$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36332e302f32342d3234203d3e20313339393832.roa File: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (raw, json) Hash identifier: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I= Subject key identifier: C2:60:D2:50:7E:01:33:FC:E6:D4:86:FB:65:AD:8B:9D:3B:31:FB:DE Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 78F3A9E0F8E1082C07FEBA6ED4C923E3E2C20CBD Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36332e302f32342d3234203d3e20313339393832.roa Signing time: Tue 29 Jul 2025 14:00:01 +0000 ROA not before: Tue 29 Jul 2025 13:55:01 +0000 ROA not after: Tue 28 Jul 2026 14:00:01 +0000 asID: 139982 IP address blocks: 103.66.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:f3:a9:e0:f8:e1:08:2c:07:fe:ba:6e:d4:c9:23:e3:e2:c2:0c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Jul 29 13:55:01 2025 GMT Not After : Jul 28 14:00:01 2026 GMT Subject: CN=C260D2507E0133FCE6D486FB65AD8B9D3B31FBDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c3:3d:55:b4:d8:20:03:58:ee:62:e7:02:cc: e0:7c:dc:05:cf:81:c5:d1:9b:64:2f:94:77:da:6a: d1:60:99:5e:c2:fe:a8:08:9c:02:27:7a:28:df:5d: f8:9b:cd:d3:29:77:29:ae:39:56:7f:40:00:90:5f: ce:88:af:3a:6e:3b:e5:cc:3b:d4:a6:95:a2:d6:3d: 96:03:19:58:ea:08:05:31:1d:cc:4d:37:20:56:25: 30:94:09:7d:26:5f:54:43:6b:e7:03:4f:97:c0:6d: 96:c7:f8:ea:54:fc:5d:49:2c:79:77:6b:70:6d:30: a9:29:7c:d1:95:85:bc:00:48:27:f8:42:e3:68:a0: 24:14:18:3a:e7:9b:6c:d9:15:2b:b9:a8:85:38:e0: b3:97:7f:83:c9:09:54:1c:4a:54:65:b1:f3:4a:e9: f4:38:df:89:44:8b:e6:b4:15:91:0a:77:5d:78:8b: 8b:7f:a6:23:0f:25:9d:64:44:b7:d2:03:d6:81:4d: d7:4c:a9:bb:c0:74:31:ac:b0:a9:bb:e7:b5:c8:1d: ff:29:d1:c2:37:4e:e0:fb:54:b3:df:30:23:e0:a5: 7d:07:b9:2b:d3:95:0c:fe:f8:7f:7b:e7:83:1a:25: 42:ae:ca:58:51:ae:d8:4c:0a:a1:a0:bb:86:ce:4a: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:60:D2:50:7E:01:33:FC:E6:D4:86:FB:65:AD:8B:9D:3B:31:FB:DE X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36332e302f32342d3234203d3e20313339393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.63.0/24 Signature Algorithm: sha256WithRSAEncryption 38:2d:af:13:ef:df:67:90:6f:c2:e8:02:e8:ac:61:0c:78:3e: 7a:37:10:ee:fb:82:44:73:79:00:05:d5:0e:ff:27:0a:7d:6f: 82:9b:dc:bd:d4:44:ae:2c:bf:90:c7:40:3a:c9:dd:1f:ce:0d: ed:eb:01:42:1f:b9:a0:c5:c9:be:07:3d:fa:53:bb:b0:cf:13: 10:d5:65:1a:8b:69:18:1a:1a:d2:62:0a:dc:3b:a4:b8:e1:5f: 4a:6e:f3:71:78:af:6b:e4:8a:1a:0a:8b:ae:dc:ed:ce:e5:14: b1:39:1b:99:02:04:03:2e:dc:3c:0c:c5:3a:0d:3d:5b:87:de: 72:bb:e6:18:43:19:a1:63:20:7e:05:ca:e1:3d:79:51:30:b6: c9:13:2b:9a:90:cb:85:97:1b:22:33:63:43:f1:93:4e:e4:11: 84:15:ab:8e:7f:e8:94:fd:22:89:2f:27:13:26:d0:eb:22:b8: 0a:01:34:eb:f3:10:d7:14:33:c0:78:ac:5a:bc:00:19:89:85: 52:06:fb:06:69:48:7f:51:53:35:39:ac:28:98:19:9e:0d:59: 71:3c:af:23:9b:cd:02:ce:49:89:90:f8:cb:5e:08:f6:da:58: 6f:75:b7:45:7b:63:43:62:3e:4e:af:c3:b9:ce:80:12:1a:77: 56:46:82:ed -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUePOp4PjhCCwH/rpu1Mkj4+LCDL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA3MjkxMzU1MDFaFw0yNjA3MjgxNDAwMDFaMDMxMTAvBgNV BAMTKEMyNjBEMjUwN0UwMTMzRkNFNkQ0ODZGQjY1QUQ4QjlEM0IzMUZCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClwz1VtNggA1juYucCzOB83AXP gcXRm2QvlHfaatFgmV7C/qgInAIneijfXfibzdMpdymuOVZ/QACQX86IrzpuO+XM O9SmlaLWPZYDGVjqCAUxHcxNNyBWJTCUCX0mX1RDa+cDT5fAbZbH+OpU/F1JLHl3 a3BtMKkpfNGVhbwASCf4QuNooCQUGDrnm2zZFSu5qIU44LOXf4PJCVQcSlRlsfNK 6fQ434lEi+a0FZEKd114i4t/piMPJZ1kRLfSA9aBTddMqbvAdDGssKm757XIHf8p 0cI3TuD7VLPfMCPgpX0HuSvTlQz++H9754MaJUKuylhRrthMCqGgu4bOSgpHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwmDSUH4BM/zm1Ib7Za2LnTsx+94wHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiYTkwOTQ0LTY1NmQtNGFhNy05 MTczLTU5MTI4MDgzM2Y4MS8wLzMxMzAzMzJlMzYzNjJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdCPzANBgkqhkiG 9w0BAQsFAAOCAQEAOC2vE+/fZ5BvwugC6KxhDHg+ejcQ7vuCRHN5AAXVDv8nCn1v gpvcvdREriy/kMdAOsndH84N7esBQh+5oMXJvgc9+lO7sM8TENVlGotpGBoa0mIK 3DukuOFfSm7zcXiva+SKGgqLrtztzuUUsTkbmQIEAy7cPAzFOg09W4fecrvmGEMZ oWMgfgXK4T15UTC2yRMrmpDLhZcbIjNjQ/GTTuQRhBWrjn/olP0iiS8nEybQ6yK4 CgE06/MQ1xQzwHisWrwAGYmFUgb7BmlIf1FTNTmsKJgZng1ZcTyvI5vNAs5JiZD4 y14I9tpYb3W3RXtjQ2I+Tq/Duc6AEhp3VkaC7Q== -----END CERTIFICATE-----Generated at Fri Aug 8 00:43:04 2025 by rpki-client