$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa File: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (raw, json) Hash identifier: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg= Subject key identifier: 50:DE:2C:F5:F1:6F:E5:66:FA:9E:14:88:C7:35:27:80:CA:9D:4F:0D Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 5DE24028DEBD18C285BC28B1B4A0F0AD31321CFB Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa Signing time: Tue 23 Sep 2025 04:00:01 +0000 ROA not before: Tue 23 Sep 2025 03:55:01 +0000 ROA not after: Tue 22 Sep 2026 04:00:01 +0000 asID: 149898 IP address blocks: 103.190.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e2:40:28:de:bd:18:c2:85:bc:28:b1:b4:a0:f0:ad:31:32:1c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Sep 23 03:55:01 2025 GMT Not After : Sep 22 04:00:01 2026 GMT Subject: CN=50DE2CF5F16FE566FA9E1488C7352780CA9D4F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:00:92:35:b5:fe:4b:aa:9c:eb:d1:c0:57:fc: cc:80:15:32:d1:ae:ed:4f:53:d5:75:4f:d5:6f:72: e4:c7:f2:c3:43:5e:f9:4f:a3:b4:f1:e3:c1:99:dc: a7:83:2e:bf:11:26:4f:59:df:da:0c:9c:50:63:e2: 2f:73:04:19:3b:29:6f:dc:fa:d7:9c:fd:e2:52:de: 1c:b4:d0:74:fb:1e:13:db:93:75:fc:7b:53:a6:b8: 2f:64:27:06:07:7f:44:26:36:10:dc:e9:9e:6c:a8: 67:2a:54:e4:8a:b4:e4:f1:be:de:88:32:e8:48:62: 3d:e4:64:c8:38:70:31:5f:3c:34:ca:af:16:b0:5b: 38:74:ff:b5:56:b1:8c:4d:99:9e:27:1b:2f:0b:a9: f2:16:7c:4a:51:59:e4:e5:07:16:7a:be:cb:ba:a2: 14:fd:3f:63:d5:b6:ae:28:18:3a:c0:55:d5:30:ba: 27:8a:13:ac:71:0f:b4:2d:6a:bd:4c:7d:ba:e1:47: 98:a1:0f:a2:6f:50:83:37:d9:e9:14:7c:8f:83:7b: c5:cf:9c:13:74:fa:9e:65:1f:94:3a:7c:dc:b6:29: c0:a7:71:a8:c5:66:a1:a2:73:18:17:47:07:ae:4a: 19:6b:30:81:08:22:57:2e:68:bb:1d:8f:74:cb:0d: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DE:2C:F5:F1:6F:E5:66:FA:9E:14:88:C7:35:27:80:CA:9D:4F:0D X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.62.0/23 Signature Algorithm: sha256WithRSAEncryption 64:68:92:14:d0:bc:ed:8d:7f:ea:27:0b:63:54:9c:e9:b9:70: 5e:fe:9f:e4:57:37:8d:f6:a6:b6:f4:f1:84:4d:ee:8a:27:9f: 7e:2a:ae:6a:90:0b:10:0e:ed:97:39:3c:b1:a3:b3:6d:4f:08: 73:c8:f7:75:df:50:e2:f3:e5:74:6b:da:7c:97:e3:24:4a:23: 1b:b0:55:fe:28:ac:f5:6a:86:63:64:f3:b1:39:f4:7a:3a:db: 1b:65:2a:2c:ac:2e:fc:a9:35:59:da:70:6a:bc:c5:e6:bf:82: 2b:68:29:34:eb:ab:dc:4e:9c:ee:e4:3a:b2:a2:47:78:3c:cb: 1d:88:39:2f:1f:19:a5:32:75:c2:67:b9:7d:d5:2a:ef:5f:b1: ae:33:76:9a:92:52:0b:8f:7c:00:0b:f9:b3:06:f1:b0:81:16: 9a:6a:0f:0d:c1:d6:0e:57:7f:9a:50:d9:a1:8b:94:e3:19:95: f9:1a:43:e4:19:c6:ae:d4:00:f3:c9:f2:04:55:f3:7f:1f:6f: 33:2e:52:63:ad:2f:68:d3:71:10:a3:fc:bd:92:29:d0:74:a2: 6a:dd:9e:02:5c:03:23:5d:81:1e:b8:1c:0b:d0:28:4a:24:f7: 93:0b:67:20:c2:f2:69:54:b8:42:92:1d:6b:72:13:37:c5:aa: b4:1d:1d:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXeJAKN69GMKFvCixtKDwrTEyHPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA5MjMwMzU1MDFaFw0yNjA5MjIwNDAwMDFaMDMxMTAvBgNV BAMTKDUwREUyQ0Y1RjE2RkU1NjZGQTlFMTQ4OEM3MzUyNzgwQ0E5RDRGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1AJI1tf5Lqpzr0cBX/MyAFTLR ru1PU9V1T9VvcuTH8sNDXvlPo7Tx48GZ3KeDLr8RJk9Z39oMnFBj4i9zBBk7KW/c +tec/eJS3hy00HT7HhPbk3X8e1OmuC9kJwYHf0QmNhDc6Z5sqGcqVOSKtOTxvt6I MuhIYj3kZMg4cDFfPDTKrxawWzh0/7VWsYxNmZ4nGy8LqfIWfEpRWeTlBxZ6vsu6 ohT9P2PVtq4oGDrAVdUwuieKE6xxD7Qtar1MfbrhR5ihD6JvUIM32ekUfI+De8XP nBN0+p5lH5Q6fNy2KcCncajFZqGicxgXRweuShlrMIEIIlcuaLsdj3TLDVsVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUN4s9fFv5Wb6nhSIxzUngMqdTw0wHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2MjBiNDIzLWRkNWQtNDQ4Zi1i YmQzLTA0NTMwZWMxNzE1ZC8wLzMxMzAzMzJlMzEzOTMwMmUzNjMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ74+MA0GCSqG SIb3DQEBCwUAA4IBAQBkaJIU0LztjX/qJwtjVJzpuXBe/p/kVzeN9qa29PGETe6K J59+Kq5qkAsQDu2XOTyxo7NtTwhzyPd131Di8+V0a9p8l+MkSiMbsFX+KKz1aoZj ZPOxOfR6OtsbZSosrC78qTVZ2nBqvMXmv4IraCk066vcTpzu5Dqyokd4PMsdiDkv HxmlMnXCZ7l91SrvX7GuM3aaklILj3wAC/mzBvGwgRaaag8NwdYOV3+aUNmhi5Tj GZX5GkPkGcau1ADzyfIEVfN/H28zLlJjrS9o03EQo/y9kinQdKJq3Z4CXAMjXYEe uBwL0ChKJPeTC2cgwvJpVLhCkh1rchM3xaq0HR2R -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:24 2025 by rpki-client