$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313336383830.roa File: 3130332e33382e3131312e302f32342d3234203d3e20313336383830.roa (raw, json) Hash identifier: Av+/utp0kWimi6k+EGw6qb8Dfeu6Ca9sqADqCSG4T5s= Subject key identifier: DA:43:2E:5D:6C:7E:72:94:7F:4B:F4:FB:16:27:53:1C:E1:D3:46:24 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 617E2DD535E10C67D82C3AF6DEA8C926771FC5FD Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313336383830.roa Signing time: Fri 01 Aug 2025 04:46:41 +0000 ROA not before: Fri 01 Aug 2025 04:41:41 +0000 ROA not after: Fri 31 Jul 2026 04:46:41 +0000 asID: 136880 IP address blocks: 103.38.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7e:2d:d5:35:e1:0c:67:d8:2c:3a:f6:de:a8:c9:26:77:1f:c5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Aug 1 04:41:41 2025 GMT Not After : Jul 31 04:46:41 2026 GMT Subject: CN=DA432E5D6C7E72947F4BF4FB1627531CE1D34624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b5:65:11:85:60:e1:1c:3a:1e:47:d4:d1:f6: 49:13:d7:f5:ec:42:c1:ec:82:4b:55:45:eb:29:b5: 08:0e:0e:d6:0c:bc:10:f3:17:4a:64:33:92:7d:a3: 73:10:e8:62:d2:f2:35:74:54:b2:6f:56:fa:39:41: e8:f8:89:9c:65:fb:52:40:37:f7:01:fc:dc:90:b3: 62:99:e1:5d:d5:8c:5b:cc:0d:4b:5a:59:b6:9f:f6: 1a:aa:ac:9f:6f:91:32:ea:68:7d:92:00:67:0f:1b: 94:e6:66:cc:56:e5:db:69:43:6f:26:39:4e:f1:9e: ea:f3:ef:e8:4e:c9:0c:99:45:cd:b6:b5:32:f3:6f: 37:c7:ae:28:2c:84:28:d1:6a:49:ba:25:ff:10:8d: 57:29:a4:2c:9d:cc:55:20:04:ee:9f:ec:85:37:a2: f1:3b:e2:44:1c:04:72:a5:55:14:ba:0c:ab:aa:1d: 4d:7a:a7:64:d5:bb:2d:0c:f6:39:d1:86:0a:45:48: f9:75:05:30:5a:e6:6c:92:fd:33:d7:1a:cf:f1:9f: a9:ee:6e:e2:be:a5:f6:69:3c:49:24:6a:81:63:fd: 2b:86:2e:f3:01:96:6e:fa:fe:ee:11:53:b9:1d:1c: 32:5e:a5:10:dd:be:3a:7c:b4:51:fa:6f:85:21:6c: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:43:2E:5D:6C:7E:72:94:7F:4B:F4:FB:16:27:53:1C:E1:D3:46:24 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/3130332e33382e3131312e302f32342d3234203d3e20313336383830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.111.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:35:01:fa:4a:a2:1e:03:40:0c:33:6c:07:e9:c0:b5:71:2d: ac:1f:36:8e:1d:ce:94:77:fb:24:75:6a:5a:24:cc:d9:bb:d1: eb:4e:0a:87:89:64:f2:eb:2d:8f:b8:09:40:33:9d:b7:ac:75: 8d:6d:0b:88:81:ef:84:15:4d:b7:f0:0f:92:74:4c:5a:eb:3b: b5:3c:db:65:1b:3c:5c:34:55:51:48:37:17:50:4f:39:c3:a2: 03:bb:98:d0:85:84:ce:eb:8d:0d:ed:6f:c1:51:fc:54:a8:f2: bc:3c:fa:fb:b4:b7:d4:28:89:af:32:34:c6:ce:5d:d2:e6:7d: 25:98:d0:23:06:eb:19:ef:2d:db:27:23:39:e4:17:e0:0f:d8: 76:a8:20:9a:fd:43:d9:00:12:1b:44:2e:c0:9e:03:aa:71:7f: 02:85:6e:f0:34:85:1f:39:6b:de:ee:1d:7e:e7:a8:1b:e9:8d: 81:12:bd:30:d2:01:01:72:2d:f4:ad:d9:cf:06:bf:c2:ad:1e: 64:93:f1:81:3a:81:52:d9:5b:7f:ce:72:2d:6b:0d:91:45:9c: e2:aa:4c:8b:f5:22:a9:64:00:e4:8a:e0:8e:11:99:12:98:a1: db:34:27:18:69:14:06:12:8c:8b:0c:66:bc:a1:b8:e2:3b:5f: 41:6f:ff:6a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYX4t1TXhDGfYLDr23qjJJncfxf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA4MDEwNDQxNDFaFw0yNjA3MzEwNDQ2NDFaMDMxMTAvBgNV BAMTKERBNDMyRTVENkM3RTcyOTQ3RjRCRjRGQjE2Mjc1MzFDRTFEMzQ2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxtWURhWDhHDoeR9TR9kkT1/Xs QsHsgktVResptQgODtYMvBDzF0pkM5J9o3MQ6GLS8jV0VLJvVvo5Qej4iZxl+1JA N/cB/NyQs2KZ4V3VjFvMDUtaWbaf9hqqrJ9vkTLqaH2SAGcPG5TmZsxW5dtpQ28m OU7xnurz7+hOyQyZRc22tTLzbzfHrigshCjRakm6Jf8QjVcppCydzFUgBO6f7IU3 ovE74kQcBHKlVRS6DKuqHU16p2TVuy0M9jnRhgpFSPl1BTBa5myS/TPXGs/xn6nu buK+pfZpPEkkaoFj/SuGLvMBlm76/u4RU7kdHDJepRDdvjp8tFH6b4UhbBClAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2kMuXWx+cpR/S/T7FidTHOHTRiQwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhYmVlYmNjLWEyNDctNGZkZS1h YTg2LWM2NjY5ZWFiY2Q4Mi8wLzMxMzAzMzJlMzMzODJlMzEzMTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyZvMA0GCSqG SIb3DQEBCwUAA4IBAQBdNQH6SqIeA0AMM2wH6cC1cS2sHzaOHc6Ud/skdWpaJMzZ u9HrTgqHiWTy6y2PuAlAM523rHWNbQuIge+EFU238A+SdExa6zu1PNtlGzxcNFVR SDcXUE85w6IDu5jQhYTO640N7W/BUfxUqPK8PPr7tLfUKImvMjTGzl3S5n0lmNAj BusZ7y3bJyM55BfgD9h2qCCa/UPZABIbRC7AngOqcX8ChW7wNIUfOWve7h1+56gb 6Y2BEr0w0gEBci30rdnPBr/CrR5kk/GBOoFS2Vt/znItaw2RRZziqkyL9SKpZADk iuCOEZkSmKHbNCcYaRQGEoyLDGa8objiO19Bb/9q -----END CERTIFICATE-----Generated at Sat Aug 9 20:43:01 2025 by rpki-client