$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa File: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (raw, json) Hash identifier: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4= Subject key identifier: 49:D6:37:5B:3C:33:E7:61:0A:AD:30:2B:7A:F3:24:81:79:81:B2:AF Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 1F8FE037456C692585E4525B3D87C7DB338FCCF0 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa Signing time: Fri 15 Aug 2025 02:25:56 +0000 ROA not before: Fri 15 Aug 2025 02:20:56 +0000 ROA not after: Fri 14 Aug 2026 02:25:56 +0000 asID: 136841 IP address blocks: 103.41.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8f:e0:37:45:6c:69:25:85:e4:52:5b:3d:87:c7:db:33:8f:cc:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Aug 15 02:20:56 2025 GMT Not After : Aug 14 02:25:56 2026 GMT Subject: CN=49D6375B3C33E7610AAD302B7AF324817981B2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:8d:0b:28:7b:d1:69:6c:d6:c6:2c:b0:f9: 59:10:94:d0:dc:d9:34:a9:85:d8:71:e3:10:4a:15: 1f:e9:3f:1b:af:fd:f0:d9:12:84:5e:7e:44:67:f9: 2f:01:90:f2:70:2c:9e:b2:40:71:6e:57:97:30:c0: 85:03:f3:07:9c:42:29:fb:ae:d0:03:19:4d:9d:fc: e0:08:a0:1c:5b:b6:63:39:8b:ff:dd:4f:0e:74:65: 44:c8:dd:29:bc:13:e2:e6:62:29:5c:e3:fe:a8:f9: ee:2e:5c:7e:ed:ae:cf:bb:75:43:f3:67:54:36:76: 45:6c:2c:8b:6b:3c:11:bc:83:64:12:90:e7:51:b3: f2:03:85:33:f7:a1:88:a1:c2:7f:1a:f7:04:2c:9e: c1:20:af:1c:50:70:eb:4d:8e:c7:f0:a1:1a:7f:df: 1f:eb:92:58:fc:6e:38:50:a1:e1:7f:f3:04:5c:4d: 1c:b1:53:e3:4d:3d:ba:9d:86:61:b8:90:92:0a:ee: bf:2d:3e:5f:63:d3:7d:6c:80:6d:63:a5:82:95:45: 75:60:d2:6e:56:7c:15:7c:1b:48:80:4d:9c:4a:c8: 18:a4:77:aa:8f:eb:9d:46:6e:63:3f:29:02:79:5f: 4f:1b:10:38:7a:c5:2f:a8:8c:d8:20:c9:10:87:45: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D6:37:5B:3C:33:E7:61:0A:AD:30:2B:7A:F3:24:81:79:81:B2:AF X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.249.0/24 Signature Algorithm: sha256WithRSAEncryption 63:b0:8a:f5:4e:c3:6e:ca:13:45:cb:5d:3e:43:22:ce:a9:34: 2f:bb:ee:77:22:e8:9b:fb:f9:ee:a2:43:b7:76:e2:51:a9:67: 79:f6:a6:49:f3:62:52:ca:16:63:93:23:dd:89:7a:7f:7c:8d: 36:a2:87:08:1f:2c:96:f5:32:d3:91:e8:06:24:fc:99:6b:1e: c4:27:8d:73:36:d1:0c:20:8a:32:43:52:04:4a:15:93:c8:9e: d3:76:48:84:45:55:78:96:d7:19:b6:c7:28:1b:1b:66:bf:b8: 9f:86:b1:20:61:5e:9e:2d:7a:32:b7:fc:0f:c7:4c:be:c3:61: b6:a4:61:ce:74:db:d6:3d:31:4e:76:56:aa:4b:ba:a2:9a:12: ca:62:1e:7e:b2:cf:ea:6c:4e:66:60:a3:c7:ad:70:f2:4f:8e: 24:9e:b2:f9:1a:65:f1:64:ef:5f:48:13:9d:d1:6c:27:73:c0: 7b:56:6f:43:a4:f4:58:1f:df:40:12:ae:64:58:1a:59:fc:6a: 27:0b:15:d2:87:eb:2c:40:a6:98:5a:7c:a8:c1:da:9b:28:19: 18:f8:ab:db:6a:d1:f9:f7:e8:c2:b9:72:5f:dd:36:5a:cd:d2: ad:50:fb:eb:4c:0e:ec:99:29:52:4e:9f:0b:80:9a:86:25:67: f9:5e:fb:55 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUH4/gN0VsaSWF5FJbPYfH2zOPzPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTA4MTUwMjIwNTZaFw0yNjA4MTQwMjI1NTZaMDMxMTAvBgNV BAMTKDQ5RDYzNzVCM0MzM0U3NjEwQUFEMzAyQjdBRjMyNDgxNzk4MUIyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCR40LKHvRaWzWxiyw+VkQlNDc 2TSphdhx4xBKFR/pPxuv/fDZEoRefkRn+S8BkPJwLJ6yQHFuV5cwwIUD8wecQin7 rtADGU2d/OAIoBxbtmM5i//dTw50ZUTI3Sm8E+LmYilc4/6o+e4uXH7trs+7dUPz Z1Q2dkVsLItrPBG8g2QSkOdRs/IDhTP3oYihwn8a9wQsnsEgrxxQcOtNjsfwoRp/ 3x/rklj8bjhQoeF/8wRcTRyxU+NNPbqdhmG4kJIK7r8tPl9j031sgG1jpYKVRXVg 0m5WfBV8G0iATZxKyBikd6qP651GbmM/KQJ5X08bEDh6xS+ojNggyRCHRWcJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSdY3Wzwz52EKrTArevMkgXmBsq8wHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3NTI3N2U4LTdkMGYtNDE4NC05 YzI4LWE2NjM1ZWZlZjI5Yy8wLzMxMzAzMzJlMzQzMTJlMzIzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyn5MA0GCSqG SIb3DQEBCwUAA4IBAQBjsIr1TsNuyhNFy10+QyLOqTQvu+53Iuib+/nuokO3duJR qWd59qZJ82JSyhZjkyPdiXp/fI02oocIHyyW9TLTkegGJPyZax7EJ41zNtEMIIoy Q1IEShWTyJ7TdkiERVV4ltcZtscoGxtmv7ifhrEgYV6eLXoyt/wPx0y+w2G2pGHO dNvWPTFOdlaqS7qimhLKYh5+ss/qbE5mYKPHrXDyT44knrL5GmXxZO9fSBOd0Wwn c8B7Vm9DpPRYH99AEq5kWBpZ/GonCxXSh+ssQKaYWnyowdqbKBkY+KvbatH59+jC uXJf3TZazdKtUPvrTA7smSlSTp8LgJqGJWf5XvtV -----END CERTIFICATE-----Generated at Sat Aug 23 15:52:37 2025 by rpki-client