$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa File: 3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (raw, json) Hash identifier: vMUSQ2h0yM8CNBMFULwiVWwmyMjPH1qg6y43JB4Vwvw= Subject key identifier: 8F:80:0E:75:53:A1:A3:9D:DC:A1:D8:95:AB:EC:EA:3C:B2:EA:56:C5 Certificate issuer: /CN=EBA04070CA27E646C332039E07557734C6732ED2 Certificate serial: 41788ABBC293BBDFE0106D9232BA2E0D357AD13B Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa Signing time: Sun 24 Aug 2025 02:00:01 +0000 ROA not before: Sun 24 Aug 2025 01:55:01 +0000 ROA not after: Sun 23 Aug 2026 02:00:01 +0000 asID: 141461 IP address blocks: 103.111.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 08:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:78:8a:bb:c2:93:bb:df:e0:10:6d:92:32:ba:2e:0d:35:7a:d1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2 Validity Not Before: Aug 24 01:55:01 2025 GMT Not After : Aug 23 02:00:01 2026 GMT Subject: CN=8F800E7553A1A39DDCA1D895ABECEA3CB2EA56C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a4:7d:92:b2:1b:d7:b3:90:a5:96:32:2d:76: cf:1c:0e:51:fa:8a:cc:44:d0:b8:0c:0d:fe:e8:ca: 5c:3d:e7:1a:c5:26:a9:0b:0f:01:ba:c4:9b:fd:fc: d4:40:a9:b7:5f:b5:33:df:7a:d2:34:31:55:9b:21: d2:65:39:23:c0:5a:1c:b3:f0:de:26:ff:c4:ff:aa: 62:cf:96:f8:fd:5b:99:5f:ba:3b:41:ed:40:ad:51: 82:c4:9e:62:ce:1e:10:29:bc:25:ad:5f:b1:1f:e2: d8:05:ed:3d:d8:f9:06:af:94:6a:20:b7:f7:01:45: 26:ff:a8:25:04:15:14:05:e8:51:66:1c:47:33:53: 6a:c1:09:ce:7e:7e:37:24:c7:d7:04:18:d8:e8:b7: db:da:a6:19:dc:63:e3:6e:f9:2f:1d:03:f6:52:c5: f4:30:4f:80:90:6c:22:0b:f9:2a:b1:4b:03:90:37: 88:6d:19:e2:b3:71:f1:2a:77:7a:61:a3:53:a0:fb: bd:5c:d7:73:e8:d2:44:da:90:eb:64:19:0f:81:b8: e6:cf:41:a0:40:b1:9c:f9:b0:dd:99:b5:95:02:82: 53:2d:cd:d1:63:3b:b4:ad:94:e7:c3:9f:99:06:ca: b4:60:24:23:50:72:b4:f7:ee:96:c8:b9:d3:c0:ae: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:0E:75:53:A1:A3:9D:DC:A1:D8:95:AB:EC:EA:3C:B2:EA:56:C5 X509v3 Authority Key Identifier: keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.143.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:eb:15:ad:e0:9c:c1:ad:97:b6:c9:16:1f:0a:96:b0:d7:1b: 40:f1:3f:fe:91:2a:4a:88:23:f3:88:fa:d3:57:fc:fa:5e:e9: 68:28:42:08:7e:f5:9f:f3:6f:48:d3:ea:8f:d9:8d:a9:ab:0d: 50:f9:67:e2:d7:40:31:c8:4c:99:3c:45:c6:e8:97:29:72:6f: de:f2:11:97:17:fd:b6:04:8c:04:49:3c:ed:09:72:5c:f6:99: aa:10:2e:8d:60:11:80:24:90:fd:bd:1f:0c:be:e7:3f:64:be: 84:31:b7:33:ad:8f:ad:e9:e0:09:18:c4:74:5c:04:2c:12:1a: 2b:ce:e4:6a:7d:7e:2b:b3:ae:99:8c:2b:1a:54:b3:c1:50:29: e7:c6:e8:d7:73:52:ba:fb:3a:33:66:48:fe:77:ba:c6:c5:c0: a0:43:28:e5:b8:6b:1a:d6:21:c2:1f:40:1b:9a:f4:08:f9:96: 27:2f:48:52:a3:bd:1c:f0:da:7b:f4:7d:32:f5:b7:92:4c:70: 35:01:7d:2c:08:d3:c9:da:06:5f:37:29:81:8c:65:52:d5:8e: 36:bf:46:22:a8:93:fe:62:6f:38:a3:3a:aa:72:a6:3e:e4:8e: bd:c3:82:fd:2b:74:02:d1:9a:c3:9c:56:5d:ad:e8:76:f7:7c: 06:18:22:c2 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQXiKu8KTu9/gEG2SMrouDTV60TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRD NjczMkVEMjAeFw0yNTA4MjQwMTU1MDFaFw0yNjA4MjMwMjAwMDFaMDMxMTAvBgNV BAMTKDhGODAwRTc1NTNBMUEzOUREQ0ExRDg5NUFCRUNFQTNDQjJFQTU2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pH2SshvXs5ClljItds8cDlH6 isxE0LgMDf7oylw95xrFJqkLDwG6xJv9/NRAqbdftTPfetI0MVWbIdJlOSPAWhyz 8N4m/8T/qmLPlvj9W5lfujtB7UCtUYLEnmLOHhApvCWtX7Ef4tgF7T3Y+QavlGog t/cBRSb/qCUEFRQF6FFmHEczU2rBCc5+fjckx9cEGNjot9vaphncY+Nu+S8dA/ZS xfQwT4CQbCIL+SqxSwOQN4htGeKzcfEqd3pho1Og+71c13Po0kTakOtkGQ+BuObP QaBAsZz5sN2ZtZUCglMtzdFjO7StlOfDn5kGyrRgJCNQcrT37pbIudPArtcZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUj4AOdVOho53codiVq+zqPLLqVsUwHwYDVR0j BBgwFoAU66BAcMon5kbDMgOeB1V3NMZzLtIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMC9FQkEwNDA3MENB MjdFNjQ2QzMzMjAzOUUwNzU1NzczNEM2NzMyRUQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUJBMDQwNzBDQTI3RTY0NkMzMzIwMzlFMDc1NTc3MzRDNjcz MkVEMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMjdlYWZkLWE2NzQtNDQzNy1h YmYxLWU1NTBkZWMxMzdmYS8wLzMxMzAzMzJlMzEzMTMxMmUzMTM0MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNDM2MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb48wDQYJ KoZIhvcNAQELBQADggEBAA7rFa3gnMGtl7bJFh8KlrDXG0DxP/6RKkqII/OI+tNX /Ppe6WgoQgh+9Z/zb0jT6o/ZjamrDVD5Z+LXQDHITJk8Rcbolylyb97yEZcX/bYE jARJPO0Jclz2maoQLo1gEYAkkP29Hwy+5z9kvoQxtzOtj63p4AkYxHRcBCwSGivO 5Gp9fiuzrpmMKxpUs8FQKefG6NdzUrr7OjNmSP53usbFwKBDKOW4axrWIcIfQBua 9Aj5licvSFKjvRzw2nv0fTL1t5JMcDUBfSwI08naBl83KYGMZVLVjja/RiKok/5i bzijOqpypj7kjr3Dgv0rdALRmsOcVl2t6Hb3fAYYIsI= -----END CERTIFICATE-----Generated at Sun Aug 24 09:02:57 2025 by rpki-client