$ rpki-client -vvf repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35382e302f32342d3234203d3e203436303532.roa File: 3130332e32342e35382e302f32342d3234203d3e203436303532.roa (raw, json) Hash identifier: q/CV3YIPQOm1aZYip5fIR1K9i7bDSVO+nIFF+ycG0Go= Subject key identifier: E5:ED:19:2C:97:8A:81:3C:65:69:5B:9C:3D:4C:47:D7:92:2A:8D:85 Certificate issuer: /CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269 Certificate serial: 1D78C492861056DCA3C7FB044E370A35DCA1264A Authority key identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35382e302f32342d3234203d3e203436303532.roa Signing time: Thu 28 Aug 2025 07:00:00 +0000 ROA not before: Thu 28 Aug 2025 06:55:00 +0000 ROA not after: Thu 27 Aug 2026 07:00:00 +0000 asID: 46052 IP address blocks: 103.24.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.crl rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:78:c4:92:86:10:56:dc:a3:c7:fb:04:4e:37:0a:35:dc:a1:26:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269 Validity Not Before: Aug 28 06:55:00 2025 GMT Not After : Aug 27 07:00:00 2026 GMT Subject: CN=E5ED192C978A813C65695B9C3D4C47D7922A8D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:3d:1a:2d:d4:17:ad:c8:b7:ab:df:34:3b: 34:d6:a5:bb:8c:19:6e:f8:f7:ea:ff:ff:04:68:77: 6d:27:81:0f:be:16:8f:92:77:60:15:a4:59:ce:78: bc:66:e0:3c:b9:68:7f:de:b5:25:16:01:6e:3b:a6: 28:49:35:a0:17:8e:a3:81:a7:cf:02:ad:c1:9e:11: 8c:69:87:cc:ef:ab:5c:40:c8:06:56:12:ca:5f:bc: 22:34:4c:c4:2f:3a:5a:72:f7:9a:a2:c4:b7:90:48: 3c:8c:bb:58:9b:1d:7b:7b:de:c2:7b:77:b2:be:69: d7:1a:fc:14:1e:ba:e2:ce:86:a6:cf:e8:be:f6:26: e9:c7:a5:16:99:0e:57:9e:4f:e4:57:4b:ef:a9:fa: d2:82:c8:c5:98:9b:cd:22:98:f1:ab:0e:9f:03:db: 09:15:63:2b:bd:9a:cb:6c:53:fe:80:31:6e:e0:4d: 45:2b:f2:f4:7f:2e:8b:b8:8b:76:2e:d0:d1:f2:5f: 55:da:e0:21:13:d3:62:6d:ae:53:ef:98:87:3b:48: fd:65:33:e2:26:c9:43:31:e4:a9:eb:13:9b:71:bb: b8:ed:3a:67:55:b6:5b:e0:5a:6c:5b:11:b8:e2:8a: ee:fa:a4:5f:12:da:df:98:e5:c2:10:5f:cc:59:77: b1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:ED:19:2C:97:8A:81:3C:65:69:5B:9C:3D:4C:47:D7:92:2A:8D:85 X509v3 Authority Key Identifier: keyid:3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3130332e32342e35382e302f32342d3234203d3e203436303532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.58.0/24 Signature Algorithm: sha256WithRSAEncryption 34:9c:26:4e:2a:ca:84:2d:69:f5:6e:5f:36:86:e5:be:ca:74: 75:34:a4:6f:23:92:ef:ff:b1:da:c6:cf:c7:4b:ab:a7:0b:b8: