$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa File: 3130332e32392e372e302f32342d3234203d3e203338373533.roa (raw, json) Hash identifier: Cs1FhR7o/qBxHI4fNPxi4IU50g6ybDrSkP7NyP3bQNo= Subject key identifier: 67:2E:D7:DB:E8:8E:03:30:5E:3C:58:EF:C9:78:3F:D6:14:7F:3F:7E Certificate issuer: /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Certificate serial: 589685739203F89BB5B6B94BFE2420B144373ABF Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa Signing time: Tue 05 Aug 2025 03:00:01 +0000 ROA not before: Tue 05 Aug 2025 02:55:01 +0000 ROA not after: Tue 04 Aug 2026 03:00:01 +0000 asID: 38753 IP address blocks: 103.29.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:96:85:73:92:03:f8:9b:b5:b6:b9:4b:fe:24:20:b1:44:37:3a:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14 Validity Not Before: Aug 5 02:55:01 2025 GMT Not After : Aug 4 03:00:01 2026 GMT Subject: CN=672ED7DBE88E03305E3C58EFC9783FD6147F3F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:76:a1:b0:6e:19:17:bb:e7:7f:a5:37:a4:9e: 8f:f2:97:58:85:4f:72:fa:8d:08:1d:d3:db:3b:63: 4b:69:e6:b4:a3:bc:6d:cd:3f:87:43:65:82:ec:a9: fa:e8:8f:ce:3a:b6:a8:63:60:a9:6b:a2:11:0f:69: 41:01:cc:31:15:0a:10:87:0f:fc:98:e6:de:c3:93: 19:a1:f1:23:33:9b:76:58:70:c9:5e:b8:a7:05:0e: 89:3a:ba:8f:bc:af:d7:3b:09:16:9b:8b:95:87:16: 4a:28:18:fb:53:94:e7:1b:38:32:9f:5b:b1:58:81: 2d:4d:37:4f:32:cf:4a:cd:d1:c5:fc:69:1e:80:ef: b4:f5:e1:d0:19:9e:15:7e:39:28:82:b5:be:43:00: 9c:fb:c8:84:b7:30:1c:10:b7:5a:ff:52:46:cf:2a: 26:ec:96:66:c8:8b:32:f1:3e:b8:92:a6:65:10:c5: 97:30:b1:1e:e0:d6:ab:15:88:44:ca:db:72:b7:d3: dd:dc:ff:f3:9f:fd:a4:b5:1c:73:7b:97:76:a4:8f: 94:2a:52:71:4c:15:bc:fc:61:d5:34:5d:44:f0:ec: a7:c6:24:ee:73:7b:fc:a2:94:7d:5a:18:64:78:6a: 93:b8:9a:6c:78:e1:6b:ad:e6:da:17:18:56:86:1c: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2E:D7:DB:E8:8E:03:30:5E:3C:58:EF:C9:78:3F:D6:14:7F:3F:7E X509v3 Authority Key Identifier: keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/3130332e32392e372e302f32342d3234203d3e203338373533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.7.0/24 Signature Algorithm: sha256WithRSAEncryption 73:0f:14:de:d7:ba:fd:83:0f:5b:90:30:54:49:34:f1:70:78: 66:2d:26:03:6d:ba:30:7e:0b:1b:1d:ec:3a:b4:1a:34:3d:d3: 10:bf:10:9a:c2:cb:eb:d9:20:58:5d:25:eb:02:77:07:ba:ad: 