$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa File: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (raw, json) Hash identifier: oyydVMYyKXkpYDIFM7y9X8uh6d+LkiuOE6srFgEvka0= Subject key identifier: 7E:B6:C0:F0:D9:C7:FC:D8:C9:D0:4A:52:F0:5A:77:D9:F3:AF:41:BA Certificate issuer: /CN=1678828C849BDE3472FE846308767F54ED7F8232 Certificate serial: 4B6FAA62DDDEC9854B0F5AB93B76468DA937E89F Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa Signing time: Tue 19 Aug 2025 08:00:00 +0000 ROA not before: Tue 19 Aug 2025 07:55:00 +0000 ROA not after: Tue 18 Aug 2026 08:00:00 +0000 asID: 139381 IP address blocks: 103.184.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6f:aa:62:dd:de:c9:85:4b:0f:5a:b9:3b:76:46:8d:a9:37:e8:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232 Validity Not Before: Aug 19 07:55:00 2025 GMT Not After : Aug 18 08:00:00 2026 GMT Subject: CN=7EB6C0F0D9C7FCD8C9D04A52F05A77D9F3AF41BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:f4:f7:7c:3f:88:30:f8:1e:08:18:6d:44: 1a:21:11:81:18:ab:97:3a:1d:1a:ef:c6:c2:89:1b: b9:26:b1:eb:6f:86:d9:dc:34:c4:7f:d1:2e:ca:90: aa:ab:f8:47:22:ec:fb:53:c4:a7:96:99:50:89:a6: 06:36:13:5b:09:d6:92:aa:a7:c5:31:b6:85:da:94: 89:d4:17:c9:30:08:35:95:c9:dc:33:bd:fe:ef:24: 28:04:54:aa:98:d1:70:38:61:4e:cd:c1:9f:0f:d9: fe:26:ec:6e:76:9e:9a:df:0f:ea:39:ba:28:ad:cd: c0:7b:7b:73:38:dc:99:56:52:4c:8b:4d:f8:90:51: 54:f2:2a:02:06:43:5c:51:47:45:e8:ab:d0:53:82: 6d:4e:14:47:b6:35:f4:27:d0:a7:b1:a2:54:1b:b5: 2c:74:b4:31:fb:75:6f:72:05:d1:f5:9f:e4:43:75: 35:06:6a:6c:ae:41:e6:b2:bf:d3:26:14:5f:96:ca: d0:fb:f1:29:fc:50:a0:5d:06:47:53:d0:fc:38:a6: 5c:16:c2:d9:9d:8e:9b:05:70:9a:81:2c:50:4d:aa: e1:d8:38:3f:9a:6f:a1:a4:2c:97:01:a5:e5:73:d5: 14:6b:db:36:6d:eb:ca:eb:fa:b3:5c:d3:a2:a5:76: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B6:C0:F0:D9:C7:FC:D8:C9:D0:4A:52:F0:5A:77:D9:F3:AF:41:BA X509v3 Authority Key Identifier: keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.180.0/24 Signature Algorithm: sha256WithRSAEncryption 48:98:95:f6:2b:9c:b6:26:8f:e0:f4:bf:2f:e6:2f:c1:c2:71: 0e:74:3f:1f:87:5d:e2:ef:fd:44:81:b6:86:5b:c4:18:b7:31: cd:7b:dd:04:47:30:86:46:2c:2f:f2:46:61:08:53:8b:e3:a5: 3b:40:63:bc:cf:33:c4:74:d9:03:7b:b0:f3:8b:07:85:8e:2d: 09:dd:89:98:e7:90:a6:2e:6d:e0:60:67:5c:0f:35:43:58:8a: 8d:df:fa:7e:f7:e0:d8:df:66:51:c6:ef:54:40:10:0e:b1:ab: 22:23:14:5d:b6:2b:26:ca:21:f0:41:83:00:1d:89:2c:93:c0: d3:da:5f:95:7a:1a:fb:f0:42:c6:71:1c:91:47:06:92:34:a8: c9:4c:87:2e:6d:91:24:5e:75:bb:47:79:ea:97:70:1c:1f:f6: f3:c3:37:1b:c5:b4:21:6a:6f:96:78:05:8c:c4:37:49:90:ad: fa:c8:37:84:a5:0b:27:ea:6c:05:4f:dc:3f:45:54:4f:7e:19: c9:7c:3c:25:49:34:d5:9f:1a:3a:df:a9:77:59:9c:93:98:9c: 2d:de:2d:f7:6b:4a:37:9e:f3:23:80:c9:30:ea:64:7d:d3:55: b9:bc:c7:83:7c:db:37:dd:4a:86:3c:2a:83:46:d2:09:4c:5f: 0c:49:4e:88 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUS2+qYt3eyYVLD1q5O3ZGjak36J8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF RDdGODIzMjAeFw0yNTA4MTkwNzU1MDBaFw0yNjA4MTgwODAwMDBaMDMxMTAvBgNV BAMTKDdFQjZDMEYwRDlDN0ZDRDhDOUQwNEE1MkYwNUE3N0Q5RjNBRjQxQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrvT3fD+IMPgeCBhtRBohEYEY q5c6HRrvxsKJG7kmsetvhtncNMR/0S7KkKqr+Eci7PtTxKeWmVCJpgY2E1sJ1pKq p8UxtoXalInUF8kwCDWVydwzvf7vJCgEVKqY0XA4YU7NwZ8P2f4m7G52nprfD+o5 uiitzcB7e3M43JlWUkyLTfiQUVTyKgIGQ1xRR0Xoq9BTgm1OFEe2NfQn0KexolQb tSx0tDH7dW9yBdH1n+RDdTUGamyuQeayv9MmFF+WytD78Sn8UKBdBkdT0Pw4plwW wtmdjpsFcJqBLFBNquHYOD+ab6GkLJcBpeVz1RRr2zZt68rr+rNc06KldvGtAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUfrbA8NnH/NjJ0EpS8Fp32fOvQbowHwYDVR0j BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0 OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG ODIzMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNTc5OTFhLTE1NmQtNGI1NS05 MGNiLTc5Yjg3NmNmNmE0YS8wLzMxMzAzMzJlMzEzODM0MmUzMTM4MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnuLQwDQYJ KoZIhvcNAQELBQADggEBAEiYlfYrnLYmj+D0vy/mL8HCcQ50Px+HXeLv/USBtoZb xBi3Mc173QRHMIZGLC/yRmEIU4vjpTtAY7zPM8R02QN7sPOLB4WOLQndiZjnkKYu beBgZ1wPNUNYio3f+n734NjfZlHG71RAEA6xqyIjFF22KybKIfBBgwAdiSyTwNPa X5V6GvvwQsZxHJFHBpI0qMlMhy5tkSRedbtHeeqXcBwf9vPDNxvFtCFqb5Z4BYzE N0mQrfrIN4SlCyfqbAVP3D9FVE9+Gcl8PCVJNNWfGjrfqXdZnJOYnC3eLfdrSjee 8yOAyTDqZH3TVbm8x4N82zfdSoY8KoNG0glMXwxJTog= -----END CERTIFICATE-----Generated at Sat Aug 23 21:17:23 2025 by rpki-client