$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa File: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (raw, json) Hash identifier: h9HWpUZjqwuAaP7uxV6EjM70C86M9FZJ3xzAzgOHeaE= Subject key identifier: 37:B5:52:9D:24:86:09:10:01:FE:0F:D4:DA:1D:FB:C8:77:1E:CC:39 Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268 Certificate serial: 2ECDFF44F00E0286BB1762BB25AAEBE21202E8CF Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa Signing time: Thu 21 Aug 2025 17:00:01 +0000 ROA not before: Thu 21 Aug 2025 16:55:01 +0000 ROA not after: Thu 20 Aug 2026 17:00:01 +0000 asID: 147167 IP address blocks: 103.177.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 01:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cd:ff:44:f0:0e:02:86:bb:17:62:bb:25:aa:eb:e2:12:02:e8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268 Validity Not Before: Aug 21 16:55:01 2025 GMT Not After : Aug 20 17:00:01 2026 GMT Subject: CN=37B5529D2486091001FE0FD4DA1DFBC8771ECC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:14:0e:d3:d0:15:03:15:61:84:b6:06:6a:8b: 32:bf:a9:eb:4f:f6:99:4f:2e:6f:46:d3:ae:e6:27: 66:72:00:94:02:a3:87:86:20:b6:31:69:e4:db:48: cb:59:5a:29:ae:fc:c6:6e:c0:da:22:97:47:20:87: e4:2d:04:0b:dd:24:cb:f2:50:1b:eb:53:e4:b9:d4: 12:9a:b1:db:f7:02:ef:92:3e:20:a7:ba:fa:20:ff: 4a:9c:5a:1e:1b:be:38:3a:6a:4f:88:eb:8a:43:c5: 82:4a:db:30:5c:f4:30:74:f8:47:06:90:29:82:07: f4:41:73:c7:fc:79:35:2b:94:70:07:7e:ba:16:51: f0:fb:8a:2f:c5:0d:5b:d6:23:6e:ee:34:58:98:2c: 47:42:09:65:87:8c:91:e9:89:3f:e8:bc:fc:b7:b7: a3:73:48:b5:d8:a2:35:60:61:14:22:d9:36:11:af: d1:27:77:c8:8c:0d:b8:85:51:a8:17:97:38:2e:10: 35:f3:83:c5:bf:9e:e6:dd:72:f2:c2:ea:bf:dc:ed: 89:67:07:22:1a:98:29:56:37:99:b7:56:3c:6e:06: df:f1:65:40:8d:20:31:86:3b:28:92:90:3f:ac:a6: e2:d6:2f:eb:77:94:ad:a0:8c:ca:b9:17:0b:2a:f3: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B5:52:9D:24:86:09:10:01:FE:0F:D4:DA:1D:FB:C8:77:1E:CC:39 X509v3 Authority Key Identifier: keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.152.0/24 Signature Algorithm: sha256WithRSAEncryption 60:9a:55:3f:c9:51:f4:da:65:63:43:56:b0:4f:2a:88:5a:27: 2c:12:d7:cc:18:d4:cc:b8:1c:6f:3c:0b:30:c3:e1:07:c5:71: df:e7:f9:5d:39:39:a6:9e:e6:27:07:60:ec:ed:12:23:ee:cc: 71:91:67:67:c1:ca:dc:d9:8f:e6:57:85:d9:57:fc:8a:93:06: 11:1c:76:ef:15:4a:a1:8c:e7:3b:49:b0:82:f1:98:c8:f1:d7: 52:2d:c3:d1:52:2c:c4:06:ec:93:c4:96:0f:fb:89:83:b3:42: 7f:d0:36:aa:71:eb:12:6e:b0:64:73:36:21:1c:27:b5:e6:66: d8:df:88:53:b5:d8:8e:f4:7a:13:c6:55:9c:66:cf:73:8c:6a: f1:51:48:48:12:c6:94:66:1c:2e:aa:9f:c5:b8:d5:ef:3a:dc: 80:30:d4:1b:a0:66:82:e2:c8:72:f9:b6:70:a1:91:1c:c7:21: 7a:ee:fd:59:84:43:48:ed:ba:a8:e3:b7:6e:9f:28:c7:d0:00: 15:b4:20:3f:7e:0b:85:24:52:79:7d:56:b1:d0:5a:7e:8a:79: 35:60:c3:61:3c:19:c4:7a:e1:c1:06:5b:c9:a8:39:74:a6:46: 34:c0:af:cf:af:c2:a0:5c:e2:d3:d7:81:c9:80:be:2d:f7:08: b6:99:f1:9b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULs3/RPAOAoa7F2K7Jarr4hIC6M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4 QjU3RTI2ODAeFw0yNTA4MjExNjU1MDFaFw0yNjA4MjAxNzAwMDFaMDMxMTAvBgNV BAMTKDM3QjU1MjlEMjQ4NjA5MTAwMUZFMEZENERBMURGQkM4NzcxRUNDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoFA7T0BUDFWGEtgZqizK/qetP 9plPLm9G067mJ2ZyAJQCo4eGILYxaeTbSMtZWimu/MZuwNoil0cgh+QtBAvdJMvy UBvrU+S51BKasdv3Au+SPiCnuvog/0qcWh4bvjg6ak+I64pDxYJK2zBc9DB0+EcG kCmCB/RBc8f8eTUrlHAHfroWUfD7ii/FDVvWI27uNFiYLEdCCWWHjJHpiT/ovPy3 t6NzSLXYojVgYRQi2TYRr9End8iMDbiFUagXlzguEDXzg8W/nubdcvLC6r/c7Yln ByIamClWN5m3VjxuBt/xZUCNIDGGOyiSkD+spuLWL+t3lK2gjMq5Fwsq8wS9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUN7VSnSSGCRAB/g/U2h37yHcezDkwHwYDVR0j BBgwFoAU1nKTIfleJky+c3NGl5DHf4tX4mgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RjZjBhNC1hZDFiLTRiNzItODQwZi0xZjRhODA3ZjY1OTQvMC9ENjcyOTMyMUY5 NUUyNjRDQkU3MzczNDY5NzkwQzc3RjhCNTdFMjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4QjU3 RTI2OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3ZGNmMGE0LWFkMWItNGI3Mi04 NDBmLTFmNGE4MDdmNjU5NC8wLzMxMzAzMzJlMzEzNzM3MmUzMTM1MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTM2Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsZgwDQYJ KoZIhvcNAQELBQADggEBAGCaVT/JUfTaZWNDVrBPKohaJywS18wY1My4HG88CzDD 4QfFcd/n+V05Oaae5icHYOztEiPuzHGRZ2fBytzZj+ZXhdlX/IqTBhEcdu8VSqGM 5ztJsILxmMjx11Itw9FSLMQG7JPElg/7iYOzQn/QNqpx6xJusGRzNiEcJ7XmZtjf iFO12I70ehPGVZxmz3OMavFRSEgSxpRmHC6qn8W41e863IAw1BugZoLiyHL5tnCh kRzHIXru/VmEQ0jtuqjjt26fKMfQABW0ID9+C4UkUnl9VrHQWn6KeTVgw2E8GcR6 4cEGW8moOXSmRjTAr8+vwqBc4tPXgcmAvi33CLaZ8Zs= -----END CERTIFICATE-----Generated at Sun Aug 24 08:58:24 2025 by rpki-client