$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3130332e34372e3133322e302f32342d3234203d3e203633383539.roa File: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk= Subject key identifier: 6E:46:31:FD:E3:90:AE:DC:70:99:F3:B6:30:15:38:14:AB:33:7F:23 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 17F755EE11E22A07B53F1074BD2E8A5B235B770E Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3130332e34372e3133322e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 07:00:02 +0000 ROA not before: Sun 13 Jul 2025 06:55:02 +0000 ROA not after: Sun 12 Jul 2026 07:00:02 +0000 asID: 63859 IP address blocks: 103.47.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f7:55:ee:11:e2:2a:07:b5:3f:10:74:bd:2e:8a:5b:23:5b:77:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jul 13 06:55:02 2025 GMT Not After : Jul 12 07:00:02 2026 GMT Subject: CN=6E4631FDE390AEDC7099F3B630153814AB337F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:56:6c:38:96:54:77:bc:e7:d2:8d:6f:a9: 65:a1:ea:f8:ee:a0:40:46:67:9d:17:09:42:2a:d6: 25:32:9d:fa:19:42:a1:68:68:21:fc:cd:db:36:8b: 99:55:d6:11:98:06:67:84:eb:eb:1e:a4:b1:a9:52: 4d:ce:51:ea:77:50:29:22:76:9e:ba:c0:7c:b6:36: 0e:fc:22:db:e5:22:74:29:ef:de:99:38:b0:01:ff: 4a:55:41:fb:c1:7c:f6:a2:2d:7a:d0:92:6d:2e:48: ab:05:0b:be:b9:d3:b5:d0:ec:f9:68:46:4b:6b:e7: 6f:a6:90:1f:96:9b:45:9d:da:23:cb:dc:93:2c:35: 98:b0:79:8b:37:ac:af:ee:2c:5c:25:6c:31:a9:f0: 39:15:5f:fa:21:60:c3:7f:91:58:20:62:59:c9:e6: ad:1c:09:dd:77:ad:53:48:4e:4b:6e:fa:3f:95:32: de:5f:33:bb:21:24:9a:e6:26:76:e5:0d:ae:33:75: e7:95:1b:b9:8a:b9:2c:cd:42:3a:db:fc:77:9b:79: 65:87:1d:e0:65:ce:58:d4:ff:bb:22:c9:34:e9:32: b6:5b:12:e4:4b:da:78:ce:88:e2:83:21:c0:79:58: 22:65:bd:96:19:16:30:34:23:ce:d0:33:a4:66:50: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:46:31:FD:E3:90:AE:DC:70:99:F3:B6:30:15:38:14:AB:33:7F:23 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3130332e34372e3133322e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.132.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:92:38:bb:47:2c:3d:9f:f0:6d:f7:da:51:4f:1a:2d:3d:f7: 3b:9c:84:1d:0d:51:2d:42:20:84:e6:f7:97:ba:37:f6:2f:ff: 45:17:8d:4c:d8:cf:6a:5c:83:3f:7d:1f:2e:67:b5:01:67:57: a5:25:3b:56:67:16:24:b4:59:6a:72:ef:dd:dd:3d:d3:ad:74: ad:41:c5:1d:69:40:6d:ee:f7:04:c9:31:c3:22:e2:35:6f:e7: cb:5b:8a:69:37:bb:99:92:9c:16:d9:e6:1d:82:3e:59:aa:e6: 97:fe:92:b6:b8:25:ac:0d:de:4e:96:69:71:6a:2c:bf:f5:1e: ed:86:94:96:57:36:be:c0:86:4a:3c:74:3e:6c:c0:4d:b4:f0: 1d:94:b2:e7:f5:7a:1e:20:3d:dd:3c:c9:71:3e:82:3e:da:8e: fe:a1:3d:aa:4e:5e:ab:5a:40:14:0b:08:10:9b:6d:58:ca:a8: cc:9d:3e:81:b5:1c:3b:65:2c:e6:60:92:f1:47:73:c9:a7:37: 97:d9:ab:59:ca:db:60:99:e7:65:da:ba:c5:9a:6a:13:80:4c: f0:e4:b6:e7:a8:56:9e:c1:ff:42:85:ee:42:8c:87:85:ed:bf: 1e:ba:08:d3:e6:ab:cf:23:37:23:9f:2b:f8:0c:ef:8a:b1:c6: 6a:c4:8d:c4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUF/dV7hHiKge1PxB0vS6KWyNbdw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTA3MTMwNjU1MDJaFw0yNjA3MTIwNzAwMDJaMDMxMTAvBgNV BAMTKDZFNDYzMUZERTM5MEFFREM3MDk5RjNCNjMwMTUzODE0QUIzMzdGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbzFZsOJZUd7zn0o1vqWWh6vju oEBGZ50XCUIq1iUynfoZQqFoaCH8zds2i5lV1hGYBmeE6+sepLGpUk3OUep3UCki dp66wHy2Ng78ItvlInQp796ZOLAB/0pVQfvBfPaiLXrQkm0uSKsFC76507XQ7Plo Rktr52+mkB+Wm0Wd2iPL3JMsNZiweYs3rK/uLFwlbDGp8DkVX/ohYMN/kVggYlnJ 5q0cCd13rVNITktu+j+VMt5fM7shJJrmJnblDa4zdeeVG7mKuSzNQjrb/HebeWWH HeBlzljU/7siyTTpMrZbEuRL2njOiOKDIcB5WCJlvZYZFjA0I87QM6RmUL89AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbkYx/eOQrtxwmfO2MBU4FKszfyMwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzAzMzJlMzQzNzJlMzEzMzMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMzM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcvhDANBgkqhkiG 9w0BAQsFAAOCAQEAjZI4u0csPZ/wbffaUU8aLT33O5yEHQ1RLUIghOb3l7o39i// RReNTNjPalyDP30fLme1AWdXpSU7VmcWJLRZanLv3d090610rUHFHWlAbe73BMkx wyLiNW/ny1uKaTe7mZKcFtnmHYI+Warml/6StrglrA3eTpZpcWosv/Ue7YaUllc2 vsCGSjx0PmzATbTwHZSy5/V6HiA93TzJcT6CPtqO/qE9qk5eq1pAFAsIEJttWMqo zJ0+gbUcO2Us5mCS8Udzyac3l9mrWcrbYJnnZdq6xZpqE4BM8OS256hWnsH/QoXu QoyHhe2/HroI0+arzyM3I58r+AzvirHGasSNxA== -----END CERTIFICATE-----Generated at Fri Jul 25 14:41:17 2025 by rpki-client