$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa File: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (raw, json) Hash identifier: QK6CN8VP70JNYDKvwc0+OXdvb1mIgOWz+j/nYm9EjQI= Subject key identifier: 09:2F:B1:B2:FE:CB:3D:F8:16:15:CF:79:5C:64:E1:3A:05:9A:5C:80 Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 05ACBFE3D7D93AF570BAA175E2946B7E18E8A19B Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa Signing time: Thu 21 Aug 2025 11:02:26 +0000 ROA not before: Thu 21 Aug 2025 10:57:26 +0000 ROA not after: Thu 20 Aug 2026 11:02:26 +0000 asID: 141592 IP address blocks: 103.160.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:ac:bf:e3:d7:d9:3a:f5:70:ba:a1:75:e2:94:6b:7e:18:e8:a1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: Aug 21 10:57:26 2025 GMT Not After : Aug 20 11:02:26 2026 GMT Subject: CN=092FB1B2FECB3DF81615CF795C64E13A059A5C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:d2:bd:ea:06:44:a6:f4:76:51:ce:70:13: 2c:16:7e:b6:48:ef:8e:67:15:b7:b7:f2:79:79:48: 02:b3:37:55:8d:52:68:69:7e:9c:85:d2:0c:b5:41: fc:73:6a:44:d6:f0:c9:fb:93:a2:d0:18:ee:97:3a: 43:6f:75:b1:a4:c9:71:46:a3:b5:d0:f3:db:3d:26: 8c:73:01:05:9c:8e:39:80:b9:2d:29:2f:dd:a0:6c: c0:15:41:49:f1:9f:c0:03:cf:b8:7c:74:98:5d:cf: ac:71:dc:fa:97:b6:c5:c2:92:a1:9c:70:d7:40:c9: fb:11:a2:88:e3:af:8b:8a:34:ce:7b:cb:bb:5b:a3: b0:b7:f7:35:f2:0c:3e:a3:23:0c:45:ef:7c:c5:81: 84:8c:b1:40:0b:8c:4a:f6:a0:63:48:b2:f3:a8:a9: d5:eb:d5:81:9e:34:67:fd:a9:06:73:1e:b0:ed:a9: ff:e7:0d:ae:53:ca:bd:65:c9:02:9c:46:ad:60:f2: 74:63:24:a1:1d:c7:68:b2:92:5c:09:3f:27:e5:9b: bf:4f:17:87:38:d2:91:12:a6:b2:9a:90:be:e9:22: 68:d9:20:12:b0:34:df:3e:1a:46:f5:8f:e0:66:02: 55:21:50:fb:ae:06:89:5c:48:71:d2:7a:ae:0a:5c: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2F:B1:B2:FE:CB:3D:F8:16:15:CF:79:5C:64:E1:3A:05:9A:5C:80 X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.178.0/23 Signature Algorithm: sha256WithRSAEncryption 29:04:c0:b5:4a:15:a7:70:a4:c0:c6:7a:fc:2b:6e:79:79:c3: a8:35:08:96:7a:33:ac:80:12:50:55:df:33:19:13:4c:82:58: 5d:97:9c:82:30:0f:05:df:0f:0e:8f:ec:d8:00:4f:61:ec:bc: 97:55:d4:65:8c:62:8a:2e:a0:74:97:63:0c:7e:34:1e:18:4e: 53:46:8a:41:b1:09:d1:ac:4e:4b:6b:08:0a:9c:ac:ae:98:25: b0:c6:19:c9:ca:57:79:85:18:64:70:9b:25:f8:2d:14:60:1a: 2f:5e:2a:80:7d:74:95:b0:51:a1:dd:b3:85:d1:cf:f9:7e:13: 53:8e:32:d5:c9:ed:0e:b2:2d:07:a1:e3:56:86:ee:a9:3e:4a: 33:41:b1:f8:76:c7:f4:aa:8a:75:f2:af:eb:63:bf:25:37:b2: 47:54:4c:37:57:d9:66:c2:78:47:f0:38:4d:ed:b3:cb:61:8b: c0:80:03:68:35:ee:70:8b:f1:c8:ef:12:e3:0c:bc:6f:a4:0f: 7a:15:3a:39:55:38:0a:19:66:c9:e8:ea:20:30:6e:ba:d2:0b: 9a:57:c9:5f:66:c0:6a:10:16:a3:cd:4b:2a:8c:b1:12:23:04: e0:b9:60:52:db:05:88:83:b4:4a:71:53:df:aa:54:33:f0:36: ce:90:77:70 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBay/49fZOvVwuqF14pRrfhjooZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yNTA4MjExMDU3MjZaFw0yNjA4MjAxMTAyMjZaMDMxMTAvBgNV BAMTKDA5MkZCMUIyRkVDQjNERjgxNjE1Q0Y3OTVDNjRFMTNBMDU5QTVDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIdK96gZEpvR2Uc5wEywWfrZI 745nFbe38nl5SAKzN1WNUmhpfpyF0gy1QfxzakTW8Mn7k6LQGO6XOkNvdbGkyXFG o7XQ89s9JoxzAQWcjjmAuS0pL92gbMAVQUnxn8ADz7h8dJhdz6xx3PqXtsXCkqGc cNdAyfsRoojjr4uKNM57y7tbo7C39zXyDD6jIwxF73zFgYSMsUALjEr2oGNIsvOo qdXr1YGeNGf9qQZzHrDtqf/nDa5Tyr1lyQKcRq1g8nRjJKEdx2iyklwJPyflm79P F4c40pESprKakL7pImjZIBKwNN8+Gkb1j+BmAlUhUPuuBolcSHHSeq4KXJMhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUCS+xsv7LPfgWFc95XGThOgWaXIAwHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwYTgyMGI0LTgyZWYtNDQxMi1i ZTJlLTVkNjkxNGJkNDg0NC8wLzMxMzAzMzJlMzEzNjMwMmUzMTM3MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoLIwDQYJ KoZIhvcNAQELBQADggEBACkEwLVKFadwpMDGevwrbnl5w6g1CJZ6M6yAElBV3zMZ E0yCWF2XnIIwDwXfDw6P7NgAT2HsvJdV1GWMYoouoHSXYwx+NB4YTlNGikGxCdGs TktrCAqcrK6YJbDGGcnKV3mFGGRwmyX4LRRgGi9eKoB9dJWwUaHds4XRz/l+E1OO MtXJ7Q6yLQeh41aG7qk+SjNBsfh2x/SqinXyr+tjvyU3skdUTDdX2WbCeEfwOE3t s8thi8CAA2g17nCL8cjvEuMMvG+kD3oVOjlVOAoZZsno6iAwbrrSC5pXyV9mwGoQ FqPNSyqMsRIjBOC5YFLbBYiDtEpxU9+qVDPwNs6Qd3A= -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:51 2025 by rpki-client