$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa File: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (raw, json) Hash identifier: IGEWY2eHTKaYMtxRXqYJpKskrVH7Tr78Gf7J+C6rKG8= Subject key identifier: 18:20:8C:D6:E0:AA:03:E2:5F:6B:AB:55:2D:02:4C:CA:80:B7:F4:C7 Certificate issuer: /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Certificate serial: 23F6F0531C1D3C370F572B84BE470A8B56ECA5F3 Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa Signing time: Tue 15 Jul 2025 02:00:04 +0000 ROA not before: Tue 15 Jul 2025 01:55:04 +0000 ROA not after: Tue 14 Jul 2026 02:00:04 +0000 asID: 136079 IP address blocks: 103.86.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f6:f0:53:1c:1d:3c:37:0f:57:2b:84:be:47:0a:8b:56:ec:a5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837 Validity Not Before: Jul 15 01:55:04 2025 GMT Not After : Jul 14 02:00:04 2026 GMT Subject: CN=18208CD6E0AA03E25F6BAB552D024CCA80B7F4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4c:90:7c:e6:4d:0e:3e:af:6a:25:cb:ff:81: 95:a0:81:f2:d8:b2:ac:1e:05:df:7c:66:cc:12:f6: e1:14:a1:b8:5d:e0:f7:cb:d1:2b:76:87:96:62:40: d6:c3:b6:13:d4:8c:19:06:f8:04:9d:e0:29:6e:a9: b3:57:3f:5d:f9:ff:cc:33:d5:a1:df:64:c7:3c:bb: e2:ab:db:8e:67:d5:6f:4d:28:61:64:4e:85:8b:20: c6:aa:41:79:88:1d:69:12:b8:47:d4:b5:ad:67:ef: 70:c6:e6:d0:5d:bc:b2:33:71:7c:c1:5c:89:4b:b2: 16:1a:80:e7:48:e5:e3:53:98:b8:57:1b:21:d4:20: 88:a8:d7:72:ea:83:96:12:f1:90:f7:b6:97:6c:e8: 8c:27:48:12:a5:59:2b:92:8f:a8:52:b4:18:eb:53: 25:09:8d:b9:b7:24:fa:54:6d:4e:10:d9:6e:dc:99: 24:ef:dd:23:54:c4:82:63:28:de:ef:08:15:d1:cc: 9c:57:4c:4d:7b:5c:10:e5:ef:af:f4:20:bd:34:b6: ba:b8:62:0e:b2:4a:ea:1a:ed:3a:f4:7d:fe:a9:d3: 5e:9d:f1:c5:3f:81:48:10:c9:9b:0c:2f:cb:c6:5d: 23:90:b3:fd:68:5f:ec:57:55:72:42:0a:a2:31:77: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:20:8C:D6:E0:AA:03:E2:5F:6B:AB:55:2D:02:4C:CA:80:B7:F4:C7 X509v3 Authority Key Identifier: keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.100.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:03:fa:7f:5a:74:64:1a:92:51:0c:b6:83:7b:d7:05:bb:f8: 70:df:dc:ee:16:fa:8a:17:39:45:9f:08:b8:bc:ee:b7:54:1b: be:28:64:16:14:f5:ca:fc:50:f5:64:23:e9:c8:dc:d8:c7:c8: 93:2d:65:f2:ed:f9:64:a2:27:3a:5a:42:5c:dc:bf:0c:fe:cf: ff:a0:26:6d:79:ca:4f:f0:cd:1e:14:d5:98:62:dd:af:a5:ea: c9:bd:2c:4b:16:e2:01:15:6a:06:31:a6:30:77:15:69:d5:e7: 1a:f5:c3:e4:bb:3f:90:39:c9:69:24:9d:0c:7a:d0:55:f7:25: dd:7f:48:22:96:93:55:a9:5b:8e:88:77:77:eb:3f:f1:90:ec: a9:28:dc:56:7e:4d:c3:70:56:2e:0b:72:cb:86:d8:e5:e5:47: fd:83:63:b5:ed:1a:22:d4:c2:46:26:5c:f2:34:fb:37:02:a0: bd:ed:48:45:56:17:16:84:af:9c:be:06:ed:ab:22:62:f4:fa: aa:8c:02:6f:57:a9:e2:d9:00:26:bc:86:46:2a:3d:88:52:0b: 55:a4:98:e8:e8:76:e8:a4:ff:91:2f:23:e5:5e:c2:bc:6d:84: af:47:be:2a:b4:37:22:f6:75:2b:00:ba:0c:ce:7c:42:b7:2a: fc:66:9f:70 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUI/bwUxwdPDcPVyuEvkcKi1bspfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJB NzJCNTgzNzAeFw0yNTA3MTUwMTU1MDRaFw0yNjA3MTQwMjAwMDRaMDMxMTAvBgNV BAMTKDE4MjA4Q0Q2RTBBQTAzRTI1RjZCQUI1NTJEMDI0Q0NBODBCN0Y0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTTJB85k0OPq9qJcv/gZWggfLY sqweBd98ZswS9uEUobhd4PfL0St2h5ZiQNbDthPUjBkG+ASd4CluqbNXP135/8wz 1aHfZMc8u+Kr245n1W9NKGFkToWLIMaqQXmIHWkSuEfUta1n73DG5tBdvLIzcXzB XIlLshYagOdI5eNTmLhXGyHUIIio13Lqg5YS8ZD3tpds6IwnSBKlWSuSj6hStBjr UyUJjbm3JPpUbU4Q2W7cmSTv3SNUxIJjKN7vCBXRzJxXTE17XBDl76/0IL00trq4 Yg6ySuoa7Tr0ff6p016d8cU/gUgQyZsML8vGXSOQs/1oX+xXVXJCCqIxdxHvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGCCM1uCqA+Jfa6tVLQJMyoC39McwHwYDVR0j BBgwFoAU86uo88LdiSXdR79+ohNzAqcrWDcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTY5M2I4OS00NTk3LTQwYjUtOTJiMC1iMjk5ZmE3NjlhZmEvMC9GM0FCQThGM0My REQ4OTI1REQ0N0JGN0VBMjEzNzMwMkE3MkI1ODM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjNBQkE4RjNDMkREODkyNURENDdCRjdFQTIxMzczMDJBNzJC NTgzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNjkzYjg5LTQ1OTctNDBiNS05 MmIwLWIyOTlmYTc2OWFmYS8wLzMxMzAzMzJlMzgzNjJlMzEzMDMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzM2MzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1ZkMA0GCSqG SIb3DQEBCwUAA4IBAQBcA/p/WnRkGpJRDLaDe9cFu/hw39zuFvqKFzlFnwi4vO63 VBu+KGQWFPXK/FD1ZCPpyNzYx8iTLWXy7flkoic6WkJc3L8M/s//oCZtecpP8M0e FNWYYt2vperJvSxLFuIBFWoGMaYwdxVp1eca9cPkuz+QOclpJJ0MetBV9yXdf0gi lpNVqVuOiHd36z/xkOypKNxWfk3DcFYuC3LLhtjl5Uf9g2O17Roi1MJGJlzyNPs3 AqC97UhFVhcWhK+cvgbtqyJi9PqqjAJvV6ni2QAmvIZGKj2IUgtVpJjo6HbopP+R LyPlXsK8bYSvR74qtDci9nUrALoMznxCtyr8Zp9w -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:19 2025 by rpki-client