$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa File: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (raw, json) Hash identifier: 7lyU4ARZl0iZzxpjuPYTjPexrJrOA5CaL9sS8oYLAAQ= Subject key identifier: AF:3A:F4:40:3A:FB:FB:9C:C6:23:BA:60:0E:E4:02:87:E5:0D:33:EA Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B Certificate serial: 2E042895C604836DC05AFFA4AF73B47E9CBA6D09 Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa Signing time: Fri 18 Jul 2025 06:54:00 +0000 ROA not before: Fri 18 Jul 2025 06:49:00 +0000 ROA not after: Fri 17 Jul 2026 06:54:00 +0000 asID: 150191 IP address blocks: 103.255.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 20:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:04:28:95:c6:04:83:6d:c0:5a:ff:a4:af:73:b4:7e:9c:ba:6d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B Validity Not Before: Jul 18 06:49:00 2025 GMT Not After : Jul 17 06:54:00 2026 GMT Subject: CN=AF3AF4403AFBFB9CC623BA600EE40287E50D33EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:23:d3:d5:1e:0f:ad:29:b0:cf:7d:62:d6:87: c8:3a:e7:93:c1:40:70:20:89:84:28:6c:c1:7b:05: f6:91:b5:04:75:3f:24:3b:ec:b3:ef:75:e4:9c:6f: 9f:32:fc:59:7c:61:43:bf:26:7b:dc:78:0d:6e:41: b5:cf:bf:3d:61:61:80:88:88:82:6b:9e:b1:b6:f1: 59:d5:ed:42:1e:3b:da:54:2d:5a:ee:92:7a:00:e5: b0:79:4b:da:53:02:87:93:80:9b:31:0a:62:22:9a: cd:9b:3e:b2:2f:67:e9:e1:cb:93:6f:ec:97:2b:d7: 56:2e:63:e8:73:0e:ed:d2:98:36:02:b7:b5:80:9b: e8:6a:69:73:05:b6:80:d4:9e:1f:8b:dc:08:9d:84: 1f:90:00:50:d4:38:46:39:3a:7d:c6:d5:e9:a7:b2: cb:c4:07:ed:6a:83:4b:e9:e1:e9:44:ea:4e:06:2f: 8d:0e:fb:a7:28:a0:ec:ca:c1:04:02:94:9c:ad:e4: cc:17:d1:b4:f8:06:0a:69:cb:e8:2c:3d:04:fa:1d: ac:d8:f2:9d:1c:c1:11:4d:59:cf:0a:86:59:81:d3: 54:6f:10:7c:5d:cb:87:32:77:5c:a4:77:e4:b4:eb: a5:59:41:aa:59:22:9d:c2:0f:ae:f5:8b:43:db:6f: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3A:F4:40:3A:FB:FB:9C:C6:23:BA:60:0E:E4:02:87:E5:0D:33:EA X509v3 Authority Key Identifier: keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.109.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f2:01:08:ef:bd:ae:d0:b2:99:b3:f7:22:36:ba:02:c3:ed: ca:dc:59:65:0a:25:04:44:22:9f:8a:80:63:11:7a:5c:9c:76: 3c:14:c9:82:3b:6b:0e:05:e4:2d:5b:5c:7d:55:da:f5:a0:e7: d9:42:19:f6:6e:81:0f:cc:b7:f1:1c:3e:ae:8f:ff:cf:a9:47: 70:96:0f:e5:11:86:75:63:6b:75:fa:55:28:89:91:25:8b:83: 08:a3:db:2c:19:3b:92:bb:bd:cd:3f:5b:54:a8:f1:b0:38:ee: 75:84:b4:2e:34:ce:86:f2:29:a4:e0:b6:1d:18:95:e6:ae:1a: d8:61:fa:7e:3e:db:ac:68:8a:fe:b7:75:b7:4c:91:87:be:11: 6d:ac:de:f1:59:d4:7e:a7:cc:b5:aa:2c:45:44:f0:5a:5a:d1: 10:84:fc:a7:a1:6a:a2:0e:9d:0c:d1:bb:ad:77:8a:58:ea:7e: 6c:46:3d:7b:c8:0e:07:a3:a5:b5:13:77:23:33:32:b5:26:09: ea:f2:03:79:63:b7:75:1d:72:c4:a0:cc:4b:c3:11:cc:06:f3: 09:37:41:e0:fa:bd:ac:3e:6f:70:00:2b:a7:4e:17:ac:56:63: 34:83:95:1d:0c:44:43:82:f7:c0:3d:5b:29:a0:56:10:54:a2: 3d:cc:aa:18 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULgQolcYEg23AWv+kr3O0fpy6bQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVB MDFBNjM4QjAeFw0yNTA3MTgwNjQ5MDBaFw0yNjA3MTcwNjU0MDBaMDMxMTAvBgNV BAMTKEFGM0FGNDQwM0FGQkZCOUNDNjIzQkE2MDBFRTQwMjg3RTUwRDMzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHI9PVHg+tKbDPfWLWh8g655PB QHAgiYQobMF7BfaRtQR1PyQ77LPvdeScb58y/Fl8YUO/JnvceA1uQbXPvz1hYYCI iIJrnrG28VnV7UIeO9pULVruknoA5bB5S9pTAoeTgJsxCmIims2bPrIvZ+nhy5Nv 7Jcr11YuY+hzDu3SmDYCt7WAm+hqaXMFtoDUnh+L3AidhB+QAFDUOEY5On3G1emn ssvEB+1qg0vp4elE6k4GL40O+6cooOzKwQQClJyt5MwX0bT4Bgppy+gsPQT6HazY 8p0cwRFNWc8KhlmB01RvEHxdy4cyd1ykd+S066VZQapZIp3CD671i0Pbby97AgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUrzr0QDr7+5zGI7pgDuQCh+UNM+owHwYDVR0j BBgwFoAUgCtQ5weROYw+pD3c7KpznqAaY4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTExZTZkNy01N2ExLTQ5MzYtYjdhNy1kZTA5MzUyNWNiMjcvMC84MDJCNTBFNzA3 OTEzOThDM0VBNDNERENFQ0FBNzM5RUEwMUE2MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVBMDFB NjM4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhMTFlNmQ3LTU3YTEtNDkzNi1i N2E3LWRlMDkzNTI1Y2IyNy8wLzMxMzAzMzJlMzIzNTM1MmUzMTMwMzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn/20wDQYJ KoZIhvcNAQELBQADggEBAFnyAQjvva7Qspmz9yI2ugLD7crcWWUKJQREIp+KgGMR elycdjwUyYI7aw4F5C1bXH1V2vWg59lCGfZugQ/Mt/EcPq6P/8+pR3CWD+URhnVj a3X6VSiJkSWLgwij2ywZO5K7vc0/W1So8bA47nWEtC40zobyKaTgth0YleauGthh +n4+26xoiv63dbdMkYe+EW2s3vFZ1H6nzLWqLEVE8Fpa0RCE/KehaqIOnQzRu613 iljqfmxGPXvIDgejpbUTdyMzMrUmCeryA3ljt3UdcsSgzEvDEcwG8wk3QeD6vaw+ b3AAK6dOF6xWYzSDlR0MREOC98A9WymgVhBUoj3Mqhg= -----END CERTIFICATE-----Generated at Tue Jul 22 11:26:24 2025 by rpki-client