$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa File: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (raw, json) Hash identifier: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64= Subject key identifier: B8:9A:3C:06:E8:61:6D:B7:27:31:AA:6C:11:3A:80:0A:40:16:C1:14 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 35CFF18540CFEC9C8F2FB67E2894D6EE58807B4C Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa Signing time: Sun 20 Jul 2025 10:02:24 +0000 ROA not before: Sun 20 Jul 2025 09:57:24 +0000 ROA not after: Sun 19 Jul 2026 10:02:24 +0000 asID: 17995 IP address blocks: 103.139.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cf:f1:85:40:cf:ec:9c:8f:2f:b6:7e:28:94:d6:ee:58:80:7b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Jul 20 09:57:24 2025 GMT Not After : Jul 19 10:02:24 2026 GMT Subject: CN=B89A3C06E8616DB72731AA6C113A800A4016C114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b2:04:9e:df:01:ae:e3:e9:98:c8:f9:99:bd: 6e:ad:b3:95:da:a0:1c:45:6a:74:e5:55:3e:21:64: da:72:71:89:12:a2:d0:75:59:9a:39:ae:38:a5:dc: 40:ca:4a:34:dd:a6:7b:88:b5:4f:df:fa:93:6b:85: 93:31:2f:73:e1:a0:19:bb:f0:f9:db:01:ee:2e:50: 1f:75:f2:eb:06:69:73:63:63:01:a4:74:0c:16:43: 6a:d6:a7:db:ce:b6:e6:b2:37:ec:d8:63:b9:6c:d2: 36:00:2f:67:cb:c6:87:ef:a3:08:c4:9b:50:0b:29: 8d:1d:da:d7:51:92:a7:9b:b1:d2:8a:a8:92:9b:1e: 70:6a:59:11:4f:7c:95:10:06:7b:59:50:c1:6d:e0: 9c:e1:1a:94:e1:04:4c:ef:9b:81:8d:7f:ce:15:85: 15:44:f7:14:e2:41:14:b4:10:b2:ac:6b:50:9c:1b: 05:63:17:48:88:cc:82:dd:ef:2c:db:9d:3c:9e:8e: 10:50:17:1a:b7:48:47:4f:00:1f:07:d3:26:b5:82: ea:b1:d3:72:a3:db:7d:57:23:54:f3:63:82:d6:f0: 0e:69:34:a1:6a:62:5f:2b:91:80:56:59:91:c9:d6: b2:07:03:86:8c:07:3b:03:1f:f0:58:85:6a:ba:b4: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9A:3C:06:E8:61:6D:B7:27:31:AA:6C:11:3A:80:0A:40:16:C1:14 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.46.0/24 Signature Algorithm: sha256WithRSAEncryption b5:04:eb:6c:c1:98:9b:a1:5a:36:67:4f:7d:76:a7:f9:e4:06: 4d:af:77:d4:c7:93:34:cd:09:ac:3d:d0:fd:54:49:72:1a:11: f7:e6:d9:cf:9d:13:b5:e4:02:51:84:8e:7a:0f:77:58:67:32: d9:ba:18:a7:14:af:0e:f3:29:5b:40:31:f1:5d:60:16:96:0b: ec:a5:73:a8:3d:c6:04:1c:60:f0:6f:fc:eb:02:87:f0:78:f2: 0f:4d:49:b4:c2:8a:fa:56:a3:75:12:b7:f6:ad:1d:99:ad:46: 62:c9:f2:32:e5:95:05:e9:9c:b5:33:c4:13:64:52:a6:02:e5: e8:0e:31:e8:02:79:79:27:af:1b:2c:45:2f:af:05:55:65:9a: bb:93:39:4f:0f:ef:f9:18:12:3a:2d:0f:71:b8:0e:1a:6a:05: 80:b5:b9:5c:a7:a4:f9:4e:57:9a:58:66:48:7e:ca:18:17:fe: 08:a3:2e:43:c8:a6:25:27:cb:d7:70:ec:9f:71:b1:29:9a:fa: 44:8e:59:ab:3c:26:12:f3:2f:f2:69:c3:4e:8b:a4:45:f1:5b: 10:01:fe:39:2b:a8:77:07:04:4a:66:42:ae:59:43:13:ee:e4: b4:2e:a6:1d:2b:35:5e:75:4d:82:f5:cd:6e:1b:a6:53:9f:da: c3:bb:44:65 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNc/xhUDP7JyPL7Z+KJTW7liAe0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTA3MjAwOTU3MjRaFw0yNjA3MTkxMDAyMjRaMDMxMTAvBgNV BAMTKEI4OUEzQzA2RTg2MTZEQjcyNzMxQUE2QzExM0E4MDBBNDAxNkMxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlsgSe3wGu4+mYyPmZvW6ts5Xa oBxFanTlVT4hZNpycYkSotB1WZo5rjil3EDKSjTdpnuItU/f+pNrhZMxL3PhoBm7 8PnbAe4uUB918usGaXNjYwGkdAwWQ2rWp9vOtuayN+zYY7ls0jYAL2fLxofvowjE m1ALKY0d2tdRkqebsdKKqJKbHnBqWRFPfJUQBntZUMFt4JzhGpThBEzvm4GNf84V hRVE9xTiQRS0ELKsa1CcGwVjF0iIzILd7yzbnTyejhBQFxq3SEdPAB8H0ya1guqx 03Kj231XI1TzY4LW8A5pNKFqYl8rkYBWWZHJ1rIHA4aMBzsDH/BYhWq6tHT3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUuJo8BuhhbbcnMapsETqACkAWwRQwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyMzA3MzkwLTZlZjMtNDQ3Ni1h NmFhLWQwYzU3ODNlMWYzNy8wLzMxMzAzMzJlMzEzMzM5MmUzNDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeLLjANBgkqhkiG 9w0BAQsFAAOCAQEAtQTrbMGYm6FaNmdPfXan+eQGTa931MeTNM0JrD3Q/VRJchoR 9+bZz50TteQCUYSOeg93WGcy2boYpxSvDvMpW0Ax8V1gFpYL7KVzqD3GBBxg8G/8 6wKH8HjyD01JtMKK+lajdRK39q0dma1GYsnyMuWVBemctTPEE2RSpgLl6A4x6AJ5 eSevGyxFL68FVWWau5M5Tw/v+RgSOi0PcbgOGmoFgLW5XKek+U5XmlhmSH7KGBf+ CKMuQ8imJSfL13Dsn3GxKZr6RI5ZqzwmEvMv8mnDToukRfFbEAH+OSuodwcESmZC rllDE+7ktC6mHSs1XnVNgvXNbhumU5/aw7tEZQ== -----END CERTIFICATE-----Generated at Wed Jul 23 12:01:11 2025 by rpki-client