$ rpki-client -vvf repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa File: 3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa (raw, json) Hash identifier: s+fqkugTUtrfTnYLMhS2gRWf2sStTpZQt4ymRPeizms= Subject key identifier: 79:E9:AB:57:9F:40:3B:6F:30:06:3C:3A:18:1C:4B:50:F6:64:F2:60 Certificate issuer: /CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Certificate serial: 47379D75BB3E9E30ECD87A5253FC6ED950DF6DE9 Authority key identifier: E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa Signing time: Sat 16 Aug 2025 08:00:00 +0000 ROA not before: Sat 16 Aug 2025 07:55:00 +0000 ROA not after: Sat 15 Aug 2026 08:00:00 +0000 asID: 134620 IP address blocks: 103.203.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:17:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:37:9d:75:bb:3e:9e:30:ec:d8:7a:52:53:fc:6e:d9:50:df:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E1A24B098E9AC07C658F6AFEE0990751CDB692A4 Validity Not Before: Aug 16 07:55:00 2025 GMT Not After : Aug 15 08:00:00 2026 GMT Subject: CN=79E9AB579F403B6F30063C3A181C4B50F664F260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:62:f7:ed:8f:42:e0:32:b0:83:13:5f:3a:af: 2c:0d:b1:3f:44:d9:21:ef:7f:bb:5f:bd:c4:72:9d: 62:f2:28:fe:ed:ac:a8:b3:69:03:83:6b:73:e4:49: 16:db:d5:06:c0:3c:05:fc:db:22:d9:8d:a4:65:bc: 4c:17:d8:fd:0a:e6:1d:be:00:f3:81:b7:46:10:e9: 2d:f3:e9:60:62:cf:75:7c:13:3a:42:5c:49:1f:2a: 34:56:19:95:b1:6b:b0:2e:24:69:92:32:fa:e3:d4: b0:b2:00:1f:0b:d7:e2:51:ae:25:79:15:49:8a:6e: 78:a8:2b:2b:2c:ee:95:04:ce:3d:4f:c5:27:8f:96: 6c:9b:55:41:20:d4:69:f7:6f:47:5a:9b:0a:af:49: 9c:b9:f3:be:3c:ab:1b:9e:28:a1:94:01:89:41:95: 02:24:70:22:77:a6:d4:99:e5:dd:96:00:ae:a8:44: c5:a6:47:d4:86:72:76:65:2b:84:cb:00:6b:62:8e: 25:14:22:30:50:7c:8b:ec:c5:fd:24:f9:ae:cc:04: 66:8c:e0:e8:b0:e0:6c:84:eb:9e:9c:90:86:2b:59: 2c:13:a0:9e:db:bb:ee:e4:f0:51:a4:a2:cb:b6:3d: a4:3a:55:cf:a9:82:97:15:0e:46:e2:72:a1:be:e5: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E9:AB:57:9F:40:3B:6F:30:06:3C:3A:18:1C:4B:50:F6:64:F2:60 X509v3 Authority Key Identifier: keyid:E1:A2:4B:09:8E:9A:C0:7C:65:8F:6A:FE:E0:99:07:51:CD:B6:92:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1A24B098E9AC07C658F6AFEE0990751CDB692A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37382e302f32342d3234203d3e20313334363230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.203.78.0/24 Signature Algorithm: sha256WithRSAEncryption 