$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa File: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (raw, json) Hash identifier: Ffjrt07F64qfTUTQRM4q8gB9QS8eehDO7qAs3NtubXM= Subject key identifier: 41:C7:79:F6:5B:D7:C6:56:56:B1:75:EA:2B:BD:B3:FB:A5:1D:68:80 Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 178EB4C5865487EF64B060BD21D3B62FB1E01C78 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa Signing time: Mon 07 Jul 2025 08:01:04 +0000 ROA not before: Mon 07 Jul 2025 07:56:04 +0000 ROA not after: Mon 06 Jul 2026 08:01:04 +0000 asID: 58404 IP address blocks: 103.28.12.0/22 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8e:b4:c5:86:54:87:ef:64:b0:60:bd:21:d3:b6:2f:b1:e0:1c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Jul 7 07:56:04 2025 GMT Not After : Jul 6 08:01:04 2026 GMT Subject: CN=41C779F65BD7C65656B175EA2BBDB3FBA51D6880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ce:35:b9:7a:c5:f2:36:09:f2:a6:37:78:68: a0:2c:97:b6:41:e3:09:59:b0:32:dc:6b:00:15:61: b5:b4:87:a2:03:a9:4b:7d:eb:4e:c0:47:28:01:d3: 67:f9:77:bf:99:67:29:e4:ff:60:dc:77:79:80:c8: 5b:75:6a:62:e9:8c:24:9b:1b:8d:c4:30:12:3e:12: 61:a6:09:a8:80:9a:74:71:94:13:93:67:51:7f:2a: 0f:3f:d2:0d:e4:9c:b6:12:4e:44:2b:6f:89:78:23: 8b:a1:39:12:8d:c3:c0:91:e5:93:95:66:12:94:a4: 3a:7d:52:f1:e0:a9:b9:56:01:e9:7a:df:26:f9:9a: 8d:8b:e2:e4:02:d3:fa:65:1b:4a:18:9d:5f:b4:b4: b4:04:d8:bb:63:c6:2a:56:27:57:af:4b:68:eb:73: 09:a1:ed:ac:f3:51:70:4c:41:13:71:00:8f:c6:85: 0e:45:61:53:6f:f2:15:92:f0:72:4c:fc:0c:77:8e: 6e:03:eb:2a:9c:34:58:45:c3:74:f2:92:21:1c:8c: 86:22:29:07:c0:f7:4c:ba:fd:e1:c5:60:5a:cf:8a: 92:ad:c2:5e:e8:fd:70:17:16:9c:84:73:97:ee:06: 4a:48:60:18:bd:25:b5:70:03:78:f0:8c:18:a9:95: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C7:79:F6:5B:D7:C6:56:56:B1:75:EA:2B:BD:B3:FB:A5:1D:68:80 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/3130332e32382e31322e302f32322d3233203d3e203538343034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.28.12.0/22 Signature Algorithm: sha256WithRSAEncryption 35:93:6e:c9:3b:4e:bb:9d:62:b9:3f:d9:af:a7:b7:ab:58:6d: a4:43:91:ff:dc:5a:b2:4a:59:f6:9e:d2:6e:02:0f:4a:08:60: bc:7c:22:06:92:33:69:02:35:0a:96:5c:4e:0c:09:8a:0d:7d: db:f1:8b:c5:a8:d9:bc:4a:e2:07:a5:73:c8:cc:8f:2a:f4:20: ac:55:a6:66:22:98:5b:91:b5:aa:bb:57:79:94:16:46:eb:2d: 20:93:e1:62:76:cc:27:13:1e:4e:7e:bb:01:79:09:96:c6:02: 93:cb:58:07:71:80:9f:95:98:3d:f8:8b:22:1f:44:11:93:eb: a5:80:6d:9f:75:4e:7e:cd:dd:96:eb:75:d2:6f:41:71:33:ea: c6:4e:3a:fd:49:60:89:7c:4d:c5:8c:7c:c1:64:87:af:24:90: 2a:ea:20:1a:72:6e:ad:c2:f8:b3:1e:0e:33:f8:e5:da:f3:7e: 71:ad:f9:29:1e:db:18:c6:bf:01:b9:36:1c:25:21:4d:71:9b: fd:3a:8b:a2:a8:60:02:4e:7e:63:f4:61:ba:7f:9f:25:27:86: 5f:e9:cd:b1:87:44:4a:3f:23:f2:f0:fc:59:50:e4:0e:07:ec: 96:a8:49:89:c8:ad:ed:20:a9:09:f0:14:3b:91:fc:22:d8:db: 02:67:1e:fd -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUF460xYZUh+9ksGC9IdO2L7HgHHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNTA3MDcwNzU2MDRaFw0yNjA3MDYwODAxMDRaMDMxMTAvBgNV BAMTKDQxQzc3OUY2NUJEN0M2NTY1NkIxNzVFQTJCQkRCM0ZCQTUxRDY4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrzjW5esXyNgnypjd4aKAsl7ZB 4wlZsDLcawAVYbW0h6IDqUt9607ARygB02f5d7+ZZynk/2Dcd3mAyFt1amLpjCSb G43EMBI+EmGmCaiAmnRxlBOTZ1F/Kg8/0g3knLYSTkQrb4l4I4uhORKNw8CR5ZOV ZhKUpDp9UvHgqblWAel63yb5mo2L4uQC0/plG0oYnV+0tLQE2LtjxipWJ1evS2jr cwmh7azzUXBMQRNxAI/GhQ5FYVNv8hWS8HJM/Ax3jm4D6yqcNFhFw3TykiEcjIYi KQfA90y6/eHFYFrPipKtwl7o/XAXFpyEc5fuBkpIYBi9JbVwA3jwjBiplYRHAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUQcd59lvXxlZWsXXqK72z+6UdaIAwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlMGY5MTYzLTNlNWEtNGVmYS04 YmQ5LTRhYzRiYzYzMDQxNC8wLzMxMzAzMzJlMzIzODJlMzEzMjJlMzAyZjMyMzIy ZDMyMzMyMDNkM2UyMDM1MzgzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnHAwwDQYJKoZIhvcN AQELBQADggEBADWTbsk7TrudYrk/2a+nt6tYbaRDkf/cWrJKWfae0m4CD0oIYLx8 IgaSM2kCNQqWXE4MCYoNfdvxi8Wo2bxK4gelc8jMjyr0IKxVpmYimFuRtaq7V3mU FkbrLSCT4WJ2zCcTHk5+uwF5CZbGApPLWAdxgJ+VmD34iyIfRBGT66WAbZ91Tn7N 3ZbrddJvQXEz6sZOOv1JYIl8TcWMfMFkh68kkCrqIBpybq3C+LMeDjP45drzfnGt +Ske2xjGvwG5NhwlIU1xm/06i6KoYAJOfmP0Ybp/nyUnhl/pzbGHREo/I/Lw/FlQ 5A4H7JaoSYnIre0gqQnwFDuR/CLY2wJnHv0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:09:55 2025 by rpki-client