$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa File: 3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa (raw, json) Hash identifier: F8gVzqK4Hbz0Z6s+Ltl0BOnl1HF8YZ7ceJ/yBja8KLc= Subject key identifier: 1A:40:5C:D9:5D:FF:3C:DF:9B:C3:E1:17:57:A3:B4:A0:D5:D3:02:83 Certificate issuer: /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Certificate serial: 6186663CCD5F862317C5C4827805583EEAD31E7E Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa Signing time: Fri 15 Aug 2025 18:21:26 +0000 ROA not before: Fri 15 Aug 2025 18:16:26 +0000 ROA not after: Fri 14 Aug 2026 18:21:26 +0000 asID: 151533 IP address blocks: 103.245.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:86:66:3c:cd:5f:86:23:17:c5:c4:82:78:05:58:3e:ea:d3:1e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32 Validity Not Before: Aug 15 18:16:26 2025 GMT Not After : Aug 14 18:21:26 2026 GMT Subject: CN=1A405CD95DFF3CDF9BC3E11757A3B4A0D5D30283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:5a:45:a9:d5:a0:32:97:22:86:e9:3e:f1: 7a:23:9c:68:cf:c6:16:55:04:31:8d:27:f8:e9:7e: fc:61:31:88:75:d7:13:b7:41:e4:1c:5e:8d:71:58: 09:72:d5:98:d1:dd:c3:0a:04:4c:59:60:49:75:67: 07:42:87:64:ac:f6:5a:af:38:d6:66:7c:56:ed:91: 84:f9:97:c8:14:50:e1:8c:f3:b6:62:4a:28:6d:58: 05:29:b4:f0:df:1c:ab:15:e2:f3:51:10:73:d9:e8: c2:41:26:37:44:b3:b2:65:29:37:75:4f:ce:2d:c1: 1b:e6:f2:7b:e9:80:71:e3:24:bd:d1:eb:03:e2:23: bf:b4:35:91:85:1f:9d:c9:1d:e5:13:af:ec:fd:d0: bb:b7:2e:a4:32:7f:cc:ac:af:65:5d:03:56:37:75: 2a:9c:18:fa:43:c0:02:4a:49:d1:90:c8:99:4a:06: 05:38:e8:5b:07:be:d6:3a:f1:bc:fa:a9:f6:01:b6: b2:97:fc:b0:f6:5c:78:9d:e2:99:a5:cf:64:fd:ac: fc:2a:eb:b5:87:79:3c:95:0e:a5:ee:19:61:91:fa: 70:bb:33:cf:e6:4e:63:6c:dc:31:6d:d9:ff:29:c1: 76:f6:d6:5f:bf:cf:3e:06:36:c6:9f:f6:7f:04:a2: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:40:5C:D9:5D:FF:3C:DF:9B:C3:E1:17:57:A3:B4:A0:D5:D3:02:83 X509v3 Authority Key Identifier: keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136392e302f32342d3234203d3e20313531353333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.169.0/24 Signature Algorithm: sha256WithRSAEncryption 87:a7:88:0b:30:09:b3:7e:da:77:2b:92:9b:55:ad:32:6c:fe: 99:1b:cd:86:80:7e:50:70:14:19:cc:73:48:22:14:0f:d8:a5: f9:91:93:23:f2:e2:db:07:b2:83:74:90:66:0c:d4:e2:22:95: 9a:8e:98:e6:75:b2:e9:15:30:03:6a:47:75:2c:4f:39:41:00: 34:9f:14:b6:07:7b:84:3e:0e:fb:79:64:f1:c9:9b:69:95:ed: 00:16:a8:ac:b3:aa:7a:82:e1:81:5c:45:47:68:f3:03:7f:d2: 44:7a:de:55:22:92:07:94:0d:5b:14:42:42:03:44:59:9c:d2: 55:8a:3e:d8:c2:a7:ed:52:69:17:c5:dd:52:90:cc:e3:5a:14: 02:20:ee:88:fb:0b:22:d5:69:e4:c8:7c:26:5b:ab:eb:3a:62: 27:74:4a:02:c0:62:79:1e:de:55:7f:91:5d:a4:45:a9:59:35: 2b:bd:33:d1:1e:34:02:52:6a:e0:01:f2:31:ab:fa:d2:e8:b1: 78:55:3d:e5:0c:ac:37:70:fb:15:ac:51:f8:5a:e6:e9:0b:ce: cb:a6:e7:70:0b:9d:b3:fa:a5:e2:2c:23:c0:4f:f0:9a:b6:88: a8:30:de:61:53:c7:74:4a:e4:b6:4c:31:27:64:4d:ea:89:74: f0:c5:8c:65 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUYYZmPM1fhiMXxcSCeAVYPurTHn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1 MUZFNkQzMjAeFw0yNTA4MTUxODE2MjZaFw0yNjA4MTQxODIxMjZaMDMxMTAvBgNV BAMTKDFBNDA1Q0Q5NURGRjNDREY5QkMzRTExNzU3QTNCNEEwRDVEMzAyODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC751pFqdWgMpcihuk+8XojnGjP xhZVBDGNJ/jpfvxhMYh11xO3QeQcXo1xWAly1ZjR3cMKBExZYEl1ZwdCh2Ss9lqv ONZmfFbtkYT5l8gUUOGM87ZiSihtWAUptPDfHKsV4vNREHPZ6MJBJjdEs7JlKTd1 T84twRvm8nvpgHHjJL3R6wPiI7+0NZGFH53JHeUTr+z90Lu3LqQyf8ysr2VdA1Y3 dSqcGPpDwAJKSdGQyJlKBgU46FsHvtY68bz6qfYBtrKX/LD2XHid4pmlz2T9rPwq 67WHeTyVDqXuGWGR+nC7M8/mTmNs3DFt2f8pwXb21l+/zz4GNsaf9n8EonA3AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUGkBc2V3/PN+bw+EXV6O0oNXTAoMwHwYDVR0j BBgwFoAUazuij+w2icj4jOQTej1kWlH+bTIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTFkZWI5My1jMTkwLTQ2ZWUtYmE4My0yZDkxOTMwYTQzOTUvMC82QjNCQTI4RkVD MzY4OUM4Rjg4Q0U0MTM3QTNENjQ1QTUxRkU2RDMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkIzQkEyOEZFQzM2ODlDOEY4OENFNDEzN0EzRDY0NUE1MUZF NkQzMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlMWRlYjkzLWMxOTAtNDZlZS1i YTgzLTJkOTE5MzBhNDM5NS8wLzMxMzAzMzJlMzIzNDM1MmUzMTM2MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTMzMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9akwDQYJ KoZIhvcNAQELBQADggEBAIeniAswCbN+2ncrkptVrTJs/pkbzYaAflBwFBnMc0gi FA/YpfmRkyPy4tsHsoN0kGYM1OIilZqOmOZ1sukVMANqR3UsTzlBADSfFLYHe4Q+ Dvt5ZPHJm2mV7QAWqKyzqnqC4YFcRUdo8wN/0kR63lUikgeUDVsUQkIDRFmc0lWK PtjCp+1SaRfF3VKQzONaFAIg7oj7CyLVaeTIfCZbq+s6Yid0SgLAYnke3lV/kV2k RalZNSu9M9EeNAJSauAB8jGr+tLosXhVPeUMrDdw+xWsUfha5ukLzsum53ALnbP6 peIsI8BP8Jq2iKgw3mFTx3RK5LZMMSdkTeqJdPDFjGU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:15 2025 by rpki-client