$ rpki-client -vvf repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa File: 3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa (raw, json) Hash identifier: QAndsMLECtqgWCCHyuYe9oOyMMkwnZ8QhtRk2OHf9FQ= Subject key identifier: DD:C7:6E:81:8D:0E:8A:10:80:55:C4:44:CB:D3:B7:55:4F:90:6D:DB Certificate issuer: /CN=95966A8DB250307CF9852483F96922EE520F6E2A Certificate serial: 5F36B73CEEC36209845A8182CD6F3FFADE5F3FE9 Authority key identifier: 95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa Signing time: Thu 10 Jul 2025 08:02:50 +0000 ROA not before: Thu 10 Jul 2025 07:57:50 +0000 ROA not after: Thu 09 Jul 2026 08:02:50 +0000 asID: 132668 IP address blocks: 103.19.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:36:b7:3c:ee:c3:62:09:84:5a:81:82:cd:6f:3f:fa:de:5f:3f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95966A8DB250307CF9852483F96922EE520F6E2A Validity Not Before: Jul 10 07:57:50 2025 GMT Not After : Jul 9 08:02:50 2026 GMT Subject: CN=DDC76E818D0E8A108055C444CBD3B7554F906DDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:23:57:de:ec:18:3a:4a:86:b9:28:4c:a2: bd:39:7a:9c:73:be:11:9f:60:74:84:3e:d5:52:b7: cc:b7:d6:6b:ee:06:46:62:9e:d6:0f:60:63:cb:d5: fb:fb:dc:e6:36:41:9c:9d:70:e7:9e:15:c1:6f:1b: 97:4e:9d:4c:3b:75:51:b8:5c:f3:2c:07:ae:5b:0d: f0:b8:df:b1:37:49:14:70:a0:8b:1e:24:a1:41:7d: 19:80:7f:a9:37:d2:d7:1f:cb:2f:84:bd:f7:c2:46: 3e:28:f7:70:16:be:6f:33:c4:02:43:9e:01:c8:d7: c8:08:6e:a4:ac:f8:9a:97:b2:00:8b:c7:72:9f:ca: 60:9a:af:0f:16:8b:b3:2e:b1:6a:99:8a:a1:c3:89: 4f:cc:15:d7:6c:d2:c9:ad:f2:a8:09:7d:3a:36:27: d0:d9:5a:63:50:81:5e:d3:80:93:40:5a:b7:f0:1d: c9:10:b4:38:f6:c4:af:f4:45:c1:1b:66:23:c8:5e: 7a:d7:72:ca:a5:d0:78:5e:87:56:af:1f:03:57:17: 64:9f:2a:8c:88:ff:21:3a:39:2e:b2:47:31:6a:57: 90:6d:9b:b4:3f:97:37:4d:c4:4a:95:1d:ae:a3:40: 63:18:6a:7a:03:75:42:18:25:15:52:a8:55:95:40: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C7:6E:81:8D:0E:8A:10:80:55:C4:44:CB:D3:B7:55:4F:90:6D:DB X509v3 Authority Key Identifier: keyid:95:96:6A:8D:B2:50:30:7C:F9:85:24:83:F9:69:22:EE:52:0F:6E:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/95966A8DB250307CF9852483F96922EE520F6E2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95966A8DB250307CF9852483F96922EE520F6E2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2f1417a-5718-4071-9f35-c122555dac7a/0/3130332e31392e3233302e302f32342d3234203d3e20313332363638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.19.230.0/24 Signature Algorithm: