$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa File: 3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa (raw, json) Hash identifier: XmrsQZg25LzfhiARAVUt0SdXh5fLunU7Ew98BfBvR1g= Subject key identifier: 31:8C:8A:51:C2:A2:B0:18:1A:21:DF:2C:3F:96:AF:3D:25:BB:37:82 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 7242BF8BA651EBA7ED75B5E5DAE3757EE63794A1 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa Signing time: Wed 23 Jul 2025 05:00:00 +0000 ROA not before: Wed 23 Jul 2025 04:55:00 +0000 ROA not after: Wed 22 Jul 2026 05:00:00 +0000 asID: 140407 IP address blocks: 103.122.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 13:42:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:42:bf:8b:a6:51:eb:a7:ed:75:b5:e5:da:e3:75:7e:e6:37:94:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Jul 23 04:55:00 2025 GMT Not After : Jul 22 05:00:00 2026 GMT Subject: CN=318C8A51C2A2B0181A21DF2C3F96AF3D25BB3782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:13:7c:48:7e:db:4d:5f:69:66:84:d9:01: 9b:89:37:c8:92:d1:54:af:c7:d5:23:ee:78:53:56: 63:dd:be:ef:21:e2:ae:04:75:42:84:16:cd:d9:ca: a1:91:a0:a9:70:f4:2d:bb:42:33:a6:f0:88:45:f2: e0:07:b9:9b:da:87:c7:67:84:b8:94:68:2b:1c:0d: 07:0f:15:6d:cf:2d:3a:d1:0d:18:c7:c4:2d:77:e7: cd:29:da:87:60:98:21:36:84:50:35:86:40:0e:d9: 22:7a:d8:80:cd:b7:30:47:48:b3:9d:50:1c:7d:ee: 10:ee:b4:75:e6:58:e5:e8:2e:71:48:aa:ac:ba:ea: 81:04:e6:ed:79:6c:ac:c7:57:45:db:2d:eb:4f:6f: 82:2d:a5:92:8b:f6:3c:2c:1d:18:b2:f2:14:96:62: 61:f5:c0:75:5c:ef:a1:05:7c:a7:b8:fd:9d:90:79: 2a:d2:41:f3:96:89:0f:6e:29:19:3c:b4:db:40:cf: 1a:dc:e1:18:3e:5b:e8:a3:b7:86:2b:3b:53:17:2b: 89:df:c1:93:8d:35:d8:fa:40:a6:22:09:1c:f8:85: 33:dd:c1:af:19:a5:07:cf:4e:4a:cc:14:41:c2:9f: 39:85:d0:1d:cb:92:19:62:55:ac:41:45:51:77:1c: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8C:8A:51:C2:A2:B0:18:1A:21:DF:2C:3F:96:AF:3D:25:BB:37:82 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135332e302f32342d3234203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.153.0/24 Signature Algorithm: sha256WithRSAEncryption d4:5d:d9:6c:da:a7:13:f7:f9:10:90:d0:75:02:c7:6b:2a:2c: 17:75:f7:ca:a5:f0:05:45:22:51:f4:c5:70:ea:02:af:f5:53: 73:2f:37:96:0b:6d:a9:40:b8:88:df:40:4e:f8:96:b1:4d:65: 3a:8b:e9:fe:3d:c2:7c:a4:c7:b4:66:2f:e6:ab:95:88:e4:3e: 44:ce:2c:b8:c4:d2:1b:05:5f:b9:71:c3:8d:3b:07:a9:cf:cb: 62:fe:ea:65:6d:bb:f0:e7:0b:41:c7:a6:f1:56:32:bf:6f:bc: 17:b1:18:26:c9:17:5a:af:a2:c1:b9:d9:47:e7:6a:cf:aa:b3: e5:44:15:e2:78:f4:4a:b7:10:1c:71:c0:5a:a3:c5:49:90:cc: 29:1c:72:6b:39:5c:73:be:48:fd:b2:1c:b3:33:5a:ed:1a:9e: d4:4c:1c:9f:80:9a:87:1a:d1:8f:98:4c:cf:a5:cc:7c:07:b1: e4:c9:a0:75:6e:4e:f8:d7:81:a5:c3:4f:48:27:2a:91:66:c8: 9b:3a:ae:a2:46:05:a5:51:ea:0b:69:bf:12:9a:c9:d5:52:64: eb:9b:04:ce:33:b1:a3:81:bf:28:5a:82:5c:d0:eb:e2:d4:ca: c1:5d:9b:df:35:ec:e2:b1:28:13:b9:8b:c4:32:21:d2:45:8c: 8b:4b:21:fc -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUckK/i6ZR66ftdbXl2uN1fuY3lKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA3MjMwNDU1MDBaFw0yNjA3MjIwNTAwMDBaMDMxMTAvBgNV BAMTKDMxOEM4QTUxQzJBMkIwMTgxQTIxREYyQzNGOTZBRjNEMjVCQjM3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfhN8SH7bTV9pZoTZAZuJN8iS 0VSvx9Uj7nhTVmPdvu8h4q4EdUKEFs3ZyqGRoKlw9C27QjOm8IhF8uAHuZvah8dn hLiUaCscDQcPFW3PLTrRDRjHxC13580p2odgmCE2hFA1hkAO2SJ62IDNtzBHSLOd UBx97hDutHXmWOXoLnFIqqy66oEE5u15bKzHV0XbLetPb4ItpZKL9jwsHRiy8hSW YmH1wHVc76EFfKe4/Z2QeSrSQfOWiQ9uKRk8tNtAzxrc4Rg+W+ijt4YrO1MXK4nf wZONNdj6QKYiCRz4hTPdwa8ZpQfPTkrMFEHCnzmF0B3LkhliVaxBRVF3HMN9AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUMYyKUcKisBgaId8sP5avPSW7N4IwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyMjk3ODFhLThhYzktNDQ1Mi1i MjVmLTU0ZTdlZGY3ZDRhNC8wLzMxMzAzMzJlMzEzMjMyMmUzMTM1MzMyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnepkwDQYJ KoZIhvcNAQELBQADggEBANRd2WzapxP3+RCQ0HUCx2sqLBd198ql8AVFIlH0xXDq Aq/1U3MvN5YLbalAuIjfQE74lrFNZTqL6f49wnykx7RmL+arlYjkPkTOLLjE0hsF X7lxw407B6nPy2L+6mVtu/DnC0HHpvFWMr9vvBexGCbJF1qvosG52Ufnas+qs+VE FeJ49Eq3EBxxwFqjxUmQzCkccms5XHO+SP2yHLMzWu0antRMHJ+Amoca0Y+YTM+l zHwHseTJoHVuTvjXgaXDT0gnKpFmyJs6rqJGBaVR6gtpvxKaydVSZOubBM4zsaOB vyhaglzQ6+LUysFdm9817OKxKBO5i8QyIdJFjItLIfw= -----END CERTIFICATE-----Generated at Thu Jul 24 00:22:25 2025 by rpki-client