$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa File: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI= Subject key identifier: 45:D5:75:BC:3E:8F:9C:A4:66:48:FC:37:EA:43:C5:DE:51:F5:60:B8 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 6A83FB73746E91C80BB8A1D2C78795C1827C68E7 Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa Signing time: Mon 28 Jul 2025 16:00:00 +0000 ROA not before: Mon 28 Jul 2025 15:55:00 +0000 ROA not after: Mon 27 Jul 2026 16:00:00 +0000 asID: 9341 IP address blocks: 103.17.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:83:fb:73:74:6e:91:c8:0b:b8:a1:d2:c7:87:95:c1:82:7c:68:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Jul 28 15:55:00 2025 GMT Not After : Jul 27 16:00:00 2026 GMT Subject: CN=45D575BC3E8F9CA46648FC37EA43C5DE51F560B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:14:09:d0:98:7a:f1:3c:91:20:fb:63:62:6a: bb:80:03:d5:04:1c:9d:75:e7:63:cf:87:a7:9e:78: 21:3c:db:c1:d8:23:36:0b:09:a4:68:af:ce:c3:cb: 4b:88:be:37:fc:a3:d1:ad:6d:c9:18:39:76:ec:1d: b5:51:7b:51:98:93:30:07:06:01:b5:6c:38:16:99: 1a:ac:5f:f7:21:b2:dc:15:6d:5f:56:d8:2e:72:90: 46:0a:29:93:9f:24:47:65:f9:d5:94:4f:20:90:8c: 64:ba:14:6f:c9:84:c6:ef:d4:dc:4d:eb:d3:b5:fa: e4:7e:9f:4f:b3:9a:e0:99:1f:03:f3:e7:07:3e:04: e3:8a:39:67:fc:b6:cb:a1:a1:e7:60:a6:80:38:e3: f8:e7:ec:ac:e9:a0:90:fd:59:22:a2:b0:16:26:07: d3:e5:d9:8c:49:8c:85:45:b7:96:10:ca:f6:ba:e1: 6f:42:2c:9c:37:fb:13:5b:fc:16:ef:d9:44:b3:18: b7:1d:dd:36:05:0e:20:25:17:c3:3f:f9:52:96:cf: da:5c:27:ff:3e:4a:fb:0f:cf:d2:3b:a2:ff:72:4b: 85:ee:c6:00:ad:b5:4b:d5:8c:11:f1:f3:4b:33:c5: ad:9e:e2:9c:c8:de:2c:94:8b:c7:e6:47:e6:f0:ab: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:75:BC:3E:8F:9C:A4:66:48:FC:37:EA:43:C5:DE:51:F5:60:B8 X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.17.142.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:0b:0f:8c:66:24:61:ac:06:0d:29:49:ea:e6:96:e9:41:7c: 13:2f:ce:0a:c2:0c:c1:99:b4:5b:5a:32:79:b3:1c:1f:8e:f4: 07:dc:76:ae:97:95:89:02:29:3e:f2:7f:b7:2f:05:44:05:df: 45:0a:5c:50:ba:c1:5b:a7:5d:c9:8c:6a:b7:6a:88:02:27:e8: f6:2b:01:74:fc:33:09:51:f9:5a:cc:72:42:6f:0d:bd:bb:fd: 40:88:97:15:70:7c:e6:66:7a:e0:15:8f:70:37:6a:7a:5d:6a: 4a:fb:37:6b:14:31:9e:62:a1:d4:9a:c3:5e:eb:f1:07:e9:95: 39:0b:ad:1a:25:87:3f:83:25:7c:e8:8f:f2:f2:41:4c:30:9a: 54:18:8a:33:97:e7:1a:de:d4:5b:a3:69:07:11:1a:16:d2:98: 2c:f9:ca:e5:33:4a:21:fb:ef:bc:2e:39:74:24:94:be:6f:97: 1f:9e:af:fb:c3:7d:91:ef:a3:21:36:4b:4e:f0:b1:f2:9d:4c: ca:29:c4:90:cd:79:30:7f:ae:29:21:e1:95:47:48:f6:b9:2a: e4:90:84:dc:dc:e1:f7:34:ef:6e:d6:d0:3d:52:8f:99:37:9a: 72:66:3a:ee:43:0d:98:ab:f2:c4:4e:11:f5:de:0c:08:da:87: 9b:c6:87:54 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUaoP7c3RukcgLuKHSx4eVwYJ8aOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTA3MjgxNTU1MDBaFw0yNjA3MjcxNjAwMDBaMDMxMTAvBgNV BAMTKDQ1RDU3NUJDM0U4RjlDQTQ2NjQ4RkMzN0VBNDNDNURFNTFGNTYwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFAnQmHrxPJEg+2NiaruAA9UE HJ1152PPh6eeeCE828HYIzYLCaRor87Dy0uIvjf8o9GtbckYOXbsHbVRe1GYkzAH BgG1bDgWmRqsX/chstwVbV9W2C5ykEYKKZOfJEdl+dWUTyCQjGS6FG/JhMbv1NxN 69O1+uR+n0+zmuCZHwPz5wc+BOOKOWf8tsuhoedgpoA44/jn7KzpoJD9WSKisBYm B9Pl2YxJjIVFt5YQyva64W9CLJw3+xNb/Bbv2USzGLcd3TYFDiAlF8M/+VKWz9pc J/8+SvsPz9I7ov9yS4XuxgCttUvVjBHx80szxa2e4pzI3iyUi8fmR+bwqzQRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQURdV1vD6PnKRmSPw36kPF3lH1YLgwHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3NTk0NzZlLTZhZGItNGYyZS1i ZTc1LTg0NjcyNTllMTI4Zi8wLzMxMzAzMzJlMzEzNzJlMzEzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnEY4wDQYJKoZIhvcN AQELBQADggEBAEwLD4xmJGGsBg0pSermlulBfBMvzgrCDMGZtFtaMnmzHB+O9Afc dq6XlYkCKT7yf7cvBUQF30UKXFC6wVunXcmMardqiAIn6PYrAXT8MwlR+VrMckJv Db27/UCIlxVwfOZmeuAVj3A3anpdakr7N2sUMZ5iodSaw17r8QfplTkLrRolhz+D JXzoj/LyQUwwmlQYijOX5xre1FujaQcRGhbSmCz5yuUzSiH777wuOXQklL5vlx+e r/vDfZHvoyE2S07wsfKdTMopxJDNeTB/rikh4ZVHSPa5KuSQhNzc4fc0727W0D1S j5k3mnJmOu5DDZir8sROEfXeDAjah5vGh1Q= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:43 2025 by rpki-client