$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33302e302f32342d3234203d3e20313530343834.roa File: 3130332e35352e33302e302f32342d3234203d3e20313530343834.roa (raw, json) Hash identifier: aZfOFjCWcMoRejMmCl7p7stqIRB0AZ4Tzh7bIJ8bPos= Subject key identifier: 33:28:61:D6:93:81:17:5C:47:C1:1E:55:71:8B:32:62:CB:FD:AB:B0 Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 75393C428BC332DA56C8C9B8CF07D53DC07C7D73 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33302e302f32342d3234203d3e20313530343834.roa Signing time: Thu 14 Aug 2025 16:00:45 +0000 ROA not before: Thu 14 Aug 2025 15:55:45 +0000 ROA not after: Thu 13 Aug 2026 16:00:45 +0000 asID: 150484 IP address blocks: 103.55.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:39:3c:42:8b:c3:32:da:56:c8:c9:b8:cf:07:d5:3d:c0:7c:7d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Aug 14 15:55:45 2025 GMT Not After : Aug 13 16:00:45 2026 GMT Subject: CN=332861D69381175C47C11E55718B3262CBFDABB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:08:ad:53:4b:33:ee:16:ec:eb:47:4c:c1:c8: 52:9d:99:1f:25:75:11:f5:de:e5:9b:df:81:cc:8f: 19:4a:15:53:fb:56:90:e2:92:b6:da:83:8c:4a:f4: 01:aa:54:46:f5:38:4c:f6:49:cc:bf:6d:22:53:6e: 90:4e:8e:de:7e:8c:14:58:28:c1:6d:5f:76:d1:b1: 60:f9:dc:60:fd:c4:83:a8:c3:8c:04:ef:19:03:77: 51:5c:2a:e6:17:44:33:2f:e2:1b:af:4e:59:34:90: 7d:aa:2d:4e:a0:16:23:f6:e9:8a:8c:54:47:82:6d: 35:ca:59:a1:6c:e2:5d:c0:62:b2:5d:5a:57:df:85: d1:ee:0d:e0:69:5e:c8:85:39:a7:60:3d:2e:9d:5c: 91:ac:d5:91:2c:bd:17:50:80:58:b3:30:de:cc:0d: ee:15:cb:70:00:aa:17:e9:cb:24:bc:14:54:88:ba: 81:63:11:fc:a4:de:d8:f0:65:26:17:43:60:e6:e1: 9e:ee:99:08:aa:45:24:e0:63:0b:c4:47:32:f3:1c: e1:79:bc:c0:f5:71:6b:1c:e1:19:7f:b9:a9:e8:f8: 3c:4b:2f:de:98:be:94:20:0f:84:b8:41:ff:7f:03: 7f:8a:aa:75:2e:68:75:ae:7e:1e:35:94:93:af:33: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:61:D6:93:81:17:5C:47:C1:1E:55:71:8B:32:62:CB:FD:AB:B0 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33302e302f32342d3234203d3e20313530343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.30.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:8a:55:b5:8d:a8:39:70:06:6b:ba:aa:86:00:95:d4:e0:4a: 8d:ba:6d:70:95:ec:6f:a8:4e:1f:51:0c:a3:d0:2b:53:34:35: da:88:d0:c6:e2:c4:e0:67:f4:4a:99:3a:48:aa:05:8d:ae:42: a6:fd:01:d8:02:61:eb:86:4f:01:b4:f6:3b:69:27:2b:7b:88: 55:3d:da:7d:94:61:d0:4a:39:fc:2d:da:fc:0d:f9:0f:eb:59: b6:25:1c:ff:7f:f4:9c:57:c1:ca:81:9e:bd:4c:aa:c4:e1:a3: 74:6a:ec:15:f9:52:57:6e:c2:0c:55:53:9b:1c:87:36:0b:60: 89:1a:ce:30:f6:fc:21:08:84:b0:6d:c4:d5:17:ac:6b:70:c2: 8b:ac:ad:a2:96:a2:19:f6:42:e4:94:de:0e:4f:cb:eb:b0:75: 80:57:8c:a1:7c:53:53:71:f0:f6:64:0f:76:5e:c4:ff:80:be: c7:81:49:be:df:f1:3b:86:5b:cc:c1:01:18:7f:00:50:4c:fd: 8b:58:7d:06:59:06:1e:ac:e1:60:f3:48:65:d1:9a:49:8f:e5: a8:6e:a4:2d:b3:61:41:7d:b4:f8:97:b5:21:a3:e3:d5:ee:67: cc:69:19:d3:ea:15:5f:dc:51:e2:4c:cc:1c:2d:a0:7c:0f:46: e8:05:80:83 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdTk8QovDMtpWyMm4zwfVPcB8fXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA4MTQxNTU1NDVaFw0yNjA4MTMxNjAwNDVaMDMxMTAvBgNV BAMTKDMzMjg2MUQ2OTM4MTE3NUM0N0MxMUU1NTcxOEIzMjYyQ0JGREFCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CK1TSzPuFuzrR0zByFKdmR8l dRH13uWb34HMjxlKFVP7VpDikrbag4xK9AGqVEb1OEz2Scy/bSJTbpBOjt5+jBRY KMFtX3bRsWD53GD9xIOow4wE7xkDd1FcKuYXRDMv4huvTlk0kH2qLU6gFiP26YqM VEeCbTXKWaFs4l3AYrJdWlffhdHuDeBpXsiFOadgPS6dXJGs1ZEsvRdQgFizMN7M De4Vy3AAqhfpyyS8FFSIuoFjEfyk3tjwZSYXQ2Dm4Z7umQiqRSTgYwvERzLzHOF5 vMD1cWsc4Rl/uano+DxLL96YvpQgD4S4Qf9/A3+KqnUuaHWufh41lJOvMyIFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMyhh1pOBF1xHwR5VcYsyYsv9q7AwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNzAzYjgwLTJlNzgtNGQxMS1h Yjc0LTA4MDE3ZTQyMmQ2ZS8wLzMxMzAzMzJlMzUzNTJlMzMzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc3HjANBgkqhkiG 9w0BAQsFAAOCAQEAPopVtY2oOXAGa7qqhgCV1OBKjbptcJXsb6hOH1EMo9ArUzQ1 2ojQxuLE4Gf0Spk6SKoFja5Cpv0B2AJh64ZPAbT2O2knK3uIVT3afZRh0Eo5/C3a /A35D+tZtiUc/3/0nFfByoGevUyqxOGjdGrsFflSV27CDFVTmxyHNgtgiRrOMPb8 IQiEsG3E1Resa3DCi6ytopaiGfZC5JTeDk/L67B1gFeMoXxTU3Hw9mQPdl7E/4C+ x4FJvt/xO4ZbzMEBGH8AUEz9i1h9BlkGHqzhYPNIZdGaSY/lqG6kLbNhQX20+Je1 IaPj1e5nzGkZ0+oVX9xR4kzMHC2gfA9G6AWAgw== -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:57 2025 by rpki-client