$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa File: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (raw, json) Hash identifier: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM= Subject key identifier: 65:F6:39:46:F7:81:F0:DD:0F:30:C3:64:7F:13:7C:26:DD:86:BD:54 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 639CFFA2D6199F4090A4909BF03520765692A83C Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa Signing time: Sat 02 Aug 2025 17:00:00 +0000 ROA not before: Sat 02 Aug 2025 16:55:00 +0000 ROA not after: Sat 01 Aug 2026 17:00:00 +0000 asID: 140481 IP address blocks: 110.76.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 18:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9c:ff:a2:d6:19:9f:40:90:a4:90:9b:f0:35:20:76:56:92:a8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Aug 2 16:55:00 2025 GMT Not After : Aug 1 17:00:00 2026 GMT Subject: CN=65F63946F781F0DD0F30C3647F137C26DD86BD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:2a:a2:13:2f:ca:2e:4f:4e:29:dd:d0:13: 4d:8f:3d:f8:c1:1d:de:e0:26:92:98:54:34:e8:1c: 4c:7f:62:43:48:b8:44:d7:09:15:e3:8d:ad:d0:1e: 72:9a:3e:b0:34:26:5f:b8:d5:51:20:43:3c:ab:5f: dd:c3:44:c5:d7:d1:d3:f8:a3:ea:1e:5f:60:04:8b: 80:22:f8:7a:26:1f:94:7c:b1:3f:fa:ca:1f:4a:ed: 65:22:c0:51:e2:2a:b3:6e:26:78:4e:75:a6:97:70: 42:b8:ca:d0:98:3d:56:3d:72:0d:62:c5:2d:97:36: 62:96:b2:94:d8:ea:fc:ad:47:51:72:0d:0f:f2:d0: 24:f5:f4:73:2c:54:56:6a:0c:af:f0:db:51:9b:9f: 14:1d:fc:c7:6d:5e:11:2f:24:c6:cd:53:6b:f5:a6: 67:f1:cc:89:10:f7:38:8f:48:14:88:54:c7:2f:99: 29:b3:4d:19:ce:7f:f2:d6:b9:dd:1e:c4:a2:77:2a: 4d:4d:7d:68:26:da:06:d9:98:4e:28:10:80:0f:dd: 33:bd:01:69:7a:1a:85:7a:a1:fc:d8:1d:8a:2e:58: 82:a2:37:9d:f6:86:7a:b8:a5:3b:f8:95:dc:a3:0b: 48:2d:67:60:2d:41:7e:e7:97:66:82:33:d0:ba:db: c2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F6:39:46:F7:81:F0:DD:0F:30:C3:64:7F:13:7C:26:DD:86:BD:54 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.76.145.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:ba:e4:41:e2:91:99:6a:e7:66:ad:5c:2c:57:3d:f7:b1:ba: 95:c8:c9:9e:9c:f3:5c:de:10:87:c9:01:d5:66:dc:a1:2d:66: c5:22:a7:46:b6:61:34:4b:8f:43:37:85:87:67:c3:64:4b:83: 12:a8:f2:03:53:0d:05:9e:f6:f5:df:8b:9b:b8:5c:fd:31:b8: 6a:e3:cc:ad:46:f8:a9:2e:16:ff:14:33:af:41:9f:39:d0:a0: 08:e6:15:0f:68:95:fc:1d:d9:9f:af:34:62:c8:ec:a5:49:8f: a8:67:84:2a:31:62:15:05:00:dd:33:10:b2:42:7a:ff:30:5b: a4:8c:c9:f7:0f:0c:44:21:f3:fd:a2:c9:cb:08:5f:26:36:94: 17:c2:65:61:7a:7d:e3:e1:8c:ce:ae:f3:49:f8:09:0a:2a:71: 04:3d:32:54:e8:bb:46:e8:48:41:67:d0:69:e9:da:81:08:7f: 91:dd:64:7b:ab:01:f2:99:d4:88:f3:2c:c8:b7:1d:ef:78:9a: aa:f0:98:a6:a0:f8:92:c0:d2:da:7b:49:f9:4e:f5:6a:92:08: 05:62:22:7c:c8:9c:70:44:b8:60:26:b7:45:b8:73:f5:e3:8b: 31:de:d6:9a:ea:1e:63:67:b4:fd:d8:86:0e:7e:58:73:04:18: d3:d7:b4:8c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUY5z/otYZn0CQpJCb8DUgdlaSqDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTA4MDIxNjU1MDBaFw0yNjA4MDExNzAwMDBaMDMxMTAvBgNV BAMTKDY1RjYzOTQ2Rjc4MUYwREQwRjMwQzM2NDdGMTM3QzI2REQ4NkJENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZXiqiEy/KLk9OKd3QE02PPfjB Hd7gJpKYVDToHEx/YkNIuETXCRXjja3QHnKaPrA0Jl+41VEgQzyrX93DRMXX0dP4 o+oeX2AEi4Ai+HomH5R8sT/6yh9K7WUiwFHiKrNuJnhOdaaXcEK4ytCYPVY9cg1i xS2XNmKWspTY6vytR1FyDQ/y0CT19HMsVFZqDK/w21GbnxQd/MdtXhEvJMbNU2v1 pmfxzIkQ9ziPSBSIVMcvmSmzTRnOf/LWud0exKJ3Kk1NfWgm2gbZmE4oEIAP3TO9 AWl6GoV6ofzYHYouWIKiN532hnq4pTv4ldyjC0gtZ2AtQX7nl2aCM9C628IpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZfY5RveB8N0PMMNkfxN8Jt2GvVQwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbkyRMA0GCSqG SIb3DQEBCwUAA4IBAQBKuuRB4pGZaudmrVwsVz33sbqVyMmenPNc3hCHyQHVZtyh LWbFIqdGtmE0S49DN4WHZ8NkS4MSqPIDUw0Fnvb134ubuFz9Mbhq48ytRvipLhb/ FDOvQZ850KAI5hUPaJX8HdmfrzRiyOylSY+oZ4QqMWIVBQDdMxCyQnr/MFukjMn3 DwxEIfP9osnLCF8mNpQXwmVhen3j4YzOrvNJ+AkKKnEEPTJU6LtG6EhBZ9Bp6dqB CH+R3WR7qwHymdSI8yzItx3veJqq8JimoPiSwNLae0n5TvVqkggFYiJ8yJxwRLhg JrdFuHP144sx3taa6h5jZ7T92IYOflhzBBjT17SM -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:31 2025 by rpki-client