$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa File: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (raw, json) Hash identifier: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM= Subject key identifier: 86:69:AB:9A:9C:41:E2:4C:06:4E:4C:60:3C:EC:65:C1:FC:52:37:EC Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 29C0B4C176C72984040975400F0A2CE5FF301A5B Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa Signing time: Thu 24 Jul 2025 09:00:00 +0000 ROA not before: Thu 24 Jul 2025 08:55:00 +0000 ROA not after: Thu 23 Jul 2026 09:00:00 +0000 asID: 140028 IP address blocks: 103.146.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c0:b4:c1:76:c7:29:84:04:09:75:40:0f:0a:2c:e5:ff:30:1a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Jul 24 08:55:00 2025 GMT Not After : Jul 23 09:00:00 2026 GMT Subject: CN=8669AB9A9C41E24C064E4C603CEC65C1FC5237EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:ee:80:25:8e:c4:c4:40:87:d6:db:54:ed: e6:69:f1:f0:df:03:53:98:1f:13:e1:e2:d9:9a:ee: ea:92:d6:88:c5:b7:6c:ff:eb:48:8f:cd:42:66:5e: 22:e6:ff:0a:bd:0c:da:5a:99:69:58:70:13:48:4d: 31:63:a9:06:ce:df:83:ad:e1:9f:6c:48:1a:f9:21: 6f:45:1a:67:38:e8:7b:2f:45:9a:cd:ea:90:ef:85: ed:4a:17:2d:00:e2:f9:c2:15:64:2c:66:f1:70:91: 5f:02:cc:f1:41:36:d9:1e:ca:55:1b:48:80:bc:86: 06:54:92:15:fc:df:55:99:ce:cf:58:2f:c7:32:6c: 19:6e:6c:48:b6:55:3d:3b:ce:45:3a:94:c4:b8:01: 5a:5c:35:4f:4d:b7:02:16:d7:bf:d5:63:bb:f2:40: 9b:5a:82:dd:ba:ba:4d:d3:2f:65:de:03:82:ba:0f: 7b:be:00:55:69:d1:29:38:31:f1:67:88:28:5e:20: 98:65:8e:54:29:ab:16:3b:0e:ce:0c:43:4d:a0:a1: 75:02:5d:74:27:e3:77:95:56:ff:77:58:94:5f:f4: 98:0f:26:cc:8a:36:a1:83:21:72:a5:fa:7e:69:bb: 3d:6f:cd:15:cf:f7:7b:db:ba:34:01:9c:96:36:1c: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:69:AB:9A:9C:41:E2:4C:06:4E:4C:60:3C:EC:65:C1:FC:52:37:EC X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.129.0/24 Signature Algorithm: sha256WithRSAEncryption 06:ae:1b:c1:18:f3:93:c5:c4:00:01:e4:58:e1:54:d8:ca:dc: c7:49:7d:1e:84:17:e5:c7:09:c6:d1:99:cb:4b:68:c3:30:a5: a6:d6:ee:c8:8a:22:82:38:1f:94:ee:c6:15:f1:d6:9d:06:c4: 73:f3:66:42:ef:ec:2c:54:87:3d:e0:54:e4:51:a9:f1:0f:39: c0:9c:54:6f:ee:26:fd:ec:36:33:9f:07:7f:94:b6:a7:1e:da: f4:f0:f8:d1:45:87:41:5d:40:23:f2:78:5a:bf:67:74:c1:f7: a6:e1:db:e2:0d:15:7d:2c:38:2e:bb:44:c5:4e:25:c1:05:66: 3e:b3:0a:4e:e6:77:e1:9f:9e:91:71:7c:41:d2:16:58:39:4f: cd:33:7d:f3:a4:c6:3f:d1:f5:68:13:99:83:ee:3a:e9:ae:03: 43:fe:5c:ff:fa:11:98:f0:dc:23:15:fb:ed:f7:6d:ef:92:c2: 4b:9e:9a:07:bd:49:06:c7:80:88:0e:de:d1:4a:77:e2:9a:a8: ce:3f:70:66:96:fe:76:8d:f4:a4:b3:bc:ac:d2:ee:50:df:7e: b3:a6:47:95:1e:9e:68:0f:69:94:81:84:6f:b1:7f:3c:c1:c4: c5:f9:c8:dc:ac:42:12:7d:8d:f7:a6:df:03:70:0f:f0:6e:45: e8:34:f8:92 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUKcC0wXbHKYQECXVADwos5f8wGlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA3MjQwODU1MDBaFw0yNjA3MjMwOTAwMDBaMDMxMTAvBgNV BAMTKDg2NjlBQjlBOUM0MUUyNEMwNjRFNEM2MDNDRUM2NUMxRkM1MjM3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2e6AJY7ExECH1ttU7eZp8fDf A1OYHxPh4tma7uqS1ojFt2z/60iPzUJmXiLm/wq9DNpamWlYcBNITTFjqQbO34Ot 4Z9sSBr5IW9FGmc46HsvRZrN6pDvhe1KFy0A4vnCFWQsZvFwkV8CzPFBNtkeylUb SIC8hgZUkhX831WZzs9YL8cybBlubEi2VT07zkU6lMS4AVpcNU9NtwIW17/VY7vy QJtagt26uk3TL2XeA4K6D3u+AFVp0Sk4MfFniCheIJhljlQpqxY7Ds4MQ02goXUC XXQn43eVVv93WJRf9JgPJsyKNqGDIXKl+n5puz1vzRXP93vbujQBnJY2HKLfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUhmmrmpxB4kwGTkxgPOxlwfxSN+wwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0MmFhMGE5LTQ1ODgtNGY4Ny1h Yjg5LWYzYjlkYzYxMDdiNi8wLzMxMzAzMzJlMzEzNDM2MmUzMTMyMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMyMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkoEwDQYJ KoZIhvcNAQELBQADggEBAAauG8EY85PFxAAB5FjhVNjK3MdJfR6EF+XHCcbRmctL aMMwpabW7siKIoI4H5TuxhXx1p0GxHPzZkLv7CxUhz3gVORRqfEPOcCcVG/uJv3s NjOfB3+Utqce2vTw+NFFh0FdQCPyeFq/Z3TB96bh2+INFX0sOC67RMVOJcEFZj6z Ck7md+GfnpFxfEHSFlg5T80zffOkxj/R9WgTmYPuOumuA0P+XP/6EZjw3CMV++33 be+Swkuemge9SQbHgIgO3tFKd+KaqM4/cGaW/naN9KSzvKzS7lDffrOmR5UenmgP aZSBhG+xfzzBxMX5yNysQhJ9jfem3wNwD/BuReg0+JI= -----END CERTIFICATE-----Generated at Sun Aug 10 05:38:42 2025 by rpki-client