$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31322e302f32322d3234203d3e20313336303736.roa File: 3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (raw, json) Hash identifier: dFNLpydRcAPmDjut8v5fQywiAbtwD5YuSOmNSLuBbfk= Subject key identifier: 0E:32:13:2E:F9:A9:16:11:1B:86:03:7C:F1:F2:0C:6A:1D:E3:01:C0 Certificate issuer: /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Certificate serial: 7E19E805E44797AAF88F5E2EE7AC005C3365F427 Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31322e302f32322d3234203d3e20313336303736.roa Signing time: Mon 02 Jun 2025 02:04:17 +0000 ROA not before: Mon 02 Jun 2025 01:59:17 +0000 ROA not after: Mon 01 Jun 2026 02:04:17 +0000 asID: 136076 IP address blocks: 103.85.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:19:e8:05:e4:47:97:aa:f8:8f:5e:2e:e7:ac:00:5c:33:65:f4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86 Validity Not Before: Jun 2 01:59:17 2025 GMT Not After : Jun 1 02:04:17 2026 GMT Subject: CN=0E32132EF9A916111B86037CF1F20C6A1DE301C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:45:0f:09:4c:86:7a:4a:de:2e:84:03:36: 8a:aa:39:5a:b7:f6:fb:ef:3c:82:3c:e5:55:1b:56: 42:f2:c7:74:5b:21:52:e9:38:2e:a3:13:a0:c5:8f: 67:1a:b4:2f:03:e8:f6:03:f2:f5:3d:40:a9:cb:17: 4c:ca:a7:68:15:3b:a9:17:3f:7b:a6:ba:84:92:43: a9:e2:43:8e:07:b7:71:74:14:4d:e6:72:67:df:3e: 26:05:07:08:f3:5c:78:5b:33:7b:44:65:f4:6c:81: 89:8a:4b:02:ea:1e:40:d4:f3:8a:b9:33:6e:1d:9c: b3:79:f6:50:f3:42:fd:0b:59:d6:b1:b0:9d:74:e0: 80:28:81:f5:7b:97:69:ca:a1:05:75:37:94:d5:50: fa:a1:15:18:1e:8f:78:86:50:2c:8f:b4:29:d7:50: be:af:4f:4c:c1:39:ed:09:17:2d:21:dd:4a:22:4c: 1c:d6:cd:f6:df:f2:d5:db:ba:e7:55:0b:56:cc:07: 1d:d0:2b:ab:b1:ea:0a:69:ec:84:a2:4f:05:6b:47: 00:fb:0c:72:15:26:92:f2:3f:28:07:82:1d:60:cd: be:7e:10:0b:3b:25:31:47:0b:33:d6:9d:3b:c2:20: 56:7c:1d:51:89:4a:d2:7e:38:fe:69:fe:de:d0:c4: c5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:32:13:2E:F9:A9:16:11:1B:86:03:7C:F1:F2:0C:6A:1D:E3:01:C0 X509v3 Authority Key Identifier: keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31322e302f32322d3234203d3e20313336303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.85.12.0/22 Signature Algorithm: sha256WithRSAEncryption 46:2c:a4:45:96:82:37:9c:2f:d4:90:87:0b:a9:87:99:22:da: dd:8e:2a:9d:47:a4:68:f1:b4:21:b3:a9:e3:3c:8e:76:bd:2d: 