$ rpki-client -vvf repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa File: 3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa (raw, json) Hash identifier: AZoj+0FC7tr+2ZKJboWJyczOYWAwC/zNvBvRBqK06eM= Subject key identifier: B5:E1:F1:3F:C0:31:E5:D9:FD:BE:EB:C2:04:7F:31:1B:DD:7F:54:CE Certificate issuer: /CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Certificate serial: 29B04E37755F01C8BFCD590AE6899987B103101E Authority key identifier: D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa Signing time: Tue 12 Aug 2025 10:58:06 +0000 ROA not before: Tue 12 Aug 2025 10:53:06 +0000 ROA not after: Tue 11 Aug 2026 10:58:06 +0000 asID: 151521 IP address blocks: 103.234.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b0:4e:37:75:5f:01:c8:bf:cd:59:0a:e6:89:99:87:b1:03:10:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D77C7D38397FCDE17250AA403BF110EC387F7C02 Validity Not Before: Aug 12 10:53:06 2025 GMT Not After : Aug 11 10:58:06 2026 GMT Subject: CN=B5E1F13FC031E5D9FDBEEBC2047F311BDD7F54CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:31:eb:f7:3e:8d:48:74:42:73:0e:94:c8: b6:5f:22:0a:44:aa:ef:a7:55:bb:59:96:21:c6:52: d8:2b:d4:74:ec:00:1c:97:2e:7d:e8:cb:4a:f5:e7: 8e:68:5c:ae:7b:ef:cb:68:8a:93:4c:d8:7e:db:d7: 12:23:0b:21:2e:a5:99:7e:24:0f:b0:8e:72:54:5a: da:c7:11:77:7f:97:01:a6:a9:95:a1:b3:a0:3a:a7: 3c:62:e3:8a:cc:c1:90:d2:5f:13:f1:a9:54:12:13: 2f:67:7e:18:de:7c:78:ba:2f:64:01:6b:e2:40:0c: da:47:f1:d1:45:61:15:e4:c7:ef:a2:d8:4b:83:3e: 0e:8d:a8:52:93:8c:26:c1:13:7c:a0:ed:4e:99:e6: 6f:e0:4b:53:92:20:51:9a:a3:64:df:96:4a:e7:58: 1f:e8:02:3b:a3:bf:49:bf:c9:d9:be:3a:d6:d0:12: f7:f5:0d:ad:a6:ab:63:98:12:7b:cf:81:46:db:48: ba:ea:b6:22:43:68:72:d0:2d:81:f1:db:d7:b5:49: ea:5e:12:83:4f:7b:e0:ad:01:fd:55:de:cc:31:d2: e5:35:8c:f8:fa:a5:8d:43:cd:3c:65:6f:75:fb:1f: cc:ec:ea:f4:00:f8:5f:f3:32:40:0c:fb:c7:8a:cd: b2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E1:F1:3F:C0:31:E5:D9:FD:BE:EB:C2:04:7F:31:1B:DD:7F:54:CE X509v3 Authority Key Identifier: keyid:D7:7C:7D:38:39:7F:CD:E1:72:50:AA:40:3B:F1:10:EC:38:7F:7C:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/D77C7D38397FCDE17250AA403BF110EC387F7C02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D77C7D38397FCDE17250AA403BF110EC387F7C02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7a6b23b-c41e-4449-a149-bc0c6c8b011b/0/3130332e3233342e33352e302f32342d3234203d3e20313531353231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.35.0/24 Signature Algorithm: