$ rpki-client -vvf repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa File: 3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa (raw, json) Hash identifier: IB02l7aeS1Ctr7m+n8ymFsmUvTLgjo3obFTTz15X/C8= Subject key identifier: 22:D2:A8:2A:A2:4B:64:67:16:D3:91:AE:C3:EE:8F:EC:7A:0C:9B:C1 Certificate issuer: /CN=2858C74CC23A557C73F59051B7FE8638AA491C94 Certificate serial: 3B641D5AE4FCE75BC147720FD00060FF51461B15 Authority key identifier: 28:58:C7:4C:C2:3A:55:7C:73:F5:90:51:B7:FE:86:38:AA:49:1C:94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa Signing time: Mon 28 Jul 2025 01:43:08 +0000 ROA not before: Mon 28 Jul 2025 01:38:08 +0000 ROA not after: Mon 27 Jul 2026 01:43:08 +0000 asID: 133809 IP address blocks: 103.50.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.crl rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 12:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:64:1d:5a:e4:fc:e7:5b:c1:47:72:0f:d0:00:60:ff:51:46:1b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2858C74CC23A557C73F59051B7FE8638AA491C94 Validity Not Before: Jul 28 01:38:08 2025 GMT Not After : Jul 27 01:43:08 2026 GMT Subject: CN=22D2A82AA24B646716D391AEC3EE8FEC7A0C9BC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:f5:2a:44:d4:51:05:72:cc:98:76:b3:f2: d3:7b:8b:5b:1c:c1:92:c1:82:7f:e1:30:b2:6a:e9: 3d:51:c7:48:c0:95:ce:5b:c1:f8:83:57:f6:5d:07: 1c:f2:c3:27:c0:66:0b:0e:18:a5:51:e3:6b:58:96: 0f:5a:37:f7:58:17:28:20:d1:5d:ce:ed:1c:35:6d: 55:3a:3a:93:57:25:06:db:f1:40:f3:03:c5:54:6c: 2e:a2:d2:36:aa:69:99:a5:5c:a7:88:fb:43:b1:e1: 8a:00:cd:7f:58:3b:e6:01:7b:24:72:39:ca:8d:c0: 55:d0:2c:79:f1:f9:5c:21:39:9f:ad:8b:1e:1a:20: 0c:d8:c9:7b:37:dc:2c:85:48:c8:67:24:ba:27:2a: 18:1a:11:3f:6b:65:45:66:bf:78:cc:41:5b:8a:38: ee:36:3e:b7:85:45:0e:0c:48:94:59:2c:4f:48:ca: b6:c7:8f:3a:0d:c6:35:82:2a:2d:e8:e5:ef:a6:88: 76:83:03:3f:3f:39:87:96:4b:40:9e:c0:34:5a:31: f6:93:74:5e:a6:37:fe:8f:70:92:11:16:8a:04:58: d7:cb:55:4c:fc:2a:6f:a9:40:6b:1d:86:39:65:cd: b6:e5:30:dc:eb:ce:4e:01:3e:87:d0:75:bd:31:38: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:A8:2A:A2:4B:64:67:16:D3:91:AE:C3:EE:8F:EC:7A:0C:9B:C1 X509v3 Authority Key Identifier: keyid:28:58:C7:4C:C2:3A:55:7C:73:F5:90:51:B7:FE:86:38:AA:49:1C:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/2858C74CC23A557C73F59051B7FE8638AA491C94.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2858C74CC23A557C73F59051B7FE8638AA491C94.