$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e36352e39362e302f32332d3234203d3e203536323539.roa File: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (raw, json) Hash identifier: GJQ3NUFsB2nVnSk1uRZagjtzrc7ng31cjwY1HHOp2FQ= Subject key identifier: D5:46:44:A3:A3:FD:56:F2:56:8E:9D:D4:BE:E6:88:63:1C:40:EC:43 Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Certificate serial: 0C6398091E35A1C82D593A20071AADF8BDEE87AD Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e36352e39362e302f32332d3234203d3e203536323539.roa Signing time: Mon 21 Jul 2025 15:00:01 +0000 ROA not before: Mon 21 Jul 2025 14:55:01 +0000 ROA not after: Mon 20 Jul 2026 15:00:01 +0000 asID: 56259 IP address blocks: 103.65.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:63:98:09:1e:35:a1:c8:2d:59:3a:20:07:1a:ad:f8:bd:ee:87:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Validity Not Before: Jul 21 14:55:01 2025 GMT Not After : Jul 20 15:00:01 2026 GMT Subject: CN=D54644A3A3FD56F2568E9DD4BEE688631C40EC43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:9d:86:66:19:69:06:12:71:15:4b:33:bf: 36:6c:25:4c:f7:01:e0:c1:fc:d6:12:92:09:c7:f9: ce:db:f4:43:cc:5c:ab:e8:63:10:4e:b8:9c:cd:68: 3e:df:31:59:9c:3a:5d:37:89:54:87:d5:cc:44:d2: 1f:69:ab:a5:6a:a9:2b:85:ee:2e:95:20:3a:f4:81: 46:a6:d8:fa:ae:ca:b1:f2:fa:f5:8f:bb:ef:d8:a3: 2e:f9:7f:3e:f8:2e:9e:1f:a2:f0:fd:c3:72:b2:a8: 6a:2b:e2:a3:a5:9c:21:91:6e:8a:d6:f7:95:3e:90: 22:35:73:9a:b4:e4:a0:39:9a:b7:8d:96:9b:1c:14: cc:cf:7d:32:79:8d:a9:56:a8:50:7f:ea:c4:23:61: e7:09:fe:c6:b1:09:c1:c8:ed:b7:cc:f6:dc:a2:66: c8:6c:59:f8:d3:f4:46:80:05:7e:c7:b7:62:0f:e8: 8f:74:0e:39:cd:b4:c0:ec:12:ef:82:fc:dd:81:76: eb:45:94:f0:80:1d:62:80:f3:fc:23:01:5b:89:30: fb:df:1f:41:ec:4a:22:b1:e6:40:b5:c1:15:d0:a7: d3:96:69:9d:f3:53:38:01:6c:06:19:1a:3c:64:3c: 40:b8:4b:61:9e:30:b2:b1:67:9a:11:2b:93:53:ea: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:46:44:A3:A3:FD:56:F2:56:8E:9D:D4:BE:E6:88:63:1C:40:EC:43 X509v3 Authority Key Identifier: keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e36352e39362e302f32332d3234203d3e203536323539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.96.0/23 Signature Algorithm: sha256WithRSAEncryption c9:3c:78:f7:ae:1d:70:f3:ee:cf:39:3f:9d:c5:78:16:d0:c9: 4b:37:f0:a5:de:de:51:06:c6:8e:5c:4d:c3:05:44:63:ca:53: b5:9a:f9:d9:a9:d3:21:42:cf:a8:c9:46:a7:6b:95:c1:b6:c5: 9a:15:a7:4d:8d:6e:a8:14:c0:76:a0:19:d7:1b:55:91:e8:5d: c5:81:01:97:eb:df:a6:78:4e:d6:71:88:18:77:e3:2b:cc:fd: 90:23:05:9a:c3:2a:24:f3:00:b5:fa:3d:cf:d2:08:c1:78:61: 7f:5d:b2:40:a4:8b:65:19:12:dc:63:66:bd:59:7f:c1:56:bb: 53:78:e9:be:05:05:a6:5a:83:5c:5c:7b:f1:fc:33:45:dd:39: b5:ed:29:e5:98:0e:20:97:52:88:f6:8c:05:8b:13:2d:0d:2c: f2:06:f7:07:ba:bc:93:f0:2b:81:19:76:a6:50:ef:f8:12:7d: ac:a5:cd:59:8d:8e:39:70:ce:01:02:e5:63:a0:32:23:f8:ae: 78:61:09:91:55:d0:a6:c4:94:48:74:77:e2:d3:98:7b:b4:8c: 9e:f2:19:0f:9a:ed:8d:54:22:30:7d:d5:59:e1:a0:fa:af:93: 6c:96:e7:3a:68:c0:34:cc:0e:b9:11:13:0d:97:4b:8c:c7:de: e4:24:3f:e5 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUDGOYCR41ocgtWTogBxqt+L3uh60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4 NUMzNUU0RjAeFw0yNTA3MjExNDU1MDFaFw0yNjA3MjAxNTAwMDFaMDMxMTAvBgNV BAMTKEQ1NDY0NEEzQTNGRDU2RjI1NjhFOURENEJFRTY4ODYzMUM0MEVDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYp2GZhlpBhJxFUszvzZsJUz3 AeDB/NYSkgnH+c7b9EPMXKvoYxBOuJzNaD7fMVmcOl03iVSH1cxE0h9pq6VqqSuF 7i6VIDr0gUam2PquyrHy+vWPu+/Yoy75fz74Lp4fovD9w3KyqGor4qOlnCGRborW 95U+kCI1c5q05KA5mreNlpscFMzPfTJ5jalWqFB/6sQjYecJ/saxCcHI7bfM9tyi ZshsWfjT9EaABX7Ht2IP6I90DjnNtMDsEu+C/N2BdutFlPCAHWKA8/wjAVuJMPvf H0HsSiKx5kC1wRXQp9OWaZ3zUzgBbAYZGjxkPEC4S2GeMLKxZ5oRK5NT6ogfAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU1UZEo6P9VvJWjp3UvuaIYxxA7EMwHwYDVR0j BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz NUU0Ri5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkOTcwMDMyLTA4ZWEtNDg5MC1i ZGJhLTYzMDlhNDk3OTE3ZC8wLzMxMzAzMzJlMzYzNTJlMzkzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM1MzYzMjM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnQWAwDQYJKoZIhvcN AQELBQADggEBAMk8ePeuHXDz7s85P53FeBbQyUs38KXe3lEGxo5cTcMFRGPKU7Wa +dmp0yFCz6jJRqdrlcG2xZoVp02NbqgUwHagGdcbVZHoXcWBAZfr36Z4TtZxiBh3 4yvM/ZAjBZrDKiTzALX6Pc/SCMF4YX9dskCki2UZEtxjZr1Zf8FWu1N46b4FBaZa g1xce/H8M0XdObXtKeWYDiCXUoj2jAWLEy0NLPIG9we6vJPwK4EZdqZQ7/gSfayl zVmNjjlwzgEC5WOgMiP4rnhhCZFV0KbElEh0d+LTmHu0jJ7yGQ+a7Y1UIjB91Vnh oPqvk2yW5zpowDTMDrkREw2XS4zH3uQkP+U= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:55 2025 by rpki-client