$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa File: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (raw, json) Hash identifier: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0= Subject key identifier: 6C:C5:3E:EE:FD:B6:CE:F6:F5:53:A2:DD:59:59:CF:77:20:6D:6D:ED Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 4E77CE5BBB15E7541329BD5A7D45E0D4742224F6 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa Signing time: Sun 06 Jul 2025 08:02:05 +0000 ROA not before: Sun 06 Jul 2025 07:57:05 +0000 ROA not after: Sun 05 Jul 2026 08:02:05 +0000 asID: 138112 IP address blocks: 103.126.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:77:ce:5b:bb:15:e7:54:13:29:bd:5a:7d:45:e0:d4:74:22:24:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Jul 6 07:57:05 2025 GMT Not After : Jul 5 08:02:05 2026 GMT Subject: CN=6CC53EEEFDB6CEF6F553A2DD5959CF77206D6DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:b6:97:8b:fc:f4:a0:7a:68:26:4e:2f:1a: 6f:ce:31:fb:a1:63:47:19:fe:a8:74:63:12:ed:4d: ad:7d:e1:36:06:ae:f5:56:f0:7f:8b:1a:38:0a:31: 44:4d:83:9a:1b:aa:c5:e4:4e:2d:2c:65:cd:24:dc: 9d:cf:29:4c:fc:72:4c:13:26:54:28:cb:88:6b:2b: bb:68:d0:7f:41:23:4c:26:7e:95:ab:2f:8e:35:1f: 80:64:4f:14:13:51:01:30:0a:85:ce:da:4a:72:22: 82:6f:e8:d6:71:42:39:d3:6a:04:b3:5d:d6:d3:f5: 18:f0:bf:6e:46:f1:a0:47:0a:f9:11:b4:fa:6c:94: 46:cb:ce:7e:17:42:da:18:5f:05:af:08:69:f6:1d: 39:75:ad:63:fb:09:f4:a9:14:b3:be:b5:ac:80:4d: 77:cd:56:fd:cc:15:89:41:eb:bf:03:70:05:4a:f8: 72:30:3c:da:19:6a:59:dc:1a:56:e8:6d:e6:db:e3: 7c:a6:c2:d0:c5:01:99:5b:84:bc:57:13:27:76:f0: d0:f2:7b:78:18:6c:eb:1c:4a:0d:92:7c:d6:84:ac: 54:c8:a5:e7:4b:45:1b:22:82:b2:f2:7b:f6:ef:71: d5:50:64:bd:4d:88:3b:8b:02:be:eb:c3:37:81:20: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C5:3E:EE:FD:B6:CE:F6:F5:53:A2:DD:59:59:CF:77:20:6D:6D:ED X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.174.0/24 Signature Algorithm: sha256WithRSAEncryption 08:bc:79:d7:3f:ef:cf:5c:cc:75:da:b4:25:93:d6:5c:bc:37: 0a:8f:7d:04:29:fb:21:7c:d1:a0:71:60:d2:1c:5d:33:cb:2e: a7:ea:55:8f:19:a1:8d:2b:6b:3d:30:b1:93:fc:36:d4:b1:ef: 51:49:2f:0c:95:12:e9:6f:99:ac:53:c6:72:1f:41:bc:46:68: be:0d:13:de:32:3a:da:75:93:f9:f7:b5:03:85:a6:ad:1b:32: 84:67:d7:f3:4c:be:f2:00:2a:10:c0:04:97:3a:f9:d0:14:e8: 25:9d:42:28:a2:61:d4:81:2a:38:e3:ef:67:d8:e8:57:56:62: 10:e3:9f:74:88:f9:65:3e:c8:e6:90:d4:7c:ec:38:78:22:e4: 0b:31:e2:eb:f1:fe:72:fe:e5:1e:a3:8d:36:53:bc:a2:9f:ea: 4a:c5:03:ca:aa:1c:df:6e:f9:27:db:9a:17:1d:0d:ff:37:3b: 56:35:af:6d:24:89:f8:8f:a6:6a:2a:d8:3f:21:87:5f:70:5b: 09:82:68:3a:ed:6e:d2:2e:f3:37:b8:58:64:ba:4f:09:39:cb: 9a:68:41:62:b1:ad:78:a5:4e:7b:8c:1d:f1:09:c6:07:89:40: 1a:82:fe:32:fd:d5:87:a9:f6:cf:86:71:aa:43:37:34:bf:2f: 07:d0:ec:63 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUTnfOW7sV51QTKb1afUXg1HQiJPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA3MDYwNzU3MDVaFw0yNjA3MDUwODAyMDVaMDMxMTAvBgNV BAMTKDZDQzUzRUVFRkRCNkNFRjZGNTUzQTJERDU5NTlDRjc3MjA2RDZERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEbaXi/z0oHpoJk4vGm/OMfuh Y0cZ/qh0YxLtTa194TYGrvVW8H+LGjgKMURNg5obqsXkTi0sZc0k3J3PKUz8ckwT JlQoy4hrK7to0H9BI0wmfpWrL441H4BkTxQTUQEwCoXO2kpyIoJv6NZxQjnTagSz XdbT9Rjwv25G8aBHCvkRtPpslEbLzn4XQtoYXwWvCGn2HTl1rWP7CfSpFLO+tayA TXfNVv3MFYlB678DcAVK+HIwPNoZalncGlbobebb43ymwtDFAZlbhLxXEyd28NDy e3gYbOscSg2SfNaErFTIpedLRRsigrLye/bvcdVQZL1NiDuLAr7rwzeBIEkbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUbMU+7v22zvb1U6LdWVnPdyBtbe0wHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYjhkOTA4LTFiOTktNDU1Yy1h Yzc2LThkNjI0ZGZhNDNiNi8wLzMxMzAzMzJlMzEzMjM2MmUzMTM3MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfq4wDQYJ KoZIhvcNAQELBQADggEBAAi8edc/789czHXatCWT1ly8NwqPfQQp+yF80aBxYNIc XTPLLqfqVY8ZoY0raz0wsZP8NtSx71FJLwyVEulvmaxTxnIfQbxGaL4NE94yOtp1 k/n3tQOFpq0bMoRn1/NMvvIAKhDABJc6+dAU6CWdQiiiYdSBKjjj72fY6FdWYhDj n3SI+WU+yOaQ1HzsOHgi5Asx4uvx/nL+5R6jjTZTvKKf6krFA8qqHN9u+Sfbmhcd Df83O1Y1r20kifiPpmoq2D8hh19wWwmCaDrtbtIu8ze4WGS6Twk5y5poQWKxrXil TnuMHfEJxgeJQBqC/jL91Yep9s+GcapDNzS/LwfQ7GM= -----END CERTIFICATE-----Generated at Tue Jul 22 04:13:49 2025 by rpki-client