$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa File: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (raw, json) Hash identifier: WkFNZS79+nq1P3vYzsoqHasGlqkPwC3TJbG5gTcIHd8= Subject key identifier: C0:67:11:36:8E:8B:46:DC:06:AF:F2:1D:0C:AF:B5:A7:A2:D6:A8:A6 Certificate issuer: /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Certificate serial: 4265638D331BE4E24D0B461E444FB26F2188927D Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa Signing time: Fri 15 Aug 2025 07:00:00 +0000 ROA not before: Fri 15 Aug 2025 06:55:00 +0000 ROA not after: Fri 14 Aug 2026 07:00:00 +0000 asID: 139941 IP address blocks: 103.146.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 03:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:65:63:8d:33:1b:e4:e2:4d:0b:46:1e:44:4f:b2:6f:21:88:92:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Validity Not Before: Aug 15 06:55:00 2025 GMT Not After : Aug 14 07:00:00 2026 GMT Subject: CN=C06711368E8B46DC06AFF21D0CAFB5A7A2D6A8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:17:53:26:d1:54:f0:fc:cf:38:46:cf:4d: 56:01:34:40:85:b5:ee:a3:43:35:b6:52:57:5a:7a: c0:2f:49:a3:fb:71:e3:fd:5d:0b:9c:1b:66:71:4a: d3:8e:ab:38:db:30:da:cf:56:1a:51:e4:9a:3b:d3: 29:6f:38:99:79:d6:46:52:a5:b5:b2:57:e7:3e:b7: 4b:09:e6:31:c7:60:76:ec:92:e7:12:54:80:74:af: f9:09:10:8e:f0:a1:fb:eb:4d:90:03:ab:b2:e1:a0: e7:f1:61:83:58:97:5a:f4:65:1d:37:f1:f2:ea:a8: 7f:69:6b:f3:5b:91:44:7f:5b:14:38:62:6d:b6:98: a3:fb:ee:6d:be:ba:c3:af:e0:ad:73:03:ec:8d:aa: 52:0f:99:e6:20:2c:35:a2:af:fd:29:49:6a:a4:88: 7a:27:e3:e1:ac:62:b1:ee:a8:95:d4:cf:7a:92:d0: ad:c8:48:00:61:87:05:65:05:9e:b0:53:37:87:5d: 2b:89:86:ee:4a:11:1a:b3:8c:78:ba:f1:8f:b4:28: 92:9b:69:7f:61:48:eb:eb:7d:ee:e6:26:2f:34:00: cb:a5:f9:2e:04:b4:54:84:a3:22:e2:ac:9b:28:77: be:08:da:54:72:34:e4:56:8a:80:32:27:35:47:6c: 57:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:67:11:36:8E:8B:46:DC:06:AF:F2:1D:0C:AF:B5:A7:A2:D6:A8:A6 X509v3 Authority Key Identifier: keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.196.0/24 Signature Algorithm: sha256WithRSAEncryption 70:4f:a1:53:5b:33:83:31:c6:10:e5:87:e1:f2:47:f6:bb:d8: e0:c3:1b:1b:28:49:0b:1e:d4:b5:90:c8:c4:8c:9c:59:42:e4: b9:74:82:44:23:fd:9f:9e:84:82:0a:fd:86:84:39:2d:2b:cf: 7c:d0:af:39:bd:5e:57:06:ab:db:b3:f8:94:fe:1f:cc:aa:32: e9:1e:3d:f3:99:47:73:14:19:92:eb:4c:a3:96:86:70:11:44: 2c:d1:a5:a2:92:f5:78:71:7c:3a:11:2d:c5:7c:5d:1b:86:ff: f7:c1:6e:32:8c:b0:f3:0a:80:cf:83:7f:3e:55:0d:3e:e6:61: f9:81:2a:67:38:c8:03:e1:8c:f6:83:5d:60:77:c9:32:9c:07: 6e:90:27:55:08:6f:52:b2:5a:35:c6:10:af:16:da:55:e1:98: 10:f2:db:c7:d3:d9:41:f5:7a:09:7a:e0:23:34:5d:18:18:37: 83:9c:65:73:da:28:04:c5:be:f9:60:36:cd:59:8e:71:3f:bf: 52:ac:07:9f:2c:b2:34:cf:b8:47:a9:2c:e8:16:ad:6c:2b:bf: 08:88:80:f5:0e:40:90:b4:39:1a:08:1d:18:fd:b2:8e:57:58: ee:52:aa:4f:10:4a:86:aa:5b:63:35:c0:c5:d2:d5:c2:de:48: 29:66:50:20 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUQmVjjTMb5OJNC0YeRE+ybyGIkn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NG NUIyQUE0RTAeFw0yNTA4MTUwNjU1MDBaFw0yNjA4MTQwNzAwMDBaMDMxMTAvBgNV BAMTKEMwNjcxMTM2OEU4QjQ2REMwNkFGRjIxRDBDQUZCNUE3QTJENkE4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBURdTJtFU8PzPOEbPTVYBNECF te6jQzW2UldaesAvSaP7ceP9XQucG2ZxStOOqzjbMNrPVhpR5Jo70ylvOJl51kZS pbWyV+c+t0sJ5jHHYHbskucSVIB0r/kJEI7wofvrTZADq7LhoOfxYYNYl1r0ZR03 8fLqqH9pa/NbkUR/WxQ4Ym22mKP77m2+usOv4K1zA+yNqlIPmeYgLDWir/0pSWqk iHon4+GsYrHuqJXUz3qS0K3ISABhhwVlBZ6wUzeHXSuJhu5KERqzjHi68Y+0KJKb aX9hSOvrfe7mJi80AMul+S4EtFSEoyLirJsod74I2lRyNORWioAyJzVHbFdhAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUwGcRNo6LRtwGr/IdDK+1p6LWqKYwHwYDVR0j BBgwFoAUcAiGh5nnfELkN/DXrM9oPPWyqk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzUwNDhjNi04Y2NkLTQ2M2QtYWQzNC1hZTc0Mjg2NDdhOWMvMC83MDA4ODY4Nzk5 RTc3QzQyRTQzN0YwRDdBQ0NGNjgzQ0Y1QjJBQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NGNUIy QUE0RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzNTA0OGM2LThjY2QtNDYzZC1h ZDM0LWFlNzQyODY0N2E5Yy8wLzMxMzAzMzJlMzEzNDM2MmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnksQwDQYJ KoZIhvcNAQELBQADggEBAHBPoVNbM4MxxhDlh+HyR/a72ODDGxsoSQse1LWQyMSM nFlC5Ll0gkQj/Z+ehIIK/YaEOS0rz3zQrzm9XlcGq9uz+JT+H8yqMukePfOZR3MU GZLrTKOWhnARRCzRpaKS9XhxfDoRLcV8XRuG//fBbjKMsPMKgM+Dfz5VDT7mYfmB Kmc4yAPhjPaDXWB3yTKcB26QJ1UIb1KyWjXGEK8W2lXhmBDy28fT2UH1egl64CM0 XRgYN4OcZXPaKATFvvlgNs1ZjnE/v1KsB58ssjTPuEepLOgWrWwrvwiIgPUOQJC0 ORoIHRj9so5XWO5Sqk8QSoaqW2M1wMXS1cLeSClmUCA= -----END CERTIFICATE-----Generated at Sat Aug 23 21:02:43 2025 by rpki-client