$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa File: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (raw, json) Hash identifier: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo= Subject key identifier: 0C:70:09:39:2F:9C:4A:92:20:71:79:8C:90:05:CB:A2:DC:9E:CE:EA Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 664F654DD6B26BB4AAD49501CD0C8E49911A1C1F Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa Signing time: Sun 13 Jul 2025 10:00:00 +0000 ROA not before: Sun 13 Jul 2025 09:55:00 +0000 ROA not after: Sun 12 Jul 2026 10:00:00 +0000 asID: 150962 IP address blocks: 103.229.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4f:65:4d:d6:b2:6b:b4:aa:d4:95:01:cd:0c:8e:49:91:1a:1c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Jul 13 09:55:00 2025 GMT Not After : Jul 12 10:00:00 2026 GMT Subject: CN=0C7009392F9C4A922071798C9005CBA2DC9ECEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:c7:ea:c6:71:a5:d2:7c:eb:ce:75:e1:7e: 87:45:61:d9:af:05:08:89:8f:5e:7c:e0:df:eb:f2: b7:f6:3e:f1:86:c9:06:80:a8:81:31:6b:83:57:bf: 2e:9d:8c:9c:c8:93:fa:bd:02:0a:48:0b:11:72:87: d6:98:b2:49:3f:b1:a3:32:2f:e7:cd:ec:b2:4a:a9: bc:e0:53:f7:71:73:2f:9c:8f:b1:4f:ec:24:58:80: 68:7d:e8:2e:92:92:fc:03:f4:9b:c6:97:53:0c:78: da:f3:41:b4:13:3b:de:da:44:79:f1:6d:ed:9b:e1: 07:91:a3:a2:46:88:63:b8:80:b3:ea:1a:e7:43:61: 5d:21:ae:70:54:db:36:df:3a:81:78:dc:94:35:d8: 26:76:8f:16:88:00:53:a2:4b:90:d8:9c:7e:ee:03: 3a:63:ed:66:7b:8a:af:a1:54:41:2c:1d:3c:ae:17: 44:0d:b9:7f:ba:06:05:57:1b:40:f2:69:7c:d8:b2: d8:4f:ca:ba:24:04:be:60:e0:3d:3d:aa:18:6d:97: e6:62:4d:1a:2a:a1:a1:51:92:72:fb:b4:30:99:87: a6:cd:2a:4e:1d:00:e7:d5:33:49:bc:a0:8a:30:d3: dd:2c:05:e6:c5:c2:73:af:e0:d6:27:dc:66:ad:01: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:70:09:39:2F:9C:4A:92:20:71:79:8C:90:05:CB:A2:DC:9E:CE:EA X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.131.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:5e:c2:2a:b9:b6:57:35:89:12:9a:9d:33:c0:12:10:f0:16: 87:3e:91:59:d6:f0:a9:3a:20:5b:ce:da:99:6e:ca:09:07:36: d4:77:42:2e:2a:dd:26:7c:20:ac:ba:c8:2f:e6:e6:e2:74:94: 33:af:8e:96:d3:d5:97:57:40:06:98:b3:b8:0b:f7:76:cc:92: 2e:04:0d:3e:73:6d:5a:a8:7b:25:5f:26:72:66:67:48:dc:6b: 8f:ee:b3:6a:c0:4b:2c:87:0e:55:1b:b2:4a:2b:1a:8b:02:94: cb:e5:12:b3:b8:31:a3:92:50:6e:56:9f:71:3b:aa:f4:99:3a: 64:f9:3f:e3:c4:5c:9f:10:5e:48:96:cd:f7:44:d4:32:96:00: 07:af:61:ba:0e:72:ae:67:bf:ab:7d:d7:36:4f:70:c9:af:7f: 60:91:0b:47:e5:7f:49:e5:50:c8:4b:8c:9c:64:51:6d:63:40: 65:c4:cd:47:89:d1:78:30:0e:a9:d1:97:30:19:87:7a:60:0b: 0d:e2:5b:ee:29:76:dd:d5:dd:8b:f0:e5:be:8c:85:0b:b6:95: 1f:bd:31:ae:a3:d4:37:6b:aa:b4:c8:9e:6d:93:ce:eb:e7:31: ee:69:b2:07:83:a9:f4:dc:3e:fc:91:3c:43:f8:43:25:1f:53: a2:ed:3e:b4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUZk9lTdaya7Sq1JUBzQyOSZEaHB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNTA3MTMwOTU1MDBaFw0yNjA3MTIxMDAwMDBaMDMxMTAvBgNV BAMTKDBDNzAwOTM5MkY5QzRBOTIyMDcxNzk4QzkwMDVDQkEyREM5RUNFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfDcfqxnGl0nzrznXhfodFYdmv BQiJj1584N/r8rf2PvGGyQaAqIExa4NXvy6djJzIk/q9AgpICxFyh9aYskk/saMy L+fN7LJKqbzgU/dxcy+cj7FP7CRYgGh96C6SkvwD9JvGl1MMeNrzQbQTO97aRHnx be2b4QeRo6JGiGO4gLPqGudDYV0hrnBU2zbfOoF43JQ12CZ2jxaIAFOiS5DYnH7u Azpj7WZ7iq+hVEEsHTyuF0QNuX+6BgVXG0DyaXzYsthPyrokBL5g4D09qhhtl+Zi TRoqoaFRknL7tDCZh6bNKk4dAOfVM0m8oIow090sBebFwnOv4NYn3GatAYutAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUDHAJOS+cSpIgcXmMkAXLotyezuowHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0MmMxZjMyLTgxYWMtNDExOC1i ZTJmLTU3NGNhNWI1NDFlYS8wLzMxMzAzMzJlMzIzMjM5MmUzMTMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM2MzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn5YMwDQYJ KoZIhvcNAQELBQADggEBAItewiq5tlc1iRKanTPAEhDwFoc+kVnW8Kk6IFvO2plu ygkHNtR3Qi4q3SZ8IKy6yC/m5uJ0lDOvjpbT1ZdXQAaYs7gL93bMki4EDT5zbVqo eyVfJnJmZ0jca4/us2rASyyHDlUbskorGosClMvlErO4MaOSUG5Wn3E7qvSZOmT5 P+PEXJ8QXkiWzfdE1DKWAAevYboOcq5nv6t91zZPcMmvf2CRC0flf0nlUMhLjJxk UW1jQGXEzUeJ0XgwDqnRlzAZh3pgCw3iW+4pdt3V3Yvw5b6MhQu2lR+9Ma6j1Ddr qrTInm2TzuvnMe5psgeDqfTcPvyRPEP4QyUfU6LtPrQ= -----END CERTIFICATE-----Generated at Wed Jul 23 12:11:52 2025 by rpki-client