$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa File: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (raw, json) Hash identifier: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s= Subject key identifier: 4E:91:D6:E1:2D:75:0C:72:E7:3D:F7:40:11:D7:13:3D:C7:78:31:9D Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 721D7047AC0294FFB0F14B6F68B7D9D5237C5BF0 Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa Signing time: Thu 07 Aug 2025 12:00:02 +0000 ROA not before: Thu 07 Aug 2025 11:55:02 +0000 ROA not after: Thu 06 Aug 2026 12:00:02 +0000 asID: 138886 IP address blocks: 103.13.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 15:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:1d:70:47:ac:02:94:ff:b0:f1:4b:6f:68:b7:d9:d5:23:7c:5b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Aug 7 11:55:02 2025 GMT Not After : Aug 6 12:00:02 2026 GMT Subject: CN=4E91D6E12D750C72E73DF74011D7133DC778319D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:54:77:31:7d:1e:6f:96:64:11:f0:e7:e7:62: 70:9a:2f:de:29:3d:33:10:f1:7c:02:89:f5:18:7f: 3d:ee:e0:c0:49:b9:05:8a:4d:30:8f:01:55:d6:65: b7:6f:92:1c:d1:9b:99:b3:ff:e0:a9:45:fa:f1:16: db:d9:77:dc:c7:39:67:fc:2e:bf:e2:b4:81:b2:d2: 73:18:ef:9a:5b:84:3f:d9:4b:02:9c:88:f7:e5:3b: db:c0:6b:5b:cd:60:11:ef:4e:63:28:8b:98:5d:0c: 89:35:55:31:1b:72:d1:74:31:5d:d2:12:93:85:da: 60:f1:19:ad:74:6e:83:fa:b2:7e:e9:e8:a6:d4:f1: ea:6f:c7:7f:e0:97:9e:1d:e7:b2:f8:ad:23:07:e5: 40:45:df:a7:05:d5:ad:f7:f5:38:51:a4:be:15:b1: 1a:04:08:b1:6d:fd:ee:4e:68:d2:7b:41:fb:03:cd: c8:68:5d:32:37:11:d1:ed:f4:b6:a8:98:4f:83:7f: f8:63:ba:26:db:bf:99:dd:d2:c3:34:e6:76:6d:f0: e4:73:c5:75:a6:42:82:6d:63:60:fa:94:ad:9b:4c: 82:92:20:12:64:69:ca:43:3d:05:23:b7:32:23:87: 65:06:60:3f:1b:cf:7e:83:8b:44:ed:47:ce:07:fa: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:91:D6:E1:2D:75:0C:72:E7:3D:F7:40:11:D7:13:3D:C7:78:31:9D X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.137.0/24 Signature Algorithm: sha256WithRSAEncryption cf:81:e3:ed:4d:ea:14:5b:bd:86:40:b3:80:ae:41:fa:b8:f4: 74:85:bf:d8:89:02:84:62:f9:fe:72:42:b6:a3:f7:bb:f3:10: da:7e:ac:29:c2:09:75:41:d2:34:db:ae:dc:f8:a1:d5:fa:66: 42:16:b5:b8:40:4c:74:40:3b:a7:ca:0f:58:1d:20:f1:94:51: d3:a0:df:ab:8e:ae:d9:f8:5c:9b:c1:db:ad:c6:4b:bd:1d:38: 01:a6:b9:60:28:29:37:e0:69:0a:4c:f5:46:c1:b6:5c:b2:5e: 26:fc:ea:9f:59:86:c8:fd:79:c0:ef:fc:ef:64:97:ad:bc:98: 42:ef:62:18:c7:d9:84:c9:02:a3:db:d8:e0:b8:e5:59:ea:a0: 00:7f:fa:ad:71:64:32:5e:2a:b2:15:13:b5:0f:57:aa:b7:01: 52:29:e8:aa:ff:e1:0f:15:6e:61:21:8b:ce:11:67:ed:3d:61: 05:54:e1:94:ae:ad:86:2b:56:0f:bb:16:d1:a9:94:b0:9b:dc: cc:fd:57:fc:54:56:60:55:5b:49:b9:5d:6a:de:68:f8:60:c9: 9f:c6:85:78:50:b1:a3:d2:77:b3:03:94:0b:e4:60:5a:d0:bc: 9f:6f:cf:72:56:6f:35:3c:28:52:64:50:c5:32:60:ed:b1:63: c7:85:58:b0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUch1wR6wClP+w8UtvaLfZ1SN8W/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNTA4MDcxMTU1MDJaFw0yNjA4MDYxMjAwMDJaMDMxMTAvBgNV BAMTKDRFOTFENkUxMkQ3NTBDNzJFNzNERjc0MDExRDcxMzNEQzc3ODMxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdVHcxfR5vlmQR8OfnYnCaL94p PTMQ8XwCifUYfz3u4MBJuQWKTTCPAVXWZbdvkhzRm5mz/+CpRfrxFtvZd9zHOWf8 Lr/itIGy0nMY75pbhD/ZSwKciPflO9vAa1vNYBHvTmMoi5hdDIk1VTEbctF0MV3S EpOF2mDxGa10boP6sn7p6KbU8epvx3/gl54d57L4rSMH5UBF36cF1a339ThRpL4V sRoECLFt/e5OaNJ7QfsDzchoXTI3EdHt9LaomE+Df/hjuibbv5nd0sM05nZt8ORz xXWmQoJtY2D6lK2bTIKSIBJkacpDPQUjtzIjh2UGYD8bz36Di0TtR84H+kJbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTpHW4S11DHLnPfdAEdcTPcd4MZ0wHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NWFmOGFmLWE0MGYtNDJjNy05 ZjRjLTE4ZTBjYTVjZDQ3ZS8wLzMxMzAzMzJlMzEzMzJlMzEzMzM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw2JMA0GCSqG SIb3DQEBCwUAA4IBAQDPgePtTeoUW72GQLOArkH6uPR0hb/YiQKEYvn+ckK2o/e7 8xDafqwpwgl1QdI0267c+KHV+mZCFrW4QEx0QDunyg9YHSDxlFHToN+rjq7Z+Fyb wdutxku9HTgBprlgKCk34GkKTPVGwbZcsl4m/OqfWYbI/XnA7/zvZJetvJhC72IY x9mEyQKj29jguOVZ6qAAf/qtcWQyXiqyFRO1D1eqtwFSKeiq/+EPFW5hIYvOEWft PWEFVOGUrq2GK1YPuxbRqZSwm9zM/Vf8VFZgVVtJuV1q3mj4YMmfxoV4ULGj0nez A5QL5GBa0Lyfb89yVm81PChSZFDFMmDtsWPHhViw -----END CERTIFICATE-----Generated at Thu Aug 7 20:24:15 2025 by rpki-client