$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa File: 3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa (raw, json) Hash identifier: /sujTtwH0ddwmWj6UyMseljhgpcNLVkP8+vtS5y3rGg= Subject key identifier: C0:5C:D1:79:A0:99:78:96:DD:15:1D:8D:36:0A:4E:31:E1:55:3F:6D Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA Certificate serial: 7F399A4A2E22D6D8A00A1659D17E113798073886 Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa Signing time: Sun 13 Jul 2025 11:46:10 +0000 ROA not before: Sun 13 Jul 2025 11:41:10 +0000 ROA not after: Sun 12 Jul 2026 11:46:10 +0000 asID: 59282 IP address blocks: 103.228.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:39:9a:4a:2e:22:d6:d8:a0:0a:16:59:d1:7e:11:37:98:07:38:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA Validity Not Before: Jul 13 11:41:10 2025 GMT Not After : Jul 12 11:46:10 2026 GMT Subject: CN=C05CD179A0997896DD151D8D360A4E31E1553F6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:2e:44:2f:8b:82:35:bf:c5:ca:e7:38:d4: 4a:2c:1c:2a:a2:2f:be:4e:d8:98:c4:a3:42:be:cc: a2:ac:df:33:57:39:4f:43:53:08:d1:59:a6:79:ed: 72:2c:48:2a:c9:75:14:a3:c4:fa:e1:2a:ae:bd:e0: a0:9c:77:d5:a4:21:bb:26:1b:d6:5e:65:91:56:ba: d2:87:45:ce:df:92:e0:61:09:8f:b3:86:25:5f:98: bf:f3:34:73:d7:5c:aa:df:0f:d6:d2:a8:84:a2:74: d4:cb:a3:fa:a1:b0:59:d8:11:a3:4b:f2:45:cc:54: 79:63:b2:29:85:f8:23:b5:2e:ff:a1:c8:1c:93:5c: 6a:c3:1a:76:50:01:59:0e:97:3b:27:0f:3f:b9:48: 2f:8d:a4:25:42:91:b3:f1:b5:6a:73:d6:1f:b6:43: 9c:a3:b8:a0:e5:1f:84:5d:11:b9:75:89:c7:d4:15: 95:12:b0:9a:43:63:08:45:c9:75:71:40:52:45:e9: 8e:15:85:bd:00:87:18:6d:b7:88:83:3a:c2:75:94: 96:90:ff:f6:51:b6:b8:ad:99:45:6c:4f:95:fa:9c: bc:57:4d:c2:c9:f5:d8:84:c9:57:13:24:4c:dc:f9: 5a:d8:97:ed:9c:8a:9e:54:48:f9:7a:8d:af:46:96: a2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5C:D1:79:A0:99:78:96:DD:15:1D:8D:36:0A:4E:31:E1:55:3F:6D X509v3 Authority Key Identifier: keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3130332e3232382e3234352e302f32342d3234203d3e203539323832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.245.0/24 Signature Algorithm: sha256WithRSAEncryption d5:29:a3:70:49:15:3b:a2:e8:7e:08:05:a9:95:eb:a3:87:7a: c9:59:d9:d5:4f:00:93:0a:70:85:24:8e:24:94:a9:f3:0a:3d: 67:8e:e8:c0:00:77:18:5f:f5:10:02:6c:f9:e7:4b:82:0c:67: 73:13:fd:f4:09:1b:dd:aa:eb:22:08:7f:2b:b9:a4:06:1c:f5: f4:6b:cc:f1:4c:b5:01:ac:45:1e:54:01:7d:6a:3a:cf:3e:51: 9c:cd:43:f8:0d:50:d6:09:21:af:25:4a:76:67:7a:b2:e7:da: 6f:ea:9e:7a:2c:57:ac:f4:5e:d1:64:54:cd:6d:71:55:f2:c8: 68:88:54:3e:9f:cd:6d:32:8c:4a:f4:a1:3f:2c:63:c0:38:6d: 99:db:f4:0a:79:65:45:d5:b4:3d:16:1f:99:9b:1a:2d:4b:ac: 66:8a:61:bd:36:01:0d:c8:c5:2d:64:bb:0c:43:93:08:14:e5: 68:de:8d:b8:d3:a9:92:53:ca:f6:60:cb:4a:e4:4e:e5:06:88: 7e:26:1b:33:47:6d:50:eb:8a:8c:a7:a2:d3:74:43:b7:d2:3c: c8:52:ba:83:98:35:97:1f:67:48:b5:6d:da:42:02:db:d7:7c: fb:38:fd:b4:13:22:2b:9d:69:9e:60:59:12:0a:3a:17:cb:5b: 34:b8:63:f0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfzmaSi4i1tigChZZ0X4RN5gHOIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG MDBFNzFBQTAeFw0yNTA3MTMxMTQxMTBaFw0yNjA3MTIxMTQ2MTBaMDMxMTAvBgNV BAMTKEMwNUNEMTc5QTA5OTc4OTZERDE1MUQ4RDM2MEE0RTMxRTE1NTNGNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEWi5EL4uCNb/Fyuc41EosHCqi L75O2JjEo0K+zKKs3zNXOU9DUwjRWaZ57XIsSCrJdRSjxPrhKq694KCcd9WkIbsm G9ZeZZFWutKHRc7fkuBhCY+zhiVfmL/zNHPXXKrfD9bSqISidNTLo/qhsFnYEaNL 8kXMVHljsimF+CO1Lv+hyByTXGrDGnZQAVkOlzsnDz+5SC+NpCVCkbPxtWpz1h+2 Q5yjuKDlH4RdEbl1icfUFZUSsJpDYwhFyXVxQFJF6Y4Vhb0Ahxhtt4iDOsJ1lJaQ //ZRtritmUVsT5X6nLxXTcLJ9diEyVcTJEzc+VrYl+2cip5USPl6ja9GlqLdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwFzReaCZeJbdFR2NNgpOMeFVP20wHwYDVR0j BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF NzFBQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04 MDQ3LTY4ZDJiZDYzYzljMy8wLzMxMzAzMzJlMzIzMjM4MmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+T1MA0GCSqG SIb3DQEBCwUAA4IBAQDVKaNwSRU7ouh+CAWpleujh3rJWdnVTwCTCnCFJI4klKnz Cj1njujAAHcYX/UQAmz550uCDGdzE/30CRvdqusiCH8ruaQGHPX0a8zxTLUBrEUe VAF9ajrPPlGczUP4DVDWCSGvJUp2Z3qy59pv6p56LFes9F7RZFTNbXFV8shoiFQ+ n81tMoxK9KE/LGPAOG2Z2/QKeWVF1bQ9Fh+ZmxotS6xmimG9NgENyMUtZLsMQ5MI FOVo3o2406mSU8r2YMtK5E7lBoh+JhszR21Q64qMp6LTdEO30jzIUrqDmDWXH2dI tW3aQgLb13z7OP20EyIrnWmeYFkSCjoXy1s0uGPw -----END CERTIFICATE-----Generated at Mon Jul 21 14:29:15 2025 by rpki-client