$ rpki-client -vvf repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa File: 3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa (raw, json) Hash identifier: hFEJcZgFcoA0OsCR/KSwRiYCycDz3fj8AW7G8OvlQww= Subject key identifier: AE:65:0C:C9:09:7D:18:FC:50:88:ED:02:A7:70:63:3D:36:AD:29:F7 Certificate issuer: /CN=49E141888BC2948405FED00F49F101FAF7483662 Certificate serial: 0EDA8FA1EE1EEBBE103B2E324767429CCD66C55C Authority key identifier: 49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject info access: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa Signing time: Mon 14 Jul 2025 05:03:36 +0000 ROA not before: Mon 14 Jul 2025 04:58:36 +0000 ROA not after: Mon 13 Jul 2026 05:03:36 +0000 asID: 135465 IP address blocks: 103.146.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:da:8f:a1:ee:1e:eb:be:10:3b:2e:32:47:67:42:9c:cd:66:c5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49E141888BC2948405FED00F49F101FAF7483662 Validity Not Before: Jul 14 04:58:36 2025 GMT Not After : Jul 13 05:03:36 2026 GMT Subject: CN=AE650CC9097D18FC5088ED02A770633D36AD29F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cd:92:57:67:51:e9:ad:65:f7:25:14:74:e5: 1a:3f:dc:3d:d1:47:e8:0e:a5:0a:3b:7c:e5:56:db: f1:ea:c8:90:16:d0:ae:ec:ce:a3:2b:c6:2d:aa:9b: 93:d2:8e:9a:85:39:89:67:08:92:55:6e:5d:0a:0d: f7:cb:c0:44:22:e7:ce:73:fe:95:de:d9:02:0a:2b: d6:11:cf:df:d5:d2:40:9d:1f:c2:9f:3e:93:fd:24: 17:ef:50:b4:c7:8f:77:33:69:60:f1:ee:1d:59:18: 4e:ff:95:24:91:8d:37:bd:6b:84:5d:fb:08:4f:8b: 8f:6e:e2:28:15:40:f9:2b:ec:1a:ff:5f:55:4c:fb: 08:ce:d0:15:12:da:bc:f1:71:e1:c6:0a:5c:42:e2: 36:9c:54:f9:51:87:cf:20:2b:c0:6e:79:51:03:e6: 6b:66:3a:73:10:8d:8d:df:b6:4a:4a:af:6a:b6:1c: f7:7f:69:57:08:27:a6:84:7f:b5:8f:ba:72:a5:3d: 2a:b3:e9:e3:c0:c7:df:f9:97:77:08:3d:c1:be:64: 26:ff:a5:31:d6:73:d9:8d:9d:07:5d:5f:f6:db:f0: 14:b1:31:9e:18:88:3c:71:c6:ea:d2:b5:97:84:da: d9:cd:ee:1e:62:62:f2:36:70:48:20:c8:a0:0f:49: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:65:0C:C9:09:7D:18:FC:50:88:ED:02:A7:70:63:3D:36:AD:29:F7 X509v3 Authority Key Identifier: keyid:49:E1:41:88:8B:C2:94:84:05:FE:D0:0F:49:F1:01:FA:F7:48:36:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/49E141888BC2948405FED00F49F101FAF7483662.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E141888BC2948405FED00F49F101FAF7483662.