$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa File: 3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa (raw, json) Hash identifier: Ygp8V6ySgNlfzeAzxcG8tV45vBV3m6RFvl0r9jM7VeY= Subject key identifier: 51:F4:2C:4F:0D:29:86:4C:59:33:BC:D2:39:48:0A:0F:7F:D9:EC:9C Certificate issuer: /CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Certificate serial: 278A6E1102E33324644FBFE1D7C7756A093A0846 Authority key identifier: B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa Signing time: Fri 08 Aug 2025 04:00:02 +0000 ROA not before: Fri 08 Aug 2025 03:55:02 +0000 ROA not after: Fri 07 Aug 2026 04:00:02 +0000 asID: 141580 IP address blocks: 103.160.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8a:6e:11:02:e3:33:24:64:4f:bf:e1:d7:c7:75:6a:09:3a:08:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84 Validity Not Before: Aug 8 03:55:02 2025 GMT Not After : Aug 7 04:00:02 2026 GMT Subject: CN=51F42C4F0D29864C5933BCD239480A0F7FD9EC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:c4:aa:ae:be:20:4e:36:c8:28:05:68:6e: 47:2a:12:d9:e7:e1:4a:2a:5c:c0:64:7b:b1:50:c6: 54:7d:3e:84:0b:2a:99:b7:b6:b6:c4:ba:38:c6:aa: 3a:e3:17:78:6b:51:76:ca:7a:81:54:a9:a5:7c:6b: ba:a6:1c:e3:38:77:2b:ac:4d:92:76:3a:a0:d7:af: ad:61:fc:81:6d:12:50:05:ce:2c:99:65:54:7c:23: 6d:34:eb:b6:0f:51:73:cd:5a:ed:41:ac:13:7a:32: a0:7d:fe:f9:bd:e9:ba:31:d6:60:09:df:23:89:19: 4f:0a:c5:a7:ec:90:ec:9e:c2:8d:48:30:20:01:1d: 33:12:69:fd:c0:28:20:ca:d4:74:ed:59:57:f2:02: 46:b4:ad:4e:92:5c:f5:b7:94:f2:cd:a3:9d:92:42: c9:57:d6:f0:85:92:9c:30:2f:f9:be:64:be:4c:78: a2:95:e3:08:1a:a8:12:bf:13:4b:cb:11:aa:bd:5e: 7c:d4:2d:87:45:37:2d:c2:71:fc:cf:99:fa:4f:d8: 58:96:0a:69:75:26:32:fb:76:f9:f9:a6:9a:7e:6d: ac:ac:ec:45:4b:d9:05:bd:9d:67:eb:45:1d:31:e8: d6:ba:db:29:37:5b:c9:95:1f:25:06:73:be:96:77: 03:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F4:2C:4F:0D:29:86:4C:59:33:BC:D2:39:48:0A:0F:7F:D9:EC:9C X509v3 Authority Key Identifier: keyid:B7:0A:D8:6C:83:CA:BA:C7:AA:D7:B6:64:F2:F6:24:8A:4C:42:BF:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70AD86C83CABAC7AAD7B664F2F6248A4C42BF84.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32332d3234203d3e20313431353830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.56.