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cef8b0-ba64-4c0c-8de8-1f50a85d5fde/0/3130332e35302e3132382e302f32322d3234203d3e20313333383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.50.128.0/22 Signature Algorithm: sha256WithRSAEncryption 06:54:dc:21:f5:8a:09:90:76:7b:99:86:57:28:a3:7d:be:31: d0:0c:c8:7e:3c:be:1c:cf:0d:5a:8c:71:77:70:f7:f2:45:68: f0:ad:18:c7:5e:97:b3:9c:4e:d5:f0:eb:ce:ba:1a:b1:74:38: 63:ee:35:d4:78:1c:6b:f8:ad:3b:f1:7e:2f:70:d1:6e:c9:a3: 8c:37:a6:bd:6f:69:ff:96:9d:ee:2c:58:dc:83:69:91:6a:19: 49:d7:eb:47:d2:d5:42:3b:9a:c0:48:67:2b:1e:58:f0:b3:0b: ff:a0:05:33:67:a0:2d:dc:64:a4:98:e4:3a:6c:11:f0:d6:83: 6e:6f:d8:af:d1:18:d8:bd:2f:15:ee:85:84:8a:0c:9c:b5:15: 5c:4d:79:0f:b9:fd:28:7f:5f:15:1b:6f:73:65:78:6a:ef:de: b7:ba:4f:cc:47:0e:11:96:d9:35:4b:dc:d0:58:16:9f:88:20: fe:9b:cf:15:e6:4b:74:1f:74:40:be:df:4d:60:ce:c2:87:ca: aa:b4:d1:3b:5f:5c:51:91:b9:b5:2b:de:44:39:b1:21:a8:a7: bd:b6:a9:81:fd:55:60:6f:5a:af:35:29:14:ca:ca:05:5f:d0: 1d:27:92:61:66:e7:98:8b:8d:20:17:2a:b0:fe:9c:fd:12:a9: 0b:80:13:25 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO2QdWuT851vBR3IP0ABg/1FGGxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2MzhB QTQ5MUM5NDAeFw0yNTA3MjgwMTM4MDhaFw0yNjA3MjcwMTQzMDhaMDMxMTAvBgNV BAMTKDIyRDJBODJBQTI0QjY0NjcxNkQzOTFBRUMzRUU4RkVDN0EwQzlCQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98/UqRNRRBXLMmHaz8tN7i1sc wZLBgn/hMLJq6T1Rx0jAlc5bwfiDV/ZdBxzywyfAZgsOGKVR42tYlg9aN/dYFygg 0V3O7Rw1bVU6OpNXJQbb8UDzA8VUbC6i0jaqaZmlXKeI+0Ox4YoAzX9YO+YBeyRy OcqNwFXQLHnx+VwhOZ+tix4aIAzYyXs33CyFSMhnJLonKhgaET9rZUVmv3jMQVuK OO42PreFRQ4MSJRZLE9IyrbHjzoNxjWCKi3o5e+miHaDAz8/OYeWS0CewDRaMfaT dF6mN/6PcJIRFooEWNfLVUz8Km+pQGsdhjllzbblMNzrzk4BPofQdb0xOJX5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUItKoKqJLZGcW05Guw+6P7HoMm8EwHwYDVR0j BBgwFoAUKFjHTMI6VXxz9ZBRt/6GOKpJHJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNlZjhiMC1iYTY0LTRjMGMtOGRlOC0xZjUwYTg1ZDVmZGUvMC8yODU4Qzc0Q0My M0E1NTdDNzNGNTkwNTFCN0ZFODYzOEFBNDkxQzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1OEM3NENDMjNBNTU3QzczRjU5MDUxQjdGRTg2MzhBQTQ5 MUM5NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5Y2VmOGIwLWJhNjQtNGMwYy04 ZGU4LTFmNTBhODVkNWZkZS8wLzMxMzAzMzJlMzUzMDJlMzEzMjM4MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZzKAMA0GCSqG SIb3DQEBCwUAA4IBAQAGVNwh9YoJkHZ7mYZXKKN9vjHQDMh+PL4czw1ajHF3cPfy RWjwrRjHXpeznE7V8OvOuhqxdDhj7jXUeBxr+K078X4vcNFuyaOMN6a9b2n/lp3u LFjcg2mRahlJ1+tH0tVCO5rASGcrHljwswv/oAUzZ6At3GSkmOQ6bBHw1oNub9iv 0RjYvS8V7oWEigyctRVcTXkPuf0of18VG29zZXhq7963uk/MRw4Rltk1S9zQWBaf iCD+m88V5kt0H3RAvt9NYM7Ch8qqtNE7X1xRkbm1K95EObEhqKe9tqmB/VVgb1qv NSkUysoFX9AdJ5JhZueYi40gFyqw/pz9EqkLgBMl -----END CERTIFICATE-----Generated at Tue Aug 12 22:40:53 2025 by rpki-client