$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa File: 3131302e34342e3136392e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: njKwh9fBki9cQ9S37NNLRAGEY/gEGO5YoV7LWFXK6D8= Subject key identifier: CD:B8:A4:CC:8A:AE:C6:9D:70:43:36:5B:E9:E0:12:99:8C:B5:CC:E6 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 084D2C7A2318AEF33F65FEC5BBE41E7AF2A9E2CF Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa Signing time: Fri 01 Aug 2025 17:00:00 +0000 ROA not before: Fri 01 Aug 2025 16:55:00 +0000 ROA not after: Fri 31 Jul 2026 17:00:00 +0000 asID: 24206 IP address blocks: 110.44.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4d:2c:7a:23:18:ae:f3:3f:65:fe:c5:bb:e4:1e:7a:f2:a9:e2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 1 16:55:00 2025 GMT Not After : Jul 31 17:00:00 2026 GMT Subject: CN=CDB8A4CC8AAEC69D7043365BE9E012998CB5CCE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:45:a1:99:d9:86:5a:c1:4f:d5:c1:a1:32: ff:f5:f4:e6:e2:5e:6f:c3:7c:98:b4:03:3e:fa:50: c9:60:45:97:ee:11:46:1b:63:b6:4b:31:97:28:a3: 3b:1f:6c:4a:5e:16:73:41:80:f4:aa:df:e0:1c:8a: d0:bb:a6:74:3f:4e:0c:27:49:e9:12:55:94:37:f4: 80:4b:5c:82:4f:72:5d:85:2c:6d:94:92:45:94:d6: fb:5e:b5:d1:29:d2:41:ce:84:c4:c9:c5:2a:6f:0b: 59:f9:5b:20:b1:6e:db:00:0c:e2:fa:e7:f9:ec:6c: 78:d3:fa:42:15:ef:eb:f4:56:f3:78:88:f2:2d:dc: e8:15:cd:c5:14:88:e5:9f:85:88:74:3b:c7:68:6b: 59:37:a0:d1:b7:fa:21:89:3f:9f:cc:3c:0a:fa:ee: 19:07:c6:86:ce:10:76:c6:47:e3:88:cc:27:1f:0d: 58:ac:bb:ef:0a:16:09:f1:c2:31:a1:1b:09:42:28: d2:4e:95:50:b8:9e:cb:50:54:c5:69:be:c6:12:27: 9b:80:7f:c2:20:57:e7:54:54:9a:e7:3b:96:a4:04: 47:32:c8:73:29:ca:96:e0:63:81:d3:64:e5:c5:40: 8a:16:d6:4c:48:f3:e5:d9:5c:13:c6:a2:a8:47:b1: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B8:A4:CC:8A:AE:C6:9D:70:43:36:5B:E9:E0:12:99:8C:B5:CC:E6 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136392e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.169.0/24 Signature Algorithm: sha256WithRSAEncryption 52:cd:d7:c6:4d:a8:d5:c3:7d:a9:15:fd:9a:9a:85:5a:29:c3: e3:c3:e1:fc:48:7e:74:4d:55:7a:e8:9f:57:30:58:22:4d:bb: 5c:81:fa:ac:7d:8b:f1:99:f4:f3:1f:bb:fd:78:69:96:c4:a3: bf:46:3e:de:13:67:e3:17:96:02:d5:42:b1:c9:ac:06:37:09: c7:99:a4:67:47:53:4c:ab:09:eb:32:6f:c0:c4:cf:7f:e3:25: 6e:18:32:d5:b0:e1:ec:b5:a8:eb:ac:25:19:ca:a8:19:84:1b: e6:23:ee:c6:3b:6f:e8:d8:f3:bc:12:70:34:67:bc:81:4d:29: 34:e6:4c:25:15:75:b7:67:c1:d2:97:cd:dc:04:e9:85:89:a5: 24:46:3a:ba:82:cb:24:86:a9:01:1e:6b:51:ca:b6:91:fa:13: 2d:5f:de:96:bb:e0:a8:cf:a3:7b:d1:4e:0b:2a:52:6d:61:2d: 80:fa:4a:2f:7d:d6:d9:4d:eb:4a:b1:06:71:e3:42:45:55:f5: f8:cf:42:57:e4:53:ba:35:21:98:16:ab:4a:de:14:ba:47:17: 12:6e:bc:f4:77:a5:62:a2:87:d7:7d:84:6c:dc:51:dc:d8:d6: 26:5a:22:b5:66:7d:74:8b:28:e3:61:fd:3a:0b:33:f8:29:ac: ba:de:61:73 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCE0seiMYrvM/Zf7Fu+QeevKp4s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA4MDExNjU1MDBaFw0yNjA3MzExNzAwMDBaMDMxMTAvBgNV BAMTKENEQjhBNENDOEFBRUM2OUQ3MDQzMzY1QkU5RTAxMjk5OENCNUNDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8s0WhmdmGWsFP1cGhMv/19Obi Xm/DfJi0Az76UMlgRZfuEUYbY7ZLMZcoozsfbEpeFnNBgPSq3+AcitC7pnQ/Tgwn SekSVZQ39IBLXIJPcl2FLG2UkkWU1vtetdEp0kHOhMTJxSpvC1n5WyCxbtsADOL6 5/nsbHjT+kIV7+v0VvN4iPIt3OgVzcUUiOWfhYh0O8doa1k3oNG3+iGJP5/MPAr6 7hkHxobOEHbGR+OIzCcfDVisu+8KFgnxwjGhGwlCKNJOlVC4nstQVMVpvsYSJ5uA f8IgV+dUVJrnO5akBEcyyHMpypbgY4HTZOXFQIoW1kxI8+XZXBPGoqhHsWqvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUzbikzIquxp1wQzZb6eASmYy1zOYwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG4sqTANBgkqhkiG 9w0BAQsFAAOCAQEAUs3Xxk2o1cN9qRX9mpqFWinD48Ph/Eh+dE1VeuifVzBYIk27 XIH6rH2L8Zn08x+7/XhplsSjv0Y+3hNn4xeWAtVCscmsBjcJx5mkZ0dTTKsJ6zJv wMTPf+Mlbhgy1bDh7LWo66wlGcqoGYQb5iPuxjtv6NjzvBJwNGe8gU0pNOZMJRV1 t2fB0pfN3ATphYmlJEY6uoLLJIapAR5rUcq2kfoTLV/elrvgqM+je9FOCypSbWEt gPpKL33W2U3rSrEGceNCRVX1+M9CV+RTujUhmBarSt4UukcXEm689HelYqKH132E bNxR3NjWJloitWZ9dIso42H9Ogsz+Cmsut5hcw== -----END CERTIFICATE-----Generated at Sat Aug 9 20:35:02 2025 by rpki-client