60:8b:89:c2:49:ce:97:78:4b:06:52:22:56:34:db:7f:64:f1: df:38:54:2f:09:b3:79:af:f6:8a:99:9a:94:5d:35:9a:79:0e: 9d:e3:64:0d:3d:7e:ed:7f:81:f6:8c:d2:3b:a1:f5:13:26:60: 87:0b:c8:98:6a:cd:de:35:ba:e8:2f:81:2e:61:b8:46:33:43: 9d:14:1d:17:d4:bc:45:f8:79:2c:a8:1d:9a:34:0f:fe:4d:c9: d0:9d:ab:48:d3:cc:23:68:d8:46:4b:1a:3b:80:a1:83:a5:2d: 1d:8a:98:0f:f0:b2:72:36:15:84:c3:a8:c9:86:3e:cd:45:68: ed:c9:93:8a:76:d9:66:63:c3:1d:1e:18:b7:99:db:ee:dd:ff: 35:07:cd:53:b8:46:b5:6f:f6:59:88:81:00:1d:b4:71:18:6f: 56:6b:8b:08:99:aa:33:30:d3:5e:69:30:0b:d5:fa:8b:1c:c5: 28:ca:fd:7b:d9:74:53:00:b2:2b:58:c3:6b:60:a1:c2:d9:33: c3:6b:31:b1:44:06:24:3c:7e:1e:ff:2f:5c:f9:6a:bb:b8:c3: e2:e6:b3:c5:2d:50:f5:8c:fc:2b:1d:d9:03:df:1d:13:a0:f1: f9:d7:fd:07:da:22:9d:cc:d2:8e:d6:90:23:d5:32:1d:94:1a: 7e:86:b2:b0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURzeddbs+njDs2HpSU/xu2VDfbekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFD REI2OTJBNDAeFw0yNTA4MTYwNzU1MDBaFw0yNjA4MTUwODAwMDBaMDMxMTAvBgNV BAMTKDc5RTlBQjU3OUY0MDNCNkYzMDA2M0MzQTE4MUM0QjUwRjY2NEYyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYvftj0LgMrCDE186rywNsT9E 2SHvf7tfvcRynWLyKP7trKizaQODa3PkSRbb1QbAPAX82yLZjaRlvEwX2P0K5h2+ APOBt0YQ6S3z6WBiz3V8EzpCXEkfKjRWGZWxa7AuJGmSMvrj1LCyAB8L1+JRriV5 FUmKbnioKyss7pUEzj1PxSePlmybVUEg1Gn3b0damwqvSZy58748qxueKKGUAYlB lQIkcCJ3ptSZ5d2WAK6oRMWmR9SGcnZlK4TLAGtijiUUIjBQfIvsxf0k+a7MBGaM 4Oiw4GyE656ckIYrWSwToJ7bu+7k8FGkosu2PaQ6Vc+pgpcVDkbicqG+5R5TAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeemrV59AO28wBjw6GBxLUPZk8mAwHwYDVR0j BBgwFoAU4aJLCY6awHxlj2r+4JkHUc22kqQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGFhNGMwZi05OTkyLTQyZmMtYTU0Mi1lZmY3NDA5MWIzMzQvMC9FMUEyNEIwOThF OUFDMDdDNjU4RjZBRkVFMDk5MDc1MUNEQjY5MkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTFBMjRCMDk4RTlBQzA3QzY1OEY2QUZFRTA5OTA3NTFDREI2 OTJBNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkYWE0YzBmLTk5OTItNDJmYy1h NTQyLWVmZjc0MDkxYjMzNC8wLzMxMzAzMzJlMzIzMDMzMmUzNzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8tOMA0GCSqG SIb3DQEBCwUAA4IBAQBgi4nCSc6XeEsGUiJWNNt/ZPHfOFQvCbN5r/aKmZqUXTWa eQ6d42QNPX7tf4H2jNI7ofUTJmCHC8iYas3eNbroL4EuYbhGM0OdFB0X1LxF+Hks qB2aNA/+TcnQnatI08wjaNhGSxo7gKGDpS0dipgP8LJyNhWEw6jJhj7NRWjtyZOK dtlmY8MdHhi3mdvu3f81B81TuEa1b/ZZiIEAHbRxGG9Wa4sImaozMNNeaTAL1fqL HMUoyv172XRTALIrWMNrYKHC2TPDazGxRAYkPH4e/y9c+Wq7uMPi5rPFLVD1jPwr HdkD3x0ToPH51/0H2iKdzNKO1pAj1TIdlBp+hrKw -----END CERTIFICATE-----Generated at Sat Aug 23 16:39:14 2025 by rpki-client