$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa File: 3130332e32302e38362e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: vQ/JQod4pjiK4qjkcMAE6/5YAgXsND0ZYI10hmKECPY= Subject key identifier: 42:2C:5F:3A:B8:FB:AC:D9:C2:EF:F5:54:AE:87:F4:6F:87:03:4F:24 Certificate issuer: /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Certificate serial: 38B5ECCB903895ABECB3DE31BC7F71DE2B0BB494 Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa Signing time: Fri 08 Aug 2025 10:00:01 +0000 ROA not before: Fri 08 Aug 2025 09:55:01 +0000 ROA not after: Fri 07 Aug 2026 10:00:01 +0000 asID: 9341 IP address blocks: 103.20.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b5:ec:cb:90:38:95:ab:ec:b3:de:31:bc:7f:71:de:2b:0b:b4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68 Validity Not Before: Aug 8 09:55:01 2025 GMT Not After : Aug 7 10:00:01 2026 GMT Subject: CN=422C5F3AB8FBACD9C2EFF554AE87F46F87034F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:a9:99:54:9a:79:7a:ec:e0:cc:1b:9b:e5: b0:1c:6c:59:81:16:7c:75:5e:1c:6a:77:b4:1f:51: 58:c3:9c:f8:88:b5:8c:8d:52:37:57:54:0d:3c:43: f2:1c:43:4d:c9:b3:8d:62:b2:55:00:b3:e0:49:8c: 5f:56:28:ff:b0:3a:7c:ec:24:0a:33:01:ac:de:25: b0:f0:2b:48:bc:af:5d:2d:b1:a0:0b:ba:94:db:7f: eb:61:b6:90:06:8d:9b:9e:7e:e1:92:31:0d:ab:07: af:2e:b1:24:60:c5:64:0d:2c:85:4a:8c:8b:00:22: f5:4a:d0:29:6a:41:7e:c4:38:93:20:78:61:77:ec: 3a:96:01:5c:25:62:4d:d8:03:c2:7a:42:fa:6d:43: c9:9e:45:6c:72:78:26:bc:76:5f:18:e8:dc:e0:30: 11:39:4d:9d:2a:7b:ba:01:e8:98:1a:2a:f8:be:d3: b3:b7:99:64:79:09:ab:8b:a1:99:92:00:e5:e7:d6: cd:71:95:56:7b:ea:e3:fc:22:fa:d9:9e:81:e9:4e: e8:1d:17:f4:1b:10:5f:74:a1:30:97:82:85:c6:a1: fc:14:ef:2b:bd:a1:65:ff:ab:bf:d7:4f:46:26:91: c5:3b:e9:03:b6:b7:b3:9d:ac:f4:55:7b:d7:16:6f: 84:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2C:5F:3A:B8:FB:AC:D9:C2:EF:F5:54:AE:87:F4:6F:87:03:4F:24 X509v3 Authority Key Identifier: keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.86.0/24 Signature Algorithm: sha256WithRSAEncryption 79:98:ec:8a:70:47:e9:a6:c6:a1:aa:e2:e9:ba:91:37:9a:aa: 24:ae:2e:f1:15:a6:4f:57:a3:72:3e:56:63:22:60:1e:f5:05: df:7e:b2:a5:69:18:a2:fe:a3:74:aa:b7:b4:9b:53:10:6a:c8: ef:80:0b:1d:e8:4a:39:6e:51:8d:12:6c:95:c2:c1:91:5d:2d: 48:1a:2e:57:75:5e:71:74:86:fc:87:dc:f6:87:bc:9b:85:1e: 59:b8:f3:58:fe:e8:b2:21:eb:f8:f1:29:ae:7b:4a:39:03:ec: 76:66:cb:21:e4:c7:9e:7e:79:64:c7:e0:68:68:6c:df:89:0e: 04:5c:d2:aa:ac:5c:5a:43:b1:ef:b4:36:e1:f0:7a:95:64:85: 88:ba:6a:2e:66:f4:98:b2:8d:16:e6:3b:f8:4d:9d:8c:1c:f7: 59:83:bf:5d:32:10:42:4e:f4:29:5b:e6:04:ba:b4:a8:65:5a: b2:30:eb:10:4d:56:85:4e:49:f7:e3:44:2d:09:64:90:8b:ca: 01:a9:e9:57:f3:15:f0:4b:f2:4c:79:d9:85:5b:9d:42:5f:12: dd:24:ee:1d:59:7e:2e:29:80:4b:5d:e3:d9:0d:c7:b2:b8:7f: d3:11:f8:12:02:d9:ff:77:54:37:40:20:f6:47:27:c6:36:b8: 16:5f:db:2f -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUOLXsy5A4lavss94xvH9x3isLtJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVF N0U0NUQ2ODAeFw0yNTA4MDgwOTU1MDFaFw0yNjA4MDcxMDAwMDFaMDMxMTAvBgNV BAMTKDQyMkM1RjNBQjhGQkFDRDlDMkVGRjU1NEFFODdGNDZGODcwMzRGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcT6mZVJp5euzgzBub5bAcbFmB Fnx1Xhxqd7QfUVjDnPiItYyNUjdXVA08Q/IcQ03Js41islUAs+BJjF9WKP+wOnzs JAozAazeJbDwK0i8r10tsaALupTbf+thtpAGjZuefuGSMQ2rB68usSRgxWQNLIVK jIsAIvVK0ClqQX7EOJMgeGF37DqWAVwlYk3YA8J6QvptQ8meRWxyeCa8dl8Y6Nzg MBE5TZ0qe7oB6JgaKvi+07O3mWR5CauLoZmSAOXn1s1xlVZ76uP8IvrZnoHpTugd F/QbEF90oTCXgoXGofwU7yu9oWX/q7/XT0YmkcU76QO2t7OdrPRVe9cWb4QHAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUQixfOrj7rNnC7/VUrof0b4cDTyQwHwYDVR0j BBgwFoAU7ixS975SoOtpWlSaQucB7ufkXWgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWE0ODlhNi01NDg1LTQ4N2YtYjVkZC04ZjRlZGViNDZiY2IvMC9FRTJDNTJGN0JF NTJBMEVCNjk1QTU0OUE0MkU3MDFFRUU3RTQ1RDY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUUyQzUyRjdCRTUyQTBFQjY5NUE1NDlBNDJFNzAxRUVFN0U0 NUQ2OC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhNDg5YTYtNTQ4NS00ODdmLWI1 ZGQtOGY0ZWRlYjQ2YmNiLzAvMzEzMDMzMmUzMjMwMmUzODM2MmUzMDJmMzIzNDJk MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnFFYwDQYJKoZIhvcNAQEL BQADggEBAHmY7IpwR+mmxqGq4um6kTeaqiSuLvEVpk9Xo3I+VmMiYB71Bd9+sqVp GKL+o3Sqt7SbUxBqyO+ACx3oSjluUY0SbJXCwZFdLUgaLld1XnF0hvyH3PaHvJuF Hlm481j+6LIh6/jxKa57SjkD7HZmyyHkx55+eWTH4GhobN+JDgRc0qqsXFpDse+0 NuHwepVkhYi6ai5m9JiyjRbmO/hNnYwc91mDv10yEEJO9Clb5gS6tKhlWrIw6xBN VoVOSffjRC0JZJCLygGp6VfzFfBL8kx52YVbnUJfEt0k7h1Zfi4pgEtd49kNx7K4 f9MR+BIC2f93VDdAIPZHJ8Y2uBZf2y8= -----END CERTIFICATE-----Generated at Sat Aug 23 17:50:30 2025 by rpki-client