$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa File: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (raw, json) Hash identifier: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU= Subject key identifier: 88:C5:43:75:77:36:B8:F4:63:67:39:6B:98:90:D5:91:5D:D7:1E:AD Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 67364E79CFDD0B96F412E8C74B8E64878386560F Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa Signing time: Mon 28 Jul 2025 18:00:00 +0000 ROA not before: Mon 28 Jul 2025 17:55:00 +0000 ROA not after: Mon 27 Jul 2026 18:00:00 +0000 asID: 149749 IP address blocks: 103.189.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:36:4e:79:cf:dd:0b:96:f4:12:e8:c7:4b:8e:64:87:83:86:56:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Jul 28 17:55:00 2025 GMT Not After : Jul 27 18:00:00 2026 GMT Subject: CN=88C543757736B8F46367396B9890D5915DD71EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:0d:27:ef:be:30:d7:88:2b:a5:94:2e:ca: df:39:ad:e2:06:56:d8:bd:b8:a3:52:a5:09:d6:65: 46:b2:9d:30:9c:75:b4:7a:98:34:11:39:36:64:ca: a1:54:40:43:59:b9:e3:1d:0f:97:a6:4d:9f:f9:68: fb:11:3f:06:e9:aa:3f:4e:35:09:32:10:69:61:87: e1:ef:8a:eb:bc:81:f3:24:7b:25:90:f1:38:9e:3b: 61:40:e8:d9:c6:93:60:03:74:a6:2e:36:08:63:dc: f0:83:fb:ae:99:19:c0:3e:0e:ee:1e:ca:34:8d:00: e4:5c:6e:67:b1:6c:d4:74:a8:fb:b6:b7:4c:58:13: c5:b0:bb:cc:49:82:8a:82:e9:c7:b4:01:36:9e:0e: a5:40:f6:5b:1b:2a:64:01:f4:e2:eb:b4:41:03:56: 0b:7c:82:5b:1a:01:9c:f3:58:57:92:14:45:be:65: ef:f1:91:10:47:b2:2c:cd:cb:e1:27:6a:82:c5:03: 92:a7:73:9f:f1:66:66:d3:06:79:b2:39:6a:71:14: 1e:11:b6:c9:9a:bb:18:e7:d9:b9:fd:b1:4f:c5:6f: 90:a9:1c:7a:cf:43:92:62:d4:53:95:ba:87:5a:82: 3c:68:1a:c5:3b:5d:89:72:b8:a0:0c:61:e0:33:4a: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C5:43:75:77:36:B8:F4:63:67:39:6B:98:90:D5:91:5D:D7:1E:AD X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.110.0/23 Signature Algorithm: sha256WithRSAEncryption 66:58:a7:59:b6:fd:a7:10:e4:b7:a5:22:f5:14:61:7e:e7:d7: 52:aa:af:e9:71:e0:e8:10:34:9a:97:12:44:97:f6:53:69:aa: 85:75:b9:e1:b4:5f:37:a7:79:28:26:ca:43:09:ab:36:6a:5a: 4d:8e:e8:cf:c1:73:c0:65:bb:1e:09:6f:54:44:22:e7:6a:24: ed:83:ac:15:2e:6e:6c:41:6a:81:e2:ea:3e:a7:d1:16:64:db: fd:41:7d:b9:a6:b8:25:36:19:d0:ce:3e:0b:9f:90:0e:39:f5: b0:87:0a:4c:70:0d:04:ed:97:94:b4:19:d7:c6:49:d1:a3:14: a9:8c:31:ba:a9:70:a9:4d:e8:a4:ba:ad:4f:ae:fc:73:5e:b1: b4:42:d3:92:15:3c:5a:b8:26:f5:57:14:0d:31:15:b5:93:cf: 4e:56:ed:01:42:2a:cb:9b:c7:d3:5c:05:b7:93:4c:85:d5:c8: ec:c6:66:0d:09:31:40:44:1a:4c:a3:82:75:8a:fa:a4:3d:52: cf:69:45:11:51:38:9e:63:ef:ce:f3:ab:98:23:9c:e5:d6:61: 2b:00:61:b2:99:9a:00:d8:80:b2:3e:59:8c:7f:b7:86:ae:42: 14:42:0e:7a:30:d9:b6:be:71:52:1e:d2:a2:3e:a9:f3:c3:00: 0f:0e:9b:53 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZzZOec/dC5b0EujHS45kh4OGVg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNTA3MjgxNzU1MDBaFw0yNjA3MjcxODAwMDBaMDMxMTAvBgNV BAMTKDg4QzU0Mzc1NzczNkI4RjQ2MzY3Mzk2Qjk4OTBENTkxNURENzFFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtA0n774w14grpZQuyt85reIG Vti9uKNSpQnWZUaynTCcdbR6mDQROTZkyqFUQENZueMdD5emTZ/5aPsRPwbpqj9O NQkyEGlhh+Hviuu8gfMkeyWQ8TieO2FA6NnGk2ADdKYuNghj3PCD+66ZGcA+Du4e yjSNAORcbmexbNR0qPu2t0xYE8Wwu8xJgoqC6ce0ATaeDqVA9lsbKmQB9OLrtEED Vgt8glsaAZzzWFeSFEW+Ze/xkRBHsizNy+EnaoLFA5Knc5/xZmbTBnmyOWpxFB4R tsmauxjn2bn9sU/Fb5CpHHrPQ5Ji1FOVuodagjxoGsU7XYlyuKAMYeAzSuDTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUiMVDdXc2uPRjZzlrmJDVkV3XHq0wHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNWU1YTMwLTA4MDItNGM1Yy05 NDdlLTk4ZWYyODVmNGY2Yi8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnvW4wDQYJ KoZIhvcNAQELBQADggEBAGZYp1m2/acQ5LelIvUUYX7n11Kqr+lx4OgQNJqXEkSX 9lNpqoV1ueG0XzeneSgmykMJqzZqWk2O6M/Bc8Blux4Jb1REIudqJO2DrBUubmxB aoHi6j6n0RZk2/1BfbmmuCU2GdDOPgufkA459bCHCkxwDQTtl5S0GdfGSdGjFKmM MbqpcKlN6KS6rU+u/HNesbRC05IVPFq4JvVXFA0xFbWTz05W7QFCKsubx9NcBbeT TIXVyOzGZg0JMUBEGkyjgnWK+qQ9Us9pRRFROJ5j787zq5gjnOXWYSsAYbKZmgDY gLI+WYx/t4auQhRCDnow2ba+cVIe0qI+qfPDAA8Om1M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:45:18 2025 by rpki-client