sha256WithRSAEncryption a2:44:f2:c1:a1:5f:f5:ee:9b:b8:89:40:e2:5c:9f:6b:a7:8f: ca:05:fb:de:13:3c:0a:8e:27:a8:f1:4d:69:c4:6d:59:6a:a7: 00:cc:dd:29:c9:ee:ec:dd:d1:28:62:61:83:2f:86:12:27:18: fa:eb:e2:2c:76:39:5d:42:13:45:2f:ac:5a:11:25:12:11:22: 39:e8:ae:7c:fe:11:00:f5:d1:ae:49:3e:9e:44:e6:76:89:6d: 35:97:93:e7:08:93:92:c1:08:6a:f8:a6:4c:c4:80:1c:a6:f2: 36:c3:65:7b:f5:0d:2a:c1:9d:fc:52:c8:5f:0b:e0:4c:08:81: 33:15:79:6e:96:65:fe:d9:91:88:45:fc:91:d9:54:7f:b1:98: be:30:c4:de:22:c9:a1:d2:f1:50:1c:65:d4:9d:1f:8e:4d:28: f8:ce:01:0d:db:9a:1f:4c:83:98:f7:23:a5:1d:95:16:80:00: 02:36:4d:54:76:3c:46:3c:4b:b8:61:b3:48:38:f2:dc:6f:42: e2:ac:bf:69:45:bb:c6:22:da:2a:f8:fc:42:37:75:07:98:f5: 0e:16:cd:e4:b6:7a:ba:ae:78:81:94:b7:35:fa:cb:d5:b5:b3: b0:49:d4:53:a1:61:46:30:75:60:cc:61:6d:78:da:42:4d:ca: 93:35:75:17 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKbBON3VfAci/zVkK5omZh7EDEB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMz ODdGN0MwMjAeFw0yNTA4MTIxMDUzMDZaFw0yNjA4MTExMDU4MDZaMDMxMTAvBgNV BAMTKEI1RTFGMTNGQzAzMUU1RDlGREJFRUJDMjA0N0YzMTFCREQ3RjU0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTDHr9z6NSHRCcw6UyLZfIgpE qu+nVbtZliHGUtgr1HTsAByXLn3oy0r1545oXK5778toipNM2H7b1xIjCyEupZl+ JA+wjnJUWtrHEXd/lwGmqZWhs6A6pzxi44rMwZDSXxPxqVQSEy9nfhjefHi6L2QB a+JADNpH8dFFYRXkx++i2EuDPg6NqFKTjCbBE3yg7U6Z5m/gS1OSIFGao2Tflkrn WB/oAjujv0m/ydm+OtbQEvf1Da2mq2OYEnvPgUbbSLrqtiJDaHLQLYHx29e1Sepe EoNPe+CtAf1V3swx0uU1jPj6pY1DzTxlb3X7H8zs6vQA+F/zMkAM+8eKzbJFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUteHxP8Ax5dn9vuvCBH8xG91/VM4wHwYDVR0j BBgwFoAU13x9ODl/zeFyUKpAO/EQ7Dh/fAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2E2YjIzYi1jNDFlLTQ0NDktYTE0OS1iYzBjNmM4YjAxMWIvMC9ENzdDN0QzODM5 N0ZDREUxNzI1MEFBNDAzQkYxMTBFQzM4N0Y3QzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc3QzdEMzgzOTdGQ0RFMTcyNTBBQTQwM0JGMTEwRUMzODdG N0MwMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3YTZiMjNiLWM0MWUtNDQ0OS1h MTQ5LWJjMGM2YzhiMDExYi8wLzMxMzAzMzJlMzIzMzM0MmUzMzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+ojMA0GCSqG SIb3DQEBCwUAA4IBAQCiRPLBoV/17pu4iUDiXJ9rp4/KBfveEzwKjieo8U1pxG1Z aqcAzN0pye7s3dEoYmGDL4YSJxj66+IsdjldQhNFL6xaESUSESI56K58/hEA9dGu ST6eROZ2iW01l5PnCJOSwQhq+KZMxIAcpvI2w2V79Q0qwZ38UshfC+BMCIEzFXlu lmX+2ZGIRfyR2VR/sZi+MMTeIsmh0vFQHGXUnR+OTSj4zgEN25ofTIOY9yOlHZUW gAACNk1UdjxGPEu4YbNIOPLcb0LirL9pRbvGItoq+PxCN3UHmPUOFs3ktnq6rniB lLc1+svVtbOwSdRToWFGMHVgzGFteNpCTcqTNXUX -----END CERTIFICATE-----Generated at Sat Aug 23 17:27:41 2025 by rpki-client