$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa File: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (raw, json) Hash identifier: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4= Subject key identifier: AA:61:15:8E:57:0B:DE:12:4E:90:5B:F4:4F:2A:1D:36:CB:EE:8B:56 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 20F7AD49CAD83CAAD6FE4AE86C44E39A673D58B6 Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa Signing time: Mon 14 Jul 2025 00:00:01 +0000 ROA not before: Sun 13 Jul 2025 23:55:01 +0000 ROA not after: Mon 13 Jul 2026 00:00:01 +0000 asID: 151581 IP address blocks: 103.169.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 20:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f7:ad:49:ca:d8:3c:aa:d6:fe:4a:e8:6c:44:e3:9a:67:3d:58:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Jul 13 23:55:01 2025 GMT Not After : Jul 13 00:00:01 2026 GMT Subject: CN=AA61158E570BDE124E905BF44F2A1D36CBEE8B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:75:b9:26:c2:af:c7:27:c6:fb:9e:eb:29: 5c:95:d0:1c:eb:9f:5b:78:d5:9b:c9:77:e4:c6:d6: 7a:78:f1:9e:e3:c6:a9:94:d8:22:0f:1c:ed:a3:58: 00:fc:ef:33:48:97:cb:05:42:40:ce:d1:85:47:bd: 36:f1:4c:a6:0f:00:77:14:40:d8:57:cc:14:51:f4: 2c:db:5f:ac:35:1c:00:8f:e9:09:3e:f5:2d:6b:2c: 87:4b:85:08:9b:44:e4:25:f6:0a:9c:78:c0:37:31: 79:76:56:10:18:96:50:e5:56:2b:4a:b6:70:3d:c1: 8c:8f:c4:c6:f7:b2:59:fe:f6:0e:24:13:ae:84:20: db:2f:ec:0a:70:30:07:ca:36:2a:bc:eb:db:8f:86: 3e:0a:b6:ce:a1:15:de:f4:28:f1:24:50:01:45:a8: 4e:7e:3a:f1:85:26:96:16:cf:e0:e2:dd:2a:06:9e: 18:ba:bb:e5:95:37:e5:05:d0:6e:5f:f3:b1:d8:a1: c4:71:d7:65:29:f7:3c:0c:ed:d4:da:20:e8:56:89: a9:9d:a0:73:8d:41:08:62:b4:cb:b4:f1:9c:58:a9: cb:eb:74:0a:82:da:4e:8e:db:2f:b5:aa:5b:1a:78: 84:ff:5d:77:73:9c:da:98:71:8e:bb:bb:54:56:f3: 2b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:15:8E:57:0B:DE:12:4E:90:5B:F4:4F:2A:1D:36:CB:EE:8B:56 X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.143.0/24 Signature Algorithm: sha256WithRSAEncryption 34:d6:7b:80:ea:9a:19:ee:60:fd:f6:11:c8:9d:96:4a:e5:0e: 94:61:a6:4e:1b:f0:bb:69:5c:9c:60:85:f2:63:e7:8d:b6:4a: b4:b5:26:bd:4e:10:54:f8:e0:6a:7a:fd:06:29:f0:0e:13:6c: 62:be:2d:74:9d:b2:e5:7f:91:a1:08:5e:c5:3e:90:f8:8a:8c: b9:d2:5d:d7:8b:28:f7:4e:4d:d5:b4:21:5d:16:94:f6:74:9e: 2c:e9:3c:74:c3:b1:2b:c8:ee:2a:64:19:69:a2:41:2b:3d:e8: 64:86:8a:58:30:ce:b3:de:45:75:a3:12:89:e3:db:e7:f8:68: 33:13:ad:20:65:9a:d2:44:2c:d4:6a:a2:1f:c0:c4:a4:d3:44: 4e:ca:34:9e:5f:c4:64:54:21:e4:2a:34:aa:b9:1c:7f:0a:a4: 36:59:93:c8:41:3d:40:4c:5f:f2:5a:fc:6b:2b:71:a9:57:27: 72:11:17:85:37:0f:b0:1c:0f:b6:7c:72:bd:d7:9d:e9:49:18: cb:d3:a2:f3:c1:d3:47:f0:c8:64:43:5c:7a:b5:69:f9:5d:88: 9b:43:c4:2c:ec:34:75:3b:59:c0:82:67:fd:2f:08:da:c6:67: 4d:bb:da:95:0b:b4:cf:8b:71:61:0a:87:00:69:b5:7c:6f:e6: 3f:67:97:33 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIPetScrYPKrW/krobETjmmc9WLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTA3MTMyMzU1MDFaFw0yNjA3MTMwMDAwMDFaMDMxMTAvBgNV BAMTKEFBNjExNThFNTcwQkRFMTI0RTkwNUJGNDRGMkExRDM2Q0JFRThCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuHW5JsKvxyfG+57rKVyV0Bzr n1t41ZvJd+TG1np48Z7jxqmU2CIPHO2jWAD87zNIl8sFQkDO0YVHvTbxTKYPAHcU QNhXzBRR9CzbX6w1HACP6Qk+9S1rLIdLhQibROQl9gqceMA3MXl2VhAYllDlVitK tnA9wYyPxMb3sln+9g4kE66EINsv7ApwMAfKNiq869uPhj4Kts6hFd70KPEkUAFF qE5+OvGFJpYWz+Di3SoGnhi6u+WVN+UF0G5f87HYocRx12Up9zwM7dTaIOhWiamd oHONQQhitMu08ZxYqcvrdAqC2k6O2y+1qlsaeIT/XXdznNqYcY67u1RW8yvvAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUqmEVjlcL3hJOkFv0TyodNsvui1YwHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZGUxYThlLWMyYjgtNDk5Ni05 NDkyLTZmOTJjMmRmZWM3YS8wLzMxMzAzMzJlMzEzNjM5MmUzMTM0MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqY8wDQYJ KoZIhvcNAQELBQADggEBADTWe4DqmhnuYP32EcidlkrlDpRhpk4b8LtpXJxghfJj 5422SrS1Jr1OEFT44Gp6/QYp8A4TbGK+LXSdsuV/kaEIXsU+kPiKjLnSXdeLKPdO TdW0IV0WlPZ0nizpPHTDsSvI7ipkGWmiQSs96GSGilgwzrPeRXWjEonj2+f4aDMT rSBlmtJELNRqoh/AxKTTRE7KNJ5fxGRUIeQqNKq5HH8KpDZZk8hBPUBMX/Ja/Gsr calXJ3IRF4U3D7AcD7Z8cr3XnelJGMvTovPB00fwyGRDXHq1afldiJtDxCzsNHU7 WcCCZ/0vCNrGZ0272pULtM+LcWEKhwBptXxv5j9nlzM= -----END CERTIFICATE-----Generated at Sat Aug 9 10:33:08 2025 by rpki-client