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/516a8ad4-06e6-40c3-98e4-fa93afc4a772/0/3130332e3134362e3138332e302f32342d3234203d3e20313335343635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.183.0/24 Signature Algorithm: sha256WithRSAEncryption 20:88:c9:8f:f6:28:8f:f3:b9:11:20:0b:ec:de:26:17:eb:cc: 0b:0f:56:a7:d8:06:54:fd:7e:b4:e8:97:3f:e2:8d:54:38:cd: 3e:c4:9a:6a:d9:18:6e:04:63:3a:50:bc:75:93:8b:35:89:82: a2:28:fb:7d:63:7b:b7:a3:32:bc:56:6a:54:e1:be:23:c2:c8: 10:8b:a2:24:13:ab:15:23:58:e2:43:f6:34:29:26:56:c2:f8: 30:1d:67:6e:20:08:e6:99:6b:58:c6:b8:30:c1:c3:2c:b7:b8: a9:20:28:4f:33:5b:d4:fe:b3:76:13:f9:d6:65:46:c6:71:13: 0c:b4:df:10:41:8a:1d:18:ff:6b:c7:d1:53:ef:87:27:80:59: 27:54:dd:4b:28:6c:59:64:4d:b7:6f:00:58:36:dc:76:43:fb: c1:cd:ab:9b:87:f9:73:ed:b7:c7:47:39:05:4e:d0:0e:c0:5d: a6:e9:e8:a1:26:14:78:7a:a3:78:2e:27:5d:10:02:a7:54:1c: 36:b2:7b:3e:df:3e:84:80:8f:90:18:59:63:80:f7:d4:3c:95: 71:47:b3:87:4c:30:ee:2d:aa:d5:4b:e4:e7:cf:cc:96:36:ee: cf:ba:55:4e:67:6b:96:0d:bd:d5:72:6b:78:4b:b0:16:89:32: 48:15:78:bf -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDtqPoe4e674QOy4yR2dCnM1mxVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFG NzQ4MzY2MjAeFw0yNTA3MTQwNDU4MzZaFw0yNjA3MTMwNTAzMzZaMDMxMTAvBgNV BAMTKEFFNjUwQ0M5MDk3RDE4RkM1MDg4RUQwMkE3NzA2MzNEMzZBRDI5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzZJXZ1HprWX3JRR05Ro/3D3R R+gOpQo7fOVW2/HqyJAW0K7szqMrxi2qm5PSjpqFOYlnCJJVbl0KDffLwEQi585z /pXe2QIKK9YRz9/V0kCdH8KfPpP9JBfvULTHj3czaWDx7h1ZGE7/lSSRjTe9a4Rd +whPi49u4igVQPkr7Br/X1VM+wjO0BUS2rzxceHGClxC4jacVPlRh88gK8BueVED 5mtmOnMQjY3ftkpKr2q2HPd/aVcIJ6aEf7WPunKlPSqz6ePAx9/5l3cIPcG+ZCb/ pTHWc9mNnQddX/bb8BSxMZ4YiDxxxurStZeE2tnN7h5iYvI2cEggyKAPSeNrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrmUMyQl9GPxQiO0Cp3BjPTatKfcwHwYDVR0j BBgwFoAUSeFBiIvClIQF/tAPSfEB+vdINmIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTZhOGFkNC0wNmU2LTQwYzMtOThlNC1mYTkzYWZjNGE3NzIvMC80OUUxNDE4ODhC QzI5NDg0MDVGRUQwMEY0OUYxMDFGQUY3NDgzNjYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDlFMTQxODg4QkMyOTQ4NDA1RkVEMDBGNDlGMTAxRkFGNzQ4 MzY2Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxNmE4YWQ0LTA2ZTYtNDBjMy05 OGU0LWZhOTNhZmM0YTc3Mi8wLzMxMzAzMzJlMzEzNDM2MmUzMTM4MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkrcwDQYJ KoZIhvcNAQELBQADggEBACCIyY/2KI/zuREgC+zeJhfrzAsPVqfYBlT9frTolz/i jVQ4zT7EmmrZGG4EYzpQvHWTizWJgqIo+31je7ejMrxWalThviPCyBCLoiQTqxUj WOJD9jQpJlbC+DAdZ24gCOaZa1jGuDDBwyy3uKkgKE8zW9T+s3YT+dZlRsZxEwy0 3xBBih0Y/2vH0VPvhyeAWSdU3UsobFlkTbdvAFg23HZD+8HNq5uH+XPtt8dHOQVO 0A7AXabp6KEmFHh6o3guJ10QAqdUHDayez7fPoSAj5AYWWOA99Q8lXFHs4dMMO4t qtVL5OfPzJY27s+6VU5na5YNvdVya3hLsBaJMkgVeL8= -----END CERTIFICATE-----Generated at Wed Jul 23 12:05:45 2025 by rpki-client