$ rpki-client -vvf repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa File: 3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa (raw, json) Hash identifier: fWYqS2RMtH8nLEssuvtAlcPkKVGIslsMGAZ45sn+DFQ= Subject key identifier: 4E:76:BA:AA:BD:D6:91:07:4B:55:4B:F0:5D:AD:DF:C7:B1:8D:0B:45 Certificate issuer: /CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Certificate serial: 0F7728FC29DD28A60C98E3C318DCB6812EBF16B7 Authority key identifier: 49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa Signing time: Wed 23 Jul 2025 06:00:00 +0000 ROA not before: Wed 23 Jul 2025 05:55:00 +0000 ROA not after: Wed 22 Jul 2026 06:00:00 +0000 asID: 140407 IP address blocks: 103.122.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:77:28:fc:29:dd:28:a6:0c:98:e3:c3:18:dc:b6:81:2e:bf:16:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491B0EA5440563BE9B0F167DA76C05E85A9D2F95 Validity Not Before: Jul 23 05:55:00 2025 GMT Not After : Jul 22 06:00:00 2026 GMT Subject: CN=4E76BAAABDD691074B554BF05DADDFC7B18D0B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:d0:0d:37:ce:e7:e0:39:1c:3b:08:4c:b2: 11:6f:f0:26:fd:4b:92:77:ea:e7:70:f2:d4:3b:22: 36:f9:01:5a:16:81:6a:26:11:f8:18:bd:58:60:eb: b4:dc:48:67:fa:b7:37:9e:3e:d8:a1:80:26:5f:32: d6:18:20:e2:9c:92:36:0d:76:d9:db:f6:ed:81:54: 7b:23:1d:4e:c1:53:80:2a:f4:23:20:f9:30:79:9e: b5:22:0e:e4:bd:32:1e:3c:60:d7:0a:ed:d8:e4:fe: 8a:c3:f2:15:16:5b:00:3d:1d:ac:16:76:06:6c:e7: e2:40:eb:42:f4:51:1c:b1:b4:35:46:6a:38:1d:00: a1:61:7a:71:cc:b1:7f:d5:97:d7:fb:61:bf:86:b0: 0d:69:3d:51:d0:c6:87:32:e4:9c:30:bf:2f:6e:3b: ab:c1:0d:0b:b6:f3:da:f0:cd:ee:f2:6d:b4:1b:b9: 3b:31:f1:d9:7f:ed:ec:df:bd:66:71:5d:dd:10:7f: 33:c7:fb:ff:10:f0:2e:f9:d7:c5:bb:9b:2a:da:eb: 9b:26:d3:d5:b2:7e:92:ff:6d:38:a8:83:87:f5:ac: da:7b:af:94:ec:45:ea:4a:8b:3d:d1:0d:bf:0b:bf: 94:24:fa:03:8b:d0:b8:3e:a4:ef:e7:6b:c0:df:1c: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:76:BA:AA:BD:D6:91:07:4B:55:4B:F0:5D:AD:DF:C7:B1:8D:0B:45 X509v3 Authority Key Identifier: keyid:49:1B:0E:A5:44:05:63:BE:9B:0F:16:7D:A7:6C:05:E8:5A:9D:2F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/491B0EA5440563BE9B0F167DA76C05E85A9D2F95.