$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa File: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (raw, json) Hash identifier: OjD7igAi8uIoux+rVxGtZEh2dpv8xELOea0gwWs5+6I= Subject key identifier: 3B:EA:A3:47:A0:61:92:04:6E:21:D5:D1:DA:8E:20:F4:62:AA:17:11 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 3D2799C5D28E28C74E0F8FA560A5F184ED07BDF9 Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa Signing time: Fri 15 Aug 2025 03:02:12 +0000 ROA not before: Fri 15 Aug 2025 02:57:12 +0000 ROA not after: Fri 14 Aug 2026 03:02:12 +0000 asID: 149934 IP address blocks: 103.191.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:27:99:c5:d2:8e:28:c7:4e:0f:8f:a5:60:a5:f1:84:ed:07:bd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Aug 15 02:57:12 2025 GMT Not After : Aug 14 03:02:12 2026 GMT Subject: CN=3BEAA347A06192046E21D5D1DA8E20F462AA1711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:a4:b9:5a:8a:d7:59:1e:e8:18:9f:f6:eb: 32:c8:ac:5e:e7:32:60:0c:08:67:d3:b1:19:0d:72: 67:b9:7a:5e:4b:15:7f:fe:59:b4:11:da:80:c4:00: 1c:42:2d:3b:6a:92:bd:73:1e:3d:41:fa:70:46:af: f5:bc:fa:8c:80:ed:7e:55:3f:b3:07:50:38:8f:71: a4:90:e2:e0:82:cd:2c:4d:c2:c9:a8:ea:9a:17:29: 91:5c:38:b1:cf:1d:34:04:d0:e2:52:2f:c8:c6:0c: d6:ff:d0:4f:7d:dc:a5:45:3b:64:b1:a8:1c:aa:53: cd:c2:64:df:4e:a7:49:07:f6:c5:59:17:b7:5b:67: 58:d6:77:a6:52:b8:68:20:b2:4d:46:06:19:62:54: ee:e0:90:d9:e3:63:1a:07:7b:e9:b8:58:ab:17:b9: 19:ce:e3:2b:34:8c:66:b7:de:c9:25:07:58:15:37: bb:66:79:e6:21:32:a2:e0:f8:4c:a5:b5:cd:33:f8: 03:a8:18:5e:1a:57:05:4c:5c:4f:5d:be:72:5f:85: 82:f8:5e:4f:4f:46:69:72:a1:cb:1a:e2:fb:f9:4f: 6b:e0:aa:f7:57:9c:b6:e3:29:f5:97:a9:13:25:45: 1c:84:00:77:13:12:01:01:14:f8:e6:b5:13:41:c9: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EA:A3:47:A0:61:92:04:6E:21:D5:D1:DA:8E:20:F4:62:AA:17:11 X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.196.0/23 Signature Algorithm: sha256WithRSAEncryption 81:e0:53:ee:80:99:00:9e:6e:aa:b2:27:c5:3a:df:b7:f9:f0: e5:0a:cf:ce:90:b7:52:44:41:12:7e:78:79:ad:e7:d9:66:89: 34:76:72:35:7e:d0:3f:fb:ce:19:ad:c3:be:c4:f3:71:c9:04: 3f:6f:df:d7:22:69:c9:ff:e8:5a:1c:6a:4f:65:9c:45:80:44: de:44:6b:38:1f:e5:57:57:02:fe:f5:17:e8:61:45:f9:c9:95: 52:41:b9:66:a7:96:44:ee:f4:dd:d8:bc:ea:d3:13:d2:90:1e: 1a:88:04:7b:9b:88:42:6b:70:68:dd:93:5d:bb:7e:74:19:fc: 74:87:1b:7c:e7:95:cc:dc:5a:63:c0:b0:ae:b8:de:5f:13:1d: 68:f7:d8:0e:6f:fc:5f:2d:a6:49:9c:e3:e3:b9:50:5b:cd:64: 1f:a5:66:c8:89:40:15:a0:b6:eb:6c:61:53:8a:38:7f:e6:fa: b7:19:91:83:af:19:e7:8c:bc:9b:b0:7d:4f:49:91:e3:6e:3d: f6:1f:ce:07:8f:0b:f3:f9:81:0b:e7:57:1b:47:77:7a:dd:c6: 74:82:ae:46:e0:16:86:da:22:7b:f5:26:4a:23:5d:af:10:58: c5:8c:b9:b3:92:e5:f7:c6:a3:d3:58:8d:ef:9d:69:84:41:f1: f5:7d:19:80 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPSeZxdKOKMdOD4+lYKXxhO0HvfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTA4MTUwMjU3MTJaFw0yNjA4MTQwMzAyMTJaMDMxMTAvBgNV BAMTKDNCRUFBMzQ3QTA2MTkyMDQ2RTIxRDVEMURBOEUyMEY0NjJBQTE3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXzKS5WorXWR7oGJ/26zLIrF7n MmAMCGfTsRkNcme5el5LFX/+WbQR2oDEABxCLTtqkr1zHj1B+nBGr/W8+oyA7X5V P7MHUDiPcaSQ4uCCzSxNwsmo6poXKZFcOLHPHTQE0OJSL8jGDNb/0E993KVFO2Sx qByqU83CZN9Op0kH9sVZF7dbZ1jWd6ZSuGggsk1GBhliVO7gkNnjYxoHe+m4WKsX uRnO4ys0jGa33sklB1gVN7tmeeYhMqLg+Eyltc0z+AOoGF4aVwVMXE9dvnJfhYL4 Xk9PRmlyocsa4vv5T2vgqvdXnLbjKfWXqRMlRRyEAHcTEgEBFPjmtRNByXYfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUO+qjR6BhkgRuIdXR2o4g9GKqFxEwHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1ZDZlZmZmLTg1YjItNGFmNC04 OWFiLTZkOThjOTUyN2RhNC8wLzMxMzAzMzJlMzEzOTMxMmUzMTM5MzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMzMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnv8QwDQYJ KoZIhvcNAQELBQADggEBAIHgU+6AmQCebqqyJ8U637f58OUKz86Qt1JEQRJ+eHmt 59lmiTR2cjV+0D/7zhmtw77E83HJBD9v39ciacn/6Focak9lnEWARN5Eazgf5VdX Av71F+hhRfnJlVJBuWanlkTu9N3YvOrTE9KQHhqIBHubiEJrcGjdk127fnQZ/HSH G3znlczcWmPAsK643l8THWj32A5v/F8tpkmc4+O5UFvNZB+lZsiJQBWgtutsYVOK OH/m+rcZkYOvGeeMvJuwfU9JkeNuPfYfzgePC/P5gQvnVxtHd3rdxnSCrkbgFoba Inv1JkojXa8QWMWMubOS5ffGo9NYje+daYRB8fV9GYA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:15:24 2025 by rpki-client