$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa File: 3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa (raw, json) Hash identifier: aAQ3gTdw9Ba4EyqO5leg/m+5A85FY5W+Vc3itSgQl30= Subject key identifier: 06:DC:A1:9A:5F:8C:E2:2B:EF:46:90:99:BE:03:E1:CF:F6:9D:06:26 Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 75771CA5211662F89E71460F8694929640B89400 Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa Signing time: Tue 12 Aug 2025 10:57:50 +0000 ROA not before: Tue 12 Aug 2025 10:52:50 +0000 ROA not after: Tue 11 Aug 2026 10:57:50 +0000 asID: 151521 IP address blocks: 103.234.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:77:1c:a5:21:16:62:f8:9e:71:46:0f:86:94:92:96:40:b8:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Aug 12 10:52:50 2025 GMT Not After : Aug 11 10:57:50 2026 GMT Subject: CN=06DCA19A5F8CE22BEF469099BE03E1CFF69D0626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:3c:67:cd:e0:29:3f:f3:ce:5e:2d:1f:ef: 97:00:c7:9e:06:19:a5:84:7e:9d:6f:90:67:9f:0b: d3:45:b0:89:38:eb:a0:da:7c:18:78:9e:39:10:fa: f8:a1:00:6c:cc:37:19:42:d8:00:b5:26:d5:d0:04: 55:cc:55:ac:8d:e6:8f:6b:68:c4:a0:ee:78:c5:79: 6f:48:82:13:98:01:08:d1:83:55:ec:f9:e5:a8:6e: 26:38:25:87:c5:aa:8e:71:bd:64:f0:6d:c4:2e:fd: 81:fd:3e:20:76:e1:63:15:d0:a3:96:e2:4d:04:7a: 2f:b3:94:4a:34:1d:bd:df:a4:91:65:a4:d5:c6:e7: 90:01:bc:1b:6d:d7:ca:f9:fe:60:c2:fb:a2:cd:f2: 46:a2:4f:fd:8d:10:f1:48:84:e0:45:47:96:fd:21: f2:4f:0d:50:f2:06:eb:69:44:64:29:6b:87:32:b1: 67:34:4d:ca:6b:34:6a:77:54:32:c2:c4:81:62:94: 37:4c:93:60:aa:81:8e:29:39:9f:0d:ce:12:4e:41: 7d:eb:97:18:84:5b:a0:8a:7c:e3:c6:40:4b:55:83: 6b:9c:95:36:b8:d1:53:9c:12:45:cb:06:b1:6e:5f: df:aa:3a:ca:5e:92:b4:09:d6:25:b7:e0:65:30:a4: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DC:A1:9A:5F:8C:E2:2B:EF:46:90:99:BE:03:E1:CF:F6:9D:06:26 X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33342e302f32342d3234203d3e20313531353231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.34.0/24 Signature Algorithm: sha256WithRSAEncryption 22:e0:a7:27:19:62:e9:be:e7:96:d1:c9:f3:5b:5c:c8:39:a5: aa:ef:e9:d1:45:ab:61:a1:72:23:dd:90:cd:0b:86:fa:ff:7b: aa:7a:7f:ec:4b:8a:80:ef:58:81:ce:f8:6a:7f:c6:60:19:a2: fb:2c:75:c0:34:c6:2f:0d:43:b5:b5:c7:f3:25:44:00:6b:47: 0d:0a:00:ee:7f:a5:2d:4b:49:12:30:cc:36:89:a6:ab:3a:f1: 36:ec:5c:e9:50:1d:ac:44:01:72:d3:20:e3:1c:d6:ce:07:9c: 7f:26:42:77:b1:4b:89:2a:29:83:ae:c2:99:97:0b:59:63:72: f1:95:88:1c:ba:e5:bd:22:83:91:58:6e:ce:dd:e2:b3:c7:e9: 6d:02:b4:63:1b:41:7a:6c:e6:90:ed:9f:ad:39:f3:bd:6a:1e: f3:2e:71:44:ff:fe:33:42:bf:16:7a:6c:11:d5:84:11:72:7d: 64:55:a5:1a:c5:2f:29:32:d3:4e:bb:ee:87:a5:30:3a:f3:db: 55:79:26:63:fb:64:18:4c:d4:71:36:a4:3d:fc:92:0c:eb:a4: 49:9b:2a:e3:ef:93:cb:1f:55:75:3d:1f:fa:2a:5e:0f:b2:16: 2c:78:3c:47:5c:bb:0b:64:29:c4:b7:df:de:f1:04:3a:17:0c: 61:ef:5f:e1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdXccpSEWYviecUYPhpSSlkC4lAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA4MTIxMDUyNTBaFw0yNjA4MTExMDU3NTBaMDMxMTAvBgNV BAMTKDA2RENBMTlBNUY4Q0UyMkJFRjQ2OTA5OUJFMDNFMUNGRjY5RDA2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjDxnzeApP/POXi0f75cAx54G GaWEfp1vkGefC9NFsIk466DafBh4njkQ+vihAGzMNxlC2AC1JtXQBFXMVayN5o9r aMSg7njFeW9IghOYAQjRg1Xs+eWobiY4JYfFqo5xvWTwbcQu/YH9PiB24WMV0KOW 4k0Eei+zlEo0Hb3fpJFlpNXG55ABvBtt18r5/mDC+6LN8kaiT/2NEPFIhOBFR5b9 IfJPDVDyButpRGQpa4cysWc0TcprNGp3VDLCxIFilDdMk2CqgY4pOZ8NzhJOQX3r lxiEW6CKfOPGQEtVg2uclTa40VOcEkXLBrFuX9+qOspekrQJ1iW34GUwpEB5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBtyhml+M4ivvRpCZvgPhz/adBiYwHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3YTZiMjNiLWM0MWUtNDQ0OS1h MTQ5LWJjMGM2YzhiMDExYi8wLzMxMzAzMzJlMzIzMzM0MmUzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+oiMA0GCSqG SIb3DQEBCwUAA4IBAQAi4KcnGWLpvueW0cnzW1zIOaWq7+nRRathoXIj3ZDNC4b6 /3uqen/sS4qA71iBzvhqf8ZgGaL7LHXANMYvDUO1tcfzJUQAa0cNCgDuf6UtS0kS MMw2iaarOvE27FzpUB2sRAFy0yDjHNbOB5x/JkJ3sUuJKimDrsKZlwtZY3LxlYgc uuW9IoORWG7O3eKzx+ltArRjG0F6bOaQ7Z+tOfO9ah7zLnFE//4zQr8WemwR1YQR cn1kVaUaxS8pMtNOu+6HpTA689tVeSZj+2QYTNRxNqQ9/JIM66RJmyrj75PLH1V1 PR/6Kl4PshYseDxHXLsLZCnEt9/e8QQ6Fwxh71/h -----END CERTIFICATE-----Generated at Sat Aug 23 13:17:21 2025 by rpki-client