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:e9:d2:7c:89:ef:2e:76:83:63:51:03:b3:ae:4b:66:90:33: da:38:cd:cc:ee:aa:16:da:40:57:68:08:aa:25:0f:45:6e:45: 94:da:7f:94:ae:64:53:47:d2:43:79:e2:02:84:bc:0d:f6:79: 60:17:8c:75:23:88:3c:0f:a1:d4:61:64:e1:39:f3:96:59:4b: 86:76:94:75:08:1a:01:1e:fd:ed:c5:d7:1e:16:9c:0f:41:ac: c6:2b:46:b0:0a:80:51:64:88:b8:ea:39:2c:81:aa:f2:af:60: 01:3d:d6:52:d8:36:85:87:c9:75:1b:0d:65:a3:df:3c:ac:a1: 65:c7:3e:8b:99:59:47:90:51:19:d7:1e:50:6d:f9:98:c2:89: 12:f3:80:f0:86:3f:fb:c5:9d:16:e0:58:57:3e:82:62:41:bf: ab:ac:71:fd:f0:d9:51:37:5b:d2:25:5a:83:b0:f5:3b:88:f4: 6b:ae:07:b6:17:c1:29:8d:3c:8d:75:8f:1a:c5:73:35:95:cd: 97:35:29:a5:d9:a0:8a:c4:d5:de:b1:79:e9:9c:5f:d6:ca:b5: 17:97:59:29:7f:fc:e5:ee:51:0b:94:93:71:33:dc:e9:5d:2c: 09:63:7e:da:fd:7e:52:fd:88:3a:86:3e:1f:9a:8e:41:0f:b3: dc:35:ad:12 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUJ4puEQLjMyRkT7/h18d1agk6CEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0 QzQyQkY4NDAeFw0yNTA4MDgwMzU1MDJaFw0yNjA4MDcwNDAwMDJaMDMxMTAvBgNV BAMTKDUxRjQyQzRGMEQyOTg2NEM1OTMzQkNEMjM5NDgwQTBGN0ZEOUVDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7MSqrr4gTjbIKAVobkcqEtnn 4UoqXMBke7FQxlR9PoQLKpm3trbEujjGqjrjF3hrUXbKeoFUqaV8a7qmHOM4dyus TZJ2OqDXr61h/IFtElAFziyZZVR8I20067YPUXPNWu1BrBN6MqB9/vm96box1mAJ 3yOJGU8KxafskOyewo1IMCABHTMSaf3AKCDK1HTtWVfyAka0rU6SXPW3lPLNo52S QslX1vCFkpwwL/m+ZL5MeKKV4wgaqBK/E0vLEaq9XnzULYdFNy3CcfzPmfpP2FiW Cml1JjL7dvn5ppp+bays7EVL2QW9nWfrRR0x6Na62yk3W8mVHyUGc76WdwMZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUfQsTw0phkxZM7zSOUgKD3/Z7JwwHwYDVR0j BBgwFoAUtwrYbIPKuseq17Zk8vYkikxCv4QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWI5MzY4Ny0yYjIwLTQxYzktYmZiYi0wMDVmNjdlOTZhOGMvMC9CNzBBRDg2Qzgz Q0FCQUM3QUFEN0I2NjRGMkY2MjQ4QTRDNDJCRjg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcwQUQ4NkM4M0NBQkFDN0FBRDdCNjY0RjJGNjI0OEE0QzQy QkY4NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxYjkzNjg3LTJiMjAtNDFjOS1i ZmJiLTAwNWY2N2U5NmE4Yy8wLzMxMzAzMzJlMzEzNjMwMmUzNTM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6A4MA0GCSqG SIb3DQEBCwUAA4IBAQCc6dJ8ie8udoNjUQOzrktmkDPaOM3M7qoW2kBXaAiqJQ9F bkWU2n+UrmRTR9JDeeIChLwN9nlgF4x1I4g8D6HUYWThOfOWWUuGdpR1CBoBHv3t xdceFpwPQazGK0awCoBRZIi46jksgaryr2ABPdZS2DaFh8l1Gw1lo988rKFlxz6L mVlHkFEZ1x5QbfmYwokS84Dwhj/7xZ0W4FhXPoJiQb+rrHH98NlRN1vSJVqDsPU7 iPRrrge2F8EpjTyNdY8axXM1lc2XNSml2aCKxNXesXnpnF/WyrUXl1kpf/zl7lEL lJNxM9zpXSwJY37a/X5S/Yg6hj4fmo5BD7PcNa0S -----END CERTIFICATE-----Generated at Sat Aug 23 13:40:20 2025 by rpki-client