$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa File: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk= Subject key identifier: 02:51:95:CF:17:5D:13:CA:38:9A:85:60:43:38:D9:D2:58:19:65:68 Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 395C9397E716BAEBA82F409EEBB1482E4D672A6A Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa Signing time: Tue 19 Aug 2025 11:00:04 +0000 ROA not before: Tue 19 Aug 2025 10:55:04 +0000 ROA not after: Tue 18 Aug 2026 11:00:04 +0000 asID: 131111 IP address blocks: 103.177.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 08:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5c:93:97:e7:16:ba:eb:a8:2f:40:9e:eb:b1:48:2e:4d:67:2a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Aug 19 10:55:04 2025 GMT Not After : Aug 18 11:00:04 2026 GMT Subject: CN=025195CF175D13CA389A85604338D9D258196568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:24:e1:90:a9:f2:38:f1:fe:55:36:a4:60:0c: b9:39:3f:cb:2e:6a:31:d7:50:3a:6c:94:d9:94:85: dc:43:65:68:ba:25:d1:17:0f:4c:4e:54:22:5b:62: fc:10:8a:82:de:27:ee:ef:fd:3e:dd:06:bb:b5:e4: 19:2d:af:41:3c:d3:35:52:4d:3a:e7:a6:02:39:ba: ac:96:51:79:13:28:a2:94:73:f6:88:f2:a1:98:1d: c9:52:11:54:64:5b:66:2d:28:aa:65:cd:d1:f2:aa: 6c:76:90:da:37:e8:67:e0:37:7e:b5:96:0f:dd:e2: 75:53:bc:33:f7:0c:36:63:b1:06:48:85:fb:95:86: 03:80:9b:64:fc:f0:b3:41:92:03:c0:94:ca:29:a2: 06:67:e6:c5:83:33:8e:32:8a:49:ef:e3:7e:60:55: 01:b3:9d:2e:19:9e:d3:0a:c1:e8:9e:2f:72:6f:0a: 87:45:08:1d:47:96:d7:a2:df:65:51:8b:5d:ad:14: 90:f9:eb:0d:e2:97:7e:51:7c:51:d4:25:4a:dd:78: 51:d9:42:5d:fa:71:cf:29:c2:f5:ec:91:2b:a8:0b: ce:da:dd:f1:dc:96:b0:f9:ec:86:c4:64:9e:ea:76: 61:89:92:0f:9f:c5:52:5e:81:03:e0:d3:7a:d9:a6: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:95:CF:17:5D:13:CA:38:9A:85:60:43:38:D9:D2:58:19:65:68 X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.100.0/23 Signature Algorithm: sha256WithRSAEncryption 42:5c:3f:73:53:24:7d:3f:e7:05:4a:f4:c5:49:b0:a8:4d:6f: 07:55:33:77:dd:97:5e:0a:7e:ee:e4:3f:67:0f:48:2a:b4:ea: a3:69:36:19:71:8c:29:b1:6e:7c:a9:58:07:fb:df:e4:98:92: eb:0f:42:2e:34:5e:3d:07:ae:75:68:e5:40:e2:6d:72:49:2b: 5a:e0:38:f0:cc:be:95:6b:76:34:0b:c4:56:cb:ad:aa:05:c4: 42:58:74:06:f6:12:dc:89:8a:af:87:ee:56:2c:df:df:5d:71: 68:9b:f2:d9:e2:95:f3:05:77:b2:4f:53:54:ce:3d:d5:5d:dd: 8f:8c:b8:29:c8:07:4d:fe:b8:4b:db:66:43:cd:49:85:8a:43: 33:54:7d:50:f1:cc:2b:b5:20:54:2e:76:ad:07:8e:4b:af:74: d4:91:ae:24:db:0a:32:c7:ad:4e:fc:db:5f:3a:0d:8c:aa:da: bb:41:fe:4a:70:d9:0c:39:c0:d2:90:67:76:b7:b0:d0:65:7b: df:7c:f7:b3:3c:4f:dc:92:20:36:d0:03:e8:00:a9:e2:35:4c: 2f:33:e7:8f:d1:3c:f0:ad:04:87:ba:38:b7:21:e5:07:d0:6f: c3:14:a2:ff:14:60:5b:92:12:00:70:e0:af:f7:eb:0d:fc:1e: 7e:1f:d4:bb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOVyTl+cWuuuoL0Ce67FILk1nKmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTA4MTkxMDU1MDRaFw0yNjA4MTgxMTAwMDRaMDMxMTAvBgNV BAMTKDAyNTE5NUNGMTc1RDEzQ0EzODlBODU2MDQzMzhEOUQyNTgxOTY1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6JOGQqfI48f5VNqRgDLk5P8su ajHXUDpslNmUhdxDZWi6JdEXD0xOVCJbYvwQioLeJ+7v/T7dBru15Bktr0E80zVS TTrnpgI5uqyWUXkTKKKUc/aI8qGYHclSEVRkW2YtKKplzdHyqmx2kNo36GfgN361 lg/d4nVTvDP3DDZjsQZIhfuVhgOAm2T88LNBkgPAlMopogZn5sWDM44yiknv435g VQGznS4ZntMKweieL3JvCodFCB1Hltei32VRi12tFJD56w3il35RfFHUJUrdeFHZ Ql36cc8pwvXskSuoC87a3fHclrD57IbEZJ7qdmGJkg+fxVJegQPg03rZpl8DAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAlGVzxddE8o4moVgQzjZ0lgZZWgwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4OTg1ZjU5LTBlZTYtNDIwOC05 YTkwLTI5YzEwODYwMGNmYy8wLzMxMzAzMzJlMzEzNzM3MmUzMTMwMzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnsWQwDQYJ KoZIhvcNAQELBQADggEBAEJcP3NTJH0/5wVK9MVJsKhNbwdVM3fdl14Kfu7kP2cP SCq06qNpNhlxjCmxbnypWAf73+SYkusPQi40Xj0HrnVo5UDibXJJK1rgOPDMvpVr djQLxFbLraoFxEJYdAb2EtyJiq+H7lYs399dcWib8tnilfMFd7JPU1TOPdVd3Y+M uCnIB03+uEvbZkPNSYWKQzNUfVDxzCu1IFQudq0HjkuvdNSRriTbCjLHrU782186 DYyq2rtB/kpw2Qw5wNKQZ3a3sNBle99897M8T9ySIDbQA+gAqeI1TC8z54/RPPCt BIe6OLch5QfQb8MUov8UYFuSEgBw4K/36w38Hn4f1Ls= -----END CERTIFICATE-----Generated at Sun Aug 24 08:08:27 2025 by rpki-client