$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa File: 3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (raw, json) Hash identifier: jmjpTwFqJBkm3124jZo6u0K/VkEahqOKTR/f2jeIcks= Subject key identifier: 94:06:98:00:3A:EB:43:64:B9:84:9F:79:E8:13:98:ED:6D:5F:BF:6E Certificate issuer: /CN=7D9756BA26383A8A80C65F2856105B0FF5154379 Certificate serial: 2F4FD9462F42F8C4746F303DB6CB5E47549A3A76 Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa Signing time: Tue 02 Sep 2025 05:02:54 +0000 ROA not before: Tue 02 Sep 2025 04:57:54 +0000 ROA not after: Tue 01 Sep 2026 05:02:54 +0000 asID: 17769 IP address blocks: 103.147.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4f:d9:46:2f:42:f8:c4:74:6f:30:3d:b6:cb:5e:47:54:9a:3a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379 Validity Not Before: Sep 2 04:57:54 2025 GMT Not After : Sep 1 05:02:54 2026 GMT Subject: CN=940698003AEB4364B9849F79E81398ED6D5FBF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ca:fc:50:de:a2:50:e4:ab:f7:3e:2b:0b:62: e1:b8:57:cb:66:22:11:69:2c:58:3b:60:97:44:2e: 64:2b:7f:34:94:90:1c:d4:a6:90:27:36:91:b8:92: 28:b0:c9:e9:60:bf:16:96:bb:89:d4:41:75:aa:61: 42:05:32:bc:98:57:dc:2e:e9:f3:5c:5e:99:26:b1: 42:8f:e6:1f:98:d2:62:03:c0:5d:c4:de:13:c3:69: 5a:ca:05:6f:0c:7a:9c:78:53:17:05:48:61:24:61: 88:be:be:1c:2e:50:6f:5a:e7:84:a8:62:b2:f9:ea: 83:c0:e1:de:7b:fe:61:cb:99:32:a4:b8:f5:bf:15: 54:93:cb:62:44:8b:b6:38:cd:a7:65:e9:aa:ad:f6: 1d:05:7c:26:2a:1d:fb:6d:0c:2d:11:a1:2c:2e:d6: 47:a5:62:24:dc:f7:48:c5:af:91:bd:45:06:24:65: 4d:20:22:4c:50:3e:89:09:da:60:6a:68:05:b5:36: af:7d:29:5c:df:d7:1f:75:01:ba:62:3c:39:d9:20: f2:73:1a:28:7c:3d:42:86:0f:82:0b:c9:31:74:41: ff:9d:6e:42:c1:8f:62:87:a8:54:2c:cb:de:99:05: a4:15:ac:af:c3:1c:8e:1c:68:8f:24:18:5d:65:b5: 96:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:06:98:00:3A:EB:43:64:B9:84:9F:79:E8:13:98:ED:6D:5F:BF:6E X509v3 Authority Key Identifier: keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.140.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:05:63:89:89:a0:a9:83:17:9c:75:9a:7c:39:02:2a:e9:1c: 2b:b8:56:11:fe:1e:76:1b:2f:48:1b:9f:4c:5d:2c:e2:7f:b4: e6:6a:09:21:fe:de:3a:bd:5a:70:7f:73:c6:85:43:32:5a:cf: d7:41:25:be:d6:7a:e2:41:af:68:d5:b1:09:48:4b:55:13:c8: fb:45:02:e7:1a:31:f7:2d:f6:11:24:19:4e:46:7c:58:da:68: 26:cb:3e:d8:af:24:89:ac:ed:7d:46:3b:63:61:0a:b0:82:e3: 79:34:55:34:6b:9a:26:0f:de:cf:03:49:5c:61:96:2f:2f:cc: 41:6d:96:a9:4f:e4:fc:39:95:e0:06:6c:79:6e:25:d2:5f:3d: f7:d8:07:48:b9:d1:57:0c:c2:9e:55:19:d5:aa:87:d7:5f:ec: bb:8a:d4:54:29:51:b3:65:24:0e:14:67:b0:2a:65:40:08:13: ac:98:fb:8e:fd:73:c4:96:36:fd:3a:c9:59:3f:7a:c4:92:b9: 01:ee:b3:e7:b3:b5:cf:23:99:91:ed:53:38:83:9d:09:d5:03: bd:7a:83:82:fc:cc:0a:1c:7f:86:1b:80:4a:5d:38:74:d7:31: cb:17:4e:62:ae:15:fd:80:c3:be:71:8f:f9:96:d6:f6:60:c0: 20:cf:0a:7d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL0/ZRi9C+MR0bzA9tsteR1SaOnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5NzU2QkEyNjM4M0E4QTgwQzY1RjI4NTYxMDVCMEZG NTE1NDM3OTAeFw0yNTA5MDIwNDU3NTRaFw0yNjA5MDEwNTAyNTRaMDMxMTAvBgNV BAMTKDk0MDY5ODAwM0FFQjQzNjRCOTg0OUY3OUU4MTM5OEVENkQ1RkJGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFyvxQ3qJQ5Kv3PisLYuG4V8tm IhFpLFg7YJdELmQrfzSUkBzUppAnNpG4kiiwyelgvxaWu4nUQXWqYUIFMryYV9wu 6fNcXpkmsUKP5h+Y0mIDwF3E3hPDaVrKBW8Mepx4UxcFSGEkYYi+vhwuUG9a54So YrL56oPA4d57/mHLmTKkuPW/FVSTy2JEi7Y4zadl6aqt9h0FfCYqHfttDC0RoSwu 1kelYiTc90jFr5G9RQYkZU0gIkxQPokJ2mBqaAW1Nq99KVzf1x91AbpiPDnZIPJz Gih8PUKGD4ILyTF0Qf+dbkLBj2KHqFQsy96ZBaQVrK/DHI4caI8kGF1ltZZ7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUlAaYADrrQ2S5hJ956BOY7W1fv24wHwYDVR0j BBgwFoAUfZdWuiY4OoqAxl8oVhBbD/UVQ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzcxNDEyMi04NjBjLTQxNGUtYTY3YS02ODRhMWJlOTYwZGUvMC83RDk3NTZCQTI2 MzgzQThBODBDNjVGMjg1NjEwNUIwRkY1MTU0Mzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5NzU2QkEyNjM4M0E4QTgwQzY1RjI4NTYxMDVCMEZGNTE1 NDM3OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjNzE0MTIyLTg2MGMtNDE0ZS1h NjdhLTY4NGExYmU5NjBkZS8wLzMxMzAzMzJlMzEzNDM3MmUzMTM0MzAyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzczNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5OMMA0GCSqG SIb3DQEBCwUAA4IBAQAuBWOJiaCpgxecdZp8OQIq6RwruFYR/h52Gy9IG59MXSzi f7Tmagkh/t46vVpwf3PGhUMyWs/XQSW+1nriQa9o1bEJSEtVE8j7RQLnGjH3LfYR JBlORnxY2mgmyz7YrySJrO19RjtjYQqwguN5NFU0a5omD97PA0lcYZYvL8xBbZap T+T8OZXgBmx5biXSXz332AdIudFXDMKeVRnVqofXX+y7itRUKVGzZSQOFGewKmVA CBOsmPuO/XPEljb9OslZP3rEkrkB7rPns7XPI5mR7VM4g50J1QO9eoOC/MwKHH+G G4BKXTh01zHLF05irhX9gMO+cY/5ltb2YMAgzwp9 -----END CERTIFICATE-----Generated at Mon Sep 8 09:26:03 2025 by rpki-client