$ rpki-client -vvf repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa File: 3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa (raw, json) Hash identifier: 8HhI26rXh/jjcFdNc40xKLKoLxJCht2FMFxSJPngPR0= Subject key identifier: 43:F5:43:5D:D9:B8:64:FB:B1:1E:A8:7D:C7:41:AE:55:37:8D:E7:6D Certificate issuer: /CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Certificate serial: 247E038BC1C2F1F7AE5E3BF29224F68B351B4750 Authority key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa Signing time: Sat 19 Jul 2025 14:00:02 +0000 ROA not before: Sat 19 Jul 2025 13:55:02 +0000 ROA not after: Sat 18 Jul 2026 14:00:02 +0000 asID: 141985 IP address blocks: 103.167.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7e:03:8b:c1:c2:f1:f7:ae:5e:3b:f2:92:24:f6:8b:35:1b:47:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Validity Not Before: Jul 19 13:55:02 2025 GMT Not After : Jul 18 14:00:02 2026 GMT Subject: CN=43F5435DD9B864FBB11EA87DC741AE55378DE76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:3b:73:8b:d5:dc:f6:1c:a5:e4:cc:d8:06: bd:46:6c:a4:55:96:bc:70:cd:4c:5a:35:e8:47:56: 0b:b8:cf:ac:9c:23:bf:f8:ac:81:25:72:2e:cd:fb: 8c:d4:c9:c8:36:c2:a5:75:d7:1a:7a:b2:08:9c:c3: 5d:14:ed:8e:4d:88:55:55:7c:d7:56:06:21:ad:ac: c6:5c:1a:7c:99:41:13:6e:be:bb:20:e6:44:45:e2: 1a:d5:67:14:01:65:bd:88:fb:8b:dc:4e:5b:84:95: 0f:74:fc:7f:fa:4e:85:93:23:1b:da:2a:91:a6:19: fd:89:3d:4a:21:be:c5:ab:ba:d0:28:df:0e:1d:e0: b1:d3:f1:a2:03:10:a1:51:6c:f8:ab:62:9f:b5:fa: cf:7b:b9:7b:2b:7a:5f:4b:78:e1:10:98:40:c0:c8: fa:ba:a1:d2:b1:53:3b:f1:36:ec:18:ad:80:38:86: a1:99:2a:cd:fb:49:fb:f5:83:04:bc:71:d9:6b:80: b8:af:18:72:94:cc:84:3c:85:15:2e:e5:bd:12:2e: d8:45:32:ce:8f:64:75:5e:7f:ce:0d:a8:e4:a1:5b: d6:ae:92:b1:e6:70:ef:ce:1f:b4:55:d0:89:49:46: 18:db:f3:f6:04:ab:f9:21:60:bf:21:a6:32:67:80: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F5:43:5D:D9:B8:64:FB:B1:1E:A8:7D:C7:41:AE:55:37:8D:E7:6D X509v3 Authority Key Identifier: keyid:35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/3130332e3136372e3136392e302f32342d3234203d3e20313431393835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.169.0/24 Signature Algorithm: sha256WithRSAEncryption 96:a8:fe:2e:cc:fa:7b:cc:a2:d7:4e:8a:e3:ab:52:a2:82:bc: c3:e8:4e:e0:53:79:71:48:44:75:5b:6b:d2:02:f9:9a:12:75: 78:c1:04:b6:dc:97:4c:ff:fa:c8:37:30:ef:38:85:26:b9:97: 79:b3:ea:35:6a:3d:82:fd:1b:9d:7f:52:ea:e6:8c:36:ce:40: 60:80:64:18:c6:af:9b:93:e1:a4:ca:9b:4a:ea:cd:2e:b6:e8: 5c:38:e6:88:02:12:d1:31:dc:c4:a3:09:66:e5:11:ad:5d:ac: c1:8c:ed:9f:fd:24:fd:2c:0a:f7:3c:9a:0e:f1:2d:a7:64:65: cc:8c:e8:62:19:c1:5b:cd:08:c1:00:5d:39:b0:a3:b2:05:13: 5f:d4:25:88:7b:8d:70:02:d7:3e:20:4a:c6:c1:3d:c3:fe:57: 99:e6:83:4a:68:d6:71:11:04:c9:3c:b8:ea:78:bc:a9:c7:4c: f9:6c:3c:74:64:2b:b9:53:8e:27:88:45:bc:ff:48:99:72:61: 20:bd:c1:6a:70:12:d5:ce:b1:c3:fb:ef:32:ce:29:bf:18:b3: c3:4c:32:9e:98:fb:59:6a:a6:af:c9:9d:50:64:df:32:b4:94: f4:6c:39:fb:94:9d:9b:3b:23:7f:a6:1b:a8:f6:7f:a8:e9:18: c6:74:a1:cb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUJH4Di8HC8feuXjvykiT2izUbR1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1 RUE0M0UyQjAeFw0yNTA3MTkxMzU1MDJaFw0yNjA3MTgxNDAwMDJaMDMxMTAvBgNV BAMTKDQzRjU0MzVERDlCODY0RkJCMTFFQTg3REM3NDFBRTU1Mzc4REU3NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBiTtzi9Xc9hyl5MzYBr1GbKRV lrxwzUxaNehHVgu4z6ycI7/4rIElci7N+4zUycg2wqV11xp6sgicw10U7Y5NiFVV fNdWBiGtrMZcGnyZQRNuvrsg5kRF4hrVZxQBZb2I+4vcTluElQ90/H/6ToWTIxva KpGmGf2JPUohvsWrutAo3w4d4LHT8aIDEKFRbPirYp+1+s97uXsrel9LeOEQmEDA yPq6odKxUzvxNuwYrYA4hqGZKs37Sfv1gwS8cdlrgLivGHKUzIQ8hRUu5b0SLthF Ms6PZHVef84NqOShW9aukrHmcO/OH7RV0IlJRhjb8/YEq/khYL8hpjJngE1FAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQ/VDXdm4ZPuxHqh9x0GuVTeN520wHwYDVR0j BBgwFoAUNX3qxebBGzw+FS1aJPjYMV6kPiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMC8zNTdERUFDNUU2 QzExQjNDM0UxNTJENUEyNEY4RDgzMTVFQTQzRTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3REVBQzVFNkMxMUIzQzNFMTUyRDVBMjRGOEQ4MzE1RUE0 M0UyQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNGI2MTJmLWY5MjQtNGVjMi1i MWYxLWExMzA1ZDIzZDUzYS8wLzMxMzAzMzJlMzEzNjM3MmUzMTM2MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM4MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp6kwDQYJ KoZIhvcNAQELBQADggEBAJao/i7M+nvMotdOiuOrUqKCvMPoTuBTeXFIRHVba9IC +ZoSdXjBBLbcl0z/+sg3MO84hSa5l3mz6jVqPYL9G51/UurmjDbOQGCAZBjGr5uT 4aTKm0rqzS626Fw45ogCEtEx3MSjCWblEa1drMGM7Z/9JP0sCvc8mg7xLadkZcyM 6GIZwVvNCMEAXTmwo7IFE1/UJYh7jXAC1z4gSsbBPcP+V5nmg0po1nERBMk8uOp4 vKnHTPlsPHRkK7lTjieIRbz/SJlyYSC9wWpwEtXOscP77zLOKb8Ys8NMMp6Y+1lq pq/JnVBk3zK0lPRsOfuUnZs7I3+mG6j2f6jpGMZ0ocs= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:43 2025 by rpki-client