$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e203234323036.roa File: 3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (raw, json) Hash identifier: /Id0ptV6KhbD1snBODkIm970DRe1HBZaO2KQ2jikLRE= Subject key identifier: DB:44:5C:1E:65:B0:F0:CC:9A:4C:8F:AF:60:78:C0:AC:88:0C:3A:4E Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 36F8C5D8EFB726CE12288A02AEA2F9E812DED0D8 Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e203234323036.roa Signing time: Fri 01 Aug 2025 17:00:00 +0000 ROA not before: Fri 01 Aug 2025 16:55:00 +0000 ROA not after: Fri 31 Jul 2026 17:00:00 +0000 asID: 24206 IP address blocks: 110.44.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f8:c5:d8:ef:b7:26:ce:12:28:8a:02:ae:a2:f9:e8:12:de:d0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Aug 1 16:55:00 2025 GMT Not After : Jul 31 17:00:00 2026 GMT Subject: CN=DB445C1E65B0F0CC9A4C8FAF6078C0AC880C3A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:58:26:be:56:cf:5d:93:d0:ad:a3:5d:de:76: 91:8a:e9:9e:57:d9:cd:36:fd:2d:3b:6e:86:45:a7: 6a:ea:cd:42:ba:41:d5:9e:ca:3a:88:ac:f2:a9:49: e9:f3:d1:a7:0d:f3:84:da:48:d6:91:b6:96:ec:64: fd:d4:86:fe:45:ed:db:62:83:3c:15:d1:ad:ea:7a: 28:b3:f7:da:d8:8e:a9:34:ed:43:f4:c8:3f:81:7f: dc:73:35:e4:56:0e:45:1d:b5:ba:b4:ae:8f:09:88: 52:93:ad:3d:91:4f:9e:dc:2e:be:33:b0:f7:ce:39: ad:55:92:33:e9:65:62:8b:c5:c6:e6:04:ae:82:c8: 7d:1b:98:b7:e8:bd:91:ad:ac:c7:e0:f8:a4:bb:06: 3b:a6:a4:05:b1:d8:12:7a:64:73:56:06:54:8d:28: 47:be:19:7b:24:a6:11:44:42:1b:3c:d7:55:c6:f1: df:3a:5f:cc:74:6e:95:40:68:92:03:1d:f8:fe:46: c7:8f:cd:23:71:4d:1e:6e:95:7b:aa:ec:74:ca:20: 59:91:97:5a:69:57:bb:59:2e:b4:4b:61:fd:72:dc: e9:81:f8:dc:79:f2:3e:9a:47:f2:87:ef:1f:24:ad: cc:c3:bf:79:2b:bf:31:c9:68:4f:7b:1e:cc:f9:f1: 19:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:5C:1E:65:B0:F0:CC:9A:4C:8F:AF:60:78:C0:AC:88:0C:3A:4E X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.171.0/24 Signature Algorithm: sha256WithRSAEncryption 33:10:d7:84:37:c2:26:29:ef:23:e9:b0:15:d9:1f:f7:a4:20: 84:e8:92:7e:4c:c9:65:89:14:75:de:a8:af:75:bf:6a:ce:ba: fe:87:ca:88:a9:8f:13:d8:c3:07:ae:d8:35:82:b7:9e:90:e5: 28:8b:a4:c2:70:80:da:11:0f:e9:21:f0:ca:71:fb:a2:32:0f: 77:8c:1e:24:ee:94:c1:99:9d:45:17:25:4e:f0:b1:c1:7f:cb: 8a:07:a5:ca:1d:14:3d:80:37:b7:4e:f0:f3:fc:10:e8:48:35: 74:e2:42:d2:24:68:7a:82:0f:41:f4:2a:85:bf:69:60:57:d3: 13:b5:97:7f:c6:a5:82:87:d8:f6:c6:0a:d7:25:62:23:56:d3: f9:4a:45:5a:1d:f0:c3:0e:56:fa:6d:24:4e:80:2a:50:dc:8f: 92:bc:ca:ad:15:7f:5d:85:8f:d7:de:f8:5c:63:18:69:be:15: 2c:14:a2:f7:98:9f:e4:ff:25:ad:71:72:b5:8b:67:78:16:b2: bf:30:b2:62:4f:28:3c:cc:06:45:6d:ae:10:e6:7e:46:3c:ae: fc:ad:55:ed:bd:82:82:38:a9:e8:a1:17:f4:7e:63:78:b3:69: 37:c6:57:67:c8:3e:93:bc:66:e4:c2:8c:82:20:cd:9c:57:06: 58:f4:02:e3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNvjF2O+3Js4SKIoCrqL56BLe0NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA4MDExNjU1MDBaFw0yNjA3MzExNzAwMDBaMDMxMTAvBgNV BAMTKERCNDQ1QzFFNjVCMEYwQ0M5QTRDOEZBRjYwNzhDMEFDODgwQzNBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4WCa+Vs9dk9Cto13edpGK6Z5X 2c02/S07boZFp2rqzUK6QdWeyjqIrPKpSenz0acN84TaSNaRtpbsZP3Uhv5F7dti gzwV0a3qeiiz99rYjqk07UP0yD+Bf9xzNeRWDkUdtbq0ro8JiFKTrT2RT57cLr4z sPfOOa1VkjPpZWKLxcbmBK6CyH0bmLfovZGtrMfg+KS7BjumpAWx2BJ6ZHNWBlSN KEe+GXskphFEQhs811XG8d86X8x0bpVAaJIDHfj+RsePzSNxTR5ulXuq7HTKIFmR l1ppV7tZLrRLYf1y3OmB+Nx58j6aR/KH7x8krczDv3krvzHJaE97Hsz58RmTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU20RcHmWw8MyaTI+vYHjArIgMOk4wHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG4sqzANBgkqhkiG 9w0BAQsFAAOCAQEAMxDXhDfCJinvI+mwFdkf96QghOiSfkzJZYkUdd6or3W/as66 /ofKiKmPE9jDB67YNYK3npDlKIukwnCA2hEP6SHwynH7ojIPd4weJO6UwZmdRRcl TvCxwX/Ligelyh0UPYA3t07w8/wQ6Eg1dOJC0iRoeoIPQfQqhb9pYFfTE7WXf8al gofY9sYK1yViI1bT+UpFWh3www5W+m0kToAqUNyPkrzKrRV/XYWP1974XGMYab4V LBSi95if5P8lrXFytYtneBayvzCyYk8oPMwGRW2uEOZ+Rjyu/K1V7b2Cgjip6KEX 9H5jeLNpN8ZXZ8g+k7xm5MKMgiDNnFcGWPQC4w== -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:53 2025 by rpki-client