$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa File: 3131302e34342e3136382e302f32332d3233203d3e203234323036.roa (raw, json) Hash identifier: k8TYiHXc6vZmoqXaKgcDXCYwJI5QRLDArVJpzQsFi0s= Subject key identifier: 7C:60:E5:23:78:4C:E0:D8:00:EB:F0:D3:BB:B0:11:5D:0B:49:A3:46 Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Certificate serial: 24FB79BA8045D2A20FF6E2A15954E5927A1FF33A Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa Signing time: Wed 23 Jul 2025 16:02:17 +0000 ROA not before: Wed 23 Jul 2025 15:57:17 +0000 ROA not after: Wed 22 Jul 2026 16:02:17 +0000 asID: 24206 IP address blocks: 110.44.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 17:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fb:79:ba:80:45:d2:a2:0f:f6:e2:a1:59:54:e5:92:7a:1f:f3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9 Validity Not Before: Jul 23 15:57:17 2025 GMT Not After : Jul 22 16:02:17 2026 GMT Subject: CN=7C60E523784CE0D800EBF0D3BBB0115D0B49A346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:9d:9b:10:f2:34:1a:5e:a0:1d:8f:92:57: 3b:08:1d:f6:c1:58:cd:f8:d3:d4:57:65:69:89:33: 21:e3:8b:72:d0:eb:d6:01:f3:86:78:e8:8d:44:b9: eb:c9:56:cc:2c:9c:06:92:10:d1:c0:1c:cb:95:5f: 4e:2f:82:cf:1e:73:57:26:01:11:ca:00:b6:7a:a8: 77:a7:7d:af:18:c5:d7:63:96:3f:24:4a:c6:4f:72: 59:de:4c:16:6f:b3:18:1a:60:7d:3d:b3:b5:1f:51: b1:77:88:18:6e:88:8e:28:5c:a6:9c:8d:82:bf:7e: 16:2c:27:03:8c:bd:c4:28:61:c2:09:b4:66:41:54: 06:de:a7:6d:a0:70:07:60:0a:43:7a:dd:45:c6:a7: df:15:9c:df:80:94:0b:9d:34:85:82:5c:cd:4c:5b: 57:26:0b:ca:04:a4:f3:1e:00:b8:a3:1f:5a:b0:e7: 2b:00:7f:72:dc:7c:47:2f:99:16:fd:00:68:93:fc: c8:c9:e2:4b:8a:7b:54:b5:3f:e1:cc:3c:bb:74:13: df:22:73:30:79:1c:90:a3:a1:7b:73:ab:85:cd:9c: 6b:cc:29:77:26:2d:87:df:08:77:0f:e6:72:f3:e4: a8:98:10:4d:b8:49:bf:0c:ea:a9:85:c5:67:6b:e8: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:60:E5:23:78:4C:E0:D8:00:EB:F0:D3:BB:B0:11:5D:0B:49:A3:46 X509v3 Authority Key Identifier: keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32332d3233203d3e203234323036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.44.168.0/23 Signature Algorithm: sha256WithRSAEncryption 70:23:07:f0:72:70:11:5a:03:a0:69:7c:54:b7:f8:d4:f3:b7: a1:42:8f:d2:e1:9a:0a:5e:3b:2c:30:5d:8f:86:8d:96:ee:7a: ae:12:8e:03:8b:ec:db:93:17:d3:27:3c:28:8c:bc:7e:dc:23: e8:16:da:7e:cf:b8:5f:e8:bb:c4:4f:1d:f5:b9:b1:04:53:58: 24:45:81:75:7e:2f:8f:f8:74:4e:70:6d:c2:b4:cb:91:b0:4e: 8d:a7:66:6a:76:63:3b:74:e7:a1:25:9f:fc:72:4b:61:73:b9: 39:d2:f6:9c:6e:fa:d9:12:43:a5:52:28:9f:40:b1:44:04:74: f5:e2:46:51:94:d6:a9:1a:8f:60:56:d7:33:b9:c7:e8:af:87: 31:de:e8:a7:5d:66:e8:57:c4:11:1c:7b:03:3a:db:88:15:d8: e4:ea:13:ea:af:bf:cd:de:74:85:de:80:ab:81:8d:5c:37:7d: cc:54:8b:41:ff:76:d0:bf:35:be:e5:55:4f:77:8e:3f:51:99: ce:97:17:aa:78:eb:65:73:34:37:59:10:d7:bb:5d:ca:eb:10: 78:c6:38:d5:d0:8a:c4:14:4a:1e:f0:de:63:da:e2:7a:48:ec: bc:46:97:ff:5c:0d:ef:92:02:90:8b:6e:64:76:7d:bf:3b:ce: a4:df:6d:2a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJPt5uoBF0qIP9uKhWVTlknof8zowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC MEMxMDhBOTAeFw0yNTA3MjMxNTU3MTdaFw0yNjA3MjIxNjAyMTdaMDMxMTAvBgNV BAMTKDdDNjBFNTIzNzg0Q0UwRDgwMEVCRjBEM0JCQjAxMTVEMEI0OUEzNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfp2bEPI0Gl6gHY+SVzsIHfbB WM3409RXZWmJMyHji3LQ69YB84Z46I1EuevJVswsnAaSENHAHMuVX04vgs8ec1cm ARHKALZ6qHenfa8Yxddjlj8kSsZPclneTBZvsxgaYH09s7UfUbF3iBhuiI4oXKac jYK/fhYsJwOMvcQoYcIJtGZBVAbep22gcAdgCkN63UXGp98VnN+AlAudNIWCXM1M W1cmC8oEpPMeALijH1qw5ysAf3LcfEcvmRb9AGiT/MjJ4kuKe1S1P+HMPLt0E98i czB5HJCjoXtzq4XNnGvMKXcmLYffCHcP5nLz5KiYEE24Sb8M6qmFxWdr6BVvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfGDlI3hM4NgA6/DTu7ARXQtJo0YwHwYDVR0j BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05 MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNjM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAW4sqDANBgkqhkiG 9w0BAQsFAAOCAQEAcCMH8HJwEVoDoGl8VLf41PO3oUKP0uGaCl47LDBdj4aNlu56 rhKOA4vs25MX0yc8KIy8ftwj6Bbafs+4X+i7xE8d9bmxBFNYJEWBdX4vj/h0TnBt wrTLkbBOjadmanZjO3TnoSWf/HJLYXO5OdL2nG762RJDpVIon0CxRAR09eJGUZTW qRqPYFbXM7nH6K+HMd7op11m6FfEERx7AzrbiBXY5OoT6q+/zd50hd6Aq4GNXDd9 zFSLQf920L81vuVVT3eOP1GZzpcXqnjrZXM0N1kQ17tdyusQeMY41dCKxBRKHvDe Y9riekjsvEaX/1wN75ICkItuZHZ9vzvOpN9tKg== -----END CERTIFICATE-----Generated at Sat Jul 26 15:47:43 2025 by rpki-client