$ rpki-client -vvf repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa File: 3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa (raw, json) Hash identifier: 8ucdhC8+G/GM9sLgWMqJbTh8/P5IkKccW0COx5GovCw= Subject key identifier: DC:F2:7A:9A:7B:C2:B0:3F:B3:AC:4B:B2:7E:0C:EC:3B:4A:8C:92:5A Certificate issuer: /CN=50D9825940B483F044841C179E5B7712607CAB2A Certificate serial: 7643A08182936FE44FB4314D4D6A6A40E192CA85 Authority key identifier: 50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa Signing time: Fri 08 Aug 2025 16:02:04 +0000 ROA not before: Fri 08 Aug 2025 15:57:04 +0000 ROA not after: Fri 07 Aug 2026 16:02:04 +0000 asID: 141112 IP address blocks: 103.157.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:43:a0:81:82:93:6f:e4:4f:b4:31:4d:4d:6a:6a:40:e1:92:ca:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50D9825940B483F044841C179E5B7712607CAB2A Validity Not Before: Aug 8 15:57:04 2025 GMT Not After : Aug 7 16:02:04 2026 GMT Subject: CN=DCF27A9A7BC2B03FB3AC4BB27E0CEC3B4A8C925A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b3:55:90:b7:d4:d0:41:80:bf:85:98:c1:bf: 14:78:63:9f:73:be:11:0c:73:58:22:ae:19:a7:b5: b6:ec:f3:d7:e8:7a:2f:d1:fc:b2:d9:67:22:f3:70: f2:ba:b4:4b:91:91:53:53:62:2b:e9:4f:3e:15:e3: 8f:58:f5:b9:0a:bd:2e:2e:40:2c:16:0a:3b:fc:4a: 07:5c:10:aa:2e:b7:4f:67:79:9e:9f:61:60:24:12: 8e:41:7e:d5:70:8b:04:8a:09:25:37:45:af:62:da: a3:a2:9c:fb:ad:46:8b:cd:e3:9d:91:14:e8:c3:3c: b3:ca:d2:fd:3d:34:d1:e9:56:d3:81:8e:a3:5e:ee: 23:94:3c:53:5a:13:ff:02:f6:54:77:1e:d8:65:6f: f1:72:f0:43:aa:df:cc:75:93:b0:a8:9d:cf:f8:f3: 09:33:4e:ea:3f:ba:1a:d8:f5:91:9a:26:b0:f6:3a: 21:8d:48:b6:e3:1f:09:af:d0:7d:25:71:e4:97:0c: db:02:ee:48:d8:24:50:bc:f8:0c:fc:cd:f3:4c:00: a3:1d:90:6b:d9:93:cf:77:52:21:67:77:d5:39:c7: 72:11:b4:ca:51:52:48:6d:99:78:7c:65:6b:6d:b8: d0:0a:a5:36:03:13:9b:24:10:b4:7b:73:96:81:73: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F2:7A:9A:7B:C2:B0:3F:B3:AC:4B:B2:7E:0C:EC:3B:4A:8C:92:5A X509v3 Authority Key Identifier: keyid:50:D9:82:59:40:B4:83:F0:44:84:1C:17:9E:5B:77:12:60:7C:AB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/50D9825940B483F044841C179E5B7712607CAB2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50D9825940B483F044841C179E5B7712607CAB2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d46a564-6347-40ef-bad3-4daae306d421/0/3130332e3135372e37362e302f32332d3234203d3e20313431313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.76.0/23 Signature Algorithm: