$ rpki-client -vvf repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32342d3234203d3e20313530323232.roa File: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (raw, json) Hash identifier: c8FIGaCU0t2/B828bx0ZmZOFxlHPrYIwjNCfoYq4Eck= Subject key identifier: ED:B5:B9:FD:59:42:FC:A4:64:04:F6:0E:78:E1:B8:FB:18:02:F2:31 Certificate issuer: /CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Certificate serial: 3E03B2A66AE525F8511BB9C10C10D4E87B4EA333 Authority key identifier: 04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32342d3234203d3e20313530323232.roa Signing time: Mon 14 Jul 2025 15:00:01 +0000 ROA not before: Mon 14 Jul 2025 14:55:01 +0000 ROA not after: Mon 13 Jul 2026 15:00:01 +0000 asID: 150222 IP address blocks: 103.88.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:03:b2:a6:6a:e5:25:f8:51:1b:b9:c1:0c:10:d4:e8:7b:4e:a3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04EE3BC3691732E069DF0D9D29DE360611CCF0DB Validity Not Before: Jul 14 14:55:01 2025 GMT Not After : Jul 13 15:00:01 2026 GMT Subject: CN=EDB5B9FD5942FCA46404F60E78E1B8FB1802F231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5d:d0:47:e3:5f:07:d1:5c:e9:8b:51:fe:a2: d4:df:b9:95:14:08:30:d1:78:5f:0a:7e:84:ee:2a: 83:e6:3a:70:2d:b4:fb:48:ab:23:46:c8:7e:4f:2d: fd:be:b8:1b:fc:03:52:be:f6:dd:15:c7:81:75:99: b1:a5:4d:c4:9f:89:0d:1b:9a:76:d7:4a:f9:62:16: 6d:41:eb:1b:3d:73:76:aa:71:88:14:f2:0f:e1:0b: b9:27:25:cf:26:7f:27:a1:da:a9:fe:bf:8f:ab:0c: 3d:a9:53:9f:dc:8b:45:f5:cf:0d:9c:07:54:80:bf: 36:c9:c6:b8:34:8c:d7:6e:9c:64:40:94:4e:45:83: cb:31:da:7f:51:76:bd:0c:0d:7b:65:b6:1b:17:3b: 55:70:c0:a5:59:8e:ae:d8:ef:2e:f0:7c:a1:f3:d2: 04:c2:3a:a6:04:e9:08:07:6e:a8:1f:20:34:cb:9f: 94:79:64:9d:5d:69:df:4f:c1:2d:3b:58:68:15:88: e7:fb:5d:5d:e5:e7:12:46:34:65:0f:7d:90:a7:79: 88:25:92:5a:3c:8a:1f:25:d4:7d:fe:98:32:cf:a8: f8:49:e1:78:28:02:43:ba:4f:5a:6a:73:fa:ba:a9: 88:bc:34:4d:94:81:92:62:e4:e8:de:e3:86:98:75: 68:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B5:B9:FD:59:42:FC:A4:64:04:F6:0E:78:E1:B8:FB:18:02:F2:31 X509v3 Authority Key Identifier: keyid:04:EE:3B:C3:69:17:32:E0:69:DF:0D:9D:29:DE:36:06:11:CC:F0:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/04EE3BC3691732E069DF0D9D29DE360611CCF0DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/3130332e38382e39302e302f32342d3234203d3e20313530323232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.88.90.0/24 Signature Algorithm: sha256WithRSAEncryption 