8f:ef:44:57:34:ac:b1:12:51:e5:be:22:0e:3c:85:50:d0:dc: a2:0b:f4:77:07:57:ec:62:f6:1a:f0:5d:50:34:7d:70:90:dc: c2:94:4d:d7:43:a7:64:57:7d:ad:c1:f7:a6:ef:51:dc:aa:8f: da:26:92:06:c9:a1:d8:f2:ed:08:64:7a:0a:88:02:cf:b7:a2: 93:fc:b4:e0:f6:56:fc:0a:6b:42:11:63:dd:8b:42:27:ed:86: d0:c0:b7:8f:3b:c3:0f:87:9f:c9:e5:f8:4e:09:80:68:36:5f: 5b:8c:18:40:7f:0d:c4:01:c1:1e:f3:94:a3:7d:9f:a1:21:bf: e2:f9:d4:d9:bb:81:c6:d5:9c:d8:31:07:5c:7b:79:1d:01:ed: e0:fc:bf:02:fa:80:d0:a7:ac:11:08:46:f7:02:e8:1c:ea:16: 4d:f0:33:4c:83:fc:82:9f:c9:54:1f:51:29:ef:5c:69:0e:5d: 74:47:ac:cd:2b:8b:a8:2b:4c:dc:9f:2b:ef:63:b4:eb:0d:b2: ca:78:36:a5 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUWJaFc5ID+Ju1trlL/iQgsUQ3Or8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2 OERGNkUxNDAeFw0yNTA4MDUwMjU1MDFaFw0yNjA4MDQwMzAwMDFaMDMxMTAvBgNV BAMTKDY3MkVEN0RCRTg4RTAzMzA1RTNDNThFRkM5NzgzRkQ2MTQ3RjNGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdqGwbhkXu+d/pTekno/yl1iF T3L6jQgd09s7Y0tp5rSjvG3NP4dDZYLsqfroj846tqhjYKlrohEPaUEBzDEVChCH D/yY5t7Dkxmh8SMzm3ZYcMleuKcFDok6uo+8r9c7CRabi5WHFkooGPtTlOcbODKf W7FYgS1NN08yz0rN0cX8aR6A77T14dAZnhV+OSiCtb5DAJz7yIS3MBwQt1r/UkbP KibslmbIizLxPriSpmUQxZcwsR7g1qsViETK23K3093c//Of/aS1HHN7l3akj5Qq UnFMFbz8YdU0XUTw7KfGJO5ze/yilH1aGGR4apO4mmx44Wut5toXGFaGHHopAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUZy7X2+iOAzBePFjvyXg/1hR/P34wHwYDVR0j BBgwFoAUEcm6KFNLpEmZtLpdaw8o5WjfbhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDZiNjY3My00N2ExLTQ1ZTUtYjZjMi00MmFiOGI0NzYyNDkvMC8xMUM5QkEyODUz NEJBNDQ5OTlCNEJBNUQ2QjBGMjhFNTY4REY2RTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTFDOUJBMjg1MzRCQTQ0OTk5QjRCQTVENkIwRjI4RTU2OERG NkUxNC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2YjY2NzMtNDdhMS00NWU1LWI2 YzItNDJhYjhiNDc2MjQ5LzAvMzEzMDMzMmUzMjM5MmUzNzJlMzAyZjMyMzQyZDMy MzQyMDNkM2UyMDMzMzgzNzM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnHQcwDQYJKoZIhvcNAQEL BQADggEBAHMPFN7Xuv2DD1uQMFRJNPFweGYtJgNtujB+Cxsd7Dq0GjQ90xC/EJrC y+vZIFhdJesCdwe6rY/vRFc0rLESUeW+Ig48hVDQ3KIL9HcHV+xi9hrwXVA0fXCQ 3MKUTddDp2RXfa3B96bvUdyqj9omkgbJodjy7QhkegqIAs+3opP8tOD2VvwKa0IR Y92LQifthtDAt487ww+Hn8nl+E4JgGg2X1uMGEB/DcQBwR7zlKN9n6Ehv+L51Nm7 gcbVnNgxB1x7eR0B7eD8vwL6gNCnrBEIRvcC6BzqFk3wM0yD/IKfyVQfUSnvXGkO XXRHrM0ri6grTNyfK+9jtOsNssp4NqU= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:14 2025 by rpki-client