$ rpki-client -vvf repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa File: 3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa (raw, json) Hash identifier: ZWBY3WXKjlvHg1FOOk4HRgnKTIvP5SNRhqskNyIgs+A= Subject key identifier: 10:85:FB:63:CA:D8:A4:47:65:BB:0C:5F:2B:EC:80:04:F0:62:BB:D2 Certificate issuer: /CN=58D7A2E054D4F6B835578031386896062B0B0CED Certificate serial: 08C92331953EB20624F6D142F3E357924C0BF799 Authority key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa Signing time: Sun 06 Jul 2025 11:00:01 +0000 ROA not before: Sun 06 Jul 2025 10:55:01 +0000 ROA not after: Sun 05 Jul 2026 11:00:01 +0000 asID: 135636 IP address blocks: 103.103.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c9:23:31:95:3e:b2:06:24:f6:d1:42:f3:e3:57:92:4c:0b:f7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58D7A2E054D4F6B835578031386896062B0B0CED Validity Not Before: Jul 6 10:55:01 2025 GMT Not After : Jul 5 11:00:01 2026 GMT Subject: CN=1085FB63CAD8A44765BB0C5F2BEC8004F062BBD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:66:72:7f:75:2c:bc:13:eb:74:6d:f6:f9: 08:48:f2:34:45:8e:c1:1a:47:ec:59:77:6f:e9:d0: 46:7b:cb:4a:ab:a3:44:be:9a:bd:2c:d6:cd:97:ab: 0a:e2:90:05:d4:9c:4f:cd:2f:76:3f:a5:bf:25:b0: 44:98:12:ef:3b:ee:44:fd:be:95:20:86:fe:83:1d: 46:39:cb:38:a1:98:8e:02:ae:9c:42:e9:8f:8b:ee: eb:53:c9:96:b6:ff:72:d4:e2:83:0a:26:2c:74:51: 2e:6f:b2:13:4e:0f:46:bd:2b:0c:c7:91:eb:7a:4f: 7a:39:dd:f5:eb:f2:d9:eb:76:28:c4:78:52:09:ce: 79:df:e2:e8:6d:00:86:28:77:2e:a2:92:65:c4:99: 7a:23:99:aa:08:49:a5:65:bf:84:85:a0:9f:9b:cb: 51:5f:25:b1:95:84:ea:8a:96:7b:2d:b8:87:28:96: 68:35:9c:33:55:f2:f0:74:9f:2f:6e:a5:5a:28:9e: 90:1b:d6:d6:8e:6e:10:aa:d9:e5:f2:cd:fd:1f:02: 8b:0f:42:33:ef:db:a2:a8:5f:3f:11:1d:4b:82:ae: c9:a1:26:4d:93:60:30:40:2f:0d:e9:5d:4a:49:bb: b3:62:db:74:39:d0:c5:80:f7:59:74:db:0f:c0:bc: c5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:85:FB:63:CA:D8:A4:47:65:BB:0C:5F:2B:EC:80:04:F0:62:BB:D2 X509v3 Authority Key Identifier: keyid:58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139322e302f32342d3234203d3e20313335363336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.192.0/24 Signature Algorithm: sha256WithRSAEncryption 74:09:19:4a:1a:c7:70:a9:57:91:22:13:e2:15:68:56:3c:49: 59:8a:6b:e4:54:f1:c5:b8:c8:97:10:1e:71:1d:fa:dc:df:99: 6e:2a:d0:d0:88:fe:3b:a3:66:fb:44:ed:79:d3:6d:21:ff:f6: 