$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32342d3234203d3e203536323630.roa File: 3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (raw, json) Hash identifier: VWdyOYYTifudfSUwEVWa9ANGPIHpQabnls++DgVxljE= Subject key identifier: 87:B3:8B:F5:AF:96:B0:F0:C7:F7:37:24:AD:D5:E0:85:7E:4A:0B:E0 Certificate issuer: /CN=4C44F6F543BDBB858D3656D41A36660407672BDE Certificate serial: 312226D34B0F5F83DC26F7E9847407ECDF6E9B39 Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32342d3234203d3e203536323630.roa Signing time: Sun 24 Aug 2025 10:02:27 +0000 ROA not before: Sun 24 Aug 2025 09:57:27 +0000 ROA not after: Sun 23 Aug 2026 10:02:27 +0000 asID: 56260 IP address blocks: 103.11.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 17:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:22:26:d3:4b:0f:5f:83:dc:26:f7:e9:84:74:07:ec:df:6e:9b:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Validity Not Before: Aug 24 09:57:27 2025 GMT Not After : Aug 23 10:02:27 2026 GMT Subject: CN=87B38BF5AF96B0F0C7F73724ADD5E0857E4A0BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1f:5f:5d:1c:7c:e9:be:10:3e:d3:61:ba:72: 49:ab:a4:96:30:7f:b3:f2:15:bd:80:b6:f5:79:b0: 81:9c:d2:26:8c:40:36:9a:b9:30:b1:ef:73:65:ef: 76:40:10:8b:ba:0c:47:e2:be:ba:08:77:c4:a4:f2: c5:38:54:6f:2e:06:14:0c:b0:1a:c4:20:5b:c1:45: f3:ac:cd:1f:bc:e7:01:23:f3:b5:3e:fb:b0:f7:28: c7:4f:3d:ed:90:f4:73:2e:4e:83:59:9f:89:2b:9b: 53:86:e0:11:97:83:45:86:34:90:a4:de:fc:52:ca: 87:bc:67:32:ec:54:fe:2e:81:bf:a2:36:27:22:b6: 87:97:8e:76:9b:a3:aa:0a:7a:0c:7a:e0:74:12:39: 82:ea:42:6f:21:08:8c:c5:c0:e0:5d:a4:9a:52:f0: 04:bd:b2:49:e1:9e:7e:64:42:00:f6:1e:be:37:e5: b3:f1:4b:fe:64:46:12:c8:24:7a:ff:64:db:08:82: 60:23:23:12:94:89:15:47:b2:1f:03:80:13:8f:78: 47:43:10:f4:df:e7:ec:13:9c:15:7e:84:f7:8a:3c: 84:1a:12:77:ec:9e:13:cf:b8:e2:62:6d:7c:4a:03: 24:b1:21:d9:e3:e3:5f:b7:75:a8:5d:ae:31:4c:0d: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B3:8B:F5:AF:96:B0:F0:C7:F7:37:24:AD:D5:E0:85:7E:4A:0B:E0 X509v3 Authority Key Identifier: keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32342d3234203d3e203536323630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.106.0/24 Signature Algorithm: sha256WithRSAEncryption 91:f1:35:5b:62:c2:26:85:90:a0:4d:78:18:88:7d:96:c3:df: ec:14:95:70:b7:03:69:d7:94:5e:15:31:5a:d3:5f:57:25:a7: 91:da:40:2e:43:7a:48:ef:24:40:6b:14:70:ac:37:f9:7b:25: 4f:c8:13:12:be:e4:da:47:2a:83:b7:4e:cd:82:a7:78:17:08: 94:b8:42:e6:2b:a1:79:96:41:ae:63:37:be:4f:f1:14:6f:22: 47:6f:8b:73:e3:76:9c:e4:48:92:32:00:c6:6f:8f:b1:c4:10: 67:63:68:d8:79:51:35:76:0d:75:db:79:1b:26:7b:43:25:1d: 9d:aa:4d:1c:42:4d:9b:f9:5e:ae:5f:e9:a2:9a:17:b3:f2:16: b6:7c:48:fd:76:17:35:e9:74:ad:da:f2:2d:ae:18:f5:b8:ae: 2b:48:b2:4e:e9:a6:1f:3e:29:21:ac:73:7c:7e:5f:1c:3f:60: d6:ec:17:bc:58:ed:8b:81:c2:aa:08:48:4a:d5:38:fb:47:63: be:2b:6e:4d:fb:a5:ca:ca:05:64:d7:a8:37:26:5e:64:be:59: fd:d3:4d:58:1c:06:72:2c:6d:ed:2a:bb:ba:4a:da:8d:c5:11: 47:c1:86:7b:9a:30:75:8f:e4:ad:86:7a:8f:56:dd:89:e7:7b: b7:72:75:9b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMSIm00sPX4PcJvfphHQH7N9umzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQw NzY3MkJERTAeFw0yNTA4MjQwOTU3MjdaFw0yNjA4MjMxMDAyMjdaMDMxMTAvBgNV BAMTKDg3QjM4QkY1QUY5NkIwRjBDN0Y3MzcyNEFERDVFMDg1N0U0QTBCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtH19dHHzpvhA+02G6ckmrpJYw f7PyFb2AtvV5sIGc0iaMQDaauTCx73Nl73ZAEIu6DEfivroId8Sk8sU4VG8uBhQM sBrEIFvBRfOszR+85wEj87U++7D3KMdPPe2Q9HMuToNZn4krm1OG4BGXg0WGNJCk 3vxSyoe8ZzLsVP4ugb+iNicitoeXjnabo6oKegx64HQSOYLqQm8hCIzFwOBdpJpS 8AS9sknhnn5kQgD2Hr435bPxS/5kRhLIJHr/ZNsIgmAjIxKUiRVHsh8DgBOPeEdD EPTf5+wTnBV+hPeKPIQaEnfsnhPPuOJibXxKAySxIdnj41+3dahdrjFMDTFBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUh7OL9a+WsPDH9zckrdXghX5KC+AwHwYDVR0j BBgwFoAUTET29UO9u4WNNlbUGjZmBAdnK94wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMC80QzQ0RjZGNTQz QkRCQjg1OEQzNjU2RDQxQTM2NjYwNDA3NjcyQkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEM0NEY2RjU0M0JEQkI4NThEMzY1NkQ0MUEzNjY2MDQwNzY3 MkJERS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZjLTFmODctNGQ5OC1h NDY3LTMyMThiNjQ1YjNhYy8wLzMxMzAzMzJlMzEzMTJlMzEzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcLajANBgkqhkiG 9w0BAQsFAAOCAQEAkfE1W2LCJoWQoE14GIh9lsPf7BSVcLcDadeUXhUxWtNfVyWn kdpALkN6SO8kQGsUcKw3+XslT8gTEr7k2kcqg7dOzYKneBcIlLhC5iuheZZBrmM3 vk/xFG8iR2+Lc+N2nORIkjIAxm+PscQQZ2No2HlRNXYNddt5GyZ7QyUdnapNHEJN m/lerl/popoXs/IWtnxI/XYXNel0rdryLa4Y9biuK0iyTummHz4pIaxzfH5fHD9g 1uwXvFjti4HCqghIStU4+0djvituTfulysoFZNeoNyZeZL5Z/dNNWBwGcixt7Sq7 ukrajcURR8GGe5owdY/krYZ6j1bdied7t3J1mw== -----END CERTIFICATE-----Generated at Mon Sep 8 09:44:00 2025 by rpki-client