sha256WithRSAEncryption 71:a6:bf:0b:64:fb:87:6f:14:56:c3:b3:a3:26:59:ef:86:f8: 7a:38:69:a0:1f:88:9c:80:2b:0b:da:57:63:5e:2e:60:f5:65: cb:30:3a:b7:11:9b:18:e5:ef:67:e1:1d:74:95:96:8c:c5:1b: 82:2b:e1:e8:0d:f4:0c:1d:72:84:ca:d4:ea:9c:87:1b:b2:f8: be:e9:b2:a9:e2:06:9e:39:dc:54:10:74:9f:0f:19:f9:e2:2b: 5e:c9:1b:af:a1:f5:28:9b:48:fc:7b:9d:f2:d4:d2:02:9f:6b: 3e:ca:66:c4:4b:53:9f:65:c9:06:16:62:1e:4d:0c:1f:16:ae: b3:7f:08:23:ac:79:b1:e3:63:b8:0f:19:f6:1e:17:ec:6c:8c: 45:38:43:48:e5:bf:56:68:1b:95:33:49:61:18:52:2e:5c:38: 24:c1:85:7b:1d:91:8c:53:f2:5a:17:81:8f:0d:f6:e8:18:cb: cd:8a:bc:97:39:45:f0:57:a7:83:4c:2a:68:bd:9c:c6:16:d9: 38:b1:e3:54:c8:f3:3e:6a:50:77:5f:f0:1a:71:53:1d:9e:54: 09:0f:6f:73:f5:5c:c2:a7:dd:fb:8b:56:66:4a:55:df:ea:46: bc:6f:ac:55:e1:71:70:b2:28:81:98:f0:a7:5f:33:4e:cb:95: f2:73:ab:2a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdkOggYKTb+RPtDFNTWpqQOGSyoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2 MDdDQUIyQTAeFw0yNTA4MDgxNTU3MDRaFw0yNjA4MDcxNjAyMDRaMDMxMTAvBgNV BAMTKERDRjI3QTlBN0JDMkIwM0ZCM0FDNEJCMjdFMENFQzNCNEE4QzkyNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDds1WQt9TQQYC/hZjBvxR4Y59z vhEMc1girhmntbbs89foei/R/LLZZyLzcPK6tEuRkVNTYivpTz4V449Y9bkKvS4u QCwWCjv8SgdcEKout09neZ6fYWAkEo5BftVwiwSKCSU3Ra9i2qOinPutRovN452R FOjDPLPK0v09NNHpVtOBjqNe7iOUPFNaE/8C9lR3Hthlb/Fy8EOq38x1k7Conc/4 8wkzTuo/uhrY9ZGaJrD2OiGNSLbjHwmv0H0lceSXDNsC7kjYJFC8+Az8zfNMAKMd kGvZk893UiFnd9U5x3IRtMpRUkhtmXh8ZWttuNAKpTYDE5skELR7c5aBc11ZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3PJ6mnvCsD+zrEuyfgzsO0qMklowHwYDVR0j BBgwFoAUUNmCWUC0g/BEhBwXnlt3EmB8qyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDQ2YTU2NC02MzQ3LTQwZWYtYmFkMy00ZGFhZTMwNmQ0MjEvMC81MEQ5ODI1OTQw QjQ4M0YwNDQ4NDFDMTc5RTVCNzcxMjYwN0NBQjJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTBEOTgyNTk0MEI0ODNGMDQ0ODQxQzE3OUU1Qjc3MTI2MDdD QUIyQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkNDZhNTY0LTYzNDctNDBlZi1i YWQzLTRkYWFlMzA2ZDQyMS8wLzMxMzAzMzJlMzEzNTM3MmUzNzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ51MMA0GCSqG SIb3DQEBCwUAA4IBAQBxpr8LZPuHbxRWw7OjJlnvhvh6OGmgH4icgCsL2ldjXi5g 9WXLMDq3EZsY5e9n4R10lZaMxRuCK+HoDfQMHXKEytTqnIcbsvi+6bKp4gaeOdxU EHSfDxn54iteyRuvofUom0j8e53y1NICn2s+ymbES1OfZckGFmIeTQwfFq6zfwgj rHmx42O4Dxn2HhfsbIxFOENI5b9WaBuVM0lhGFIuXDgkwYV7HZGMU/JaF4GPDfbo GMvNiryXOUXwV6eDTCpovZzGFtk4seNUyPM+alB3X/AacVMdnlQJD29z9VzCp937 i1ZmSlXf6ka8b6xV4XFwsiiBmPCnXzNOy5Xyc6sq -----END CERTIFICATE-----Generated at Sun Aug 24 06:04:25 2025 by rpki-client