1a:41:10:87:98:30:68:5a:97:0f:a2:9f:97:61:b0:3b:25:6a: 32:b2:f9:44:cd:2e:b6:3c:95:65:aa:3c:72:81:55:ba:9f:c3: 9c:97:df:df:db:3d:1d:51:26:9d:a1:25:eb:93:21:80:f9:c4: e3:09:d4:5c:e3:05:e7:43:17:a1:d2:9d:1e:79:72:46:5c:94: 7a:46:a7:64:43:ca:57:e5:cd:fe:05:5c:cb:d1:b7:aa:f1:a1: b8:54:8d:7d:8a:2d:73:85:0b:a8:5e:8b:91:67:fc:9b:04:50: 84:2c:7a:e8:13:50:d9:3f:8c:80:31:d1:5e:a8:e6:c3:85:32: 50:02:f4:ad:fc:7e:22:c6:8b:ea:87:a6:6e:0b:56:35:48:5a: ea:ab:da:76:bc:d7:a3:49:c3:07:89:08:56:25:e7:51:56:26: f3:a7:f8:78:70:f0:fc:47:5b:e9:17:6a:a5:29:ff:b3:cb:bf: 3b:4d:a0:7c:b7:ed:0f:7f:eb:9e:45:6e:0a:8d:d5:e6:97:06: 71:15:33:3a:a3:ca:96:87:8e:2f:49:d6:25:9a:99:6f:c2:e3: 06:53:c4:d6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUfhnoBeRHl6r4j14u56wAXDNl9CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURE RjY1NkI4NjAeFw0yNTA2MDIwMTU5MTdaFw0yNjA2MDEwMjA0MTdaMDMxMTAvBgNV BAMTKDBFMzIxMzJFRjlBOTE2MTExQjg2MDM3Q0YxRjIwQzZBMURFMzAxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjUUPCUyGekreLoQDNoqqOVq3 9vvvPII85VUbVkLyx3RbIVLpOC6jE6DFj2catC8D6PYD8vU9QKnLF0zKp2gVO6kX P3umuoSSQ6niQ44Ht3F0FE3mcmffPiYFBwjzXHhbM3tEZfRsgYmKSwLqHkDU84q5 M24dnLN59lDzQv0LWdaxsJ104IAogfV7l2nKoQV1N5TVUPqhFRgej3iGUCyPtCnX UL6vT0zBOe0JFy0h3UoiTBzWzfbf8tXbuudVC1bMBx3QK6ux6gpp7ISiTwVrRwD7 DHIVJpLyPygHgh1gzb5+EAs7JTFHCzPWnTvCIFZ8HVGJStJ+OP5p/t7QxMU1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUDjITLvmpFhEbhgN88fIMah3jAcAwHwYDVR0j BBgwFoAUNMIWs6YlgxzEHGp6FGDPnd9la4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzcwMDM1MC02NjMyLTQ5ZTItYjdlMy01ZDU3MzIyNGM1NmMvMC8zNEMyMTZCM0E2 MjU4MzFDQzQxQzZBN0ExNDYwQ0Y5RERGNjU2Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDMjE2QjNBNjI1ODMxQ0M0MUM2QTdBMTQ2MENGOURERjY1 NkI4Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljNzAwMzUwLTY2MzItNDllMi1i N2UzLTVkNTczMjI0YzU2Yy8wLzMxMzAzMzJlMzgzNTJlMzEzMjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdVDDANBgkqhkiG 9w0BAQsFAAOCAQEARiykRZaCN5wv1JCHC6mHmSLa3Y4qnUekaPG0IbOp4zyOdr0t GkEQh5gwaFqXD6Kfl2GwOyVqMrL5RM0utjyVZao8coFVup/DnJff39s9HVEmnaEl 65MhgPnE4wnUXOMF50MXodKdHnlyRlyUekanZEPKV+XN/gVcy9G3qvGhuFSNfYot c4ULqF6LkWf8mwRQhCx66BNQ2T+MgDHRXqjmw4UyUAL0rfx+IsaL6oembgtWNUha 6qvadrzXo0nDB4kIViXnUVYm86f4eHDw/Edb6RdqpSn/s8u/O02gfLftD3/rnkVu Co3V5pcGcRUzOqPKloeOL0nWJZqZb8LjBlPE1g== -----END CERTIFICATE-----Generated at Wed Nov 5 18:06:28 2025 by rpki-client