$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa File: 3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (raw, json) Hash identifier: LzEWJe+Hglc03QN90vVTDC59A7niJ+rvkY3tQyL/MFs= Subject key identifier: 59:64:23:13:0C:07:3E:ED:8E:B9:D0:7D:1E:C9:41:93:3A:2A:95:73 Certificate issuer: /CN=166B4918E7A1A1641E7C79C537833379E393522E Certificate serial: 567AE055A5849F2452E0CF9BA23066820866B2F6 Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa Signing time: Wed 06 Aug 2025 11:01:31 +0000 ROA not before: Wed 06 Aug 2025 10:56:31 +0000 ROA not after: Wed 05 Aug 2026 11:01:31 +0000 asID: 147107 IP address blocks: 103.174.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7a:e0:55:a5:84:9f:24:52:e0:cf:9b:a2:30:66:82:08:66:b2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E Validity Not Before: Aug 6 10:56:31 2025 GMT Not After : Aug 5 11:01:31 2026 GMT Subject: CN=596423130C073EED8EB9D07D1EC941933A2A9573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:50:55:90:8e:5b:77:a9:b4:62:29:69:33:ed: f5:9d:53:93:ba:36:9a:df:42:e4:78:b8:e1:a5:4e: 98:51:bb:3d:3e:f8:29:82:bc:fe:97:c7:02:d7:e0: 69:e7:0e:ff:c8:2e:e4:1c:95:78:85:67:2f:2e:58: 7c:64:e9:b6:ca:66:fa:a2:27:47:26:93:56:e9:12: 18:c5:67:0b:f2:cc:fb:e6:72:71:23:77:f7:7d:f6: 58:2e:0b:6d:fa:8e:d1:14:bc:7e:ec:a0:41:c9:50: 8e:60:50:da:4a:91:31:07:78:a8:a6:73:88:c6:d4: 17:b1:81:8b:ed:81:41:73:9b:07:f9:69:17:bc:22: 61:d2:24:d6:5d:42:9f:67:44:81:bc:2f:ee:3e:e3: 19:1d:11:8b:1a:d7:b5:49:93:4a:dd:d4:5a:df:59: f4:c0:e2:35:33:98:56:26:61:dd:86:38:58:1b:0b: c8:97:2e:b8:d2:59:17:2e:11:1f:36:50:2d:3b:9a: 07:39:be:aa:84:bd:20:9a:ad:f1:a5:71:85:41:08: 09:53:eb:7d:46:6e:91:0b:d3:60:0e:2d:d0:59:9c: 4b:b5:a1:9c:ac:18:52:a1:73:b3:56:45:2f:a9:5b: 9f:3e:47:86:ef:59:2b:35:68:e0:15:a6:83:e5:49: 93:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:23:13:0C:07:3E:ED:8E:B9:D0:7D:1E:C9:41:93:3A:2A:95:73 X509v3 Authority Key Identifier: keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.181.0/24 Signature Algorithm: sha256WithRSAEncryption 03:59:17:b9:bf:77:3a:35:96:b7:c6:31:f8:93:99:78:67:40: 48:77:00:3a:f5:20:07:4b:35:51:15:7d:75:d7:b0:7f:9f:90: f6:c4:d3:a8:aa:1a:a5:b1:fc:c7:b9:f8:16:31:65:42:fa:bc: 80:a9:0b:d9:39:72:41:d5:dc:f0:c4:61:e0:cf:43:30:01:c4: d8:50:b7:81:3d:76:6e:61:6b:76:bd:d4:cf:60:7b:01:d5:e2: 77:f6:dc:d4:29:ba:47:4a:da:d6:74:e6:eb:43:7f:df:7d:0d: 7a:62:43:5d:aa:2b:7c:ce:5c:04:6f:bc:f0:8f:51:bb:a7:b3: 75:b2:29:d7:43:6e:a0:ef:7a:86:81:62:a8:a1:9f:36:46:8a: 2d:00:47:b2:29:4d:4d:07:ed:46:33:ce:d8:40:3c:bd:17:0d: 8d:1a:d9:28:08:84:54:21:8e:49:04:cf:b6:c9:ad:2c:87:ee: 2f:72:18:cf:c1:7c:21:fb:eb:9e:77:61:90:7c:8d:05:57:98: af:46:fe:7e:00:a1:7c:37:af:9f:bc:1d:68:0b:c7:04:dc:62: 4a:55:15:62:95:53:88:c6:8d:c9:17:20:5e:87:5f:50:5d:8a: 7e:7c:ec:58:d9:fc:3a:60:78:41:88:b2:0e:8a:b6:96:6f:2d: 87:a1:ce:c8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUVnrgVaWEnyRS4M+bojBmgghmsvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF MzkzNTIyRTAeFw0yNTA4MDYxMDU2MzFaFw0yNjA4MDUxMTAxMzFaMDMxMTAvBgNV BAMTKDU5NjQyMzEzMEMwNzNFRUQ4RUI5RDA3RDFFQzk0MTkzM0EyQTk1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbUFWQjlt3qbRiKWkz7fWdU5O6 NprfQuR4uOGlTphRuz0++CmCvP6XxwLX4GnnDv/ILuQclXiFZy8uWHxk6bbKZvqi J0cmk1bpEhjFZwvyzPvmcnEjd/d99lguC236jtEUvH7soEHJUI5gUNpKkTEHeKim c4jG1BexgYvtgUFzmwf5aRe8ImHSJNZdQp9nRIG8L+4+4xkdEYsa17VJk0rd1Frf WfTA4jUzmFYmYd2GOFgbC8iXLrjSWRcuER82UC07mgc5vqqEvSCarfGlcYVBCAlT 631GbpEL02AOLdBZnEu1oZysGFKhc7NWRS+pW58+R4bvWSs1aOAVpoPlSZNjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUWWQjEwwHPu2OudB9HslBkzoqlXMwHwYDVR0j BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3 QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz NTIyRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMjg1MjkxLWNlOTItNDE0NC05 YzE4LTllOGMxOTFkZGVjNi8wLzMxMzAzMzJlMzEzNzM0MmUzMTM4MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMwMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrrUwDQYJ KoZIhvcNAQELBQADggEBAANZF7m/dzo1lrfGMfiTmXhnQEh3ADr1IAdLNVEVfXXX sH+fkPbE06iqGqWx/Me5+BYxZUL6vICpC9k5ckHV3PDEYeDPQzABxNhQt4E9dm5h a3a91M9gewHV4nf23NQpukdK2tZ05utDf999DXpiQ12qK3zOXARvvPCPUbuns3Wy KddDbqDveoaBYqihnzZGii0AR7IpTU0H7UYzzthAPL0XDY0a2SgIhFQhjkkEz7bJ rSyH7i9yGM/BfCH76553YZB8jQVXmK9G/n4AoXw3r5+8HWgLxwTcYkpVFWKVU4jG jckXIF6HX1Bdin587FjZ/DpgeEGIsg6KtpZvLYehzsg= -----END CERTIFICATE-----Generated at Fri Aug 8 10:19:27 2025 by rpki-client