$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa File: 3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (raw, json) Hash identifier: tAaom1u9dzc8ncYAUwE5XCycjaJDPimabJR/V9nJlmE= Subject key identifier: 01:94:D5:32:16:FA:E4:9C:4B:BE:5C:AA:60:AE:7E:FE:D8:04:67:B3 Certificate issuer: /CN=C33BE6D76C1444B4695CC56D706802967A2A404E Certificate serial: 610D15EA5CA1879B529C752E773E25172AF3BCE8 Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa Signing time: Thu 14 Aug 2025 16:00:45 +0000 ROA not before: Thu 14 Aug 2025 15:55:45 +0000 ROA not after: Thu 13 Aug 2026 16:00:45 +0000 asID: 150484 IP address blocks: 103.55.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0d:15:ea:5c:a1:87:9b:52:9c:75:2e:77:3e:25:17:2a:f3:bc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E Validity Not Before: Aug 14 15:55:45 2025 GMT Not After : Aug 13 16:00:45 2026 GMT Subject: CN=0194D53216FAE49C4BBE5CAA60AE7EFED80467B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:62:8a:06:eb:21:62:9b:4a:55:5d:a8:8f:2a: 78:fc:75:7d:9a:f2:ee:85:2d:a9:80:cb:08:4a:c4: 9b:1c:ab:76:db:3c:be:1d:02:4a:2b:c5:77:79:8b: 81:4d:16:db:fc:38:91:5b:1c:01:75:16:e6:fe:66: e7:fe:3b:c9:91:9e:fa:57:aa:84:d4:7d:a1:da:fc: 75:c9:8e:84:5d:15:64:76:72:36:90:fb:be:2c:91: 71:dc:4e:35:ec:de:6a:63:28:41:fd:85:39:ea:51: 00:36:df:7c:d0:e1:20:3f:0b:b5:01:bc:34:cd:ba: 3b:87:16:67:23:4d:71:45:7c:9d:11:62:50:8b:95: d1:3f:5b:94:12:7a:87:f6:a8:c2:78:af:58:29:99: 84:38:26:92:90:f6:93:4c:f3:f8:17:15:36:d0:df: 58:a1:fd:28:5d:56:f7:c4:c6:4d:5a:b3:4e:90:f8: 5d:26:51:89:e1:ad:68:0b:83:a3:aa:0a:b7:1f:6e: ae:e3:16:20:e7:bb:fb:9d:26:19:5a:44:de:e1:1f: 24:11:7e:c8:d2:4a:0c:8d:9c:9a:ed:50:29:ba:2a: 3c:59:d7:68:5e:f8:6d:66:cf:1f:64:fc:b6:d8:74: 93:78:84:d6:18:79:88:f1:90:ac:ed:78:b2:57:a7: 5e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:94:D5:32:16:FA:E4:9C:4B:BE:5C:AA:60:AE:7E:FE:D8:04:67:B3 X509v3 Authority Key Identifier: keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.31.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:45:46:2a:50:81:39:30:85:19:e1:e7:81:56:c3:9f:e7:cb: 59:37:72:f1:aa:ab:50:8e:28:7a:25:94:7b:d8:bb:54:c1:2b: 2e:9b:32:9d:f9:23:ff:53:f4:98:51:ab:1b:2b:bb:a8:ac:cf: bb:f0:0b:be:02:21:ee:e6:4b:33:1a:69:d3:ac:ab:c0:9b:7f: fc:2d:57:04:19:4a:35:94:60:3d:f6:62:87:42:79:c0:1d:f9: 6d:78:67:33:76:7a:9c:7b:55:2b:5b:e6:2e:e6:72:d5:e3:4a: d8:41:11:aa:75:c6:e7:3b:2d:3f:ec:58:b5:4b:3f:a3:7a:35: a1:de:26:9b:8e:3a:c5:80:bf:a8:78:ed:df:8d:9d:f0:2e:a0: 60:b8:b5:8b:a9:82:4b:c2:ff:c4:09:5e:27:f3:38:2c:e3:2e: f9:7b:7b:6a:4a:9b:08:1f:b0:96:9c:6f:a7:b5:ee:5b:bb:d0: c5:68:b6:af:23:df:d4:50:ab:ae:33:25:dc:58:5f:a4:0e:c4: 19:3a:f9:98:95:49:08:1c:d6:67:0e:c1:20:07:50:5d:f8:11: 80:9b:e1:f9:55:27:e7:c2:16:47:9f:5c:9f:8b:08:d5:54:9b: de:97:d3:0d:02:9a:af:6c:6f:5f:5e:c8:56:70:23:ec:cb:e1: fb:3b:5f:40 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYQ0V6lyhh5tSnHUudz4lFyrzvOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3 QTJBNDA0RTAeFw0yNTA4MTQxNTU1NDVaFw0yNjA4MTMxNjAwNDVaMDMxMTAvBgNV BAMTKDAxOTRENTMyMTZGQUU0OUM0QkJFNUNBQTYwQUU3RUZFRDgwNDY3QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOYooG6yFim0pVXaiPKnj8dX2a 8u6FLamAywhKxJscq3bbPL4dAkorxXd5i4FNFtv8OJFbHAF1Fub+Zuf+O8mRnvpX qoTUfaHa/HXJjoRdFWR2cjaQ+74skXHcTjXs3mpjKEH9hTnqUQA233zQ4SA/C7UB vDTNujuHFmcjTXFFfJ0RYlCLldE/W5QSeof2qMJ4r1gpmYQ4JpKQ9pNM8/gXFTbQ 31ih/ShdVvfExk1as06Q+F0mUYnhrWgLg6OqCrcfbq7jFiDnu/udJhlaRN7hHyQR fsjSSgyNnJrtUCm6KjxZ12he+G1mzx9k/LbYdJN4hNYYeYjxkKzteLJXp17zAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUAZTVMhb65JxLvlyqYK5+/tgEZ7MwHwYDVR0j BBgwFoAUwzvm12wURLRpXMVtcGgClnoqQE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDcwM2I4MC0yZTc4LTRkMTEtYWI3NC0wODAxN2U0MjJkNmUvMC9DMzNCRTZENzZD MTQ0NEI0Njk1Q0M1NkQ3MDY4MDI5NjdBMkE0MDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMzQkU2RDc2QzE0NDRCNDY5NUNDNTZENzA2ODAyOTY3QTJB NDA0RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNzAzYjgwLTJlNzgtNGQxMS1h Yjc0LTA4MDE3ZTQyMmQ2ZS8wLzMxMzAzMzJlMzUzNTJlMzMzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGc3HzANBgkqhkiG 9w0BAQsFAAOCAQEAm0VGKlCBOTCFGeHngVbDn+fLWTdy8aqrUI4oeiWUe9i7VMEr Lpsynfkj/1P0mFGrGyu7qKzPu/ALvgIh7uZLMxpp06yrwJt//C1XBBlKNZRgPfZi h0J5wB35bXhnM3Z6nHtVK1vmLuZy1eNK2EERqnXG5zstP+xYtUs/o3o1od4mm446 xYC/qHjt342d8C6gYLi1i6mCS8L/xAleJ/M4LOMu+Xt7akqbCB+wlpxvp7XuW7vQ xWi2ryPf1FCrrjMl3FhfpA7EGTr5mJVJCBzWZw7BIAdQXfgRgJvh+VUn58IWR59c n4sI1VSb3pfTDQKar2xvX17IVnAj7Mvh+ztfQA== -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:43 2025 by rpki-client