$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa File: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (raw, json) Hash identifier: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0= Subject key identifier: FA:93:8E:1F:99:B4:70:C9:88:21:49:B1:53:F6:B9:77:3F:15:38:F4 Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 015E1580CA3D5535F5C57E9EBA75EC721B8EA089 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa Signing time: Mon 25 Aug 2025 04:00:02 +0000 ROA not before: Mon 25 Aug 2025 03:55:02 +0000 ROA not after: Mon 24 Aug 2026 04:00:02 +0000 asID: 58495 IP address blocks: 103.190.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:5e:15:80:ca:3d:55:35:f5:c5:7e:9e:ba:75:ec:72:1b:8e:a0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Aug 25 03:55:02 2025 GMT Not After : Aug 24 04:00:02 2026 GMT Subject: CN=FA938E1F99B470C9882149B153F6B9773F1538F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:a5:7e:d8:e9:63:47:34:bc:b3:22:38:8b: 58:88:f8:1c:14:21:11:e2:26:5d:57:cd:78:3f:cc: ec:15:04:9d:2f:db:6f:f2:84:3a:5b:91:ea:d4:99: ae:d2:47:b9:fa:6d:38:45:92:f8:b6:88:98:93:d6: 1d:cc:a5:67:d2:a6:96:78:ae:2e:e4:4e:3e:37:3f: 9f:ad:e6:1b:2f:6e:cb:59:c9:c1:24:95:9c:2c:2e: ba:3f:3b:c4:26:99:04:27:a1:11:ad:8d:f5:bc:05: 5b:8c:aa:99:03:60:33:e4:e1:3e:40:4c:fc:12:a4: 7f:d0:01:44:bb:42:40:fd:ac:88:59:41:cd:98:4e: 36:0e:73:a7:1e:37:c1:c6:6b:3a:4a:19:83:26:b5: 17:72:80:81:87:7e:fb:ce:93:de:22:29:ff:05:5b: 67:42:4d:fb:fb:8e:45:0f:c5:f1:aa:e1:6f:90:a1: 8d:03:32:c4:e3:2b:d3:ae:8a:2e:f4:16:33:1d:7c: d9:ac:21:4b:db:72:8b:f7:95:20:2d:04:1c:d0:77: 8c:fe:b0:fb:a5:9c:07:89:f7:ff:3c:e1:98:a1:37: 95:28:9d:63:9c:9d:22:61:b3:e7:82:93:db:08:7c: 87:3b:6b:8f:01:89:23:8e:62:52:8b:81:07:9e:98: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:93:8E:1F:99:B4:70:C9:88:21:49:B1:53:F6:B9:77:3F:15:38:F4 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.135.0/24 Signature Algorithm: sha256WithRSAEncryption 72:3c:7e:7c:b6:84:ed:14:e3:62:d6:fa:79:59:cc:e7:24:85: c7:50:86:98:8e:54:4c:63:7c:fa:6f:2b:8a:4b:58:5d:68:33: 47:55:cb:c4:92:d5:8e:06:22:d1:98:ea:a8:ca:8d:20:5c:6b: ce:56:0e:12:76:7b:5a:8b:59:c4:16:8e:03:74:d6:b8:65:93: 66:39:85:47:4b:de:7c:4a:5b:42:39:45:14:16:60:cb:08:be: 7a:66:e6:13:10:81:99:f4:f9:85:30:bf:c8:51:7e:83:dd:e2: 10:26:48:5b:3b:f7:98:25:98:f7:54:12:ff:01:0d:22:4a:9a: 3d:e6:5b:38:19:fc:b4:c1:34:e8:51:fe:c4:0d:f9:51:4b:12: f4:de:54:93:d2:32:6b:c5:12:31:3b:a1:dc:d3:87:48:43:5c: db:98:82:11:59:ea:e0:e0:bd:f4:1e:44:b8:e4:8b:3d:20:70: 7d:37:ef:34:98:a5:75:d0:dd:12:1e:11:66:bb:ca:f4:c1:93: f9:6a:65:7f:d9:6a:30:0b:0e:b8:1f:73:cf:55:10:71:71:d5: 41:18:3d:e9:ac:20:eb:a3:59:69:de:4d:56:63:0c:77:db:e6: 00:7d:a4:61:fc:b5:f0:ee:c6:3b:01:cb:8b:f0:ab:59:5d:93: fd:21:cf:8f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAV4VgMo9VTX1xX6eunXschuOoIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA4MjUwMzU1MDJaFw0yNjA4MjQwNDAwMDJaMDMxMTAvBgNV BAMTKEZBOTM4RTFGOTlCNDcwQzk4ODIxNDlCMTUzRjZCOTc3M0YxNTM4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfOaV+2OljRzS8syI4i1iI+BwU IRHiJl1XzXg/zOwVBJ0v22/yhDpbkerUma7SR7n6bThFkvi2iJiT1h3MpWfSppZ4 ri7kTj43P5+t5hsvbstZycEklZwsLro/O8QmmQQnoRGtjfW8BVuMqpkDYDPk4T5A TPwSpH/QAUS7QkD9rIhZQc2YTjYOc6ceN8HGazpKGYMmtRdygIGHfvvOk94iKf8F W2dCTfv7jkUPxfGq4W+QoY0DMsTjK9Ouii70FjMdfNmsIUvbcov3lSAtBBzQd4z+ sPulnAeJ9/884ZihN5UonWOcnSJhs+eCk9sIfIc7a48BiSOOYlKLgQeemJuNAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+pOOH5m0cMmIIUmxU/a5dz8VOPQwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNjNiN2Q3LWVhODMtNGJlOS1i MmZjLWIzMGViMGI0NGQwYS8wLzMxMzAzMzJlMzEzOTMwMmUzMTMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ76HMA0GCSqG SIb3DQEBCwUAA4IBAQByPH58toTtFONi1vp5WcznJIXHUIaYjlRMY3z6byuKS1hd aDNHVcvEktWOBiLRmOqoyo0gXGvOVg4Sdntai1nEFo4DdNa4ZZNmOYVHS958SltC OUUUFmDLCL56ZuYTEIGZ9PmFML/IUX6D3eIQJkhbO/eYJZj3VBL/AQ0iSpo95ls4 Gfy0wTToUf7EDflRSxL03lST0jJrxRIxO6Hc04dIQ1zbmIIRWerg4L30HkS45Is9 IHB9N+80mKV10N0SHhFmu8r0wZP5amV/2WowCw64H3PPVRBxcdVBGD3prCDro1lp 3k1WYwx32+YAfaRh/LXw7sY7AcuL8KtZXZP9Ic+P -----END CERTIFICATE-----Generated at Sun Sep 7 16:14:47 2025 by rpki-client