$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa File: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (raw, json) Hash identifier: pdzJ3feYpdN0es8wvDONiu7iYeQvrOwzFhl3IbpxT1I= Subject key identifier: 1A:51:FB:74:F7:94:57:C5:A2:80:8A:62:35:F8:F4:1F:51:59:4D:CF Certificate issuer: /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Certificate serial: 15C979ED608BE53E24C39911FA4FC157FCEEAAC9 Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa Signing time: Sat 12 Jul 2025 03:00:02 +0000 ROA not before: Sat 12 Jul 2025 02:55:02 +0000 ROA not after: Sat 11 Jul 2026 03:00:02 +0000 asID: 131111 IP address blocks: 103.175.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 17:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c9:79:ed:60:8b:e5:3e:24:c3:99:11:fa:4f:c1:57:fc:ee:aa:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99 Validity Not Before: Jul 12 02:55:02 2025 GMT Not After : Jul 11 03:00:02 2026 GMT Subject: CN=1A51FB74F79457C5A2808A6235F8F41F51594DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:0a:24:2f:ae:54:cc:d7:bc:30:53:ab:c1: 1a:d1:cb:01:78:16:52:26:1e:98:ba:75:b5:ae:6c: 71:be:3e:4e:b1:43:ce:a7:ef:57:f3:87:27:33:5a: b8:46:1b:61:f5:83:d3:6c:66:7d:65:8a:91:0b:55: 1e:59:4f:cc:04:aa:d8:0d:a7:9d:00:f1:9d:3c:48: cf:3a:b0:82:ff:2a:d7:3c:70:d8:13:a4:37:78:c3: d3:5c:45:27:a8:51:ea:83:78:16:0c:a5:0f:4c:92: 95:11:e5:08:96:22:d4:85:ed:07:b5:84:4b:b3:68: 96:86:c3:b0:8f:04:22:e2:ef:27:1a:36:be:0d:89: 4a:2e:1a:48:94:ac:f7:1b:7d:ba:27:62:ab:9a:e1: de:85:40:bf:67:11:2d:db:01:f9:da:4b:29:00:ea: e5:5a:73:39:67:9e:ca:00:32:24:c1:ce:f4:a1:ee: 11:06:3c:72:1c:98:42:3f:1e:15:a9:f3:28:64:33: ba:19:92:d8:dd:98:ca:d8:ec:c7:0f:31:44:f1:a9: 0a:bc:42:92:f1:e9:8a:b3:7e:c4:8d:01:36:bb:52: b8:ac:3d:74:82:b4:bf:c8:a9:a4:6f:84:15:c5:23: 59:41:2a:b7:36:62:81:7e:74:a3:d4:ed:07:6d:79: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:51:FB:74:F7:94:57:C5:A2:80:8A:62:35:F8:F4:1F:51:59:4D:CF X509v3 Authority Key Identifier: keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.42.0/23 Signature Algorithm: sha256WithRSAEncryption 73:55:d6:51:b7:7f:ae:29:3c:39:b5:ff:64:a9:d0:67:0a:41: 43:69:e9:c7:26:43:18:fd:4c:b7:ed:e3:3f:a9:d3:2d:86:05: 91:b7:46:29:1f:a5:56:32:53:41:43:c7:a8:e9:c2:93:fb:de: 24:5e:f5:58:fd:f8:e2:e7:09:fd:14:15:c0:0d:9e:32:c5:63: 2e:29:de:20:76:a6:29:2b:36:20:b4:31:02:6f:ff:1d:51:c1: c5:f6:7d:7f:19:c8:9e:2e:30:b3:7b:02:58:71:dd:a4:ac:ac: 07:c5:ae:c4:24:9a:43:08:a0:9a:c6:e1:ef:9b:d3:6f:18:98: 71:68:17:61:20:09:9a:f0:57:99:20:6a:8d:14:a0:6c:22:93: bd:4d:41:26:f9:97:a3:aa:e5:08:28:f4:96:da:b0:a3:b0:84: 2a:67:6e:5e:eb:f8:ab:f3:a1:4a:7f:b7:59:0d:28:66:f7:d6: 8e:4e:2c:5f:78:23:c8:6d:b0:d2:b9:11:2f:8a:59:94:97:8a: 01:ee:09:be:9c:75:52:8a:84:be:8b:8e:32:a3:cc:f4:68:d9: b8:fc:a7:0d:d6:fe:8d:df:37:dd:c5:6d:51:b7:a5:25:d3:ab: dc:c3:2c:a6:f0:e8:31:78:28:96:c3:90:6f:11:42:c1:7e:75: b8:18:1b:8a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFcl57WCL5T4kw5kR+k/BV/zuqskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdB QjQ0NEQ5OTAeFw0yNTA3MTIwMjU1MDJaFw0yNjA3MTEwMzAwMDJaMDMxMTAvBgNV BAMTKDFBNTFGQjc0Rjc5NDU3QzVBMjgwOEE2MjM1RjhGNDFGNTE1OTREQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2gokL65UzNe8MFOrwRrRywF4 FlImHpi6dbWubHG+Pk6xQ86n71fzhyczWrhGG2H1g9NsZn1lipELVR5ZT8wEqtgN p50A8Z08SM86sIL/Ktc8cNgTpDd4w9NcRSeoUeqDeBYMpQ9MkpUR5QiWItSF7Qe1 hEuzaJaGw7CPBCLi7ycaNr4NiUouGkiUrPcbfbonYqua4d6FQL9nES3bAfnaSykA 6uVaczlnnsoAMiTBzvSh7hEGPHIcmEI/HhWp8yhkM7oZktjdmMrY7McPMUTxqQq8 QpLx6YqzfsSNATa7UrisPXSCtL/IqaRvhBXFI1lBKrc2YoF+dKPU7QdteWKNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGlH7dPeUV8WigIpiNfj0H1FZTc8wHwYDVR0j BBgwFoAUZlll+32hdM8ZzV9koIINN6tETZkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjU4ZGNlYS1iMzgzLTQ0MzItYWQwOC1lNmNmZmFhNTJiN2QvMC82NjU5NjVGQjdE QTE3NENGMTlDRDVGNjRBMDgyMEQzN0FCNDQ0RDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY1OTY1RkI3REExNzRDRjE5Q0Q1RjY0QTA4MjBEMzdBQjQ0 NEQ5OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyNThkY2VhLWIzODMtNDQzMi1h ZDA4LWU2Y2ZmYWE1MmI3ZC8wLzMxMzAzMzJlMzEzNzM1MmUzNDMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ68qMA0GCSqG SIb3DQEBCwUAA4IBAQBzVdZRt3+uKTw5tf9kqdBnCkFDaenHJkMY/Uy37eM/qdMt hgWRt0YpH6VWMlNBQ8eo6cKT+94kXvVY/fji5wn9FBXADZ4yxWMuKd4gdqYpKzYg tDECb/8dUcHF9n1/GcieLjCzewJYcd2krKwHxa7EJJpDCKCaxuHvm9NvGJhxaBdh IAma8FeZIGqNFKBsIpO9TUEm+ZejquUIKPSW2rCjsIQqZ25e6/ir86FKf7dZDShm 99aOTixfeCPIbbDSuREvilmUl4oB7gm+nHVSioS+i44yo8z0aNm4/KcN1v6N3zfd xW1Rt6Ul06vcwyym8OgxeCiWw5BvEULBfnW4GBuK -----END CERTIFICATE-----Generated at Mon Jul 21 18:12:23 2025 by rpki-client