$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: l7e04tx4Mr56W+sGrraQme0eR5MHoJterHz1neaHXyk= Subject key identifier: A8:19:73:C6:33:78:05:F5:AB:13:A9:EE:8A:AC:B5:D0:BE:5E:B7:C0 Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 2263A6A90C6628A517F31242CE0EE1B8769C2289 Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa Signing time: Tue 02 Sep 2025 05:02:54 +0000 ROA not before: Tue 02 Sep 2025 04:57:54 +0000 ROA not after: Tue 01 Sep 2026 05:02:54 +0000 asID: 17769 IP address blocks: 103.147.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:63:a6:a9:0c:66:28:a5:17:f3:12:42:ce:0e:e1:b8:76:9c:22:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Sep 2 04:57:54 2025 GMT Not After : Sep 1 05:02:54 2026 GMT Subject: CN=A81973C6337805F5AB13A9EE8AACB5D0BE5EB7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:91:49:a8:ff:20:ef:c4:ed:98:67:16:60:f6: 56:c4:44:2b:36:02:f8:b8:ac:7c:72:31:08:47:0f: 10:68:83:3c:e6:28:61:82:1d:a6:5a:88:4b:d1:2b: ec:42:06:33:19:f1:a0:48:e7:31:52:46:ef:ce:e9: 58:6e:19:1c:7a:9c:3f:fa:35:be:16:99:66:dc:c0: d5:f2:11:ae:0a:60:90:13:66:c0:8f:4f:0f:41:5d: 68:e4:5d:ef:09:c8:e3:06:a0:40:73:0e:35:cd:5d: 3b:29:76:1b:f1:b8:32:34:19:95:90:e7:b6:08:45: 6b:8a:d2:d2:0b:1a:c6:aa:2a:5e:6e:a0:15:0d:76: 92:44:f2:87:9e:72:0e:c1:27:1f:53:bc:fe:41:f7: 0f:2e:32:50:53:7f:04:59:fc:20:97:f3:f3:c4:2d: f6:67:4d:13:b0:e0:96:85:3f:f0:a3:37:bb:b7:be: 9e:f0:45:9d:af:d4:10:eb:3b:04:3b:df:34:f2:dc: 7e:6a:d0:0a:29:23:aa:21:0d:51:23:16:ff:00:af: 3a:fc:1c:b4:15:bc:ec:2a:38:98:1c:06:a9:2c:14: 9f:e1:b7:e8:de:3c:2a:4f:ba:ed:a7:81:13:2f:b7: af:80:22:3f:80:02:1f:9b:08:91:c6:12:60:9a:52: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:19:73:C6:33:78:05:F5:AB:13:A9:EE:8A:AC:B5:D0:BE:5E:B7:C0 X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/3130332e3134372e37342e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.74.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:3c:a6:8d:54:03:8d:a4:3c:71:f5:d3:ad:5e:40:65:ef:67: a2:6a:89:d0:10:a6:9a:78:a9:f0:70:90:dd:e1:75:94:01:66: f6:dd:2b:b7:35:29:0f:5c:e1:77:88:32:2f:23:28:20:10:3b: 07:2c:98:dd:5d:96:7e:c6:a5:86:6c:59:32:37:dc:2a:b4:fd: 03:16:dc:72:01:47:f3:b7:cf:f5:bc:41:06:f0:ac:dd:f7:bb: e4:5e:fe:f6:46:80:51:b3:72:b4:ee:28:fa:07:9f:1f:5b:f4: 13:23:ec:25:c5:0a:21:71:32:43:1b:d7:ed:15:78:41:7f:b3: 12:3a:0c:a4:a1:92:39:15:aa:eb:81:14:e7:1c:7e:6c:9f:f6: 17:1f:71:fa:08:a9:79:db:14:33:17:42:48:79:09:39:c3:a7: 02:b9:43:98:61:95:96:76:83:c5:8d:66:4a:f7:29:75:a3:1d: dc:ec:f2:19:f5:3a:f7:69:4b:0e:6d:ef:c3:14:57:c3:f4:38: 90:89:ae:a5:e1:21:85:9f:8a:56:99:d5:b4:ff:08:f9:5f:53: b9:ec:c6:4d:20:cc:ce:16:56:25:91:30:f4:13:ad:65:98:30: c0:1d:9c:7c:19:40:75:ae:f9:07:07:09:21:66:46:57:78:69: 25:a2:5e:9b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUImOmqQxmKKUX8xJCzg7huHacIokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTA5MDIwNDU3NTRaFw0yNjA5MDEwNTAyNTRaMDMxMTAvBgNV BAMTKEE4MTk3M0M2MzM3ODA1RjVBQjEzQTlFRThBQUNCNUQwQkU1RUI3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkUmo/yDvxO2YZxZg9lbERCs2 Avi4rHxyMQhHDxBogzzmKGGCHaZaiEvRK+xCBjMZ8aBI5zFSRu/O6VhuGRx6nD/6 Nb4WmWbcwNXyEa4KYJATZsCPTw9BXWjkXe8JyOMGoEBzDjXNXTspdhvxuDI0GZWQ 57YIRWuK0tILGsaqKl5uoBUNdpJE8oeecg7BJx9TvP5B9w8uMlBTfwRZ/CCX8/PE LfZnTROw4JaFP/CjN7u3vp7wRZ2v1BDrOwQ73zTy3H5q0AopI6ohDVEjFv8Arzr8 HLQVvOwqOJgcBqksFJ/ht+jePCpPuu2ngRMvt6+AIj+AAh+bCJHGEmCaUkZtAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqBlzxjN4BfWrE6nuiqy10L5et8AwHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3MjkwN2QzLWJlMjQtNGRhOC05 NmJiLWYxMjI4ZmM5OTIwNS8wLzMxMzAzMzJlMzEzNDM3MmUzNzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNzM3MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeTSjANBgkqhkiG 9w0BAQsFAAOCAQEAajymjVQDjaQ8cfXTrV5AZe9nomqJ0BCmmnip8HCQ3eF1lAFm 9t0rtzUpD1zhd4gyLyMoIBA7ByyY3V2WfsalhmxZMjfcKrT9AxbccgFH87fP9bxB BvCs3fe75F7+9kaAUbNytO4o+gefH1v0EyPsJcUKIXEyQxvX7RV4QX+zEjoMpKGS ORWq64EU5xx+bJ/2Fx9x+gipedsUMxdCSHkJOcOnArlDmGGVlnaDxY1mSvcpdaMd 3OzyGfU692lLDm3vwxRXw/Q4kImupeEhhZ+KVpnVtP8I+V9TuezGTSDMzhZWJZEw 9BOtZZgwwB2cfBlAda75BwcJIWZGV3hpJaJemw== -----END CERTIFICATE-----Generated at Sun Sep 7 16:24:14 2025 by rpki-client