2f:8f:65:bb:28:3c:a9:42:d7:ef:40:9c:6b:d2:c3:70: 82:d6:3e:bb:cd:eb:73:f8:28:92:3d:7f:ba:ab:ba:05:f0:8e: a0:af:5d:19:ba:98:48:ef:b5:dc:01:4f:0a:1b:e7:49:a3:bc: 95:9b:1c:54:2e:09:9c:25:60:e9:f2:98:47:1a:3e:72:83:82: 8a:73:75:b6:7c:34:36:ec:38:c7:5c:f7:fc:70:d8:0e:aa:d6: 8e:9e:cc:b0:85:38:61:c1:aa:19:e3:d2:1b:51:0b:e2:97:58: 58:e2:6f:1e:09:a5:7a:44:ef:ba:c6:8b:ae:7d:66:18:d9:67: 12:e7:da:f5:e0:5e:c1:b5:97:b9:1c:a1:53:0a:bf:40:a0:46: 2d:a4:80:5f:0c:d5:c9:b4:79:73:46:28:27:f0:49:5d:b4:c8: 5b:10:16:14:e2:40:f7:b2:0f:e7:e1:bf:f8:84:ff:0f:64:b3: dd:c8:fb:1b:15:71:aa:b1:7f:03:56:14:9c:4f:80:56:87:ba: d4:be:93:a5:d0:b3:16:b5:5d:aa:d2:ab:fe:08:f4:14:9f:42: cf:5d:d5:70:46:5d:6c:57:e7:3d:63:93:c4:c0:91:b3:d4:07: c9:b6:3d:9e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWEmqIrAlZhowEI+uyxtiDhJ0+aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhG QTQxMEVGMTAeFw0yNTA4MDkxNTU1MDFaFw0yNjA4MDgxNjAwMDFaMDMxMTAvBgNV BAMTKDc3RTE3MUI4MjdFNjVFMzRGMDM1QkYyMzA2MjRCQjFCQ0NFQTFDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzchat1i24QGhY/7Tu2xVxNM2 47IRfbw1Q4k1wnfM+LE4DA5qZ/Vq9zZKaqliNHCACoFC2EQRl9XGP+yvGQWX+2av XUOZ0p5Ru6pQFxo/rdWcQIISmw2m6hN77HxPbhb4D0mC7jICo8DK+2nGbUOQcpBp ViXz2Y6zU5eaC+YGOYu/vv5j4KGddkG7LRxggV86pTm1pTTHL76J/KRkg9j9nofN AI446CRHWYSG3eYbEsNlP6VJTltIfpHKuf4oNPxLLvm9SqzZh5uFgD+SEZRr1Acr YfIwQYEjDWdRLUK22rSji818rxVqyt3TIe8ze3mT67feg7fQXLWfpVOKlDlLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUd+FxuCfmXjTwNb8jBiS7G8zqHNkwHwYDVR0j BBgwFoAUAkq/8pWaYUTMSInHD3f5aPpBDvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzFhOTQyNi0zYzM1LTQ3MGUtYmYzNC0zMGU3ZTQxNjAyY2IvMC8wMjRBQkZGMjk1 OUE2MTQ0Q0M0ODg5QzcwRjc3Rjk2OEZBNDEwRUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhGQTQx MEVGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzMWE5NDI2LTNjMzUtNDcwZS1i ZjM0LTMwZTdlNDE2MDJjYi8wLzMxMzAzMzJlMzEzNzM2MmUzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7AtMA0GCSqG SIb3DQEBCwUAA4IBAQAGNPZLEC6cZJ9JHPKUzZ2TqZwneC+PZbsoPKlC1+9AnGvS w3CC1j67zetz+CiSPX+6q7oF8I6gr10ZuphI77XcAU8KG+dJo7yVmxxULgmcJWDp 8phHGj5yg4KKc3W2fDQ27DjHXPf8cNgOqtaOnsywhThhwaoZ49IbUQvil1hY4m8e CaV6RO+6xouufWYY2WcS59r14F7BtZe5HKFTCr9AoEYtpIBfDNXJtHlzRign8Eld tMhbEBYU4kD3sg/n4b/4hP8PZLPdyPsbFXGqsX8DVhScT4BWh7rUvpOl0LMWtV2q 0qv+CPQUn0LPXdVwRl1sV+c9Y5PEwJGz1AfJtj2e -----END CERTIFICATE-----Generated at Sun Aug 10 03:44:36 2025 by rpki-client