$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa File: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (raw, json) Hash identifier: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0= Subject key identifier: 9B:78:8A:39:70:88:C5:87:7B:03:6E:85:2C:B3:BD:12:53:D3:75:60 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 6AB7B44CCAF3BFD0B4662CBC62197CD8D3D99302 Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa Signing time: Tue 19 Aug 2025 12:02:30 +0000 ROA not before: Tue 19 Aug 2025 11:57:30 +0000 ROA not after: Tue 18 Aug 2026 12:02:30 +0000 asID: 150234 IP address blocks: 103.19.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b7:b4:4c:ca:f3:bf:d0:b4:66:2c:bc:62:19:7c:d8:d3:d9:93:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Aug 19 11:57:30 2025 GMT Not After : Aug 18 12:02:30 2026 GMT Subject: CN=9B788A397088C5877B036E852CB3BD1253D37560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:dd:52:2d:55:da:59:2b:c7:01:63:7b:b4: 37:be:68:36:ab:41:0f:52:f5:62:2e:5a:11:68:75: 4b:87:22:ff:05:95:7f:45:3f:42:5f:e9:d6:87:b3: 3b:c1:73:96:cd:d4:b8:74:fa:7d:87:94:9b:ff:d7: 91:d4:21:d3:e9:d9:8f:ee:51:99:8a:a2:9a:db:4c: 2f:bc:9e:7f:8f:94:0f:4d:73:c7:52:de:a0:cd:32: b8:57:44:38:85:91:f9:ba:2f:d3:26:fe:87:d4:3a: f9:7b:53:5a:28:6b:64:f9:a2:24:dd:78:ef:e7:3c: ee:2f:3a:37:b3:0c:93:8c:d1:0d:e6:ad:c0:a1:54: 79:6b:e1:e7:f7:0a:ff:9b:e0:da:2d:e4:fa:5a:8c: 37:7b:d4:13:b0:a4:eb:f5:d0:7c:5f:4f:a5:c3:20: b3:0b:37:72:73:d1:e4:09:55:96:bf:17:13:93:94: 1e:cd:57:e4:3b:0b:81:e6:ef:95:a3:55:42:64:4f: dd:38:a2:be:c7:a2:c2:10:2e:18:65:d1:71:00:9e: c7:ae:b5:a7:22:7a:61:2a:60:c9:6b:98:98:b4:7b: 98:39:d2:28:28:57:83:27:2a:55:06:d8:c4:a2:d0: 13:8b:81:60:d9:95:68:cc:b0:c0:ce:76:7a:83:9d: bb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:8A:39:70:88:C5:87:7B:03:6E:85:2C:B3:BD:12:53:D3:75:60 X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.157.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:bc:8b:4d:07:0c:49:cb:3e:6f:43:e3:b5:ab:22:5f:ec:ca: 03:04:a4:e9:e5:2f:a3:cb:cd:92:11:02:e1:e8:17:58:69:35: df:44:5a:1b:4b:bd:69:a2:18:14:ec:e5:56:7c:ec:3c:d3:99: a6:67:10:e5:df:49:f3:8a:0f:e9:fc:5e:8e:2c:f1:d0:97:fb: 58:7f:3c:0d:ab:cf:a1:4d:72:7b:f6:4a:48:48:79:a4:2f:f7: 4d:49:63:f9:81:82:6b:d4:37:47:70:8d:41:df:c2:c9:1c:d1: c2:3a:42:71:a9:e9:ba:10:16:55:8a:ed:83:a1:e1:2f:c8:aa: 7d:31:8d:d2:5b:53:c0:79:7c:b5:3c:23:19:af:fd:07:1b:e1: e3:d1:12:9f:2b:ca:89:3e:83:31:79:5d:71:58:5b:cf:6d:34: ad:78:54:c3:b6:2f:b0:87:3c:e2:60:4a:39:e9:af:d7:2e:68: 26:ea:00:fa:0a:14:70:a6:e9:fc:16:9e:17:fc:dd:ac:61:f8: 10:f3:a5:33:26:cb:a7:7f:c7:a7:6a:68:4f:72:77:64:3c:1c: 18:99:8f:28:5a:02:59:91:9d:ce:bd:e3:4f:5e:26:7b:36:1b: 66:24:c3:58:ca:2f:22:cc:2f:a2:16:85:fc:38:08:39:a8:cc: 32:ba:87:bb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUare0TMrzv9C0Ziy8Yhl82NPZkwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yNTA4MTkxMTU3MzBaFw0yNjA4MTgxMjAyMzBaMDMxMTAvBgNV BAMTKDlCNzg4QTM5NzA4OEM1ODc3QjAzNkU4NTJDQjNCRDEyNTNEMzc1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg91SLVXaWSvHAWN7tDe+aDar QQ9S9WIuWhFodUuHIv8FlX9FP0Jf6daHszvBc5bN1Lh0+n2HlJv/15HUIdPp2Y/u UZmKoprbTC+8nn+PlA9Nc8dS3qDNMrhXRDiFkfm6L9Mm/ofUOvl7U1ooa2T5oiTd eO/nPO4vOjezDJOM0Q3mrcChVHlr4ef3Cv+b4Not5PpajDd71BOwpOv10HxfT6XD ILMLN3Jz0eQJVZa/FxOTlB7NV+Q7C4Hm75WjVUJkT904or7HosIQLhhl0XEAnseu taciemEqYMlrmJi0e5g50igoV4MnKlUG2MSi0BOLgWDZlWjMsMDOdnqDnbv1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUm3iKOXCIxYd7A26FLLO9ElPTdWAwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxNDQyNTJiLWQzMGUtNGJkYy04 MzJmLWIzOGIwNWM3YTAzNS8wLzMxMzAzMzJlMzEzOTJlMzEzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxOdMA0GCSqG SIb3DQEBCwUAA4IBAQAcvItNBwxJyz5vQ+O1qyJf7MoDBKTp5S+jy82SEQLh6BdY aTXfRFobS71pohgU7OVWfOw805mmZxDl30nzig/p/F6OLPHQl/tYfzwNq8+hTXJ7 9kpISHmkL/dNSWP5gYJr1DdHcI1B38LJHNHCOkJxqem6EBZViu2DoeEvyKp9MY3S W1PAeXy1PCMZr/0HG+Hj0RKfK8qJPoMxeV1xWFvPbTSteFTDti+whzziYEo56a/X Lmgm6gD6ChRwpun8Fp4X/N2sYfgQ86UzJsunf8enamhPcndkPBwYmY8oWgJZkZ3O veNPXiZ7NhtmJMNYyi8izC+iFoX8OAg5qMwyuoe7 -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:21 2025 by rpki-client