$ rpki-client -vvf repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa File: 3130332e3232342e36372e302f32342d3234203d3e203539313538.roa (raw, json) Hash identifier: 63tfpqlJCEzr1F8+1HAkrMYkUUC5brVRNqbAmx9Yovs= Subject key identifier: 4A:59:A7:B1:D2:54:CE:AB:35:B6:F3:CE:AF:71:0A:46:CD:6B:FA:65 Certificate issuer: /CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC Certificate serial: 323034FE27400A5D303ACFF6EF13E2AADB4E3DCB Authority key identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa Signing time: Tue 12 Aug 2025 18:02:56 +0000 ROA not before: Tue 12 Aug 2025 17:57:56 +0000 ROA not after: Tue 11 Aug 2026 18:02:56 +0000 asID: 59158 IP address blocks: 103.224.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 22:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:30:34:fe:27:40:0a:5d:30:3a:cf:f6:ef:13:e2:aa:db:4e:3d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC Validity Not Before: Aug 12 17:57:56 2025 GMT Not After : Aug 11 18:02:56 2026 GMT Subject: CN=4A59A7B1D254CEAB35B6F3CEAF710A46CD6BFA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:07:03:cb:e0:50:56:22:70:08:fa:8c:a3: 8b:22:52:71:36:69:b4:fa:0e:e3:3b:40:5c:85:9f: dd:6a:24:90:98:a3:dd:01:e3:0d:91:ec:2a:bc:ed: 32:7a:e8:14:a1:5b:f2:10:e5:77:ef:98:26:3c:0f: 59:67:30:2a:3b:f8:7d:bc:04:72:7c:d1:cf:d0:27: 51:67:f7:0f:fe:30:89:45:88:f2:e4:68:46:20:48: ae:07:74:7c:65:10:c7:5a:16:a7:99:16:02:80:0c: 6b:5d:fe:0e:f3:8e:df:b6:99:15:86:4d:42:25:a2: 5b:fe:ad:59:e6:72:39:c3:f7:88:5b:19:99:3e:c4: f0:36:6c:01:fa:75:56:64:04:99:ad:25:bb:e2:45: dd:dc:97:6b:8d:38:3a:fc:7d:46:d8:d3:21:be:f9: 9e:85:67:fe:e5:e7:54:b2:4c:ae:b2:0d:07:e5:84: bf:eb:f7:d9:c3:c7:af:c5:40:86:c8:dd:a7:f6:f2: c9:00:a4:17:f0:c5:a8:58:c9:e5:21:b8:00:41:b2: 3d:cd:52:d0:1a:e7:74:2a:1a:fe:69:67:ce:df:c4: 90:68:d7:88:69:1f:7a:67:ad:ca:5e:d1:16:c6:9c: 9f:38:3e:08:a5:d5:01:2b:cc:57:4e:bd:a8:0e:bf: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:59:A7:B1:D2:54:CE:AB:35:B6:F3:CE:AF:71:0A:46:CD:6B:FA:65 X509v3 Authority Key Identifier: keyid:B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/3130332e3232342e36372e302f32342d3234203d3e203539313538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.67.0/24 Signature Algorithm: sha256WithRSAEncryption c8:e7:3c:9c:21:0e:db:b8:52:6f:da:43:f2:eb:bf:b2:51:e4: 5f:cd:15:05:7c:92:98:a1:2d:32:e4:69:bb:e2:da:3f:f7:83: 09:0b:fb:36:60:5c:06:05:2e:76:48:1f:62:95:57:08:4c:4c: 