f4:92:35:28:30:d5:6d:2a:34:8b:61:2b:98:5d:c2:e7:ee:77: 16:08:bf:40:20:49:e9:a8:16:a8:98:a2:3c:9b:4c:11:9b:22: e1:2e:3b:39:8a:67:5b:3f:8a:84:d0:18:76:d4:99:d6:bb:c4: 01:17:b1:56:d4:ed:a0:21:6a:ef:d4:28:fa:0a:3d:a4:eb:4d: 47:7a:6e:f4:7a:37:ae:93:97:e3:21:fa:c9:66:8f:bc:d8:e0: 31:a4:18:4b:6d:ae:5d:70:67:28:d8:7c:cf:a2:47:5e:4d:9b: 66:ec:cf:65:77:52:7e:be:5c:82:92:9d:36:c0:32:bc:1c:d5: 4c:17:45:2e:e2:a8:d1:d1:99:09:3d:a2:09:b9:6f:9b:cf:26: ed:96:02:e2:8b:5b:88:bf:6f:ae:36:b6:47:7b:71:54:87:fa: 9c:59:07:c1:17:48:3d:76:fd:4b:08:1a:72:96:af:0a:c9:7a: 86:d3:b2:58:44:8f:0f:77:84:46:99:36:2b:79:9c:1e:e3:ff: c4:1a:a3:e9:6e:76:35:29:98:89:d6:1c:cb:fd:c6:cf:2e:61: be:15:9f:2c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUHXjEkoYQVtyjx/sETjcKNdyhJkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIwRTFE QzlBMTI2OTAeFw0yNTA4MjgwNjU1MDBaFw0yNjA4MjcwNzAwMDBaMDMxMTAvBgNV BAMTKEU1RUQxOTJDOTc4QTgxM0M2NTY5NUI5QzNENEM0N0Q3OTIyQThEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRT0aLdQXrci3q980OzTWpbuM GW749+r//wRod20ngQ++Fo+Sd2AVpFnOeLxm4Dy5aH/etSUWAW47pihJNaAXjqOB p88CrcGeEYxph8zvq1xAyAZWEspfvCI0TMQvOlpy95qixLeQSDyMu1ibHXt73sJ7 d7K+adca/BQeuuLOhqbP6L72JunHpRaZDleeT+RXS++p+tKCyMWYm80imPGrDp8D 2wkVYyu9mstsU/6AMW7gTUUr8vR/Lou4i3Yu0NHyX1Xa4CET02JtrlPvmIc7SP1l M+ImyUMx5KnrE5txu7jtOmdVtlvgWmxbEbjiiu76pF8S2t+Y5cIQX8xZd7EzAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQU5e0ZLJeKgTxlaVucPUxH15IqjYUwHwYDVR0j BBgwFoAUPRPG+52yLOE0cGMlNXwg4dyaEmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDFlZTVlMi0zMzhjLTRkMjAtODA3ZS1lNTBiNzU1ODNkYjgvMC8zRDEzQzZGQjlE QjIyQ0UxMzQ3MDYzMjUzNTdDMjBFMURDOUExMjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0QxM0M2RkI5REIyMkNFMTM0NzA2MzI1MzU3QzIwRTFEQzlB MTI2OS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMWVlNWUyLTMzOGMtNGQyMC04 MDdlLWU1MGI3NTU4M2RiOC8wLzMxMzAzMzJlMzIzNDJlMzUzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM0MzYzMDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnGDowDQYJKoZIhvcN AQELBQADggEBADScJk4qyoQtafVuXzaG5b7KdHU0pG8jku//sdrGz8dLq6cLuPSS NSgw1W0qNIthK5hdwufudxYIv0AgSemoFqiYojybTBGbIuEuOzmKZ1s/ioTQGHbU mda7xAEXsVbU7aAhau/UKPoKPaTrTUd6bvR6N66Tl+Mh+slmj7zY4DGkGEttrl1w ZyjYfM+iR15Nm2bsz2V3Un6+XIKSnTbAMrwc1UwXRS7iqNHRmQk9ogm5b5vPJu2W AuKLW4i/b642tkd7cVSH+pxZB8EXSD12/UsIGnKWrwrJeobTslhEjw93hEaZNit5 nB7j/8Qao+ludjUpmInWHMv9xs8uYb4Vnyw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:46 2025 by rpki-client