$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa File: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (raw, json) Hash identifier: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE= Subject key identifier: 88:C0:BB:D3:FA:2F:30:A7:B5:94:D4:31:48:1A:49:5B:41:BD:CB:AE Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 64517EE40AC4688A84A9CC00C725D03418050CB1 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa Signing time: Tue 15 Jul 2025 10:02:25 +0000 ROA not before: Tue 15 Jul 2025 09:57:25 +0000 ROA not after: Tue 14 Jul 2026 10:02:25 +0000 asID: 131694 IP address blocks: 103.7.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:51:7e:e4:0a:c4:68:8a:84:a9:cc:00:c7:25:d0:34:18:05:0c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Jul 15 09:57:25 2025 GMT Not After : Jul 14 10:02:25 2026 GMT Subject: CN=88C0BBD3FA2F30A7B594D431481A495B41BDCBAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:5b:06:c7:c7:44:ad:94:cb:54:d2:a5:c9: 77:70:fa:bc:f2:bd:d7:0c:b2:4d:a9:fb:1b:73:83: fd:e1:63:df:d6:df:91:24:0b:9e:62:d3:a4:05:d3: 41:49:8b:e3:07:b4:3a:39:33:3a:a2:73:96:ba:7d: 67:14:2f:16:aa:82:2c:a2:12:31:1d:fe:0c:b0:23: 0b:16:d6:62:c3:ce:25:53:7f:f6:95:97:6a:57:26: 3a:61:bb:c3:c3:84:52:3e:ad:2e:98:9d:c2:57:fa: 0d:89:52:6b:b5:aa:ad:de:d7:72:b4:b8:c6:35:22: e3:56:17:cb:d3:35:a5:07:68:9b:31:01:ac:ce:f0: 9d:d0:43:ad:fb:78:44:c8:b0:b2:31:1e:c3:d0:05: 9e:c9:ef:67:1f:59:f0:ee:d5:22:8c:6c:df:30:b0: 4b:0f:74:29:fa:32:46:d9:78:d7:89:be:16:6b:22: 9b:7d:51:c2:63:ee:7c:5a:23:4e:54:a5:4f:89:41: 2c:8b:6a:09:c7:9e:b7:02:d0:1f:bc:19:67:2e:75: 92:bf:1b:af:3e:ee:60:34:58:2b:e6:b3:15:91:ad: fa:d1:12:f8:22:dd:30:ba:9d:0a:52:8b:33:65:91: e6:85:88:c5:9e:2d:81:e6:bd:e6:2d:42:ef:29:a9: eb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C0:BB:D3:FA:2F:30:A7:B5:94:D4:31:48:1A:49:5B:41:BD:CB:AE X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38362e302f32332d3234203d3e20313331363934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.86.0/23 Signature Algorithm: sha256WithRSAEncryption 37:78:89:d4:86:07:fd:97:11:71:c2:dd:52:42:5b:9e:6d:2d: 99:0a:65:7c:44:d2:e2:89:ac:41:31:5f:e7:a7:f8:57:60:68: 37:31:ea:f7:48:1d:d5:fd:b9:8d:5a:33:f2:e3:bf:89:02:dc: 13:e2:11:61:b4:73:13:21:cc:5b:2e:03:c5:7d:ac:4f:82:7e: de:a7:0e:64:b4:33:69:af:d2:ac:09:89:98:90:58:85:59:32: 6b:bb:38:03:6c:52:a4:f1:c6:83:75:c5:53:36:84:85:84:9b: 85:39:16:01:e3:e0:21:06:7d:b5:3b:3c:6f:18:79:0c:0d:dd: 6e:8d:fd:f5:c9:be:55:64:13:b2:6a:27:de:25:dd:83:b5:ae: 39:c3:ad:a7:e4:a2:75:47:ca:9b:84:69:c9:70:4e:ae:8a:8a: 78:f6:8d:11:f3:a5:9a:9e:ab:b8:dc:0a:02:28:db:51:55:8c: 11:77:af:a9:35:e0:94:ad:b7:9f:72:34:88:f0:42:f5:90:88: 15:2e:f9:81:42:f3:c9:43:c8:de:7d:05:e6:b0:c8:7f:f5:12: d0:e3:57:74:5f:26:36:f0:ff:1e:0c:26:e2:b9:5a:1f:51:4f: 73:20:f3:e8:e7:46:f9:84:a7:62:4f:c7:ab:ed:b0:63:e8:d5: 22:7d:c7:3d -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUZFF+5ArEaIqEqcwAxyXQNBgFDLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTA3MTUwOTU3MjVaFw0yNjA3MTQxMDAyMjVaMDMxMTAvBgNV BAMTKDg4QzBCQkQzRkEyRjMwQTdCNTk0RDQzMTQ4MUE0OTVCNDFCRENCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQy1sGx8dErZTLVNKlyXdw+rzy vdcMsk2p+xtzg/3hY9/W35EkC55i06QF00FJi+MHtDo5Mzqic5a6fWcULxaqgiyi EjEd/gywIwsW1mLDziVTf/aVl2pXJjphu8PDhFI+rS6YncJX+g2JUmu1qq3e13K0 uMY1IuNWF8vTNaUHaJsxAazO8J3QQ637eETIsLIxHsPQBZ7J72cfWfDu1SKMbN8w sEsPdCn6MkbZeNeJvhZrIpt9UcJj7nxaI05UpU+JQSyLagnHnrcC0B+8GWcudZK/ G68+7mA0WCvmsxWRrfrREvgi3TC6nQpSizNlkeaFiMWeLYHmveYtQu8pqesZAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUiMC70/ovMKe1lNQxSBpJW0G9y64wHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwMjc4YjdkLTQ3ZWQtNDg2MC1h YjNhLTljMTE0Y2M1ZjA5Yi8wLzMxMzAzMzJlMzcyZTM4MzYyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzMTMzMzEzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnB1YwDQYJKoZIhvcN AQELBQADggEBADd4idSGB/2XEXHC3VJCW55tLZkKZXxE0uKJrEExX+en+FdgaDcx 6vdIHdX9uY1aM/Ljv4kC3BPiEWG0cxMhzFsuA8V9rE+Cft6nDmS0M2mv0qwJiZiQ WIVZMmu7OANsUqTxxoN1xVM2hIWEm4U5FgHj4CEGfbU7PG8YeQwN3W6N/fXJvlVk E7JqJ94l3YO1rjnDrafkonVHypuEaclwTq6Kinj2jRHzpZqeq7jcCgIo21FVjBF3 r6k14JStt59yNIjwQvWQiBUu+YFC88lDyN59BeawyH/1EtDjV3RfJjbw/x4MJuK5 Wh9RT3Mg8+jnRvmEp2JPx6vtsGPo1SJ9xz0= -----END CERTIFICATE-----Generated at Thu Aug 7 14:36:33 2025 by rpki-client