9d:f2:fd:a1:d0:62:4e:95:63:c3:f5:e1:39:ed:2d:7e:39:63: ab:bd:a8:fc:e4:74:2a:cf:76:63:2a:60:26:a7:f0:61:68:be: f3:77:e8:11:58:ec:49:eb:df:d5:e3:5e:2c:35:25:28:28:91: 3f:1d:e7:90:05:45:68:e6:18:5e:da:ee:d6:0e:ca:c9:6f:4b: b0:15:a0:73:46:e2:3c:70:b2:94:54:3f:5b:fa:aa:5e:76:6d: 93:26:65:cb:80:d2:2f:c7:48:f6:30:59:e3:e0:8a:2d:ad:29: dd:22:3c:1e:d8:db:1a:7a:8e:cd:09:30:a0:b6:e1:f8:59:5b: b7:88:82:54:2a:42:88:cb:66:96:a2:db:dc:8f:e5:de:4c:7d: 43:1b:df:07:87:7f:39:98:e6:db:f7:9a:82:86:5f:8b:c4:70: e0:d2:91:59:7a:66:3e:38:9d:48:6f:f5:67:47:9d:97:13:59: 81:b2:0d:9d:5b:5a:d6:ca:b9:78:7b:ef:95:14:40:2f:e4:aa: b5:5d:38:03 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMjA0/idACl0wOs/27xPiqttOPcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2RjFB MjM1REFCQzAeFw0yNTA4MTIxNzU3NTZaFw0yNjA4MTExODAyNTZaMDMxMTAvBgNV BAMTKDRBNTlBN0IxRDI1NENFQUIzNUI2RjNDRUFGNzEwQTQ2Q0Q2QkZBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UwcDy+BQViJwCPqMo4siUnE2 abT6DuM7QFyFn91qJJCYo90B4w2R7Cq87TJ66BShW/IQ5XfvmCY8D1lnMCo7+H28 BHJ80c/QJ1Fn9w/+MIlFiPLkaEYgSK4HdHxlEMdaFqeZFgKADGtd/g7zjt+2mRWG TUIlolv+rVnmcjnD94hbGZk+xPA2bAH6dVZkBJmtJbviRd3cl2uNODr8fUbY0yG+ +Z6FZ/7l51SyTK6yDQflhL/r99nDx6/FQIbI3af28skApBfwxahYyeUhuABBsj3N UtAa53QqGv5pZ87fxJBo14hpH3pnrcpe0RbGnJ84Pgil1QErzFdOvagOv9P7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSlmnsdJUzqs1tvPOr3EKRs1r+mUwHwYDVR0j BBgwFoAUtvKfdw9bMLX3tzj0UkUG8aI12rwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YThkNTRhZS04NzBkLTQzNDgtYWI1OC0zMDA5MGE3NjBhMzYvMC9CNkYyOUY3NzBG NUIzMEI1RjdCNzM4RjQ1MjQ1MDZGMUEyMzVEQUJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMjlGNzcwRjVCMzBCNUY3QjczOEY0NTI0NTA2RjFBMjM1 REFCQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRhOGQ1NGFlLTg3MGQtNDM0OC1h YjU4LTMwMDkwYTc2MGEzNi8wLzMxMzAzMzJlMzIzMjM0MmUzNjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzOTMxMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfgQzANBgkqhkiG 9w0BAQsFAAOCAQEAyOc8nCEO27hSb9pD8uu/slHkX80VBXySmKEtMuRpu+LaP/eD CQv7NmBcBgUudkgfYpVXCExMnfL9odBiTpVjw/XhOe0tfjljq72o/OR0Ks92Yypg JqfwYWi+83foEVjsSevf1eNeLDUlKCiRPx3nkAVFaOYYXtru1g7KyW9LsBWgc0bi PHCylFQ/W/qqXnZtkyZly4DSL8dI9jBZ4+CKLa0p3SI8HtjbGnqOzQkwoLbh+Flb t4iCVCpCiMtmlqLb3I/l3kx9QxvfB4d/OZjm2/eagoZfi8Rw4NKRWXpmPjidSG/1 Z0edlxNZgbINnVta1sq5eHvvlRRAL+SqtV04Aw== -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:52 2025 by rpki-client