$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa File: 3130332e32342e37342e302f32332d3233203d3e203436303631.roa (raw, json) Hash identifier: W5Ot0BBUNk5NFwRYk7ap1jPaT+1meSB0kfyCkhd5n7I= Subject key identifier: 78:15:B3:05:8F:E0:90:7E:F7:8C:B0:7E:6F:04:BE:B1:64:0A:76:30 Certificate issuer: /CN=667078BDA093F84040F3016D179CABA67F68A647 Certificate serial: 6DC3243E01128E32A13B36DC1D012A51E4D9CB63 Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa Signing time: Wed 03 Sep 2025 16:00:03 +0000 ROA not before: Wed 03 Sep 2025 15:55:03 +0000 ROA not after: Wed 02 Sep 2026 16:00:03 +0000 asID: 46061 IP address blocks: 103.24.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 03:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c3:24:3e:01:12:8e:32:a1:3b:36:dc:1d:01:2a:51:e4:d9:cb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647 Validity Not Before: Sep 3 15:55:03 2025 GMT Not After : Sep 2 16:00:03 2026 GMT Subject: CN=7815B3058FE0907EF78CB07E6F04BEB1640A7630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:50:c1:44:19:32:70:f2:e2:4e:c0:bc:48: 5a:4b:fc:98:06:9b:b1:04:64:a8:d0:6f:4d:6a:58: 81:9c:88:85:4f:5d:49:bc:65:7c:22:70:f5:70:76: 61:80:76:77:d1:b2:2f:28:aa:53:8e:92:14:4c:d8: f7:75:b8:7c:25:69:5f:ac:fd:26:4b:89:4a:a4:43: 44:d3:da:9c:1b:1c:90:14:09:a9:d6:63:88:c9:47: c9:0a:58:e6:b4:cd:41:50:64:59:4e:fc:e8:a4:21: ca:58:a0:9e:55:e8:14:b6:a3:a0:7b:f3:12:7e:fa: 93:d9:1e:49:d7:3d:c0:a9:39:8c:da:06:b1:7e:46: 81:96:7a:68:4a:60:a9:5f:65:6a:02:ee:88:af:11: d8:3f:1a:ec:37:37:06:9b:d2:50:22:4e:2d:43:59: 18:36:a6:08:5d:9f:71:5d:61:24:6f:4b:36:aa:fc: 1b:d9:d7:89:3b:09:af:6c:84:c1:77:cd:30:cb:01: d6:02:f2:5c:c0:3b:d3:86:ae:2c:06:10:50:3d:a0: 26:7f:d8:88:75:c5:c9:8b:00:c8:70:e2:6e:4a:78: aa:b4:c0:31:5a:91:ca:86:35:4b:30:1e:22:3f:55: 74:03:ae:3b:9f:1b:aa:19:6e:70:5a:28:76:70:64: 64:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:15:B3:05:8F:E0:90:7E:F7:8C:B0:7E:6F:04:BE:B1:64:0A:76:30 X509v3 Authority Key Identifier: keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.74.0/23 Signature Algorithm: sha256WithRSAEncryption a0:35:0d:e2:4a:07:08:6b:0e:0c:8e:af:84:e0:c8:2c:19:f9: 88:10:1b:4e:67:80:e8:05:db:8f:db:37:bb:d1:3a:1d:7f:4c: de:b7:e4:37:15:95:e9:1d:b7:68:4d:2c:83:09:a4:9d:40:1d: 25:2b:14:8e:74:8c:1b:b9:fb:e5:ec:b5:61:32:a2:79:5b:91: