$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3130332e31302e39362e302f32322d3234203d3e203138313033.roa File: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (raw, json) Hash identifier: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM= Subject key identifier: 7E:89:E0:0C:8E:A0:35:2F:F9:3E:99:94:03:79:43:C9:4F:B8:63:0B Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 49853CC298E1A7C0094439F0D28C34761565EB55 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3130332e31302e39362e302f32322d3234203d3e203138313033.roa Signing time: Wed 23 Jul 2025 12:01:25 +0000 ROA not before: Wed 23 Jul 2025 11:56:25 +0000 ROA not after: Wed 22 Jul 2026 12:01:25 +0000 asID: 18103 IP address blocks: 103.10.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:85:3c:c2:98:e1:a7:c0:09:44:39:f0:d2:8c:34:76:15:65:eb:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Jul 23 11:56:25 2025 GMT Not After : Jul 22 12:01:25 2026 GMT Subject: CN=7E89E00C8EA0352FF93E9994037943C94FB8630B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:96:16:f2:23:1c:3c:94:0f:1d:41:2e:fb:0b: fe:b1:97:24:9b:cf:bf:9d:ce:67:5e:73:de:8a:8a: 5e:44:47:55:75:bb:63:20:c1:20:03:52:82:7a:3d: 4b:e0:70:9e:87:a3:c3:55:bc:d7:d8:75:c1:6a:cd: 26:fe:2c:53:35:e2:6c:f8:3d:a2:e8:92:f4:63:f0: ba:b1:80:dd:7b:86:2a:15:25:27:7d:c7:ee:62:ed: 4b:5c:08:de:af:94:05:41:a3:14:8d:75:dd:bf:6a: bd:be:c5:1b:20:71:4a:45:03:ed:66:06:c9:a4:95: f7:85:e5:03:5f:99:2c:65:6e:d3:48:c0:13:fb:f8: b4:59:c4:39:e6:0f:cb:1b:73:09:a6:d2:69:2f:a5: 55:6a:bf:a0:57:5e:1e:38:61:93:ce:d3:c1:cc:cc: 9d:d6:cc:8a:54:6d:08:b7:be:86:b4:41:13:2c:6c: 30:d1:04:2d:dd:e6:af:4c:a0:0f:e2:7c:fd:12:ed: fe:a9:a8:e5:fd:8a:10:d2:b6:ae:f9:7c:77:30:68: 2f:40:06:70:d8:e0:ee:a4:82:93:f6:2c:90:97:2d: 93:8d:e2:e3:9f:e4:9e:1c:1c:2c:04:99:13:ee:c6: 83:f9:48:2f:37:d3:39:9a:4a:4b:20:b2:7d:fe:8b: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:E0:0C:8E:A0:35:2F:F9:3E:99:94:03:79:43:C9:4F:B8:63:0B X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/3130332e31302e39362e302f32322d3234203d3e203138313033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.96.0/22 Signature Algorithm: sha256WithRSAEncryption 54:99:40:3d:38:99:8c:3b:26:c8:a0:71:98:a5:96:d1:bf:12: 93:0f:16:8c:86:f8:c1:ca:3e:8d:88:be:9d:59:9d:c2:5c:a4: 3a:b3:01:47:fa:e6:2d:b3:96:c1:59:9f:be:b5:5e:02:d3:7e: 62:6b:b0:c1:43:77:f2:6c:79:a9:33:6c:95:1a:8f:25:be:00: e2:fd:dd:47:5e:f9:57:87:d0:af:0a:1c:13:96:e6:b4:00:99: 9a:67:5c:35:f5:78:83:ba:2f:6e:45:c0:34:5c:4c:68:8c:ed: 5b:ee:a2:b0:02:04:8b:64:7d:33:7f:28:55:15:34:c2:19:59: 31:37:b2:67:99:b3:69:54:76:7d:b5:ce:d9:73:0c:c8:f5:9b: a6:e2:f5:f1:6c:33:f4:34:9b:e8:19:5b:02:5f:1f:52:7b:4d: 49:90:c5:6d:8d:e7:7a:4a:55:80:16:3e:2c:90:0d:fa:da:8e: f8:3e:90:fd:81:77:ee:c9:61:61:19:b1:48:e8:a8:70:ef:b2: 22:6c:a5:50:26:5c:64:3b:8d:9f:8d:f6:0a:75:27:e5:71:ae: b7:b3:be:ce:3c:e6:c8:bc:55:4a:ba:02:b0:ae:85:7a:46:b2: 23:42:c3:3b:96:95:d4:d2:de:35:6a:62:a8:59:27:ff:86:83: be:bc:0a:ae -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSYU8wpjhp8AJRDnw0ow0dhVl61UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNTA3MjMxMTU2MjVaFw0yNjA3MjIxMjAxMjVaMDMxMTAvBgNV BAMTKDdFODlFMDBDOEVBMDM1MkZGOTNFOTk5NDAzNzk0M0M5NEZCODYzMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDclhbyIxw8lA8dQS77C/6xlySb z7+dzmdec96Kil5ER1V1u2MgwSADUoJ6PUvgcJ6Ho8NVvNfYdcFqzSb+LFM14mz4 PaLokvRj8LqxgN17hioVJSd9x+5i7UtcCN6vlAVBoxSNdd2/ar2+xRsgcUpFA+1m BsmklfeF5QNfmSxlbtNIwBP7+LRZxDnmD8sbcwmm0mkvpVVqv6BXXh44YZPO08HM zJ3WzIpUbQi3voa0QRMsbDDRBC3d5q9MoA/ifP0S7f6pqOX9ihDStq75fHcwaC9A BnDY4O6kgpP2LJCXLZON4uOf5J4cHCwEmRPuxoP5SC830zmaSksgsn3+i4YVAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUfongDI6gNS/5PpmUA3lDyU+4YwswHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFmLWQ5YzctNGZmZC1i YTAzLWEzZTFjZGQ4YWVlMC8wLzMxMzAzMzJlMzEzMDJlMzkzNjJlMzAyZjMyMzIy ZDMyMzQyMDNkM2UyMDMxMzgzMTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnCmAwDQYJKoZIhvcN AQELBQADggEBAFSZQD04mYw7JsigcZilltG/EpMPFoyG+MHKPo2Ivp1ZncJcpDqz AUf65i2zlsFZn761XgLTfmJrsMFDd/JseakzbJUajyW+AOL93Ude+VeH0K8KHBOW 5rQAmZpnXDX1eIO6L25FwDRcTGiM7VvuorACBItkfTN/KFUVNMIZWTE3smeZs2lU dn21ztlzDMj1m6bi9fFsM/Q0m+gZWwJfH1J7TUmQxW2N53pKVYAWPiyQDfrajvg+ kP2Bd+7JYWEZsUjoqHDvsiJspVAmXGQ7jZ+N9gp1J+Vxrrezvs485si8VUq6ArCu hXpGsiNCwzuWldTS3jVqYqhZJ/+Gg768Cq4= -----END CERTIFICATE-----Generated at Sat Aug 9 14:16:36 2025 by rpki-client