$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa File: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (raw, json) Hash identifier: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0= Subject key identifier: 42:40:98:6F:B6:B8:A1:3B:56:88:AF:84:BF:AC:4B:5B:67:EA:08:0A Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 1D7FCF09FA5C6E36EB7906310D53E4EC4D2E1886 Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa Signing time: Fri 04 Jul 2025 18:00:02 +0000 ROA not before: Fri 04 Jul 2025 17:55:02 +0000 ROA not after: Fri 03 Jul 2026 18:00:02 +0000 asID: 149976 IP address blocks: 103.157.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7f:cf:09:fa:5c:6e:36:eb:79:06:31:0d:53:e4:ec:4d:2e:18:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Jul 4 17:55:02 2025 GMT Not After : Jul 3 18:00:02 2026 GMT Subject: CN=4240986FB6B8A13B5688AF84BFAC4B5B67EA080A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:10:a8:e4:26:ff:f8:93:b5:35:86:68:ad:40: c4:b0:49:91:45:6e:d2:d0:39:28:75:ec:21:3d:09: 73:76:64:50:06:e0:b4:b5:90:37:6b:e6:91:77:a6: 72:bc:10:88:2f:57:1c:9c:f7:7a:38:2a:7a:a6:f4: 45:58:1f:a1:30:22:32:ec:1e:1e:de:ad:9a:72:78: d1:7f:b9:58:70:c8:43:3a:b5:03:db:6b:a7:12:06: 27:c3:bf:09:80:9b:1e:59:5d:8d:0e:77:cd:a3:08: 7d:0c:3d:be:18:19:58:d1:f1:f9:fc:f9:19:fd:88: 08:28:0a:5c:8c:7a:91:f1:05:83:91:4d:51:71:ee: 1e:1d:b7:a9:06:43:12:a8:fc:f8:1b:be:df:4f:45: ec:b5:ae:92:b3:f4:c6:71:8b:4d:6c:c0:46:d1:35: e0:9f:99:c2:6e:0a:bc:85:32:eb:c8:3c:47:4a:76: 95:ec:a1:62:ad:b4:1f:af:33:27:c0:49:ef:ee:61: 6c:17:df:f5:16:5c:bf:39:03:4e:52:0e:b4:c3:fb: cb:2d:4c:fa:7c:22:b2:e0:60:c6:5f:14:d9:ac:6a: 9c:35:32:48:88:80:63:c8:4d:20:22:e6:3f:96:00: a0:6e:ab:6a:4c:92:93:d4:de:d1:b7:da:11:61:08: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:40:98:6F:B6:B8:A1:3B:56:88:AF:84:BF:AC:4B:5B:67:EA:08:0A X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.63.0/24 Signature Algorithm: sha256WithRSAEncryption 25:f8:fc:85:8e:1e:93:92:a2:b1:95:d2:6f:b8:0e:02:18:40: db:79:d5:38:2c:ac:5e:86:69:0f:d6:46:68:37:76:d0:68:47: a9:e6:83:72:6f:22:02:b0:56:c8:c6:cb:63:75:a2:4c:72:9b: 7a:f8:88:b0:18:fb:f4:d9:31:12:6e:99:d2:07:44:ff:80:fb: bc:53:cb:e2:96:20:c4:cb:a4:f9:91:54:bf:d4:94:86:8c:08: dd:75:de:70:15:06:5e:9b:b0:9d:a6:4e:4f:7a:df:f3:9f:ec: 61:6e:72:c0:17:d5:df:5d:e7:3a:bd:0e:58:1e:1e:0d:ca:0e: e9:40:89:d5:12:8a:31:0f:a2:2c:ba:df:1e:eb:52:a0:96:cd: 99:63:98:27:7a:5a:4c:8f:65:f0:6c:b5:81:92:57:66:70:05: cd:97:0b:4e:30:06:9b:df:3f:6a:37:a2:cc:d9:46:93:2c:7a: c5:d6:5b:ce:53:5b:96:3c:d4:7a:32:47:6a:7d:97:fd:11:11: f2:fd:9a:4a:d7:c8:94:e3:62:26:a4:d1:42:72:91:7e:b8:69: b1:73:5b:d5:b2:29:95:05:3a:e4:1c:a0:3b:6f:4b:c8:df:b3: 65:db:14:79:db:e3:dd:11:6b:12:f2:21:63:18:88:7b:1b:5a: c4:bb:f8:f1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHX/PCfpcbjbreQYxDVPk7E0uGIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTA3MDQxNzU1MDJaFw0yNjA3MDMxODAwMDJaMDMxMTAvBgNV BAMTKDQyNDA5ODZGQjZCOEExM0I1Njg4QUY4NEJGQUM0QjVCNjdFQTA4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmEKjkJv/4k7U1hmitQMSwSZFF btLQOSh17CE9CXN2ZFAG4LS1kDdr5pF3pnK8EIgvVxyc93o4Knqm9EVYH6EwIjLs Hh7erZpyeNF/uVhwyEM6tQPba6cSBifDvwmAmx5ZXY0Od82jCH0MPb4YGVjR8fn8 +Rn9iAgoClyMepHxBYORTVFx7h4dt6kGQxKo/Pgbvt9PRey1rpKz9MZxi01swEbR NeCfmcJuCryFMuvIPEdKdpXsoWKttB+vMyfASe/uYWwX3/UWXL85A05SDrTD+8st TPp8IrLgYMZfFNmsapw1MkiIgGPITSAi5j+WAKBuq2pMkpPU3tG32hFhCPl3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQkCYb7a4oTtWiK+Ev6xLW2fqCAowHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiZDMwNTg3LWE3Y2EtNDE5NS1h MzU5LTBjMGY2MjdhZjhkYS8wLzMxMzAzMzJlMzEzNTM3MmUzNjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ50/MA0GCSqG SIb3DQEBCwUAA4IBAQAl+PyFjh6TkqKxldJvuA4CGEDbedU4LKxehmkP1kZoN3bQ aEep5oNybyICsFbIxstjdaJMcpt6+IiwGPv02TESbpnSB0T/gPu8U8viliDEy6T5 kVS/1JSGjAjddd5wFQZem7Cdpk5Pet/zn+xhbnLAF9XfXec6vQ5YHh4Nyg7pQInV EooxD6Isut8e61Kgls2ZY5gnelpMj2XwbLWBkldmcAXNlwtOMAab3z9qN6LM2UaT LHrF1lvOU1uWPNR6MkdqfZf9ERHy/ZpK18iU42ImpNFCcpF+uGmxc1vVsimVBTrk HKA7b0vI37Nl2xR52+PdEWsS8iFjGIh7G1rEu/jx -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:29 2025 by rpki-client