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7229781a-8ac9-4452-b25f-54e7edf7d4a4/0/3130332e3132322e3135352e302f32342d3234203d3e20313430343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.155.0/24 Signature Algorithm: sha256WithRSAEncryption 12:f5:1b:49:2e:17:d9:0a:9c:b5:f0:63:99:f9:e3:6c:12:d0: cf:7e:23:e6:96:97:0b:e0:ec:10:6f:cc:7f:93:97:a4:aa:fd: 62:20:a8:eb:7b:9f:41:01:2a:5c:a7:38:39:3c:80:26:c8:f9: c7:ef:b9:0f:5f:ac:02:53:c9:3f:20:b1:42:65:27:6c:0b:e8: 18:bf:ad:46:cd:0b:2b:b7:1a:ee:12:f5:94:0f:dc:07:98:14: 1c:86:79:ae:bf:bb:a0:fa:ec:29:6f:42:85:88:b3:b6:cd:d7: 71:a4:f4:8c:be:31:d8:9c:38:13:71:1a:1e:b7:64:09:99:ee: 9c:59:50:3c:26:8a:80:0a:f5:d6:38:f5:a1:63:21:f0:11:ea: f6:85:d4:0e:68:35:1e:a4:ae:b1:9f:c1:97:b3:7e:52:e8:a4: c3:8b:df:b2:d4:84:d6:4f:f9:5f:5a:27:20:f2:66:a9:ea:52: 2f:e1:45:26:68:c6:9e:f2:99:bf:01:9e:d3:99:86:09:e5:3d: b0:98:a3:e5:26:a2:d2:e7:1b:c1:37:ba:cb:5b:76:6c:f4:67: 80:60:09:8e:ae:6c:d7:4a:a3:34:7b:55:50:40:bb:a1:45:0e: e4:45:92:48:48:3f:71:d6:67:51:db:f2:9b:bd:da:69:c8:fd: e7:22:c8:84 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUD3co/CndKKYMmOPDGNy2gS6/FrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1 QTlEMkY5NTAeFw0yNTA3MjMwNTU1MDBaFw0yNjA3MjIwNjAwMDBaMDMxMTAvBgNV BAMTKDRFNzZCQUFBQkRENjkxMDc0QjU1NEJGMDVEQURERkM3QjE4RDBCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhNANN87n4DkcOwhMshFv8Cb9 S5J36udw8tQ7Ijb5AVoWgWomEfgYvVhg67TcSGf6tzeePtihgCZfMtYYIOKckjYN dtnb9u2BVHsjHU7BU4Aq9CMg+TB5nrUiDuS9Mh48YNcK7djk/orD8hUWWwA9HawW dgZs5+JA60L0URyxtDVGajgdAKFhenHMsX/Vl9f7Yb+GsA1pPVHQxocy5Jwwvy9u O6vBDQu289rwze7ybbQbuTsx8dl/7ezfvWZxXd0QfzPH+/8Q8C7518W7myra65sm 09WyfpL/bTiog4f1rNp7r5TsRepKiz3RDb8Lv5Qk+gOL0Lg+pO/na8DfHHSXAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUTna6qr3WkQdLVUvwXa3fx7GNC0UwHwYDVR0j BBgwFoAUSRsOpUQFY76bDxZ9p2wF6FqdL5UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjI5NzgxYS04YWM5LTQ0NTItYjI1Zi01NGU3ZWRmN2Q0YTQvMC80OTFCMEVBNTQ0 MDU2M0JFOUIwRjE2N0RBNzZDMDVFODVBOUQyRjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkxQjBFQTU0NDA1NjNCRTlCMEYxNjdEQTc2QzA1RTg1QTlE MkY5NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyMjk3ODFhLThhYzktNDQ1Mi1i MjVmLTU0ZTdlZGY3ZDRhNC8wLzMxMzAzMzJlMzEzMjMyMmUzMTM1MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnepswDQYJ KoZIhvcNAQELBQADggEBABL1G0kuF9kKnLXwY5n542wS0M9+I+aWlwvg7BBvzH+T l6Sq/WIgqOt7n0EBKlynODk8gCbI+cfvuQ9frAJTyT8gsUJlJ2wL6Bi/rUbNCyu3 Gu4S9ZQP3AeYFByGea6/u6D67ClvQoWIs7bN13Gk9Iy+MdicOBNxGh63ZAmZ7pxZ UDwmioAK9dY49aFjIfAR6vaF1A5oNR6krrGfwZezflLopMOL37LUhNZP+V9aJyDy ZqnqUi/hRSZoxp7ymb8BntOZhgnlPbCYo+UmotLnG8E3ustbdmz0Z4BgCY6ubNdK ozR7VVBAu6FFDuRFkkhIP3HWZ1Hb8pu92mnI/eciyIQ= -----END CERTIFICATE-----Generated at Wed Jul 23 12:13:24 2025 by rpki-client