$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa File: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY= Subject key identifier: AC:3C:8B:57:38:39:EE:32:28:0A:5A:FC:EE:F9:30:70:31:DE:DF:DE Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 49895B8880982DC16C0E7CF7D82739DA1983E29F Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa Signing time: Fri 04 Jul 2025 08:00:01 +0000 ROA not before: Fri 04 Jul 2025 07:55:01 +0000 ROA not after: Fri 03 Jul 2026 08:00:01 +0000 asID: 17995 IP address blocks: 103.162.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:89:5b:88:80:98:2d:c1:6c:0e:7c:f7:d8:27:39:da:19:83:e2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Jul 4 07:55:01 2025 GMT Not After : Jul 3 08:00:01 2026 GMT Subject: CN=AC3C8B573839EE32280A5AFCEEF9307031DEDFDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3c:6c:1e:3c:5f:0a:55:ff:32:50:ec:ae:15: 1b:95:15:17:03:ed:83:0d:77:75:32:14:5c:56:30: b7:4e:65:c3:8f:b4:29:1e:8f:75:f9:f7:b5:53:c3: ea:71:d1:1f:0c:da:8b:3d:ad:c8:f0:08:48:9a:00: d3:fa:1a:55:87:bf:01:30:71:0a:eb:02:ed:d4:6a: f9:b9:63:60:2f:8d:61:7e:17:34:29:00:67:96:49: 3a:a9:22:9b:79:23:f1:58:76:51:41:45:ed:8d:03: ca:ab:3b:42:7d:7f:8e:7f:e4:94:cf:fd:f6:80:ab: d4:1e:3f:dc:2e:58:bf:a2:19:c6:51:51:0d:89:b4: b3:22:b0:c5:dd:95:ee:6f:3d:6f:19:45:50:e3:ed: a3:ef:ee:30:b3:54:8f:63:bf:fb:b9:09:e4:21:ac: 8e:54:5b:48:fb:27:ee:5c:d1:a8:7f:c8:4b:9d:54: b5:42:c9:d5:59:22:4e:09:46:0f:d9:ae:49:5a:d9: 3c:fd:e9:2b:18:80:2c:cc:66:58:9b:14:d2:67:c0: 90:96:08:77:82:04:b8:67:f0:8f:6c:70:8d:6b:a3: 6f:85:8d:84:8a:fd:47:12:de:48:44:82:c4:4e:bb: 55:53:c9:65:e4:95:dd:d1:ed:11:51:67:05:48:b7: b7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3C:8B:57:38:39:EE:32:28:0A:5A:FC:EE:F9:30:70:31:DE:DF:DE X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.146.0/23 Signature Algorithm: sha256WithRSAEncryption 20:97:f7:b8:2d:b1:62:1b:e1:14:80:38:1d:f0:c0:7e:37:db: b4:5b:e7:8e:8f:bd:ba:52:3d:9e:6b:fa:3e:27:fb:b9:4d:35: 99:5a:c7:74:c9:02:bd:17:78:0d:be:e9:c3:91:49:98:d3:e8: 4d:ab:d7:1b:d1:9d:e4:56:5e:4a:56:42:20:58:d4:69:f3:3a: e9:12:26:9a:c9:c9:a5:2a:54:71:ab:9a:a0:8d:17:81:72:36: 32:23:72:28:f3:7f:ed:bd:20:5e:f0:42:5b:ce:f9:8e:5e:fd: ce:f9:65:b9:45:ca:b4:9a:c0:da:b2:73:e4:6c:75:74:93:f3: 3a:c2:87:9b:f3:09:8d:16:fb:2b:78:0a:81:be:bc:fe:53:88: dd:7b:4f:8c:8b:82:e7:51:23:ec:f2:e6:36:c3:bb:ee:25:3e: 18:bd:f8:f6:bc:85:2b:41:69:bb:50:53:0a:ee:30:b4:05:17: ce:57:31:52:dc:59:01:f5:39:b1:5a:1c:01:18:89:ed:9b:37: ef:39:02:4c:c8:d3:f8:bb:b4:60:7e:19:d5:35:e8:f1:d2:12: 4a:7b:55:e7:d7:71:e1:ff:67:c8:47:a5:b3:45:4a:fb:74:ed: 79:d4:4f:1e:53:67:86:ad:c0:52:2e:cc:8f:7a:93:53:d5:73: 00:e3:c7:ff -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSYlbiICYLcFsDnz32Cc52hmD4p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTA3MDQwNzU1MDFaFw0yNjA3MDMwODAwMDFaMDMxMTAvBgNV BAMTKEFDM0M4QjU3MzgzOUVFMzIyODBBNUFGQ0VFRjkzMDcwMzFERURGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjPGwePF8KVf8yUOyuFRuVFRcD 7YMNd3UyFFxWMLdOZcOPtCkej3X597VTw+px0R8M2os9rcjwCEiaANP6GlWHvwEw cQrrAu3Uavm5Y2AvjWF+FzQpAGeWSTqpIpt5I/FYdlFBRe2NA8qrO0J9f45/5JTP /faAq9QeP9wuWL+iGcZRUQ2JtLMisMXdle5vPW8ZRVDj7aPv7jCzVI9jv/u5CeQh rI5UW0j7J+5c0ah/yEudVLVCydVZIk4JRg/Zrkla2Tz96SsYgCzMZlibFNJnwJCW CHeCBLhn8I9scI1ro2+FjYSK/UcS3khEgsROu1VTyWXkld3R7RFRZwVIt7fVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrDyLVzg57jIoClr87vkwcDHe394wHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNTIwYjU0LTNiYTctNDYzMS1h ZjBiLTU1OTg0YjBiYTdmMi8wLzMxMzAzMzJlMzEzNjMyMmUzMTM0MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6KSMA0GCSqG SIb3DQEBCwUAA4IBAQAgl/e4LbFiG+EUgDgd8MB+N9u0W+eOj726Uj2ea/o+J/u5 TTWZWsd0yQK9F3gNvunDkUmY0+hNq9cb0Z3kVl5KVkIgWNRp8zrpEiaaycmlKlRx q5qgjReBcjYyI3Io83/tvSBe8EJbzvmOXv3O+WW5Rcq0msDasnPkbHV0k/M6woeb 8wmNFvsreAqBvrz+U4jde0+Mi4LnUSPs8uY2w7vuJT4Yvfj2vIUrQWm7UFMK7jC0 BRfOVzFS3FkB9TmxWhwBGIntmzfvOQJMyNP4u7RgfhnVNejx0hJKe1Xn13Hh/2fI R6WzRUr7dO151E8eU2eGrcBSLsyPepNT1XMA48f/ -----END CERTIFICATE-----Generated at Fri Aug 8 00:14:44 2025 by rpki-client