$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa File: 3130332e32382e3131362e302f32322d3232203d3e203535363939.roa (raw, json) Hash identifier: IBqG3JTOb2BDjjHywaslInJ9v2wxZNaFPsj9QnGmFyU= Subject key identifier: F6:E2:88:95:63:89:E5:FE:9C:6D:06:BB:67:6D:F4:CC:F9:A7:30:D6 Certificate issuer: /CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Certificate serial: 56A2D9E156BA2551841DBF638B56F4D4E3917609 Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa Signing time: Thu 17 Jul 2025 12:00:02 +0000 ROA not before: Thu 17 Jul 2025 11:55:02 +0000 ROA not after: Thu 16 Jul 2026 12:00:02 +0000 asID: 55699 IP address blocks: 103.28.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a2:d9:e1:56:ba:25:51:84:1d:bf:63:8b:56:f4:d4:e3:91:76:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872 Validity Not Before: Jul 17 11:55:02 2025 GMT Not After : Jul 16 12:00:02 2026 GMT Subject: CN=F6E288956389E5FE9C6D06BB676DF4CCF9A730D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:d0:71:f9:d3:ed:16:dd:7e:63:da:89:e7: 8e:76:0e:38:cf:98:8e:ee:72:22:2c:ef:38:35:d9: e8:f9:ec:ac:0a:3e:d9:fe:e1:5e:57:1f:ca:95:5c: a5:a4:3a:ee:0d:2e:dc:51:6f:18:79:8f:da:cc:d3: 79:bc:38:c1:8a:0a:b5:72:08:07:bb:b9:92:d4:1f: 14:2d:ea:8e:43:27:06:c2:f5:06:28:aa:4b:fe:f7: 46:d2:01:dd:be:26:30:d0:3e:b4:2a:14:a5:95:45: d3:0e:66:da:89:11:f9:63:09:d1:fc:d1:c3:b4:75: fe:1b:48:b6:be:60:b2:02:02:fa:47:84:61:2d:89: 8c:a2:b1:21:40:95:f3:d6:98:f7:05:2f:5b:dc:be: 3f:e4:65:2d:9a:56:a9:60:87:2e:07:93:1c:a9:f8: ac:5d:1f:70:15:c0:17:3e:34:08:cc:29:86:88:8f: f6:d0:4a:25:da:53:d6:a1:06:fa:e3:2a:b6:7d:7d: e9:63:a5:04:4e:87:58:3c:f0:1a:3d:3e:36:c8:ef: db:e9:80:91:dd:39:71:56:a9:8f:61:57:d2:68:44: 12:3d:23:94:d5:24:77:e7:1d:e5:8c:82:e4:4f:93: 07:d7:ef:21:81:bc:83:2d:69:7a:f9:be:ec:0b:3e: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E2:88:95:63:89:E5:FE:9C:6D:06:BB:67:6D:F4:CC:F9:A7:30:D6 X509v3 Authority Key Identifier: keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e32382e3131362e302f32322d3232203d3e203535363939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.116.