$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa File: 3130332e332e3231322e302f32322d3232203d3e203338313439.roa (raw, json) Hash identifier: 5psPknEmypZIRcV8YM/0X/lutsHgczkNWReWTG7yCJE= Subject key identifier: 51:33:73:C9:4F:B9:FF:13:5B:90:ED:FB:76:98:14:01:A1:C7:87:0B Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 2AC03A2D2EEFCFAE5DDADBC41797A4546586E486 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa Signing time: Thu 21 Aug 2025 14:00:00 +0000 ROA not before: Thu 21 Aug 2025 13:55:00 +0000 ROA not after: Thu 20 Aug 2026 14:00:00 +0000 asID: 38149 IP address blocks: 103.3.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 06:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c0:3a:2d:2e:ef:cf:ae:5d:da:db:c4:17:97:a4:54:65:86:e4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Aug 21 13:55:00 2025 GMT Not After : Aug 20 14:00:00 2026 GMT Subject: CN=513373C94FB9FF135B90EDFB76981401A1C7870B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c0:f5:a6:9e:d1:8d:e7:ca:a6:ff:c2:d1:6e: cb:51:61:3c:e1:48:78:f6:9a:d1:9b:77:4c:8f:93: 39:14:df:82:b2:8b:22:67:a5:bb:64:c5:c3:21:a4: 37:5f:36:1e:0d:ab:2e:c9:c3:1b:2a:bc:9c:2c:de: 69:95:91:94:6d:a8:40:6f:ba:7e:16:13:a2:1f:85: 2e:70:0f:c2:d7:4c:71:8c:ec:f8:3b:4e:0b:f4:c4: 3c:4b:75:15:ae:0d:02:13:3d:4c:88:9e:dd:a8:d1: 5e:39:91:98:14:02:6d:af:f3:45:e6:40:e7:20:10: 5b:af:fb:c8:26:5e:73:ab:ef:38:58:3a:ed:98:bb: 97:1c:58:f1:0a:97:53:39:f9:29:58:8b:81:94:80: b2:12:1c:ce:43:ec:f5:68:8a:2b:b0:30:c2:e3:6b: fc:a3:f5:c4:b7:9c:9b:de:91:5c:77:20:03:a6:40: 74:95:4a:f6:8d:a4:3c:fd:2d:87:b2:b7:88:b4:19: d0:75:e7:98:39:12:c6:4f:07:92:eb:0b:c5:7b:a3: 43:11:f7:81:91:c6:0f:48:c4:72:63:30:c5:23:a9: 56:73:2f:d4:7b:50:a7:24:44:04:af:46:b8:79:3d: 4b:0a:d7:ca:53:ae:c8:a1:98:36:29:54:2a:67:e6: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:33:73:C9:4F:B9:FF:13:5B:90:ED:FB:76:98:14:01:A1:C7:87:0B X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3130332e332e3231322e302f32322d3232203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.212.0/22 Signature Algorithm: sha256WithRSAEncryption a5:42:5b:21:f4:58:ae:46:97:5d:1a:bf:16:02:5c:b0:10:f2: 0f:48:25:51:59:8d:cf:42:3b:02:53:86:8c:b0:c5:77:0f:9a: 68:a5:01:4d:67:c7:bd:10:a4:ea:c2:6e:20:03:30:ee:8e:54: 4d:4b:d5:d5:a4:12:82:58:2e:ca:80:7a:15:dd:18:0d:2d:3b: 81:b8:a8:92:aa:62:9c:9e:fa:04:19:19:b0:c5:a9:7b:2c:de: 69:39:47:c4:5e:b2:a3:0f:9f:26:9d:14:6a:b5:07:7c:03:e1: 0a:c8:1b:a6:73:49:9d:2e:96:27:2e:1b:32:35:55:ea:0e:dc: 19:df:d4:2a:a3:e9:38:a1:e1:13:e0:23:c7:bb:74:e8:ae:a5: c9:a0:6b:aa:d7:38:87:41:d1:db:13:d1:b5:71:81:4a:f4:0b: b2:dd:c9:7d:92:5f:70:6e:33:76:b7:88:a6:90:0e:31:97:96: a4:a7:95:77:a1:5f:66:45:24:4a:08:28:cf:99:ac:38:e9:bd: 3c:b2:ec:ef:59:f4:54:50:c2:c8:32:6d:ef:cf:08:cf:a5:7b: 1c:73:a7:44:cf:5c:db:e2:7e:54:50:79:8a:51:52:7c:6f:98: 35:b8:72:97:e8:c5:25:8e:05:4f:1a:bb:c1:18:52:91:36:d6: 9e:99:3e:e1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUKsA6LS7vz65d2tvEF5ekVGWG5IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA4MjExMzU1MDBaFw0yNjA4MjAxNDAwMDBaMDMxMTAvBgNV BAMTKDUxMzM3M0M5NEZCOUZGMTM1QjkwRURGQjc2OTgxNDAxQTFDNzg3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuwPWmntGN58qm/8LRbstRYTzh SHj2mtGbd0yPkzkU34KyiyJnpbtkxcMhpDdfNh4Nqy7JwxsqvJws3mmVkZRtqEBv un4WE6IfhS5wD8LXTHGM7Pg7Tgv0xDxLdRWuDQITPUyInt2o0V45kZgUAm2v80Xm QOcgEFuv+8gmXnOr7zhYOu2Yu5ccWPEKl1M5+SlYi4GUgLISHM5D7PVoiiuwMMLj a/yj9cS3nJvekVx3IAOmQHSVSvaNpDz9LYeyt4i0GdB155g5EsZPB5LrC8V7o0MR 94GRxg9IxHJjMMUjqVZzL9R7UKckRASvRrh5PUsK18pTrsihmDYpVCpn5rTJAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUUTNzyU+5/xNbkO37dpgUAaHHhwswHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzAzMzJlMzMyZTMyMzEzMjJlMzAyZjMyMzIy ZDMyMzIyMDNkM2UyMDMzMzgzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnA9QwDQYJKoZIhvcN AQELBQADggEBAKVCWyH0WK5Gl10avxYCXLAQ8g9IJVFZjc9COwJThoywxXcPmmil AU1nx70QpOrCbiADMO6OVE1L1dWkEoJYLsqAehXdGA0tO4G4qJKqYpye+gQZGbDF qXss3mk5R8ResqMPnyadFGq1B3wD4QrIG6ZzSZ0ulicuGzI1VeoO3Bnf1Cqj6Tih 4RPgI8e7dOiupcmga6rXOIdB0dsT0bVxgUr0C7LdyX2SX3BuM3a3iKaQDjGXlqSn lXehX2ZFJEoIKM+ZrDjpvTyy7O9Z9FRQwsgybe/PCM+lexxzp0TPXNviflRQeYpR UnxvmDW4cpfoxSWOBU8au8EYUpE21p6ZPuE= -----END CERTIFICATE-----Generated at Sun Aug 24 07:34:48 2025 by rpki-client