$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa File: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (raw, json) Hash identifier: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro= Subject key identifier: 30:47:63:8A:E9:2B:62:37:4E:1F:22:B9:19:56:80:81:C0:7E:1A:72 Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 0B207188F00229FD7D72281512FED2E51D6D2B89 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa Signing time: Wed 18 Jun 2025 16:15:44 +0000 ROA not before: Wed 18 Jun 2025 16:10:44 +0000 ROA not after: Wed 17 Jun 2026 16:15:44 +0000 asID: 131736 IP address blocks: 103.132.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:20:71:88:f0:02:29:fd:7d:72:28:15:12:fe:d2:e5:1d:6d:2b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Jun 18 16:10:44 2025 GMT Not After : Jun 17 16:15:44 2026 GMT Subject: CN=3047638AE92B62374E1F22B919568081C07E1A72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:fc:cb:ba:6e:a5:1b:ea:00:52:cf:1c:f3: 8f:2b:f0:ef:cd:e3:53:3f:ef:a6:8b:4e:c1:82:f0: 12:cc:54:cc:5e:aa:b9:37:98:e0:d3:18:b8:da:ab: 6e:a6:17:42:5f:8a:fa:00:88:c9:4b:c3:2a:0a:9f: 83:45:c2:22:de:62:35:ae:92:11:42:24:fa:ee:4e: 90:04:1e:52:87:85:16:1f:12:62:66:21:99:9e:3b: b3:1c:7a:b3:f5:82:12:6b:cb:d4:cc:94:c8:1f:96: a6:17:a2:1c:08:3b:7c:96:7a:d2:15:9a:4c:35:74: 98:ae:bb:d1:e4:af:02:a0:54:80:a6:4a:80:f6:f8: 55:b8:c6:b0:d4:93:d9:b5:90:ec:8a:20:58:62:28: 4a:17:0f:84:4a:b9:f3:ec:9a:f2:d2:77:c4:17:12: 5e:b7:b2:22:f5:70:9a:4d:3c:d5:6d:37:09:d1:71: 81:00:cb:fb:f0:ab:0b:b9:20:05:73:30:f8:58:76: 1f:12:eb:4f:f1:26:a3:d4:2f:ab:e6:a7:d4:60:18: 1b:a3:29:11:c5:90:c6:0e:21:8d:78:96:a0:3d:45: a1:74:1a:70:9e:94:cb:92:f6:c9:ff:68:c0:b0:d8: d5:0f:a3:bd:72:2f:f1:45:6b:9b:b6:19:7c:b9:c9: bd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:47:63:8A:E9:2B:62:37:4E:1F:22:B9:19:56:80:81:C0:7E:1A:72 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.12.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:85:c9:78:c7:d6:5c:91:4b:57:f5:04:78:a5:12:ec:00:1d: 36:f7:7f:3f:59:4a:ce:5a:d3:af:b1:04:df:a9:df:90:bd:de: d6:8f:f3:ff:b1:b2:1d:e2:a0:7f:21:04:96:13:34:e7:6d:bb: 29:07:b4:57:03:6e:6d:72:d9:15:3b:d9:d1:a3:37:83:0c:4c: 14:20:f2:2f:ad:61:7a:09:8f:be:21:13:c1:50:7f:a5:e2:0f: e2:41:fc:8b:0d:f8:05:f9:87:b6:b4:a6:08:9f:99:09:9b:39: b4:4c:cc:3b:94:b8:6f:fb:5a:69:19:34:c9:a4:79:f4:49:18: 09:1d:9c:47:a0:27:40:fe:c6:d2:47:ad:fd:27:2d:5f:3d:5e: cf:85:b9:70:6b:8b:f9:f7:91:27:92:f7:6a:5f:cb:b4:24:42: 3b:0d:d8:c5:a7:0b:b0:c5:47:7e:b4:97:43:05:20:75:fc:83: 6b:f9:13:e0:76:0e:06:b6:bf:d3:c5:3a:1e:53:c8:99:3b:d0: 49:b3:9f:d4:27:94:2b:ae:ef:63:c0:df:94:48:a0:5b:99:9e: 46:c0:f3:de:af:9a:03:a2:7d:12:cd:73:27:49:e0:ac:32:aa: 1e:36:0b:05:28:9d:7b:ea:7e:02:c4:1a:9d:1f:43:47:52:1b: 2b:6a:29:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCyBxiPACKf19cigVEv7S5R1tK4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA2MTgxNjEwNDRaFw0yNjA2MTcxNjE1NDRaMDMxMTAvBgNV BAMTKDMwNDc2MzhBRTkyQjYyMzc0RTFGMjJCOTE5NTY4MDgxQzA3RTFBNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsMvzLum6lG+oAUs8c848r8O/N 41M/76aLTsGC8BLMVMxeqrk3mODTGLjaq26mF0JfivoAiMlLwyoKn4NFwiLeYjWu khFCJPruTpAEHlKHhRYfEmJmIZmeO7McerP1ghJry9TMlMgflqYXohwIO3yWetIV mkw1dJiuu9HkrwKgVICmSoD2+FW4xrDUk9m1kOyKIFhiKEoXD4RKufPsmvLSd8QX El63siL1cJpNPNVtNwnRcYEAy/vwqwu5IAVzMPhYdh8S60/xJqPUL6vmp9RgGBuj KRHFkMYOIY14lqA9RaF0GnCelMuS9sn/aMCw2NUPo71yL/FFa5u2GXy5yb1xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUMEdjiukrYjdOHyK5GVaAgcB+GnIwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyNWNkYTM2LTY5M2EtNGMxYS1i YTllLWUwZTE3ODExMjE0MC8wLzMxMzAzMzJlMzEzMzMyMmUzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4QMMA0GCSqG SIb3DQEBCwUAA4IBAQAPhcl4x9ZckUtX9QR4pRLsAB02938/WUrOWtOvsQTfqd+Q vd7Wj/P/sbId4qB/IQSWEzTnbbspB7RXA25tctkVO9nRozeDDEwUIPIvrWF6CY++ IRPBUH+l4g/iQfyLDfgF+Ye2tKYIn5kJmzm0TMw7lLhv+1ppGTTJpHn0SRgJHZxH oCdA/sbSR639Jy1fPV7Phblwa4v595EnkvdqX8u0JEI7DdjFpwuwxUd+tJdDBSB1 /INr+RPgdg4Gtr/TxToeU8iZO9BJs5/UJ5Qrru9jwN+USKBbmZ5GwPPer5oDon0S zXMnSeCsMqoeNgsFKJ176n4CxBqdH0NHUhsraikt -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:23 2025 by rpki-client