$ rpki-client -vvf repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa File: 3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa (raw, json) Hash identifier: 2K/xB758etINS0lFywkuf13/M0mChw9SVZu+VGyF0I8= Subject key identifier: 98:B7:A8:99:F4:41:B3:CE:81:44:AC:09:62:79:71:2F:BE:7D:E3:1F Certificate issuer: /CN=9F93097BE8B711227435ABF870C332F631C8D769 Certificate serial: 479C24F7B4168F51002A6C34D0AFB396E2436525 Authority key identifier: 9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa Signing time: Mon 21 Jul 2025 11:00:02 +0000 ROA not before: Mon 21 Jul 2025 10:55:02 +0000 ROA not after: Mon 20 Jul 2026 11:00:02 +0000 asID: 151010 IP address blocks: 103.215.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9c:24:f7:b4:16:8f:51:00:2a:6c:34:d0:af:b3:96:e2:43:65:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F93097BE8B711227435ABF870C332F631C8D769 Validity Not Before: Jul 21 10:55:02 2025 GMT Not After : Jul 20 11:00:02 2026 GMT Subject: CN=98B7A899F441B3CE8144AC096279712FBE7DE31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:63:6f:24:ab:95:3b:23:56:b5:e6:cf:13: 65:16:ad:dc:e5:d8:58:ec:a3:53:f6:0e:4d:2e:47: 48:13:75:9a:97:21:2f:db:8a:a9:d4:09:a1:d4:10: 6c:ce:8a:b4:22:b4:ad:eb:40:aa:63:43:51:6b:c7: 02:35:21:29:9c:a7:fe:43:c8:b3:0a:1a:bf:73:15: ff:c6:4b:4b:20:9a:fc:5e:e9:be:cc:57:a3:09:c8: 6e:14:13:8b:6d:6a:71:95:16:74:f1:98:e7:ec:f8: 3c:ea:75:93:86:ed:41:2a:77:63:89:96:bf:22:4c: 2c:d1:5f:bc:cd:76:d1:5b:00:f7:5b:51:5e:81:af: a3:89:30:5e:32:9a:f1:7c:7d:8c:41:f5:8e:58:7c: 26:44:6c:07:35:7b:32:ce:e6:5e:13:97:a3:46:5f: 39:c5:bc:81:e5:e6:63:e4:97:5d:e3:d6:90:d2:94: 20:d4:e1:79:b3:e4:65:b0:55:40:b4:77:7c:49:9a: 89:92:1d:ba:4e:f2:ab:9e:6c:85:2a:40:87:89:c0: 2a:bd:00:45:41:21:d1:58:41:8d:f3:27:a0:e5:ec: 1d:17:57:ae:e2:e3:bb:b6:3f:68:ad:23:ae:c7:6b: 99:cc:64:87:11:65:21:8e:af:00:20:24:56:a2:39: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:A8:99:F4:41:B3:CE:81:44:AC:09:62:79:71:2F:BE:7D:E3:1F X509v3 Authority Key Identifier: keyid:9F:93:09:7B:E8:B7:11:22:74:35:AB:F8:70:C3:32:F6:31:C8:D7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/9F93097BE8B711227435ABF870C332F631C8D769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F93097BE8B711227435ABF870C332F631C8D769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/da0fbb55-1dd8-4f8b-b890-4a2c0a0111db/0/3130332e3231352e36322e302f32342d3234203d3e20313531303130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.62.0/24 Signature Algorithm: sha256WithRSAEncryption 