$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa File: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (raw, json) Hash identifier: Gn1y+vGI1pMr1RUP5Xcp6ZX24+/thjU5EMlcN69zymE= Subject key identifier: 45:0B:D9:99:09:E8:AF:8B:8B:72:D9:3D:CC:D7:85:5E:FB:74:BA:7B Certificate issuer: /CN=28612772543E43335B080C32808B7FDC277E71E4 Certificate serial: 58C2A65AABB166FC972167DC014CBB3ABAF6BCD9 Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa Signing time: Thu 14 Aug 2025 08:03:03 +0000 ROA not before: Thu 14 Aug 2025 07:58:03 +0000 ROA not after: Thu 13 Aug 2026 08:03:03 +0000 asID: 138131 IP address blocks: 103.121.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:c2:a6:5a:ab:b1:66:fc:97:21:67:dc:01:4c:bb:3a:ba:f6:bc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4 Validity Not Before: Aug 14 07:58:03 2025 GMT Not After : Aug 13 08:03:03 2026 GMT Subject: CN=450BD99909E8AF8B8B72D93DCCD7855EFB74BA7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:94:b0:95:8c:18:11:a0:17:45:4c:da:69: 02:0d:39:b7:7c:b5:ed:6c:26:bf:63:f2:24:21:ee: fb:5b:c2:91:82:23:b3:2f:4f:ea:be:f4:49:46:ed: 6f:fc:18:df:83:f0:a3:00:ac:b5:9a:71:62:06:b7: f2:96:85:47:0a:b7:a4:cd:c8:ac:db:74:fe:34:f5: ee:a7:3a:c0:5c:ac:9e:59:1e:ba:4f:16:e9:f3:35: 24:ff:58:dc:ae:74:14:b8:6d:e6:94:18:a8:e6:fb: ad:9f:7c:1a:fa:80:ca:0d:22:50:f9:4d:59:48:45: 59:40:49:db:d2:3c:94:fc:e2:da:b9:33:24:50:98: 7d:23:98:32:45:82:19:72:83:e3:20:f8:04:32:db: 8b:f9:aa:c7:30:95:fe:99:36:a2:bb:d9:18:7d:81: cf:14:4f:7c:88:d9:e4:fa:49:02:de:7b:65:28:19: 3c:61:b2:cd:33:47:bf:6c:f1:a5:fd:38:7f:37:05: 82:ad:f4:7e:e3:fe:95:60:af:d9:ff:a8:73:16:71: 3a:4b:12:e3:9f:e3:13:ab:50:07:c9:a1:aa:00:ff: 13:b8:8c:24:e5:d6:00:93:d1:b8:68:cf:e8:71:d8: 6d:1e:7f:1d:4b:67:e6:c3:1d:75:48:37:1a:ee:0a: 6d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0B:D9:99:09:E8:AF:8B:8B:72:D9:3D:CC:D7:85:5E:FB:74:BA:7B X509v3 Authority Key Identifier: keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.122.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:bb:65:70:01:a1:f5:e5:4f:74:64:b7:5f:1a:a1:e6:0e:9b: 8e:1c:2b:90:e9:ab:cf:4c:77:57:21:f3:17:d1:5c:8d:73:db: b3:f6:6b:fd:88:8c:4c:3e:60:25:bc:1c:45:e2:d9:0b:89:f7: 04:fb:58:56:28:24:7b:5a:56:08:bf:e9:77:34:43:36:54:74: b4:1d:d2:77:30:49:fd:a1:35:6a:e4:63:26:d4:40:79:15:d9: 07:ca:2e:e5:a3:07:af:97:10:05:1f:c1:6d:4c:70:02:4a:23: c0:f6:8e:9d:46:09:f6:b7:f4:cc:5a:b5:0e:27:a3:ca:26:79: 94:4d:76:65:b5:45:c9:d0:1e:cb:4e:6a:19:53:6e:57:a1:76: 88:73:19:23:50:ef:3b:1e:3b:39:4f:48:43:6c:1e:61:37:94: 9c:2a:87:05:4c:a2:a6:b5:e8:32:a4:e8:7b:b2:30:ed:be:f1: dc:3a:60:7a:21:d1:cb:be:d5:83:c0:0a:ae:05:d5:eb:cf:18: 2e:c0:52:ed:eb:0c:0c:a8:26:0c:cb:65:1b:97:ce:1f:f3:ed: b2:19:7d:39:eb:3a:3b:d9:b2:5e:e7:cc:74:3c:0e:0b:d1:81: 47:04:dc:3f:0f:43:a1:44:44:2f:01:6b:54:64:3c:fd:b1:fa: c0:9c:23:77 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUWMKmWquxZvyXIWfcAUy7Orr2vNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMy NzdFNzFFNDAeFw0yNTA4MTQwNzU4MDNaFw0yNjA4MTMwODAzMDNaMDMxMTAvBgNV BAMTKDQ1MEJEOTk5MDlFOEFGOEI4QjcyRDkzRENDRDc4NTVFRkI3NEJBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI65SwlYwYEaAXRUzaaQINObd8 te1sJr9j8iQh7vtbwpGCI7MvT+q+9ElG7W/8GN+D8KMArLWacWIGt/KWhUcKt6TN yKzbdP409e6nOsBcrJ5ZHrpPFunzNST/WNyudBS4beaUGKjm+62ffBr6gMoNIlD5 TVlIRVlASdvSPJT84tq5MyRQmH0jmDJFghlyg+Mg+AQy24v5qscwlf6ZNqK72Rh9 gc8UT3yI2eT6SQLee2UoGTxhss0zR79s8aX9OH83BYKt9H7j/pVgr9n/qHMWcTpL EuOf4xOrUAfJoaoA/xO4jCTl1gCT0bhoz+hx2G0efx1LZ+bDHXVINxruCm3TAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURQvZmQnor4uLctk9zNeFXvt0unswHwYDVR0j BBgwFoAUKGEnclQ+QzNbCAwygIt/3Cd+ceQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMC8yODYxMjc3MjU0 M0U0MzMzNUIwODBDMzI4MDhCN0ZEQzI3N0U3MUU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2MTI3NzI1NDNFNDMzMzVCMDgwQzMyODA4QjdGREMyNzdF NzFFNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiMTMwYjc1LTQ1OTMtNDE0MS1h MDZmLTU3YTIyYTAyM2RkMC8wLzMxMzAzMzJlMzEzMjMxMmUzMTMyMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABneXowDQYJ KoZIhvcNAQELBQADggEBADy7ZXABofXlT3Rkt18aoeYOm44cK5Dpq89Md1ch8xfR XI1z27P2a/2IjEw+YCW8HEXi2QuJ9wT7WFYoJHtaVgi/6Xc0QzZUdLQd0ncwSf2h NWrkYybUQHkV2QfKLuWjB6+XEAUfwW1McAJKI8D2jp1GCfa39MxatQ4no8omeZRN dmW1RcnQHstOahlTblehdohzGSNQ7zseOzlPSENsHmE3lJwqhwVMoqa16DKk6Huy MO2+8dw6YHoh0cu+1YPACq4F1evPGC7AUu3rDAyoJgzLZRuXzh/z7bIZfTnrOjvZ sl7nzHQ8DgvRgUcE3D8PQ6FERC8Ba1RkPP2x+sCcI3c= -----END CERTIFICATE-----Generated at Sat Aug 23 18:11:36 2025 by rpki-client