fd:bd:51:a4:2c:af:f0:20:fd:06:4e:86:db:00:0f:8c:4c:b8: 82:79:c4:5d:31:0b:77:5a:82:37:cd:6e:f3:f7:ed:7a:11:5b: c8:09:b3:47:f0:13:b4:a6:cd:48:71:e2:07:62:9e:bc:ff:91: 3e:11:67:64:89:ac:36:ba:e2:8e:9e:a4:62:de:dd:d9:27:48: 0c:86:ab:89:62:dc:b8:27:40:16:b5:0f:f6:09:23:22:69:35: a3:25:1d:01:4e:10:5a:bb:c0:36:0d:ea:56:36:23:83:16:d9: 95:25:6b:3a:0a:64:fc:2c:0b:83:81:ad:f1:c9:2e:08:de:07: 3d:b2:5f:7a:3d:b9:52:40:be:23:e5:4b:af:4c:95:42:54:89: 2f:b3:1a:ae:54:82:d7:52:d6:ed:d6:b1:d4:1a:52:05:46:ae: 0d:95:dd:bb:26:24:81:81:2a:8f:da:23:c2:5e:9b:5c:3a:4c: a9:9a:bd:34 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUbcMkPgESjjKhOzbcHQEqUeTZy2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3 RjY4QTY0NzAeFw0yNTA5MDMxNTU1MDNaFw0yNjA5MDIxNjAwMDNaMDMxMTAvBgNV BAMTKDc4MTVCMzA1OEZFMDkwN0VGNzhDQjA3RTZGMDRCRUIxNjQwQTc2MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aVDBRBkycPLiTsC8SFpL/JgG m7EEZKjQb01qWIGciIVPXUm8ZXwicPVwdmGAdnfRsi8oqlOOkhRM2Pd1uHwlaV+s /SZLiUqkQ0TT2pwbHJAUCanWY4jJR8kKWOa0zUFQZFlO/OikIcpYoJ5V6BS2o6B7 8xJ++pPZHknXPcCpOYzaBrF+RoGWemhKYKlfZWoC7oivEdg/Guw3Nwab0lAiTi1D WRg2pghdn3FdYSRvSzaq/BvZ14k7Ca9shMF3zTDLAdYC8lzAO9OGriwGEFA9oCZ/ 2Ih1xcmLAMhw4m5KeKq0wDFakcqGNUswHiI/VXQDrjufG6oZbnBaKHZwZGQhAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUeBWzBY/gkH73jLB+bwS+sWQKdjAwHwYDVR0j BBgwFoAUZnB4vaCT+EBA8wFtF5yrpn9opkcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzMyNmY0ZS02NjA1LTQ5NmEtYjlmOC1kNmU3N2IyOWJjYzYvMC82NjcwNzhCREEw OTNGODQwNDBGMzAxNkQxNzlDQUJBNjdGNjhBNjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjY3MDc4QkRBMDkzRjg0MDQwRjMwMTZEMTc5Q0FCQTY3RjY4 QTY0Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMzI2ZjRlLTY2MDUtNDk2YS1i OWY4LWQ2ZTc3YjI5YmNjNi8wLzMxMzAzMzJlMzIzNDJlMzczNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM0MzYzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnGEowDQYJKoZIhvcN AQELBQADggEBAKA1DeJKBwhrDgyOr4TgyCwZ+YgQG05ngOgF24/bN7vROh1/TN63 5DcVlekdt2hNLIMJpJ1AHSUrFI50jBu5++XstWEyonlbkf29UaQsr/Ag/QZOhtsA D4xMuIJ5xF0xC3dagjfNbvP37XoRW8gJs0fwE7SmzUhx4gdinrz/kT4RZ2SJrDa6 4o6epGLe3dknSAyGq4li3LgnQBa1D/YJIyJpNaMlHQFOEFq7wDYN6lY2I4MW2ZUl azoKZPwsC4OBrfHJLgjeBz2yX3o9uVJAviPlS69MlUJUiS+zGq5UgtdS1u3WsdQa UgVGrg2V3bsmJIGBKo/aI8Jem1w6TKmavTQ= -----END CERTIFICATE-----Generated at Mon Sep 8 12:09:24 2025 by rpki-client