4c:86:d7:6a:b0:9c:b3:60:68:40:b4:ad:5d:01:de:39:9a:10: a1:0b:e7:2f:2f:54:be:9c:fc:af:b9:a7:c4:6a:3c:20:7b:84: 51:66:1c:00:0a:56:d2:11:8d:28:99:0a:ba:21:9c:ee:eb:8b: a7:bf:4a:50:00:ff:46:4a:4e:b3:02:d7:7b:15:aa:ac:37:bf: b9:89:75:9d:f3:de:9c:88:b6:f7:8b:5e:30:8c:1f:0c:bb:9f: 7b:39:17:b5:b0:b9:e3:34:04:41:2a:7f:3e:b5:87:54:2f:b2: 5f:e1:66:d9:06:bc:39:e0:61:43:f5:5e:be:44:80:1a:c3:4d: 4b:5a:18:b6:8d:8a:f1:13:d1:20:ed:36:a1:d3:01:69:01:dc: c6:72:63:99:79:75:cc:db:db:8b:24:fc:a3:39:6f:9c:96:12: cd:6e:a7:e7:1d:6f:15:85:3c:7a:67:2c:8f:77:69:57:b9:9d: 43:cf:02:81:1f:aa:5d:97:21:e7:1f:94:cb:bb:6e:60:a4:3d: cf:f6:26:2b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUCMkjMZU+sgYk9tFC8+NXkkwL95kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2MDYy QjBCMENFRDAeFw0yNTA3MDYxMDU1MDFaFw0yNjA3MDUxMTAwMDFaMDMxMTAvBgNV BAMTKDEwODVGQjYzQ0FEOEE0NDc2NUJCMEM1RjJCRUM4MDA0RjA2MkJCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tmZyf3UsvBPrdG32+QhI8jRF jsEaR+xZd2/p0EZ7y0qro0S+mr0s1s2XqwrikAXUnE/NL3Y/pb8lsESYEu877kT9 vpUghv6DHUY5yzihmI4CrpxC6Y+L7utTyZa2/3LU4oMKJix0US5vshNOD0a9KwzH ket6T3o53fXr8tnrdijEeFIJznnf4uhtAIYody6ikmXEmXojmaoISaVlv4SFoJ+b y1FfJbGVhOqKlnstuIcolmg1nDNV8vB0ny9upVoonpAb1taObhCq2eXyzf0fAosP QjPv26KoXz8RHUuCrsmhJk2TYDBALw3pXUpJu7Ni23Q50MWA91l02w/AvMV5AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUEIX7Y8rYpEdluwxfK+yABPBiu9IwHwYDVR0j BBgwFoAUWNei4FTU9rg1V4AxOGiWBisLDO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWJiYWRiMy05YWM4LTQ2ZGYtYWI5MS1iZjM5ZGZlZTFiZDAvMC81OEQ3QTJFMDU0 RDRGNkI4MzU1NzgwMzEzODY4OTYwNjJCMEIwQ0VELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThEN0EyRTA1NEQ0RjZCODM1NTc4MDMxMzg2ODk2MDYyQjBC MENFRC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYmJhZGIzLTlhYzgtNDZkZi1h YjkxLWJmMzlkZmVlMWJkMC8wLzMxMzAzMzJlMzEzMDMzMmUzMTM5MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNjMzMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZ8AwDQYJ KoZIhvcNAQELBQADggEBAHQJGUoax3CpV5EiE+IVaFY8SVmKa+RU8cW4yJcQHnEd +tzfmW4q0NCI/jujZvtE7XnTbSH/9kyG12qwnLNgaEC0rV0B3jmaEKEL5y8vVL6c /K+5p8RqPCB7hFFmHAAKVtIRjSiZCrohnO7ri6e/SlAA/0ZKTrMC13sVqqw3v7mJ dZ3z3pyItveLXjCMHwy7n3s5F7WwueM0BEEqfz61h1Qvsl/hZtkGvDngYUP1Xr5E gBrDTUtaGLaNivET0SDtNqHTAWkB3MZyY5l5dczb24sk/KM5b5yWEs1up+cdbxWF PHpnLI93aVe5nUPPAoEfql2XIecflMu7bmCkPc/2Jis= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:27 2025 by rpki-client