37:86:d3:96:b9:f2:fe:39:52:db:95:77:41:67:c4:b2:e0:77: f5:f1:a3:02:ab:d5:31:4a:81:4e:13:41:21:4e:b4:65:36:08: db:3c:eb:ce:4f:3c:19:b1:e7:e8:24:f2:7f:ab:77:e6:f5:f0: f1:c0:98:0c:ef:1d:53:76:10:c4:5e:6f:53:32:82:56:cd:82: 75:d2:c9:5f:7b:10:5f:c2:bd:19:b6:95:3c:e8:43:41:bd:1c: 27:f3:4d:aa:e3:4a:3d:56:5b:ba:8c:ad:fc:5a:ac:82:97:eb: e6:2f:13:d8:7c:fa:c5:98:ed:3e:eb:98:83:19:e6:c7:be:73: dd:15:a6:8f:78:03:72:3d:1d:e6:fa:73:73:6c:25:a3:76:ea: 3e:44:32:5c:85:c0:33:fb:e1:6b:8d:28:2c:04:0d:5d:24:f7: 63:7e:ec:d2:a6:72:22:77:f9:1a:5c:ae:ce:a6:c2:15:46:be: 02:27:65:5c:d9:0e:38:da:d2:82:2f:49:8e:a6:86:0e:66:f3: 07:bc:39:13:1d:49:fa:bb:de:43:1c:73:06:70:2c:ce:ef:1b: c4:d3:86:cd:bb:80:5b:9e:e9:48:09:23:7d:11:61:46:a1:36: 79:5f:41:9b:93:d4:8c:f6:e6:3f:88:4a:f0:cc:76:d4:cb:b6: b3:5b:60:ea -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUR5wk97QWj1EAKmw00K+zluJDZSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYz MUM4RDc2OTAeFw0yNTA3MjExMDU1MDJaFw0yNjA3MjAxMTAwMDJaMDMxMTAvBgNV BAMTKDk4QjdBODk5RjQ0MUIzQ0U4MTQ0QUMwOTYyNzk3MTJGQkU3REUzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc5GNvJKuVOyNWtebPE2UWrdzl 2Fjso1P2Dk0uR0gTdZqXIS/biqnUCaHUEGzOirQitK3rQKpjQ1FrxwI1ISmcp/5D yLMKGr9zFf/GS0sgmvxe6b7MV6MJyG4UE4ttanGVFnTxmOfs+DzqdZOG7UEqd2OJ lr8iTCzRX7zNdtFbAPdbUV6Br6OJMF4ymvF8fYxB9Y5YfCZEbAc1ezLO5l4Tl6NG XznFvIHl5mPkl13j1pDSlCDU4Xmz5GWwVUC0d3xJmomSHbpO8quebIUqQIeJwCq9 AEVBIdFYQY3zJ6Dl7B0XV67i47u2P2itI67Ha5nMZIcRZSGOrwAgJFaiOQcZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmLeomfRBs86BRKwJYnlxL7594x8wHwYDVR0j BBgwFoAUn5MJe+i3ESJ0Nav4cMMy9jHI12kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YTBmYmI1NS0xZGQ4LTRmOGItYjg5MC00YTJjMGEwMTExZGIvMC85RjkzMDk3QkU4 QjcxMTIyNzQzNUFCRjg3MEMzMzJGNjMxQzhENzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY5MzA5N0JFOEI3MTEyMjc0MzVBQkY4NzBDMzMyRjYzMUM4 RDc2OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhMGZiYjU1LTFkZDgtNGY4Yi1i ODkwLTRhMmMwYTAxMTFkYi8wLzMxMzAzMzJlMzIzMTM1MmUzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzAzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9c+MA0GCSqG SIb3DQEBCwUAA4IBAQA3htOWufL+OVLblXdBZ8Sy4Hf18aMCq9UxSoFOE0EhTrRl NgjbPOvOTzwZsefoJPJ/q3fm9fDxwJgM7x1TdhDEXm9TMoJWzYJ10slfexBfwr0Z tpU86ENBvRwn802q40o9Vlu6jK38WqyCl+vmLxPYfPrFmO0+65iDGebHvnPdFaaP eANyPR3m+nNzbCWjduo+RDJchcAz++FrjSgsBA1dJPdjfuzSpnIid/kaXK7OpsIV Rr4CJ2Vc2Q442tKCL0mOpoYOZvMHvDkTHUn6u95DHHMGcCzO7xvE04bNu4BbnulI CSN9EWFGoTZ5X0Gbk9SM9uY/iErwzHbUy7azW2Dq -----END CERTIFICATE-----Generated at Tue Jul 22 11:53:08 2025 by rpki-client