$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa File: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (raw, json) Hash identifier: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM= Subject key identifier: 01:5C:CA:B1:3D:E2:9A:F1:22:72:BE:95:95:CE:DB:35:68:6A:23:1A Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 07D6074345B1769F40BD95D3B0268058E1216856 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa Signing time: Sun 06 Jul 2025 07:00:02 +0000 ROA not before: Sun 06 Jul 2025 06:55:02 +0000 ROA not after: Sun 05 Jul 2026 07:00:02 +0000 asID: 138112 IP address blocks: 103.126.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d6:07:43:45:b1:76:9f:40:bd:95:d3:b0:26:80:58:e1:21:68:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Jul 6 06:55:02 2025 GMT Not After : Jul 5 07:00:02 2026 GMT Subject: CN=015CCAB13DE29AF12272BE9595CEDB35686A231A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:77:97:19:f5:b3:10:90:d4:9b:d4:97:ed: 3f:ff:9c:75:7e:b0:fc:23:6e:c7:06:0f:15:f0:1f: 48:0b:6c:b6:a7:9e:9f:81:4b:b8:3b:27:ab:03:49: 95:fa:40:5a:0c:d4:60:17:3e:5e:1c:d1:a6:ab:fd: 4b:3a:08:36:3a:9f:d3:d4:60:40:0b:10:50:90:fd: b6:c1:31:41:69:27:29:01:7b:2a:e7:83:dd:5f:20: 29:f7:37:42:6a:bf:c0:3d:68:4f:8c:7c:21:6b:4f: 8e:f3:c6:af:39:c1:d2:98:db:24:01:1a:94:ec:30: 12:95:52:67:cc:7e:bd:85:b4:75:f3:85:36:a1:44: 85:32:02:a1:f7:00:88:e6:33:16:be:4c:33:85:c6: 1c:7f:53:0b:0f:d1:b8:ba:7b:06:7f:fb:18:80:cd: cf:d7:36:47:77:9e:ba:62:32:b6:b4:6d:e0:03:66: 47:c7:6e:1d:d1:db:ef:23:d4:d3:56:dc:a4:de:95: bb:27:5f:69:e4:26:0f:14:00:33:2f:bd:8a:8b:34: fd:d5:b8:b5:e2:ef:e4:36:a6:83:75:1a:cc:74:40: b9:77:32:0a:b3:c0:40:69:5d:c0:56:35:d7:bf:56: ba:35:53:ac:f7:03:6e:75:8f:a9:fd:6f:3c:03:7d: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5C:CA:B1:3D:E2:9A:F1:22:72:BE:95:95:CE:DB:35:68:6A:23:1A X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.175.0/24 Signature Algorithm: sha256WithRSAEncryption 38:08:e9:a1:9a:ab:f2:fc:85:b5:db:6d:a0:a4:db:95:ae:63: 89:ea:33:cc:3e:35:b7:61:59:a5:49:03:15:78:ec:03:80:80: 85:b2:83:1d:f7:bf:81:aa:3a:2e:68:d6:29:d0:5d:22:9f:52: dc:30:87:5e:94:21:b5:6b:8f:4f:f7:02:22:01:6b:dd:71:83: 62:27:d6:e1:47:de:c7:a4:ab:b2:cd:c8:f8:d7:4a:89:b9:cf: a7:56:1f:31:2d:4b:63:2c:93:64:cb:7c:aa:8c:bb:3a:ea:63: b8:6b:0e:85:58:6b:b8:28:07:dd:06:62:a6:f0:1f:e1:51:01: dd:c0:81:ea:09:74:1a:d4:fd:22:29:c2:21:58:03:5a:64:9d: 84:3b:ee:22:30:a0:be:81:bd:d2:f6:b0:da:ea:02:94:e0:1b: 74:8e:a5:df:27:7e:39:cf:70:fb:f9:f1:7c:05:d4:21:f7:3c: b7:a9:ae:7a:23:a9:91:d0:a9:f3:6c:18:c3:7e:db:41:38:48: 73:f6:63:4b:1d:d1:aa:8b:30:e7:60:25:9e:de:29:b4:a6:4c: 9f:07:03:36:00:b8:61:6b:67:63:70:ad:31:5d:65:0b:c9:f3: 7b:26:10:e9:6e:fb:ec:99:2f:fe:96:7e:8c:d5:db:3f:72:14: a8:ed:2d:56 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUB9YHQ0Wxdp9AvZXTsCaAWOEhaFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA3MDYwNjU1MDJaFw0yNjA3MDUwNzAwMDJaMDMxMTAvBgNV BAMTKDAxNUNDQUIxM0RFMjlBRjEyMjcyQkU5NTk1Q0VEQjM1Njg2QTIzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg3eXGfWzEJDUm9SX7T//nHV+ sPwjbscGDxXwH0gLbLannp+BS7g7J6sDSZX6QFoM1GAXPl4c0aar/Us6CDY6n9PU YEALEFCQ/bbBMUFpJykBeyrng91fICn3N0Jqv8A9aE+MfCFrT47zxq85wdKY2yQB GpTsMBKVUmfMfr2FtHXzhTahRIUyAqH3AIjmMxa+TDOFxhx/UwsP0bi6ewZ/+xiA zc/XNkd3nrpiMra0beADZkfHbh3R2+8j1NNW3KTelbsnX2nkJg8UADMvvYqLNP3V uLXi7+Q2poN1Gsx0QLl3MgqzwEBpXcBWNde/Vro1U6z3A251j6n9bzwDfa/nAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUAVzKsT3imvEicr6Vlc7bNWhqIxowHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYjhkOTA4LTFiOTktNDU1Yy1h Yzc2LThkNjI0ZGZhNDNiNi8wLzMxMzAzMzJlMzEzMjM2MmUzMTM3MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfq8wDQYJ KoZIhvcNAQELBQADggEBADgI6aGaq/L8hbXbbaCk25WuY4nqM8w+NbdhWaVJAxV4 7AOAgIWygx33v4GqOi5o1inQXSKfUtwwh16UIbVrj0/3AiIBa91xg2In1uFH3sek q7LNyPjXSom5z6dWHzEtS2Msk2TLfKqMuzrqY7hrDoVYa7goB90GYqbwH+FRAd3A geoJdBrU/SIpwiFYA1pknYQ77iIwoL6BvdL2sNrqApTgG3SOpd8nfjnPcPv58XwF 1CH3PLeprnojqZHQqfNsGMN+20E4SHP2Y0sd0aqLMOdgJZ7eKbSmTJ8HAzYAuGFr Z2NwrTFdZQvJ83smEOlu++yZL/6WfozV2z9yFKjtLVY= -----END CERTIFICATE-----Generated at Tue Jul 22 04:13:48 2025 by rpki-client