$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa File: 3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (raw, json) Hash identifier: tU2O/OAH1O/qSyyJqDlWC4HBTQpL06kLsKSpR1jZ5rg= Subject key identifier: FC:CF:BD:6D:29:12:4F:0D:19:72:20:B5:61:68:AA:34:2A:56:D6:43 Certificate issuer: /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Certificate serial: 10ED36F1D6F191D5786099ADD0C23760CC42EBC5 Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa Signing time: Wed 09 Jul 2025 04:02:22 +0000 ROA not before: Wed 09 Jul 2025 03:57:22 +0000 ROA not after: Wed 08 Jul 2026 04:02:22 +0000 asID: 136111 IP address blocks: 103.94.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ed:36:f1:d6:f1:91:d5:78:60:99:ad:d0:c2:37:60:cc:42:eb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1 Validity Not Before: Jul 9 03:57:22 2025 GMT Not After : Jul 8 04:02:22 2026 GMT Subject: CN=FCCFBD6D29124F0D197220B56168AA342A56D643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:01:67:83:f9:3b:f4:1b:a3:c1:1a:a2:54:25: ae:11:99:e7:e2:ff:42:06:dd:d3:19:23:cd:de:bc: 14:56:90:cf:a9:ed:af:90:3b:fd:8d:6a:1d:90:f0: c9:f4:34:0a:2f:f1:11:8b:a8:36:99:99:a2:c8:e0: 09:8c:4a:9e:4e:18:02:1b:cd:e1:b3:18:87:cd:58: 9b:d9:95:69:12:0b:23:8d:ca:60:e9:cf:1f:08:c6: d0:3f:e1:e7:31:a1:b0:98:34:33:61:ea:89:70:d6: 07:87:c3:7d:34:36:b2:6c:77:8a:39:bc:48:b7:46: ea:34:fa:5d:b7:b4:82:1d:46:c8:64:ad:28:d6:d1: 30:09:9f:40:6b:f5:3a:54:4f:ff:fa:e1:eb:81:34: 8c:2e:d3:34:3b:c5:60:2d:2f:b7:25:0a:af:e2:6b: b7:a3:74:29:db:09:6c:64:5f:74:a9:a9:0a:08:4b: aa:80:8c:94:5d:b7:7d:ca:f4:05:a0:34:f1:88:90: ff:8e:9f:94:dc:51:1f:05:b6:07:d6:14:5c:f4:da: 50:87:d6:6f:21:4c:cd:80:c2:9e:e0:08:56:ab:d7: a1:28:0d:ff:38:7f:b7:a9:54:3c:fa:a7:c1:cd:d6: 02:72:d1:5c:3c:75:6c:5c:46:93:09:5f:41:e1:83: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CF:BD:6D:29:12:4F:0D:19:72:20:B5:61:68:AA:34:2A:56:D6:43 X509v3 Authority Key Identifier: keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.94.212.0/23 Signature Algorithm: sha256WithRSAEncryption 52:ce:0d:66:ae:0e:14:a2:b2:74:9f:30:f3:40:87:db:e0:14: bd:0a:7e:ec:d6:92:81:d6:37:00:b5:1d:52:98:9b:43:0d:8a: aa:d4:23:0c:63:5e:4e:a1:84:16:9a:c1:e1:ce:b4:41:60:3b: c3:79:96:81:3a:ac:f6:a2:a7:bd:62:9c:b8:6b:96:e5:5a:7d: 9e:15:e4:2f:c1:bb:f4:51:54:6b:56:56:c9:38:27:42:dc:cd: 1a:70:9d:59:34:37:fe:9c:49:b8:b6:f0:d3:9e:71:d6:78:58: a9:2c:18:7a:35:63:8e:3f:f3:9f:93:46:fa:37:bd:78:24:be: 95:13:b7:89:56:d6:e9:88:ab:ce:fd:75:ba:5b:91:1c:3f:9c: df:fa:fa:7e:6d:1b:71:8d:b5:3d:69:8b:13:61:19:f4:fd:57: f6:55:6c:6c:36:8b:e0:da:28:27:ad:dd:54:05:8e:b9:8d:71: c9:d5:d4:9d:93:f2:90:e2:45:41:ce:ac:3b:e7:aa:c4:8d:d7: ca:96:51:13:9e:5a:d9:de:e5:91:54:0d:50:ee:e6:0f:ca:2d: c6:05:d0:c3:5c:d6:2a:f9:ff:6c:6d:0f:f4:84:5f:56:9c:76: 3d:de:d3:b7:69:c7:a9:20:6f:a4:4f:7c:9a:5a:14:b6:dd:6c: 11:4a:24:11 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEO028dbxkdV4YJmt0MI3YMxC68UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1 NzVBRjdEMTAeFw0yNTA3MDkwMzU3MjJaFw0yNjA3MDgwNDAyMjJaMDMxMTAvBgNV BAMTKEZDQ0ZCRDZEMjkxMjRGMEQxOTcyMjBCNTYxNjhBQTM0MkE1NkQ2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAWeD+Tv0G6PBGqJUJa4Rmefi /0IG3dMZI83evBRWkM+p7a+QO/2Nah2Q8Mn0NAov8RGLqDaZmaLI4AmMSp5OGAIb zeGzGIfNWJvZlWkSCyONymDpzx8IxtA/4ecxobCYNDNh6olw1geHw300NrJsd4o5 vEi3Ruo0+l23tIIdRshkrSjW0TAJn0Br9TpUT//64euBNIwu0zQ7xWAtL7clCq/i a7ejdCnbCWxkX3SpqQoIS6qAjJRdt33K9AWgNPGIkP+On5TcUR8FtgfWFFz02lCH 1m8hTM2Awp7gCFar16EoDf84f7epVDz6p8HN1gJy0Vw8dWxcRpMJX0Hhg+KdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/M+9bSkSTw0ZciC1YWiqNCpW1kMwHwYDVR0j BBgwFoAUOZMVsYun0N1mbcqMPbvgE1da99EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmYyODg3OS00ODQ0LTQyZGUtYjJkOS1hOTY2NmRlMjgyZWEvMC8zOTkzMTVCMThC QTdEMERENjY2RENBOEMzREJCRTAxMzU3NUFGN0QxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk5MzE1QjE4QkE3RDBERDY2NkRDQThDM0RCQkUwMTM1NzVB RjdEMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyZjI4ODc5LTQ4NDQtNDJkZS1i MmQ5LWE5NjY2ZGUyODJlYS8wLzMxMzAzMzJlMzkzNDJlMzIzMTMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM2MzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ17UMA0GCSqG SIb3DQEBCwUAA4IBAQBSzg1mrg4UorJ0nzDzQIfb4BS9Cn7s1pKB1jcAtR1SmJtD DYqq1CMMY15OoYQWmsHhzrRBYDvDeZaBOqz2oqe9Ypy4a5blWn2eFeQvwbv0UVRr VlbJOCdC3M0acJ1ZNDf+nEm4tvDTnnHWeFipLBh6NWOOP/Ofk0b6N714JL6VE7eJ VtbpiKvO/XW6W5EcP5zf+vp+bRtxjbU9aYsTYRn0/Vf2VWxsNovg2ignrd1UBY65 jXHJ1dSdk/KQ4kVBzqw756rEjdfKllETnlrZ3uWRVA1Q7uYPyi3GBdDDXNYq+f9s bQ/0hF9WnHY93tO3acepIG+kT3yaWhS23WwRSiQR -----END CERTIFICATE-----Generated at Wed Aug 6 11:21:14 2025 by rpki-client