$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa File: 3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: dVq64zxWLa78rB2/MzuNY9mMV1I4wE6waqwsVjBuNag= Subject key identifier: CE:13:A9:06:D0:CD:6A:A1:E1:F4:FE:45:CC:64:C2:BF:75:F8:95:05 Certificate issuer: /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Certificate serial: 3D6EE2EE4CE87EE19FE259983F16F956127C35D8 Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa Signing time: Sat 09 Aug 2025 04:00:02 +0000 ROA not before: Sat 09 Aug 2025 03:55:02 +0000 ROA not after: Sat 08 Aug 2026 04:00:02 +0000 asID: 138089 IP address blocks: 103.131.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6e:e2:ee:4c:e8:7e:e1:9f:e2:59:98:3f:16:f9:56:12:7c:35:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0 Validity Not Before: Aug 9 03:55:02 2025 GMT Not After : Aug 8 04:00:02 2026 GMT Subject: CN=CE13A906D0CD6AA1E1F4FE45CC64C2BF75F89505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:19:2b:dc:13:76:ae:b0:1c:0c:ed:b2:44: 72:be:59:1d:ea:39:f3:cd:41:37:c8:b5:e6:c8:57: f0:e6:98:8e:28:a7:65:f9:6c:e0:92:93:a0:8b:0d: 27:ee:69:96:55:62:c6:e9:ee:88:e4:2c:1b:5d:92: 38:98:c3:db:0c:ef:75:20:1e:28:7d:3d:a4:c1:33: c7:fb:85:c5:66:54:95:74:13:24:4f:62:b7:80:14: b7:bb:b8:22:11:ff:48:84:52:c6:85:3b:d5:24:b2: ca:0f:4f:b7:bc:c2:4b:77:ba:08:49:c0:2e:ea:74: d0:07:fd:c9:a1:b0:2b:40:35:b1:88:09:6e:d3:fd: 92:43:2d:de:76:4c:71:c8:6b:ad:90:00:63:0e:10: 2a:77:ad:0d:ae:11:69:b8:58:e4:44:e7:17:78:f4: 03:02:03:c6:bc:ad:6c:48:2d:e0:2b:50:bf:57:64: a2:49:7c:31:57:1f:20:35:00:9d:92:97:ab:1c:34: 22:ef:cc:57:6c:fe:93:b1:20:2c:c6:20:ed:6f:3f: 1f:65:41:99:fe:ed:78:0d:6b:ce:31:5b:a3:be:20: 4c:ad:18:60:e5:4e:1e:a8:54:a5:69:d9:1b:72:98: 13:be:0e:2c:3c:d1:5a:1b:c2:c1:33:ae:96:c2:67: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:13:A9:06:D0:CD:6A:A1:E1:F4:FE:45:CC:64:C2:BF:75:F8:95:05 X509v3 Authority Key Identifier: keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31382e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.18.0/24 Signature Algorithm: sha256WithRSAEncryption 39:8f:45:18:4d:7d:b7:44:37:0e:9a:32:a9:41:e6:df:46:f1: 50:16:1f:de:fa:3d:c0:d6:9f:a5:4c:31:b9:4f:3f:85:a5:aa: 6d:f5:48:0a:93:e3:c8:ed:53:0b:3a:f6:54:73:87:4e:a9:c2: e8:d2:4a:78:41:98:95:b9:03:d0:6a:03:67:8f:bd:4c:1d:73: 35:05:99:c8:b7:c5:0c:56:ee:27:f5:5f:3d:c2:c6:45:be:9e: d3:62:40:a3:74:9d:d1:b3:04:7f:f9:56:a3:be:69:b1:64:0b: 2f:71:5f:a9:39:f5:0c:8b:1f:9e:57:aa:0c:90:3b:96:9b:24: 20:3a:36:df:81:7a:9f:ae:35:38:d5:95:dd:06:04:e0:f0:8c: 1a:44:ee:a6:61:fa:62:b3:7d:a2:f0:38:b9:a9:90:1f:6b:84: a4:6f:d0:c8:5d:9a:02:44:6f:ce:f4:1d:76:93:c7:63:e6:77: e8:89:d5:05:dc:0d:79:bd:e4:f0:e7:ea:13:73:89:cf:ea:25: 5a:ec:69:53:0a:ae:e3:16:73:ba:00:89:77:32:c0:59:9b:4b: a1:76:4c:1c:a1:aa:49:7c:b0:07:ce:49:9d:24:6e:68:b1:47: 94:75:82:38:62:88:c9:83:88:36:14:46:78:b5:44:19:fc:3c: 53:ae:f4:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUPW7i7kzofuGf4lmYPxb5VhJ8NdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5 MUQ2QUREMDAeFw0yNTA4MDkwMzU1MDJaFw0yNjA4MDgwNDAwMDJaMDMxMTAvBgNV BAMTKENFMTNBOTA2RDBDRDZBQTFFMUY0RkU0NUNDNjRDMkJGNzVGODk1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZRkr3BN2rrAcDO2yRHK+WR3q OfPNQTfItebIV/DmmI4op2X5bOCSk6CLDSfuaZZVYsbp7ojkLBtdkjiYw9sM73Ug Hih9PaTBM8f7hcVmVJV0EyRPYreAFLe7uCIR/0iEUsaFO9UkssoPT7e8wkt3ughJ wC7qdNAH/cmhsCtANbGICW7T/ZJDLd52THHIa62QAGMOECp3rQ2uEWm4WORE5xd4 9AMCA8a8rWxILeArUL9XZKJJfDFXHyA1AJ2Sl6scNCLvzFds/pOxICzGIO1vPx9l QZn+7XgNa84xW6O+IEytGGDlTh6oVKVp2RtymBO+Diw80VobwsEzrpbCZ2wfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzhOpBtDNaqHh9P5FzGTCv3X4lQUwHwYDVR0j BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2 QUREMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5MDRmNjcwLTdkYWMtNGNmNC05 OTFkLTUwNTM5ZTNkM2Y1ZS8wLzMxMzAzMzJlMzEzMzMxMmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4MSMA0GCSqG SIb3DQEBCwUAA4IBAQA5j0UYTX23RDcOmjKpQebfRvFQFh/e+j3A1p+lTDG5Tz+F papt9UgKk+PI7VMLOvZUc4dOqcLo0kp4QZiVuQPQagNnj71MHXM1BZnIt8UMVu4n 9V89wsZFvp7TYkCjdJ3RswR/+VajvmmxZAsvcV+pOfUMix+eV6oMkDuWmyQgOjbf gXqfrjU41ZXdBgTg8IwaRO6mYfpis32i8Di5qZAfa4Skb9DIXZoCRG/O9B12k8dj 5nfoidUF3A15veTw5+oTc4nP6iVa7GlTCq7jFnO6AIl3MsBZm0uhdkwcoapJfLAH zkmdJG5osUeUdYI4YojJg4g2FEZ4tUQZ/DxTrvRa -----END CERTIFICATE-----Generated at Sun Aug 24 00:35:51 2025 by rpki-client