sha256WithRSAEncryption dd:64:33:00:a4:df:0a:63:71:7c:59:49:d3:53:0c:6b:84:f5: 0c:65:f4:43:76:cc:d0:5b:1d:0c:d7:b0:57:be:ec:60:3f:1d: 29:90:9f:04:a6:78:8f:80:b3:2d:2c:ca:75:8b:2c:c8:08:d2: b9:23:3d:e9:be:25:d5:05:ae:de:ed:18:49:62:32:cb:45:92: 52:82:1b:d4:17:6d:2f:69:6c:9e:27:65:a0:b0:4e:bd:57:34: fe:6b:38:2c:01:0d:93:4a:0c:cf:c0:c9:8a:0f:79:c0:79:cf: 71:9f:56:e3:e7:4d:3c:85:91:0a:e6:0c:98:bc:1a:b3:fe:da: 3c:bf:f6:6f:8e:71:45:97:c4:5d:4b:dc:bb:fe:09:c8:58:60: 52:5e:75:76:a3:67:70:bd:a6:e0:6d:46:92:88:5c:28:81:d0: a5:b8:6a:43:d8:a0:c7:b7:0d:40:6e:dd:ae:18:d1:ea:97:c4: 90:7e:33:28:54:a6:50:cf:a6:df:ec:c6:9f:7b:60:0a:4c:b8: a1:b1:43:62:8d:68:d8:e7:4d:73:bf:3a:25:ef:33:d6:1c:78: 0e:27:60:fd:92:b0:cf:34:d7:11:cb:e4:a6:4f:55:30:ac:ef: 27:a1:ca:ec:24:0d:4f:3e:b6:85:96:c2:19:d9:84:45:83:1f: cc:37:95:64 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXza3PO7DYgmEWoGCzW8/+t5fP+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1 MjBGNkUyQTAeFw0yNTA3MTAwNzU3NTBaFw0yNjA3MDkwODAyNTBaMDMxMTAvBgNV BAMTKEREQzc2RTgxOEQwRThBMTA4MDU1QzQ0NENCRDNCNzU1NEY5MDZEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEiNX3uwYOkqGuShMor05epxz vhGfYHSEPtVSt8y31mvuBkZintYPYGPL1fv73OY2QZydcOeeFcFvG5dOnUw7dVG4 XPMsB65bDfC437E3SRRwoIseJKFBfRmAf6k30tcfyy+EvffCRj4o93AWvm8zxAJD ngHI18gIbqSs+JqXsgCLx3KfymCarw8Wi7MusWqZiqHDiU/MFdds0smt8qgJfTo2 J9DZWmNQgV7TgJNAWrfwHckQtDj2xK/0RcEbZiPIXnrXcsql0Hheh1avHwNXF2Sf KoyI/yE6OS6yRzFqV5Btm7Q/lzdNxEqVHa6jQGMYanoDdUIYJRVSqFWVQHSdAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU3cdugY0OihCAVcREy9O3VU+QbdswHwYDVR0j BBgwFoAUlZZqjbJQMHz5hSSD+Wki7lIPbiowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MmYxNDE3YS01NzE4LTQwNzEtOWYzNS1jMTIyNTU1ZGFjN2EvMC85NTk2NkE4REIy NTAzMDdDRjk4NTI0ODNGOTY5MjJFRTUyMEY2RTJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU5NjZBOERCMjUwMzA3Q0Y5ODUyNDgzRjk2OTIyRUU1MjBG NkUyQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZjE0MTdhLTU3MTgtNDA3MS05 ZjM1LWMxMjI1NTVkYWM3YS8wLzMxMzAzMzJlMzEzOTJlMzIzMzMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxPmMA0GCSqG SIb3DQEBCwUAA4IBAQDdZDMApN8KY3F8WUnTUwxrhPUMZfRDdszQWx0M17BXvuxg Px0pkJ8EpniPgLMtLMp1iyzICNK5Iz3pviXVBa7e7RhJYjLLRZJSghvUF20vaWye J2WgsE69VzT+azgsAQ2TSgzPwMmKD3nAec9xn1bj5008hZEK5gyYvBqz/to8v/Zv jnFFl8RdS9y7/gnIWGBSXnV2o2dwvabgbUaSiFwogdCluGpD2KDHtw1Abt2uGNHq l8SQfjMoVKZQz6bf7Mafe2AKTLihsUNijWjY501zvzol7zPWHHgOJ2D9krDPNNcR y+SmT1UwrO8nocrsJA1PPraFlsIZ2YRFgx/MN5Vk -----END CERTIFICATE-----Generated at Fri Jul 25 01:04:52 2025 by rpki-client