$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa File: 3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa (raw, json) Hash identifier: cjrcytx7Zuxa9AtgQ+afjEzYS+0m/7FLcfwrrJooW6c= Subject key identifier: 71:7D:26:FE:8B:36:F1:BB:9C:C1:CF:8B:BB:B3:73:9D:AF:71:7E:BE Certificate issuer: /CN=084550E9619FF5ABD20864D9A6383053B59BF91E Certificate serial: 7D8CA2F5A3CA9F698B651E9394175B25DD47DDAF Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa Signing time: Tue 15 Jul 2025 06:00:01 +0000 ROA not before: Tue 15 Jul 2025 05:55:01 +0000 ROA not after: Tue 14 Jul 2026 06:00:01 +0000 asID: 23679 IP address blocks: 103.238.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 10:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8c:a2:f5:a3:ca:9f:69:8b:65:1e:93:94:17:5b:25:dd:47:dd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E Validity Not Before: Jul 15 05:55:01 2025 GMT Not After : Jul 14 06:00:01 2026 GMT Subject: CN=717D26FE8B36F1BB9CC1CF8BBBB3739DAF717EBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:97:44:8f:d4:23:8f:38:77:1d:b8:01:7f: d9:17:8c:65:4a:6c:e7:de:3a:6d:f8:b0:fb:8c:d1: 5b:6f:58:a8:56:38:7e:1e:0b:4c:3c:2e:f3:73:cb: 6e:22:fc:f3:9e:75:4a:1c:1c:2e:24:91:1c:2a:6d: 8b:4b:e9:fb:c7:2a:73:4b:bd:bb:dd:64:37:ad:60: 26:c3:f0:3d:e8:22:57:87:1f:c7:b9:93:30:0b:dc: 34:89:3d:76:0e:49:a3:ca:d2:0f:27:7b:47:38:da: 9a:5c:d8:12:70:bf:dc:b5:92:d6:cb:01:f3:73:1e: 14:bb:91:e2:8b:c5:8a:e9:f7:f3:5d:b1:37:9e:28: 1d:ab:e6:be:b2:a5:09:95:cb:e4:79:c8:67:2f:fe: 3a:cb:90:dc:c6:75:5c:31:49:47:5a:5d:fa:eb:b8: b2:85:5e:88:ef:4e:ee:f1:6f:57:83:c9:07:36:eb: b8:f2:12:97:c4:08:50:d8:92:ff:a2:15:63:48:97: 23:c1:31:0f:cb:d6:2e:15:bc:16:89:5c:2c:f8:5f: 92:ff:f2:82:4f:d2:8d:b2:f6:d0:2e:82:26:4b:19: 1a:57:51:d7:1e:38:25:ad:6a:b0:1d:ff:81:cd:cd: b7:64:6e:7c:55:22:30:45:9c:6d:f4:a1:0d:0d:67: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7D:26:FE:8B:36:F1:BB:9C:C1:CF:8B:BB:B3:73:9D:AF:71:7E:BE X509v3 Authority Key Identifier: keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32342d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.200.0/24 Signature Algorithm: sha256WithRSAEncryption 94:df:e2:60:e1:dd:cd:b5:ad:f6:db:2b:aa:95:ac:a8:ab:c9: 2e:f1:15:c3:4d:96:99:69:cd:43:d7:e3:cf:7b:03:09:89:ee: 45:2d:02:22:50:04:40:dd:c0:f0:b6:72:77:66:b3:b3:a8:42: 6b:71:d9:e3:91:be:f3:9f:7d:bf:9e:ec:00:7e:bc:87:82:76: 5e:63:76:99:35:5a:27:f8:7f:e2:40:57:46:71:0f:03:1e:38: e0:f0:60:62:83:a6:51:87:f4:fe:53:76:c9:82:d1:72:59:2f: 06:76:cb:f4:0d:4b:77:da:05:02:2e:0f:c3:54:7e:6b:70:4b: 58:5a:c4:7b:6d:c1:a0:72:ab:20:9e:ec:90:46:79:09:99:46: 3e:21:b8:37:73:70:59:1b:8b:11:80:8f:d1:44:a3:45:1d:cb: cd:7d:cc:ae:98:cc:b4:ae:09:bb:60:65:8d:10:57:1b:16:b4: df:67:0c:dc:86:01:f6:b2:42:1f:3a:94:83:a6:41:4e:ed:c8: 1b:97:3b:b6:62:cc:01:7d:9a:d8:36:5f:60:62:dd:71:a7:d7: fc:43:8a:c7:eb:1c:4e:a1:30:05:45:f4:0d:fe:f3:54:e4:c1: bd:22:88:75:a6:2f:13:f5:98:aa:83:cd:e8:e7:88:6d:94:90: 22:b0:1e:ed -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfYyi9aPKn2mLZR6TlBdbJd1H3a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC NTlCRjkxRTAeFw0yNTA3MTUwNTU1MDFaFw0yNjA3MTQwNjAwMDFaMDMxMTAvBgNV BAMTKDcxN0QyNkZFOEIzNkYxQkI5Q0MxQ0Y4QkJCQjM3MzlEQUY3MTdFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4eZdEj9Qjjzh3HbgBf9kXjGVK bOfeOm34sPuM0VtvWKhWOH4eC0w8LvNzy24i/POedUocHC4kkRwqbYtL6fvHKnNL vbvdZDetYCbD8D3oIleHH8e5kzAL3DSJPXYOSaPK0g8ne0c42ppc2BJwv9y1ktbL AfNzHhS7keKLxYrp9/NdsTeeKB2r5r6ypQmVy+R5yGcv/jrLkNzGdVwxSUdaXfrr uLKFXojvTu7xb1eDyQc267jyEpfECFDYkv+iFWNIlyPBMQ/L1i4VvBaJXCz4X5L/ 8oJP0o2y9tAugiZLGRpXUdceOCWtarAd/4HNzbdkbnxVIjBFnG30oQ0NZ+OpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcX0m/os28bucwc+Lu7Nzna9xfr4wHwYDVR0j BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC RjkxRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04 N2YyLWQ4MTg0MTc4YzE0OS8wLzMxMzAzMzJlMzIzMzM4MmUzMjMwMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+7IMA0GCSqG SIb3DQEBCwUAA4IBAQCU3+Jg4d3Nta322yuqlayoq8ku8RXDTZaZac1D1+PPewMJ ie5FLQIiUARA3cDwtnJ3ZrOzqEJrcdnjkb7zn32/nuwAfryHgnZeY3aZNVon+H/i QFdGcQ8DHjjg8GBig6ZRh/T+U3bJgtFyWS8Gdsv0DUt32gUCLg/DVH5rcEtYWsR7 bcGgcqsgnuyQRnkJmUY+Ibg3c3BZG4sRgI/RRKNFHcvNfcyumMy0rgm7YGWNEFcb FrTfZwzchgH2skIfOpSDpkFO7cgblzu2YswBfZrYNl9gYt1xp9f8Q4rH6xxOoTAF RfQN/vNU5MG9Ioh1pi8T9Ziqg83o54htlJAisB7t -----END CERTIFICATE-----Generated at Wed Jul 23 12:21:23 2025 by rpki-client