$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37392e302f32342d3234203d3e20313336313331.roa File: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (raw, json) Hash identifier: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw= Subject key identifier: 78:CD:78:75:A6:58:1C:1C:4D:12:6F:93:DF:5C:CB:4A:B8:FD:95:AC Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 145D660E7C83CE3EB0EEA6DE646ECBDE53ACD532 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37392e302f32342d3234203d3e20313336313331.roa Signing time: Thu 21 Aug 2025 10:00:01 +0000 ROA not before: Thu 21 Aug 2025 09:55:01 +0000 ROA not after: Thu 20 Aug 2026 10:00:01 +0000 asID: 136131 IP address blocks: 103.97.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 07:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5d:66:0e:7c:83:ce:3e:b0:ee:a6:de:64:6e:cb:de:53:ac:d5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Aug 21 09:55:01 2025 GMT Not After : Aug 20 10:00:01 2026 GMT Subject: CN=78CD7875A6581C1C4D126F93DF5CCB4AB8FD95AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7b:30:69:5a:e1:ba:36:86:3a:08:7b:00:9c: 90:49:1f:b8:f0:8c:fb:65:01:77:26:e2:d3:0a:01: 35:2c:57:fe:47:67:64:72:33:79:eb:5c:83:26:37: e8:30:39:36:78:43:0a:8d:c4:c2:44:66:49:e9:5c: a7:4e:2d:07:ec:c3:dc:af:6e:84:8a:f1:8a:df:fd: 3e:71:cc:1c:f8:fc:96:a1:b9:46:97:dc:9a:89:76: 3a:29:b7:90:d3:0d:9e:2e:9d:20:c7:b8:50:30:e0: 26:ea:21:49:ea:88:59:98:77:4d:b3:fc:2e:da:4a: f7:2f:9c:8a:54:87:df:0c:01:0a:a3:47:02:85:c0: a0:5c:ff:94:ad:0a:dd:83:d5:d6:3b:2a:32:4e:55: 4f:27:9a:db:2b:bf:e0:db:1f:f6:f3:68:09:84:c7: 66:67:b2:b9:29:4f:3b:2c:ed:f0:1f:d7:58:c3:58: 77:16:5b:6b:7e:a9:e6:59:56:41:cc:ef:c4:39:b7: 2b:f0:33:67:b2:c2:0c:fb:bd:f7:dc:29:ea:91:05: 24:7b:f6:f5:f1:bb:0c:5c:19:45:62:ed:c4:c7:43: 82:fb:36:e0:13:7a:dc:91:35:e8:14:01:a0:ab:7a: cc:a1:10:fc:0d:e1:6c:c0:a0:f3:d0:14:70:06:d2: 37:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CD:78:75:A6:58:1C:1C:4D:12:6F:93:DF:5C:CB:4A:B8:FD:95:AC X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37392e302f32342d3234203d3e20313336313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.79.0/24 Signature Algorithm: sha256WithRSAEncryption 91:9e:4f:10:cc:13:2f:e4:44:22:d1:1b:e4:ba:16:dc:ca:e0: bf:2b:d7:0d:39:0e:86:03:ba:32:d1:37:40:0c:3f:b2:39:60: 42:e1:3d:05:2a:04:3d:7c:23:7b:86:9d:9c:2b:bb:df:ed:2c: 61:77:6d:9c:75:2b:e8:22:7a:06:53:bd:b0:68:91:bf:21:4e: 31:3b:bf:41:d0:ed:28:6f:6f:f8:73:46:1c:4b:f5:8a:c5:4f: c4:18:00:de:cd:ea:68:2a:7c:a4:40:1b:4d:56:53:33:29:37: 9f:fd:ad:c3:d8:e3:32:fc:f1:1e:be:bb:c7:b0:17:3d:ae:07: dd:7b:4b:2d:7f:e2:a5:db:37:07:b2:52:66:e7:51:8c:bb:af: f7:10:15:60:7b:83:61:9b:8f:13:52:5c:6d:9c:57:c1:fc:4a: 46:73:b9:c5:d7:05:47:a5:6f:b3:0b:b5:77:e9:e9:9b:0e:2e: 05:6c:42:b1:a7:52:4d:79:03:0f:03:2a:4e:76:83:e7:74:b0: e6:a6:4e:c5:4a:13:cf:60:10:1f:9f:90:47:86:d5:db:7d:ef: a7:6e:97:e7:79:ec:57:83:b9:ce:58:92:ad:48:00:53:2a:99: 84:b7:c5:14:39:ad:b8:14:27:29:d0:a6:4f:07:36:5c:56:21: 31:05:aa:33 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFF1mDnyDzj6w7qbeZG7L3lOs1TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA4MjEwOTU1MDFaFw0yNjA4MjAxMDAwMDFaMDMxMTAvBgNV BAMTKDc4Q0Q3ODc1QTY1ODFDMUM0RDEyNkY5M0RGNUNDQjRBQjhGRDk1QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeezBpWuG6NoY6CHsAnJBJH7jw jPtlAXcm4tMKATUsV/5HZ2RyM3nrXIMmN+gwOTZ4QwqNxMJEZknpXKdOLQfsw9yv boSK8Yrf/T5xzBz4/JahuUaX3JqJdjopt5DTDZ4unSDHuFAw4CbqIUnqiFmYd02z /C7aSvcvnIpUh98MAQqjRwKFwKBc/5StCt2D1dY7KjJOVU8nmtsrv+DbH/bzaAmE x2ZnsrkpTzss7fAf11jDWHcWW2t+qeZZVkHM78Q5tyvwM2eywgz7vffcKeqRBSR7 9vXxuwxcGUVi7cTHQ4L7NuATetyRNegUAaCresyhEPwN4WzAoPPQFHAG0jczAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeM14daZYHBxNEm+T31zLSrj9lawwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdlLWVhZGUtNDMxOC1h YjIwLThjN2YyZDViZTY5Zi8wLzMxMzAzMzJlMzkzNzJlMzczOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdhTzANBgkqhkiG 9w0BAQsFAAOCAQEAkZ5PEMwTL+REItEb5LoW3MrgvyvXDTkOhgO6MtE3QAw/sjlg QuE9BSoEPXwje4adnCu73+0sYXdtnHUr6CJ6BlO9sGiRvyFOMTu/QdDtKG9v+HNG HEv1isVPxBgA3s3qaCp8pEAbTVZTMyk3n/2tw9jjMvzxHr67x7AXPa4H3XtLLX/i pds3B7JSZudRjLuv9xAVYHuDYZuPE1JcbZxXwfxKRnO5xdcFR6Vvswu1d+npmw4u BWxCsadSTXkDDwMqTnaD53Sw5qZOxUoTz2AQH5+QR4bV233vp26X53nsV4O5zliS rUgAUyqZhLfFFDmtuBQnKdCmTwc2XFYhMQWqMw== -----END CERTIFICATE-----Generated at Sat Aug 23 23:46:21 2025 by rpki-client