$ rpki-client -vvf repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa File: 3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa (raw, json) Hash identifier: S22ChZGEvJ5gAYFztY/TYC839FBrS83Y5ZysrOVb4ss= Subject key identifier: 91:17:38:3D:28:3B:CA:6A:AE:24:E7:32:EA:81:84:EF:44:85:DE:52 Certificate issuer: /CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Certificate serial: 196842EE3971357D656EE106528B27E5784EA4B5 Authority key identifier: E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa Signing time: Fri 15 Aug 2025 16:00:01 +0000 ROA not before: Fri 15 Aug 2025 15:55:01 +0000 ROA not after: Fri 14 Aug 2026 16:00:01 +0000 asID: 139364 IP address blocks: 103.141.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:68:42:ee:39:71:35:7d:65:6e:e1:06:52:8b:27:e5:78:4e:a4:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4858A261547AAC065CDF96C21F8A9A2C36CEE65 Validity Not Before: Aug 15 15:55:01 2025 GMT Not After : Aug 14 16:00:01 2026 GMT Subject: CN=9117383D283BCA6AAE24E732EA8184EF4485DE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:e5:5f:bf:36:27:a8:82:ac:6a:82:f1:22: 11:c9:34:78:4b:93:3f:d4:5a:36:89:58:f8:25:bd: 3e:93:3c:d6:61:e6:b7:ec:e4:4e:f6:73:81:18:f7: db:36:6d:70:db:45:ac:91:60:26:99:89:b2:b6:fc: 1d:12:55:50:9a:92:77:11:6e:4b:5d:41:3a:d0:9a: fe:9a:d1:aa:65:21:6f:ec:5a:6b:da:c8:b2:73:71: 91:8b:c5:03:53:f7:0e:51:a3:e3:a9:1e:29:6e:40: d6:a3:52:55:18:bc:95:61:ae:fd:ef:12:fa:01:5a: 7f:09:85:1c:f5:e5:83:a0:f5:7e:35:c7:a2:20:e7: 45:35:7f:13:01:f4:57:67:5f:ca:0f:7d:01:97:f2: 8d:c1:79:9c:b3:ee:2b:3b:36:3e:ea:aa:9e:6e:3f: 14:d3:12:bf:5e:29:9a:c3:cf:db:8c:04:08:16:ce: ac:b5:98:c4:b1:d7:7c:b4:6a:15:0d:f4:38:ad:21: d4:5d:94:12:5f:e0:e0:2a:f2:6e:5b:fe:fb:95:b3: fd:e4:cf:f1:46:c6:4b:fa:f5:d3:19:e4:d7:a9:d1: 5c:3f:f1:de:4e:66:8f:dd:95:25:37:38:07:bc:9f: 90:ae:92:ee:12:63:ab:3c:73:9f:27:5e:83:09:fa: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:17:38:3D:28:3B:CA:6A:AE:24:E7:32:EA:81:84:EF:44:85:DE:52 X509v3 Authority Key Identifier: keyid:E4:85:8A:26:15:47:AA:C0:65:CD:F9:6C:21:F8:A9:A2:C3:6C:EE:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4858A261547AAC065CDF96C21F8A9A2C36CEE65.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e328aac3-0094-421f-a201-24d820e2ab3d/0/3130332e3134312e3233342e302f32342d3234203d3e20313339333634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.234.