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:37:39:18:54:69:21:1d:c8:db:ea:39:d2:a8:a0:a5:7a:89: 0d:c5:3c:ae:f2:78:95:8c:cb:b0:9b:97:df:f5:e1:3c:3c:aa: 05:03:6d:f6:64:e6:30:15:db:4c:af:b5:42:fb:2f:54:3d:21: f9:ac:69:f6:85:ba:0c:e8:52:6e:5c:b1:3f:b0:3b:dd:83:e8: b2:d2:e5:19:5b:3c:87:f0:0b:ee:64:ba:99:ce:06:9a:d3:ae: d5:f5:9e:b9:3b:94:e4:35:46:c1:6d:2d:00:d0:8a:31:f4:a5: 49:3c:39:3b:d3:a8:4a:68:8f:99:f4:23:bb:56:32:c0:12:6f: f0:95:84:2b:d0:4e:b8:be:6b:9b:b2:b2:5e:58:c4:09:51:81: 49:97:b3:18:d3:b5:56:43:e0:ff:63:92:8b:6e:93:c4:8d:3c: 42:43:11:89:34:f8:25:d4:39:32:96:ff:97:e2:85:3d:c1:53: dd:70:43:95:c4:1a:5a:ee:d4:c7:b1:f6:d3:35:5e:d0:4b:04: 7f:0d:d3:24:80:0d:6b:d6:f2:8a:0b:7b:7a:d5:ef:83:75:38: 41:5c:fc:f6:5b:10:0c:22:0b:82:a3:e5:16:e3:75:d5:f1:f2: 97:8c:d9:20:44:de:1f:d6:68:b1:20:bc:60:a7:0d:b0:b8:3c: a9:ef:13:47 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVqLZ4Va6JVGEHb9ji1b01OORdgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5 RTEwNjg3MjAeFw0yNTA3MTcxMTU1MDJaFw0yNjA3MTYxMjAwMDJaMDMxMTAvBgNV BAMTKEY2RTI4ODk1NjM4OUU1RkU5QzZEMDZCQjY3NkRGNENDRjlBNzMwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvetBx+dPtFt1+Y9qJ5452DjjP mI7uciIs7zg12ej57KwKPtn+4V5XH8qVXKWkOu4NLtxRbxh5j9rM03m8OMGKCrVy CAe7uZLUHxQt6o5DJwbC9QYoqkv+90bSAd2+JjDQPrQqFKWVRdMOZtqJEfljCdH8 0cO0df4bSLa+YLICAvpHhGEtiYyisSFAlfPWmPcFL1vcvj/kZS2aVqlghy4Hkxyp +KxdH3AVwBc+NAjMKYaIj/bQSiXaU9ahBvrjKrZ9feljpQROh1g88Bo9PjbI79vp gJHdOXFWqY9hV9JoRBI9I5TVJHfnHeWMguRPkwfX7yGBvIMtaXr5vuwLPoZDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9uKIlWOJ5f6cbQa7Z230zPmnMNYwHwYDVR0j BBgwFoAUGXbdfU+9++s1XwuWaQYTlZ4QaHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTk5ZWQ5Ni1kNDA4LTQ0MTgtYjgyYS01ZDVhOGU2NjU3ZjMvMC8xOTc2REQ3RDRG QkRGQkVCMzU1RjBCOTY2OTA2MTM5NTlFMTA2ODcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NkREN0Q0RkJERkJFQjM1NUYwQjk2NjkwNjEzOTU5RTEw Njg3Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OTllZDk2LWQ0MDgtNDQxOC1i ODJhLTVkNWE4ZTY2NTdmMy8wLzMxMzAzMzJlMzIzODJlMzEzMTM2MmUzMDJmMzIz MjJkMzIzMjIwM2QzZTIwMzUzNTM2MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmccdDANBgkqhkiG 9w0BAQsFAAOCAQEAnDc5GFRpIR3I2+o50qigpXqJDcU8rvJ4lYzLsJuX3/XhPDyq BQNt9mTmMBXbTK+1QvsvVD0h+axp9oW6DOhSblyxP7A73YPostLlGVs8h/AL7mS6 mc4GmtOu1fWeuTuU5DVGwW0tANCKMfSlSTw5O9OoSmiPmfQju1YywBJv8JWEK9BO uL5rm7KyXljECVGBSZezGNO1VkPg/2OSi26TxI08QkMRiTT4JdQ5Mpb/l+KFPcFT 3XBDlcQaWu7Ux7H20zVe0EsEfw3TJIANa9byigt7etXvg3U4QVz89lsQDCILgqPl FuN11fHyl4zZIETeH9ZosSC8YKcNsLg8qe8TRw== -----END CERTIFICATE-----Generated at Thu Aug 7 20:16:00 2025 by rpki-client