60:f4:f0:58:54:f8:3d:11:6e:e0:ac:d5:2f:8e:34:bc:c1:f9: 09:66:2d:c7:49:bc:78:f1:61:19:31:d5:87:f4:86:80:0d:be: 24:00:a6:38:b6:68:a3:88:07:73:e9:01:5c:b8:66:f5:b4:73: e5:a8:b4:65:bf:75:81:3c:93:f1:05:9e:c1:d7:c6:6c:d1:14: 7d:5e:f1:8b:b0:b2:36:9e:ed:0c:7b:36:b4:d1:3d:b1:60:31: 5d:35:5c:05:81:1e:d7:f2:ad:b7:5b:37:e4:d1:4f:ff:51:19: c7:74:9e:73:e3:0f:b2:2f:9f:97:15:b3:c8:03:1a:4f:f9:e8: d7:79:2c:79:59:7b:85:7f:4b:19:9e:fa:2b:0c:53:3e:db:b6: 0c:fe:bd:76:ce:61:5a:b6:6d:42:22:42:df:e6:55:a5:88:db: fb:08:66:42:ac:d2:8b:9b:97:8d:99:2f:b9:51:a3:6b:92:05: 82:da:27:d0:d5:35:cb:51:b8:f4:39:87:26:95:26:af:ab:0b: ce:bf:5c:63:2a:70:c0:eb:73:9d:18:96:09:ab:70:ea:a2:ba: c1:2f:ca:7b:5c:9b:86:c2:f2:b6:df:0d:e6:1f:de:3e:90:d7: be:6b:5a:d6:ab:64:a9:d7:98:37:72:39:b8:0e:b9:f8:36:ec: c6:5e:10:7b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPgOypmrlJfhRG7nBDBDU6HtOozMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYx MUNDRjBEQjAeFw0yNTA3MTQxNDU1MDFaFw0yNjA3MTMxNTAwMDFaMDMxMTAvBgNV BAMTKEVEQjVCOUZENTk0MkZDQTQ2NDA0RjYwRTc4RTFCOEZCMTgwMkYyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXdBH418H0Vzpi1H+otTfuZUU CDDReF8KfoTuKoPmOnAttPtIqyNGyH5PLf2+uBv8A1K+9t0Vx4F1mbGlTcSfiQ0b mnbXSvliFm1B6xs9c3aqcYgU8g/hC7knJc8mfyeh2qn+v4+rDD2pU5/ci0X1zw2c B1SAvzbJxrg0jNdunGRAlE5Fg8sx2n9Rdr0MDXtlthsXO1VwwKVZjq7Y7y7wfKHz 0gTCOqYE6QgHbqgfIDTLn5R5ZJ1dad9PwS07WGgViOf7XV3l5xJGNGUPfZCneYgl klo8ih8l1H3+mDLPqPhJ4XgoAkO6T1pqc/q6qYi8NE2UgZJi5Oje44aYdWjdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7bW5/VlC/KRkBPYOeOG4+xgC8jEwHwYDVR0j BBgwFoAUBO47w2kXMuBp3w2dKd42BhHM8NswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTkxODA5ZS1kZDQ5LTRjNTItYjExZi0yYTUxOGMzYWE4NTYvMC8wNEVFM0JDMzY5 MTczMkUwNjlERjBEOUQyOURFMzYwNjExQ0NGMERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDRFRTNCQzM2OTE3MzJFMDY5REYwRDlEMjlERTM2MDYxMUND RjBEQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlOTE4MDllLWRkNDktNGM1Mi1i MTFmLTJhNTE4YzNhYTg1Ni8wLzMxMzAzMzJlMzgzODJlMzkzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdYWjANBgkqhkiG 9w0BAQsFAAOCAQEAYPTwWFT4PRFu4KzVL440vMH5CWYtx0m8ePFhGTHVh/SGgA2+ JACmOLZoo4gHc+kBXLhm9bRz5ai0Zb91gTyT8QWewdfGbNEUfV7xi7CyNp7tDHs2 tNE9sWAxXTVcBYEe1/Ktt1s35NFP/1EZx3Sec+MPsi+flxWzyAMaT/no13kseVl7 hX9LGZ76KwxTPtu2DP69ds5hWrZtQiJC3+ZVpYjb+whmQqzSi5uXjZkvuVGja5IF gton0NU1y1G49DmHJpUmr6sLzr9cYypwwOtznRiWCatw6qK6wS/Ke1ybhsLytt8N 5h/ePpDXvmta1qtkqdeYN3I5uA65+Dbsxl4Qew== -----END CERTIFICATE-----Generated at Thu Aug 7 13:10:34 2025 by rpki-client