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:99:66:f8:c9:3e:4e:be:2e:94:e7:ed:f3:d6:12:09:89:41: 49:ee:c9:b2:58:f9:64:13:63:ec:d8:95:1d:76:8f:a1:46:92: 72:57:43:7f:57:2f:9e:1c:d8:23:98:54:26:60:72:b7:c7:82: dc:72:ee:a3:3a:3d:b2:e5:a6:28:cb:ac:1f:98:a4:82:c6:a2: d6:c6:ba:f7:10:39:14:a6:e2:dc:2c:24:cd:44:8c:fb:92:e8: 7f:61:1d:d3:e3:88:08:e8:ef:a0:b9:05:a4:66:22:b1:27:b9: b5:1f:d4:ce:a2:85:80:fd:c6:63:36:61:20:9e:1a:33:6a:ba: 47:62:56:24:75:9e:8b:c3:63:0b:6c:97:b6:d4:a5:5c:77:cc: 58:74:42:7e:46:b8:32:5c:5b:ef:73:37:b6:b8:d8:1a:b2:b4: 69:84:c9:e9:00:6a:aa:c8:b4:36:6b:08:de:b7:94:9e:74:5e: f8:2c:02:89:f3:0c:73:42:94:cd:bb:38:de:4a:04:ea:09:3e: 86:32:46:5b:23:8b:62:c6:26:64:ed:5f:07:1f:3d:1a:2c:54: a7:b9:99:a9:34:b2:90:19:d9:18:a2:67:ed:e7:1e:20:a2:6f: ec:95:7e:58:e9:a5:a3:82:3a:a0:63:8f:68:28:54:32:53:3a: 5d:33:1d:e5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUGWhC7jlxNX1lbuEGUosn5XhOpLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJD MzZDRUU2NTAeFw0yNTA4MTUxNTU1MDFaFw0yNjA4MTQxNjAwMDFaMDMxMTAvBgNV BAMTKDkxMTczODNEMjgzQkNBNkFBRTI0RTczMkVBODE4NEVGNDQ4NURFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANeVfvzYnqIKsaoLxIhHJNHhL kz/UWjaJWPglvT6TPNZh5rfs5E72c4EY99s2bXDbRayRYCaZibK2/B0SVVCakncR bktdQTrQmv6a0aplIW/sWmvayLJzcZGLxQNT9w5Ro+OpHiluQNajUlUYvJVhrv3v EvoBWn8JhRz15YOg9X41x6Ig50U1fxMB9FdnX8oPfQGX8o3BeZyz7is7Nj7qqp5u PxTTEr9eKZrDz9uMBAgWzqy1mMSx13y0ahUN9DitIdRdlBJf4OAq8m5b/vuVs/3k z/FGxkv69dMZ5Nep0Vw/8d5OZo/dlSU3OAe8n5Cuku4SY6s8c58nXoMJ+mwVAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUkRc4PSg7ymquJOcy6oGE70SF3lIwHwYDVR0j BBgwFoAU5IWKJhVHqsBlzflsIfiposNs7mUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI4YWFjMy0wMDk0LTQyMWYtYTIwMS0yNGQ4MjBlMmFiM2QvMC9FNDg1OEEyNjE1 NDdBQUMwNjVDREY5NkMyMUY4QTlBMkMzNkNFRTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4NThBMjYxNTQ3QUFDMDY1Q0RGOTZDMjFGOEE5QTJDMzZD RUU2NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UzMjhhYWMzLTAwOTQtNDIxZi1h MjAxLTI0ZDgyMGUyYWIzZC8wLzMxMzAzMzJlMzEzNDMxMmUzMjMzMzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjeowDQYJ KoZIhvcNAQELBQADggEBAFqZZvjJPk6+LpTn7fPWEgmJQUnuybJY+WQTY+zYlR12 j6FGknJXQ39XL54c2COYVCZgcrfHgtxy7qM6PbLlpijLrB+YpILGotbGuvcQORSm 4twsJM1EjPuS6H9hHdPjiAjo76C5BaRmIrEnubUf1M6ihYD9xmM2YSCeGjNqukdi ViR1novDYwtsl7bUpVx3zFh0Qn5GuDJcW+9zN7a42BqytGmEyekAaqrItDZrCN63 lJ50XvgsAonzDHNClM27ON5KBOoJPoYyRlsji2LGJmTtXwcfPRosVKe5mak0spAZ 2RiiZ+3nHiCib+yVfljppaOCOqBjj2goVDJTOl0zHeU= -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:25 2025 by rpki-client