$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa File: 3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa (raw, json) Hash identifier: 8hYT6Y/pfowP/KBmfZIn8BXYiG2OvY6NAk7Ce/h0YCw= Subject key identifier: 8D:F0:E7:41:39:BB:FC:72:07:5A:9F:7A:4F:73:BE:BE:FC:7E:3E:EF Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 7074E6DCFE299F446E6AA9727B6A4072ADC71114 Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa Signing time: Mon 14 Jul 2025 04:41:35 +0000 ROA not before: Mon 14 Jul 2025 04:36:35 +0000 ROA not after: Mon 13 Jul 2026 04:41:35 +0000 asID: 135465 IP address blocks: 103.146.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:74:e6:dc:fe:29:9f:44:6e:6a:a9:72:7b:6a:40:72:ad:c7:11:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Jul 14 04:36:35 2025 GMT Not After : Jul 13 04:41:35 2026 GMT Subject: CN=8DF0E74139BBFC72075A9F7A4F73BEBEFC7E3EEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:81:c0:25:ae:7d:10:1f:42:8f:29:13:36: 9a:e3:b7:3b:26:b6:35:e3:de:b3:d8:5e:cb:44:69: 2d:8e:0a:57:3c:90:9e:cf:d6:50:c4:0c:77:70:f2: cb:05:34:d8:3b:df:c2:9f:90:bd:0b:c6:48:3c:6a: 7b:c7:d7:5c:1d:bb:74:51:d6:b9:a8:64:d8:5d:09: c6:2b:23:df:86:ed:1c:38:a9:65:f4:fb:e9:e6:59: cf:bd:c4:51:cf:b4:16:3a:d6:77:04:73:ff:e3:8e: 1d:ac:ef:09:24:d2:31:c3:c3:a2:a8:cb:e1:11:eb: 29:c3:09:6f:6f:c3:18:b0:69:6c:72:3e:4b:2e:75: 95:c0:e0:35:4f:2d:a0:02:4d:fd:c2:96:f9:6b:b8: 26:fa:89:47:40:a4:16:f7:d6:22:f0:e0:3e:b2:9b: be:b0:9c:25:42:3a:cb:42:16:8d:ad:d7:19:67:de: f7:1d:5e:88:52:04:f5:bc:e5:a4:8c:0e:71:66:fd: 7c:4f:30:fd:fe:4a:a0:65:02:d8:39:ea:bc:15:04: 66:8b:64:1b:1c:5a:db:75:a4:5d:18:8b:3b:7c:d4: 22:67:e3:05:e4:ef:cb:d0:53:9a:18:70:e4:ec:9f: 36:49:cc:6e:8d:75:be:0a:cd:32:5c:4a:ba:9b:0f: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F0:E7:41:39:BB:FC:72:07:5A:9F:7A:4F:73:BE:BE:FC:7E:3E:EF X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138322e302f32342d3234203d3e20313335343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.182.0/24 Signature Algorithm: sha256WithRSAEncryption 57:d1:b3:77:bf:52:7b:86:21:bc:3e:71:30:4e:4d:e9:fb:73: af:5b:9b:4e:10:4e:ae:af:93:2d:5b:7f:5b:85:ce:f4:b5:25: b7:59:9f:7f:3c:f9:49:61:95:81:b8:65:5d:14:43:23:a5:b5: cb:f5:5b:45:8b:a8:00:e7:d8:a8:6a:cc:6d:55:2d:bb:06:96: b0:17:f1:c7:fd:fa:1b:2b:86:50:d1:68:02:db:16:c0:f6:1f: 79:14:09:fa:52:54:d3:a0:6b:6f:45:5f:76:ec:f6:55:47:18: aa:a2:f5:5c:50:bc:48:59:93:21:41:27:28:b8:37:0b:45:c9: b3:be:59:07:20:96:c4:e2:04:41:35:58:5f:15:65:08:f2:d5: da:10:d1:f6:ed:cf:f5:78:e7:96:a1:b7:6f:9d:8f:80:79:35: 50:a0:53:e4:4b:d6:b5:f6:c3:fd:d1:1b:63:ff:af:f8:3e:a9: 0b:ea:2d:fa:85:0e:bd:53:0f:32:a9:e7:8f:a1:bc:83:51:1f: ca:10:fc:10:b1:19:1c:7a:7f:8c:c8:dd:42:2e:e0:a1:d5:ce: 75:5f:96:a8:72:4a:63:bd:55:ae:19:7e:77:9b:3a:6b:32:d1: 8d:be:a9:1d:71:55:c5:08:49:2b:a4:35:7a:ba:b2:23:e9:69: f6:78:d7:07 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUcHTm3P4pn0Ruaqlye2pAcq3HERQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTA3MTQwNDM2MzVaFw0yNjA3MTMwNDQxMzVaMDMxMTAvBgNV BAMTKDhERjBFNzQxMzlCQkZDNzIwNzVBOUY3QTRGNzNCRUJFRkM3RTNFRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iYHAJa59EB9CjykTNprjtzsm tjXj3rPYXstEaS2OClc8kJ7P1lDEDHdw8ssFNNg738KfkL0Lxkg8anvH11wdu3RR 1rmoZNhdCcYrI9+G7Rw4qWX0++nmWc+9xFHPtBY61ncEc//jjh2s7wkk0jHDw6Ko y+ER6ynDCW9vwxiwaWxyPksudZXA4DVPLaACTf3ClvlruCb6iUdApBb31iLw4D6y m76wnCVCOstCFo2t1xln3vcdXohSBPW85aSMDnFm/XxPMP3+SqBlAtg56rwVBGaL ZBscWtt1pF0Yizt81CJn4wXk78vQU5oYcOTsnzZJzG6Ndb4KzTJcSrqbD4pBAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUjfDnQTm7/HIHWp96T3O+vvx+Pu8wHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxNmE4YWQ0LTA2ZTYtNDBjMy05 OGU0LWZhOTNhZmM0YTc3Mi8wLzMxMzAzMzJlMzEzNDM2MmUzMTM4MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkrYwDQYJ KoZIhvcNAQELBQADggEBAFfRs3e/UnuGIbw+cTBOTen7c69bm04QTq6vky1bf1uF zvS1JbdZn388+UlhlYG4ZV0UQyOltcv1W0WLqADn2KhqzG1VLbsGlrAX8cf9+hsr hlDRaALbFsD2H3kUCfpSVNOga29FX3bs9lVHGKqi9VxQvEhZkyFBJyi4NwtFybO+ WQcglsTiBEE1WF8VZQjy1doQ0fbtz/V455aht2+dj4B5NVCgU+RL1rX2w/3RG2P/ r/g+qQvqLfqFDr1TDzKp54+hvINRH8oQ/BCxGRx6f4zI3UIu4KHVznVflqhySmO9 Va4ZfnebOmsy0Y2+qR1xVcUISSukNXq6siPpafZ41wc= -----END CERTIFICATE-----Generated at Wed Jul 23 12:06:22 2025 by rpki-client