$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa File: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (raw, json) Hash identifier: 65bteXTuBMFNNSxBrNIPuupUb/Qq8/iDZ5KY9jeNgbQ= Subject key identifier: 23:9A:7A:B9:E8:5A:33:E6:7E:CB:7B:9C:58:9E:C6:29:47:D7:38:DA Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 4F2243785D5C9228A0266230BB5ABC0F7B7D78A9 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa Signing time: Wed 23 Jul 2025 16:00:00 +0000 ROA not before: Wed 23 Jul 2025 15:55:00 +0000 ROA not after: Wed 22 Jul 2026 16:00:00 +0000 asID: 141618 IP address blocks: 103.174.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:22:43:78:5d:5c:92:28:a0:26:62:30:bb:5a:bc:0f:7b:7d:78:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Jul 23 15:55:00 2025 GMT Not After : Jul 22 16:00:00 2026 GMT Subject: CN=239A7AB9E85A33E67ECB7B9C589EC62947D738DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:31:c1:58:ab:0b:ba:95:46:0e:48:9b:c4:33: 7d:5b:99:05:bc:ff:55:1e:97:3a:64:9c:7e:e8:7c: c0:13:0c:e7:4d:d7:16:d8:cd:5a:3e:1e:33:e0:12: 00:3e:57:20:fb:92:18:79:9c:e8:67:60:1d:1b:96: d0:c6:94:8f:f0:7d:a3:25:d0:57:2d:b8:44:2d:78: 9e:07:72:a2:70:1f:18:53:51:7b:e8:33:4d:13:c4: fa:a0:e8:dc:bc:49:4b:1c:10:3b:c2:db:9b:29:a4: 18:d6:1b:68:d0:2a:be:ff:06:c0:fb:2d:38:c6:d7: 22:c8:cd:29:f2:f1:da:9d:24:01:3d:cc:96:7d:75: 97:be:ab:4b:5d:14:1a:63:3a:82:af:5c:53:69:72: b6:6b:1f:11:7b:68:4a:29:ee:08:4f:f0:6a:8b:41: ed:81:9f:93:76:02:9e:26:85:2e:36:23:75:50:1e: 46:00:f6:4d:67:34:07:b0:c8:44:13:cf:ea:7b:13: 7d:09:27:b1:c3:6a:70:22:41:c0:2e:c5:d9:2a:74: a0:45:eb:ad:ee:3d:a0:ce:f3:70:15:f0:72:f2:2b: 94:09:32:48:5b:fb:0c:af:15:df:0f:4b:a3:56:63: 06:91:19:cc:da:89:30:5c:2f:65:43:2d:ec:82:9e: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9A:7A:B9:E8:5A:33:E6:7E:CB:7B:9C:58:9E:C6:29:47:D7:38:DA X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.66.0/24 Signature Algorithm: sha256WithRSAEncryption 10:c9:d6:3e:43:9f:5d:ae:11:d6:5c:7a:b2:8c:20:bd:e8:6e: a3:34:3c:72:5b:39:db:b9:b2:0e:37:bb:81:28:ba:60:15:99: ab:85:c1:d1:69:81:25:1f:11:72:58:c3:7b:0b:37:53:30:42: 47:cb:e5:cc:3f:40:eb:94:a6:f5:79:ea:ed:19:c7:4f:54:48: 42:14:69:2d:78:be:73:55:db:16:8e:d7:d5:96:11:5a:2a:d8: 12:b1:91:54:0e:d2:28:d2:55:ff:15:15:a0:fa:68:e6:ba:fc: 02:01:10:8b:8e:b1:bc:b8:7a:e2:a5:95:66:a7:b5:9a:5b:69: 21:4b:23:b1:b2:fd:9e:b4:80:96:ac:61:46:4d:ac:0e:12:27: c4:8b:50:eb:f5:d2:28:1b:bd:42:f2:2b:41:d8:79:76:95:85: 5b:b7:24:ae:93:57:1f:46:e3:e0:ca:76:82:62:e8:e1:c8:79: 02:dd:d6:06:e9:47:45:5f:cd:5d:55:7a:76:60:f9:1a:ee:1f: 9a:39:22:1f:b5:89:18:1f:26:9f:c4:0b:b3:14:bd:31:f5:b5: 32:f6:94:8e:4f:24:99:24:b4:d2:c2:ab:1a:eb:6c:2b:63:57: d6:7d:01:1a:1f:88:f8:62:7b:dd:9f:e6:40:b4:f1:6e:a4:ad: a8:cf:f9:d5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTyJDeF1ckiigJmIwu1q8D3t9eKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTA3MjMxNTU1MDBaFw0yNjA3MjIxNjAwMDBaMDMxMTAvBgNV BAMTKDIzOUE3QUI5RTg1QTMzRTY3RUNCN0I5QzU4OUVDNjI5NDdENzM4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMcFYqwu6lUYOSJvEM31bmQW8 /1UelzpknH7ofMATDOdN1xbYzVo+HjPgEgA+VyD7khh5nOhnYB0bltDGlI/wfaMl 0FctuEQteJ4HcqJwHxhTUXvoM00TxPqg6Ny8SUscEDvC25sppBjWG2jQKr7/BsD7 LTjG1yLIzSny8dqdJAE9zJZ9dZe+q0tdFBpjOoKvXFNpcrZrHxF7aEop7ghP8GqL Qe2Bn5N2Ap4mhS42I3VQHkYA9k1nNAewyEQTz+p7E30JJ7HDanAiQcAuxdkqdKBF 663uPaDO83AV8HLyK5QJMkhb+wyvFd8PS6NWYwaRGczaiTBcL2VDLeyCnqCTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUI5p6uehaM+Z+y3ucWJ7GKUfXONowHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwYmE5N2VmLTdiYzgtNDViOC04 MmFiLWY4NTUzM2NhZWRmNC8wLzMxMzAzMzJlMzEzNzM0MmUzNjM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ65CMA0GCSqG SIb3DQEBCwUAA4IBAQAQydY+Q59drhHWXHqyjCC96G6jNDxyWznbubION7uBKLpg FZmrhcHRaYElHxFyWMN7CzdTMEJHy+XMP0DrlKb1eertGcdPVEhCFGkteL5zVdsW jtfVlhFaKtgSsZFUDtIo0lX/FRWg+mjmuvwCARCLjrG8uHripZVmp7WaW2khSyOx sv2etICWrGFGTawOEifEi1Dr9dIoG71C8itB2Hl2lYVbtySuk1cfRuPgynaCYujh yHkC3dYG6UdFX81dVXp2YPka7h+aOSIftYkYHyafxAuzFL0x9bUy9pSOTySZJLTS wqsa62wrY1fWfQEaH4j4Ynvdn+ZAtPFupK2oz/nV -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:43 2025 by rpki-client