$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa File: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (raw, json) Hash identifier: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg= Subject key identifier: F1:FC:42:AE:7A:CB:74:3B:BB:8B:B0:D6:2D:D7:59:53:B2:A3:CE:3B Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 391DBD7D8FF6DF8C3A69F4B1880AE7E10B0345B5 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa Signing time: Thu 21 Aug 2025 04:01:08 +0000 ROA not before: Thu 21 Aug 2025 03:56:08 +0000 ROA not after: Thu 20 Aug 2026 04:01:08 +0000 asID: 142308 IP address blocks: 103.167.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:1d:bd:7d:8f:f6:df:8c:3a:69:f4:b1:88:0a:e7:e1:0b:03:45:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Aug 21 03:56:08 2025 GMT Not After : Aug 20 04:01:08 2026 GMT Subject: CN=F1FC42AE7ACB743BBB8BB0D62DD75953B2A3CE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:9b:8a:6a:64:69:81:17:54:d6:2f:0b:c3: c8:ce:9a:52:ba:48:c2:57:98:bc:ac:bd:72:a0:bc: ee:4b:78:fc:65:db:24:c3:10:01:89:72:c0:08:5a: 94:c2:63:7d:eb:e8:f4:fc:85:a7:b5:07:2f:2c:9f: cc:3b:d2:b4:ab:69:97:6e:1f:92:c0:cb:66:73:1f: 43:40:09:4d:3c:61:46:59:7d:b3:a8:26:cd:e7:8f: 20:29:24:4c:76:84:04:79:14:30:0c:14:f5:ef:91: 68:15:7d:ab:87:3b:eb:48:e0:97:c2:2f:a6:78:32: 26:ac:90:f3:76:6a:a0:62:76:82:a2:76:b0:6d:11: f5:6f:15:5c:04:4c:30:56:af:30:e0:3a:88:9a:e6: a3:15:1d:5b:a5:ec:dc:3a:a8:39:cc:8c:e8:96:68: 59:93:b6:bd:4b:55:ec:86:40:85:f1:4c:93:e7:0d: 76:d0:ab:04:e5:83:5e:1f:af:4d:7a:2a:27:7d:f5: 51:43:14:d8:b8:65:6f:b0:2a:b5:4f:11:90:f1:4d: 61:f9:b6:aa:30:74:26:5b:32:4d:16:7d:6d:34:ce: 14:37:e9:02:04:cc:aa:a1:22:e7:3b:aa:33:70:f0: b3:53:e4:b2:a4:9c:d0:63:3e:15:a5:da:57:5c:cb: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FC:42:AE:7A:CB:74:3B:BB:8B:B0:D6:2D:D7:59:53:B2:A3:CE:3B X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.236.0/24 Signature Algorithm: sha256WithRSAEncryption c6:50:ca:35:d5:5e:c0:a1:f7:a8:f6:42:8a:ba:75:ca:0e:12: 09:43:8b:16:9e:41:89:78:c8:b7:ff:d7:a2:54:da:28:78:22: 5e:e6:56:97:43:de:5f:76:a3:5b:99:24:35:6e:70:56:e2:0f: 2d:e0:42:4b:1a:39:81:f6:78:50:06:71:71:ab:60:36:1e:1d: 55:d3:f7:06:86:e5:98:e0:7f:42:8d:d3:e4:0f:2f:a7:5d:36: 89:7c:5e:28:13:a6:0e:dc:a9:0a:ac:f4:08:61:d1:1a:9f:18: 87:6a:88:45:f3:f4:aa:1a:85:2d:de:00:80:3f:b2:43:72:ba: 9d:a1:3d:ff:0c:a1:a8:cf:3e:a4:44:9e:1e:ac:20:86:b1:22: 25:6b:82:fb:07:e0:eb:6e:18:8b:1b:66:74:14:47:7f:ed:02: c9:52:52:d9:1a:44:97:f7:12:d4:03:78:66:74:09:ec:a7:04: 75:61:99:13:dc:56:8b:55:37:ae:29:c5:fd:aa:57:76:7a:9e: 43:06:a5:42:09:00:af:37:57:bb:98:9d:99:43:da:ca:8f:15: af:59:fa:ff:f4:7a:c7:1f:55:7b:b8:34:26:68:d9:23:5c:f7: 3d:57:89:f5:51:88:29:63:01:75:ec:26:38:4a:de:da:2c:bf: 33:7f:86:c8 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUOR29fY/234w6afSxiArn4QsDRbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTA4MjEwMzU2MDhaFw0yNjA4MjAwNDAxMDhaMDMxMTAvBgNV BAMTKEYxRkM0MkFFN0FDQjc0M0JCQjhCQjBENjJERDc1OTUzQjJBM0NFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqu5uKamRpgRdU1i8Lw8jOmlK6 SMJXmLysvXKgvO5LePxl2yTDEAGJcsAIWpTCY33r6PT8hae1By8sn8w70rSraZdu H5LAy2ZzH0NACU08YUZZfbOoJs3njyApJEx2hAR5FDAMFPXvkWgVfauHO+tI4JfC L6Z4MiaskPN2aqBidoKidrBtEfVvFVwETDBWrzDgOoia5qMVHVul7Nw6qDnMjOiW aFmTtr1LVeyGQIXxTJPnDXbQqwTlg14fr016Kid99VFDFNi4ZW+wKrVPEZDxTWH5 tqowdCZbMk0WfW00zhQ36QIEzKqhIuc7qjNw8LNT5LKknNBjPhWl2ldcy9KNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU8fxCrnrLdDu7i7DWLddZU7KjzjswHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlY2ZkM2Y1LTg1ZGEtNDhhNy1i NTAyLWY2MWE1OTc5NmMzMy8wLzMxMzAzMzJlMzEzNjM3MmUzMjMzMzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzMwMzgucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp+wwDQYJ KoZIhvcNAQELBQADggEBAMZQyjXVXsCh96j2Qoq6dcoOEglDixaeQYl4yLf/16JU 2ih4Il7mVpdD3l92o1uZJDVucFbiDy3gQksaOYH2eFAGcXGrYDYeHVXT9waG5Zjg f0KN0+QPL6ddNol8XigTpg7cqQqs9Ahh0RqfGIdqiEXz9KoahS3eAIA/skNyup2h Pf8MoajPPqREnh6sIIaxIiVrgvsH4OtuGIsbZnQUR3/tAslSUtkaRJf3EtQDeGZ0 CeynBHVhmRPcVotVN64pxf2qV3Z6nkMGpUIJAK83V7uYnZlD2sqPFa9Z+v/0escf VXu4NCZo2SNc9z1XifVRiCljAXXsJjhK3tosvzN/hsg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:29 2025 by rpki-client