$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa File: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (raw, json) Hash identifier: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo= Subject key identifier: CC:14:82:B6:55:F6:02:EF:A1:57:1F:5B:65:A6:44:4B:C4:17:E4:96 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 4FAF376DB2B06DEBCBF67D122140B5D93C14686B Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa Signing time: Mon 28 Jul 2025 18:00:00 +0000 ROA not before: Mon 28 Jul 2025 17:55:00 +0000 ROA not after: Mon 27 Jul 2026 18:00:00 +0000 asID: 149749 IP address blocks: 103.189.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:af:37:6d:b2:b0:6d:eb:cb:f6:7d:12:21:40:b5:d9:3c:14:68:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Jul 28 17:55:00 2025 GMT Not After : Jul 27 18:00:00 2026 GMT Subject: CN=CC1482B655F602EFA1571F5B65A6444BC417E496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:bc:93:b9:4b:87:6d:5b:d8:c1:b6:2f:4d: a8:c6:9b:0d:a0:fa:f0:5f:4a:bf:ff:0f:55:98:10: 0c:2f:1d:e2:55:16:f3:31:a0:0f:96:b8:0d:7b:bb: 8f:0f:03:7f:e1:31:48:96:34:17:f0:80:cf:3f:46: 46:71:bb:6f:58:70:4a:ec:92:12:e7:6c:59:89:09: a0:69:b1:6c:5d:df:01:56:87:11:77:3e:32:e5:33: 97:50:5e:a1:f5:74:1e:6a:fd:bb:a9:52:e1:54:d5: dd:01:1b:80:6c:80:44:ec:67:78:5b:ba:ff:4c:5a: 81:18:61:9e:cd:a5:8f:98:39:50:04:eb:e5:cc:c7: 44:62:93:6a:61:4f:ab:6f:b2:10:22:94:10:80:c3: e2:8b:a8:be:41:83:9f:fc:31:19:25:90:33:ba:2a: 62:2f:db:f6:7e:44:7b:6e:cb:c3:e2:01:08:29:ed: 6f:af:bc:88:af:be:90:10:05:af:be:84:a2:cd:2e: 1c:c9:1a:27:04:b0:6e:d1:65:ef:fe:26:f5:0b:39: 85:43:af:56:c1:84:8e:34:33:2d:d8:af:81:42:9f: b5:90:89:ab:26:5a:13:3a:b5:14:11:b4:58:0e:ec: 85:61:3e:8b:3f:55:6f:21:53:48:39:d6:d3:68:c3: e3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:14:82:B6:55:F6:02:EF:A1:57:1F:5B:65:A6:44:4B:C4:17:E4:96 X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.110.0/24 Signature Algorithm: sha256WithRSAEncryption 63:cb:b9:58:10:98:17:6d:e4:44:14:cd:34:13:6f:2f:dd:e4: 72:dc:c0:ff:4d:6f:cf:00:96:f0:13:29:c3:8d:09:f0:ab:d7: 00:02:55:d0:89:45:c1:ed:f5:6a:a5:70:6a:c3:39:e5:28:2a: 3d:df:85:35:ed:86:ed:df:21:c9:93:ce:fe:75:11:bb:8f:15: e3:55:45:12:f4:71:d1:3b:44:9b:9e:2e:77:bc:13:59:0f:0c: 2a:6b:41:79:da:96:b4:d9:04:69:03:49:12:ae:b6:25:ec:0a: 1f:54:4f:97:62:85:f8:8f:32:f1:5a:85:24:31:81:47:44:1d: ac:a8:e6:8a:f9:94:a1:41:fc:08:1e:bf:85:e4:3c:d9:59:c7: 5d:a9:11:3b:9a:71:ad:0e:e8:f8:21:7e:a0:48:3a:6d:6a:e4: 9a:70:67:19:32:49:4f:a2:e2:2a:50:41:45:57:41:87:f9:24: bb:e0:12:21:9b:5c:07:1b:6f:91:5d:f1:35:5a:5c:41:06:9a: dc:ca:59:94:c6:73:6d:81:9c:5e:cb:39:ba:71:cb:dd:a9:3e: 55:ef:11:a7:32:7e:77:3f:1b:a6:33:34:e1:8a:9c:92:16:f4: 2d:a5:87:33:d7:91:71:62:eb:2e:ed:c5:25:ef:44:90:8e:3f: 82:bf:49:e4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUT683bbKwbevL9n0SIUC12TwUaGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNTA3MjgxNzU1MDBaFw0yNjA3MjcxODAwMDBaMDMxMTAvBgNV BAMTKENDMTQ4MkI2NTVGNjAyRUZBMTU3MUY1QjY1QTY0NDRCQzQxN0U0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80byTuUuHbVvYwbYvTajGmw2g +vBfSr//D1WYEAwvHeJVFvMxoA+WuA17u48PA3/hMUiWNBfwgM8/RkZxu29YcErs khLnbFmJCaBpsWxd3wFWhxF3PjLlM5dQXqH1dB5q/bupUuFU1d0BG4BsgETsZ3hb uv9MWoEYYZ7NpY+YOVAE6+XMx0Rik2phT6tvshAilBCAw+KLqL5Bg5/8MRklkDO6 KmIv2/Z+RHtuy8PiAQgp7W+vvIivvpAQBa++hKLNLhzJGicEsG7RZe/+JvULOYVD r1bBhI40My3Yr4FCn7WQiasmWhM6tRQRtFgO7IVhPos/VW8hU0g51tNow+M7AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUzBSCtlX2Au+hVx9bZaZES8QX5JYwHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwNWU1YTMwLTA4MDItNGM1Yy05 NDdlLTk4ZWYyODVmNGY2Yi8wLzMxMzAzMzJlMzEzODM5MmUzMTMxMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvW4wDQYJ KoZIhvcNAQELBQADggEBAGPLuVgQmBdt5EQUzTQTby/d5HLcwP9Nb88AlvATKcON CfCr1wACVdCJRcHt9WqlcGrDOeUoKj3fhTXthu3fIcmTzv51EbuPFeNVRRL0cdE7 RJueLne8E1kPDCprQXnalrTZBGkDSRKutiXsCh9UT5dihfiPMvFahSQxgUdEHayo 5or5lKFB/Agev4XkPNlZx12pETuaca0O6PghfqBIOm1q5JpwZxkySU+i4ipQQUVX QYf5JLvgEiGbXAcbb5Fd8TVaXEEGmtzKWZTGc22BnF7LObpxy92pPlXvEacyfnc/ G6YzNOGKnJIW9C2lhzPXkXFi6y7txSXvRJCOP4K/SeQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:33:01 2025 by rpki-client