$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa File: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (raw, json) Hash identifier: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k= Subject key identifier: B8:D4:F1:48:9B:5B:95:C6:76:A4:F6:C6:0D:59:B3:8E:15:FF:B7:8D Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 392A55F8E998C9701AE3F92037820B5124D89F4D Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa Signing time: Mon 21 Jul 2025 08:00:01 +0000 ROA not before: Mon 21 Jul 2025 07:55:01 +0000 ROA not after: Mon 20 Jul 2026 08:00:01 +0000 asID: 139978 IP address blocks: 103.148.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 11:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2a:55:f8:e9:98:c9:70:1a:e3:f9:20:37:82:0b:51:24:d8:9f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Jul 21 07:55:01 2025 GMT Not After : Jul 20 08:00:01 2026 GMT Subject: CN=B8D4F1489B5B95C676A4F6C60D59B38E15FFB78D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:44:2e:5a:03:c1:76:83:38:d3:87:40:72: f9:56:67:6c:ed:04:cd:d0:1b:d0:29:54:52:a0:0c: 25:cb:03:d2:5a:08:9c:b4:d8:02:7f:76:ab:e2:61: c4:5c:9b:cb:9b:89:cf:49:70:e9:c5:89:91:b8:21: 50:72:2e:f8:2e:e3:b4:ce:f4:0c:5b:b0:ad:17:a4: 50:b9:a2:df:16:e6:c2:4a:ad:46:3a:57:1c:58:83: b4:d3:78:0e:57:45:99:c3:32:9a:4b:14:bb:26:da: d3:18:4b:c8:1f:8f:1c:27:17:c7:9c:ac:52:c0:d9: 32:37:8d:ba:30:49:90:21:b0:68:64:0e:2c:26:5e: 7a:c7:68:26:bf:e1:ca:97:c7:86:17:c8:28:d2:a9: 56:9e:26:5c:af:ed:d8:2d:c3:f1:8a:b4:8c:4a:ab: 5d:4d:d8:14:e0:3f:19:77:4f:48:d9:1f:b1:a1:11: 98:f8:59:bc:d8:4b:e6:5f:64:df:dc:29:0b:be:1a: d3:43:08:ba:76:63:4f:54:11:3c:23:d9:f9:25:50: 2b:a6:77:3d:c7:df:f4:9c:02:c6:b5:29:74:9d:0f: ce:92:b8:ce:70:9c:1c:60:08:05:e7:26:68:66:9e: 0f:40:fe:29:65:db:ab:43:b2:06:30:ea:67:fe:8b: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D4:F1:48:9B:5B:95:C6:76:A4:F6:C6:0D:59:B3:8E:15:FF:B7:8D X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.18.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:68:dd:e1:ae:a4:48:b4:5e:d4:ea:4a:1e:ec:62:8b:b0:82: 39:d3:54:d3:ef:c8:50:07:36:9c:88:19:0c:91:b3:15:e0:6f: 1e:ec:f6:0c:cc:52:d0:64:6a:10:e0:b4:ec:31:0b:3a:6c:f0: ef:f7:ee:1c:0a:03:1f:f6:a6:35:69:94:67:db:cd:ca:0a:52: dc:3b:e9:03:1a:7b:5d:ec:7c:c3:e1:c1:b1:a2:31:07:27:17: a5:78:1b:05:64:ff:1a:8b:27:85:b4:82:39:d4:7a:72:70:84: 88:37:46:ef:6f:1c:7e:e4:ec:f6:fb:0a:36:8b:d1:08:6d:b6: 77:7e:bc:d5:46:bb:b8:19:63:af:51:10:29:4f:a3:74:cd:ce: cd:c5:88:32:e4:af:aa:c7:2b:21:63:94:06:6c:2d:6f:ba:ce: 0e:4d:66:e7:c1:9b:01:dc:44:5f:ec:06:92:40:0d:37:9a:24: 7c:7e:a5:9b:fc:26:7a:b4:39:ef:7d:dd:10:41:c1:a0:ec:06: 0c:d5:b0:a1:a1:b0:71:ae:8b:88:f4:6d:74:2a:0e:0a:0d:89: 54:00:ee:c7:9c:1a:10:94:92:a5:01:98:e6:bf:46:2b:26:eb: 3e:2d:3a:f0:81:00:82:57:3b:f3:75:28:32:16:46:de:7b:34: 14:60:5d:fc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOSpV+OmYyXAa4/kgN4ILUSTYn00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTA3MjEwNzU1MDFaFw0yNjA3MjAwODAwMDFaMDMxMTAvBgNV BAMTKEI4RDRGMTQ4OUI1Qjk1QzY3NkE0RjZDNjBENTlCMzhFMTVGRkI3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuyEQuWgPBdoM404dAcvlWZ2zt BM3QG9ApVFKgDCXLA9JaCJy02AJ/dqviYcRcm8ubic9JcOnFiZG4IVByLvgu47TO 9AxbsK0XpFC5ot8W5sJKrUY6VxxYg7TTeA5XRZnDMppLFLsm2tMYS8gfjxwnF8ec rFLA2TI3jbowSZAhsGhkDiwmXnrHaCa/4cqXx4YXyCjSqVaeJlyv7dgtw/GKtIxK q11N2BTgPxl3T0jZH7GhEZj4WbzYS+ZfZN/cKQu+GtNDCLp2Y09UETwj2fklUCum dz3H3/ScAsa1KXSdD86SuM5wnBxgCAXnJmhmng9A/ill26tDsgYw6mf+i3mRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUuNTxSJtblcZ2pPbGDVmzjhX/t40wHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3Yjg3ZjZkLTI5YTctNGI0Yy04 MWM3LTViNGNiZGIyY2I2YS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5QSMA0GCSqG SIb3DQEBCwUAA4IBAQCNaN3hrqRItF7U6koe7GKLsII501TT78hQBzaciBkMkbMV 4G8e7PYMzFLQZGoQ4LTsMQs6bPDv9+4cCgMf9qY1aZRn283KClLcO+kDGntd7HzD 4cGxojEHJxeleBsFZP8aiyeFtII51HpycISIN0bvbxx+5Oz2+wo2i9EIbbZ3frzV Rru4GWOvURApT6N0zc7NxYgy5K+qxyshY5QGbC1vus4OTWbnwZsB3ERf7AaSQA03 miR8fqWb/CZ6tDnvfd0QQcGg7AYM1bChobBxrouI9G10Kg4KDYlUAO7HnBoQlJKl AZjmv0YrJus+LTrwgQCCVzvzdSgyFkbeezQUYF38 -----END CERTIFICATE-----Generated at Fri Jul 25 00:52:58 2025 by rpki-client