$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa File: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (raw, json) Hash identifier: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM= Subject key identifier: DF:6A:97:7D:61:74:FB:0C:AE:63:22:7B:BD:6D:A5:68:C0:07:16:6A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 04C0357DBF1201619F4CCB9800A5CB7B20EF99C3 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa Signing time: Fri 11 Jul 2025 05:02:23 +0000 ROA not before: Fri 11 Jul 2025 04:57:23 +0000 ROA not after: Fri 10 Jul 2026 05:02:23 +0000 asID: 55688 IP address blocks: 103.16.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c0:35:7d:bf:12:01:61:9f:4c:cb:98:00:a5:cb:7b:20:ef:99:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Jul 11 04:57:23 2025 GMT Not After : Jul 10 05:02:23 2026 GMT Subject: CN=DF6A977D6174FB0CAE63227BBD6DA568C007166A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:b5:c3:bd:24:da:48:8c:59:65:cb:67:0e: d1:54:52:83:e7:b3:08:64:99:53:1f:e6:c7:ca:98: 59:47:17:e6:04:51:13:fc:ad:03:5c:38:f0:b9:7c: 9b:8a:0d:ce:6b:ea:5b:c4:99:66:88:65:29:e6:46: 14:28:70:7c:45:e7:62:a7:b8:d0:b7:a2:ee:c3:92: 1f:42:a5:99:84:db:48:24:5d:93:12:04:c3:0f:b7: a8:14:a7:6f:eb:11:bf:4a:ff:e5:13:f2:02:b7:e1: e4:44:3f:64:67:88:61:d4:63:52:14:96:0a:f7:93: 98:b6:94:9f:ba:e6:ea:ef:d4:62:c1:d4:82:2b:d4: 9e:c2:06:ae:92:93:05:91:34:39:7f:cf:63:6a:af: 1b:f4:96:d5:51:86:3d:87:65:b3:4d:1f:d2:81:3d: a7:de:08:5a:0c:f2:eb:2b:56:ce:f3:7e:b8:80:ba: 7e:75:18:29:76:d4:ff:be:a1:d8:c2:ec:3c:b7:51: 1d:0c:d3:16:1c:24:f9:f0:2d:5c:52:96:1f:34:1b: 07:e0:a3:79:1f:96:24:1a:62:f4:dc:d6:69:a4:0a: b2:28:df:4a:20:08:b5:d4:5d:31:d2:27:ac:b4:98: 48:0f:91:af:7a:5a:79:8f:87:81:83:90:2d:66:92: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:97:7D:61:74:FB:0C:AE:63:22:7B:BD:6D:A5:68:C0:07:16:6A X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.116.0/23 Signature Algorithm: sha256WithRSAEncryption a2:d9:d4:3f:0d:3d:09:a0:01:23:88:d3:0d:ba:c8:fd:35:4e: eb:c6:a0:dd:36:2a:76:6d:b2:8d:73:60:37:a5:43:73:36:7d: 3c:9e:4c:8c:e3:0e:a4:5d:ef:51:e9:71:92:3b:b4:df:ad:63: 06:e1:18:72:90:fa:12:e4:7e:54:c1:1d:2d:70:5b:8d:b2:51: c2:3e:0b:84:13:67:3a:d0:87:40:f7:ba:1e:c8:5a:26:bc:cc: 66:ef:99:59:72:f4:65:d4:15:e8:55:ad:af:9e:ea:66:22:79: 71:88:b6:9a:3b:25:09:55:e6:7d:4f:67:b6:68:01:56:8b:fd: 55:4a:3b:3a:13:28:e6:9a:26:74:52:fd:40:4a:34:0e:a4:93: aa:18:ea:09:45:6e:9b:43:7e:65:2f:fa:ab:d3:8e:dd:72:a2: aa:43:63:b7:a0:7c:d1:b6:ea:21:e5:2c:0d:29:8f:26:c9:bc: d0:3a:f4:36:f6:24:80:a1:03:79:9f:2e:db:24:be:c5:95:73: 40:7f:47:1b:54:71:19:9a:82:24:2a:db:cd:9e:cb:21:99:1d: b5:24:52:ff:7e:5e:23:7d:04:2d:ca:ca:d0:c8:94:e1:6d:9c: 28:d2:d0:59:52:18:41:e6:1a:f5:cd:ab:74:a9:51:57:71:6e: ca:4b:df:1d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBMA1fb8SAWGfTMuYAKXLeyDvmcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNTA3MTEwNDU3MjNaFw0yNjA3MTAwNTAyMjNaMDMxMTAvBgNV BAMTKERGNkE5NzdENjE3NEZCMENBRTYzMjI3QkJENkRBNTY4QzAwNzE2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAbXDvSTaSIxZZctnDtFUUoPn swhkmVMf5sfKmFlHF+YEURP8rQNcOPC5fJuKDc5r6lvEmWaIZSnmRhQocHxF52Kn uNC3ou7Dkh9CpZmE20gkXZMSBMMPt6gUp2/rEb9K/+UT8gK34eREP2RniGHUY1IU lgr3k5i2lJ+65urv1GLB1IIr1J7CBq6SkwWRNDl/z2Nqrxv0ltVRhj2HZbNNH9KB PafeCFoM8usrVs7zfriAun51GCl21P++odjC7Dy3UR0M0xYcJPnwLVxSlh80Gwfg o3kfliQaYvTc1mmkCrIo30ogCLXUXTHSJ6y0mEgPka96WnmPh4GDkC1mkngtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU32qXfWF0+wyuYyJ7vW2laMAHFmowHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZThiY2M5LTQzYTEtNGJhYi1i NmQ4LTFhOTdkMGQzYzIxZC8wLzMxMzAzMzJlMzEzNjJlMzEzMTM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcQdDANBgkqhkiG 9w0BAQsFAAOCAQEAotnUPw09CaABI4jTDbrI/TVO68ag3TYqdm2yjXNgN6VDczZ9 PJ5MjOMOpF3vUelxkju0361jBuEYcpD6EuR+VMEdLXBbjbJRwj4LhBNnOtCHQPe6 HshaJrzMZu+ZWXL0ZdQV6FWtr57qZiJ5cYi2mjslCVXmfU9ntmgBVov9VUo7OhMo 5pomdFL9QEo0DqSTqhjqCUVum0N+ZS/6q9OO3XKiqkNjt6B80bbqIeUsDSmPJsm8 0Dr0NvYkgKEDeZ8u2yS+xZVzQH9HG1RxGZqCJCrbzZ7LIZkdtSRS/35eI30ELcrK 0MiU4W2cKNLQWVIYQeYa9c2rdKlRV3FuykvfHQ== -----END CERTIFICATE-----Generated at Tue Jul 22 11:45:53 2025 by rpki-client