$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa File: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (raw, json) Hash identifier: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY= Subject key identifier: AC:A9:62:30:8B:10:BC:C7:B8:8B:B9:35:E9:D3:3C:87:66:9F:77:71 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 0118164D8C3A90F179B3E88DE8EB85ECEE789E01 Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa Signing time: Sun 24 Aug 2025 14:00:01 +0000 ROA not before: Sun 24 Aug 2025 13:55:01 +0000 ROA not after: Sun 23 Aug 2026 14:00:01 +0000 asID: 140470 IP address blocks: 103.207.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:18:16:4d:8c:3a:90:f1:79:b3:e8:8d:e8:eb:85:ec:ee:78:9e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Aug 24 13:55:01 2025 GMT Not After : Aug 23 14:00:01 2026 GMT Subject: CN=ACA962308B10BCC7B88BB935E9D33C87669F7771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:c3:9e:b0:4c:0f:04:a1:ab:53:1d:e1:76: 3b:12:7a:9e:78:0e:21:68:74:0a:06:9c:3b:80:f6: 9a:e2:6b:0a:11:dc:1a:02:f3:c5:29:87:55:59:01: e8:6a:e0:18:b8:92:ba:e7:dd:b3:9c:41:36:0f:20: 69:d2:d8:f0:0b:2e:ec:18:75:29:95:cb:7f:e9:67: d4:87:5f:8f:e5:96:8c:a2:70:f1:b6:db:6f:b8:37: d2:ac:02:9f:c1:54:77:fc:59:9b:50:88:ef:49:00: 87:ba:6f:fa:4e:cd:8d:c3:ce:97:b4:ea:95:5e:76: e1:24:88:f9:58:1d:92:0a:d2:28:b4:e3:af:ca:fc: e6:a2:e4:85:cb:e3:37:a5:0a:a5:fe:8b:88:0f:f4: 7d:c9:89:56:d7:03:e8:1d:75:d9:ca:86:71:1f:44: 3b:7c:41:dc:b8:24:23:fd:a1:3d:e1:cd:11:76:33: 5b:23:cb:4f:37:47:3a:2c:75:d7:86:2a:3d:dc:57: f8:9b:36:4b:95:d8:94:e2:98:2c:84:59:1e:b5:e1: 25:83:1f:aa:0d:dd:1a:a8:bb:70:9e:70:91:df:3c: 38:43:c5:41:b3:46:7f:67:91:5b:ba:88:87:e6:05: dc:f1:54:4c:58:9f:02:1a:fd:50:79:e4:6a:c3:d0: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:62:30:8B:10:BC:C7:B8:8B:B9:35:E9:D3:3C:87:66:9F:77:71 X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.96.0/22 Signature Algorithm: sha256WithRSAEncryption cb:0d:49:97:3b:aa:59:5c:6b:71:6f:7f:95:e3:b6:e0:10:d6: 65:00:69:73:e3:d0:93:3a:8b:29:72:24:2c:a8:90:b1:11:d1: 5a:73:0f:2f:16:f0:e0:2d:fc:5e:f9:16:07:4e:d5:15:ac:01: 5c:2e:51:64:e0:b2:35:e2:27:88:ff:ba:7a:61:e6:15:c1:5c: 45:44:10:64:2a:a6:d0:84:43:27:4a:42:58:45:1a:87:e3:ac: a9:95:21:44:d4:56:ac:45:f4:bf:99:6c:dd:b8:ab:51:42:a6: b4:15:cf:a8:50:21:8e:ef:4a:d2:55:27:aa:da:dc:4a:b1:e0: 9f:7a:bb:be:63:c9:af:46:9b:ac:87:03:79:23:cd:1e:34:69: 08:92:15:17:5c:e5:8d:27:fb:65:62:55:76:3d:a2:e2:dc:fa: 6c:65:1d:90:2f:28:b0:de:d6:15:09:96:c4:bf:02:59:10:40: 26:5e:10:72:f1:78:6f:d9:4f:ed:a6:14:94:1c:89:7e:2d:ba: c5:9f:d8:f7:f7:55:76:43:00:22:45:fe:0d:40:d0:7d:da:bf: e7:3e:ea:18:17:f2:cf:8c:de:cc:81:18:91:65:7f:1d:67:f2: fa:9b:df:ed:a1:8b:8c:ee:16:89:8d:09:2d:94:51:b9:d4:15: 03:65:3a:54 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUARgWTYw6kPF5s+iN6OuF7O54ngEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNTA4MjQxMzU1MDFaFw0yNjA4MjMxNDAwMDFaMDMxMTAvBgNV BAMTKEFDQTk2MjMwOEIxMEJDQzdCODhCQjkzNUU5RDMzQzg3NjY5Rjc3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8cOesEwPBKGrUx3hdjsSep54 DiFodAoGnDuA9priawoR3BoC88Uph1VZAehq4Bi4krrn3bOcQTYPIGnS2PALLuwY dSmVy3/pZ9SHX4/lloyicPG222+4N9KsAp/BVHf8WZtQiO9JAIe6b/pOzY3Dzpe0 6pVeduEkiPlYHZIK0ii046/K/Oai5IXL4zelCqX+i4gP9H3JiVbXA+gdddnKhnEf RDt8Qdy4JCP9oT3hzRF2M1sjy083RzosddeGKj3cV/ibNkuV2JTimCyEWR614SWD H6oN3Rqou3CecJHfPDhDxUGzRn9nkVu6iIfmBdzxVExYnwIa/VB55GrD0G4xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUrKliMIsQvMe4i7k16dM8h2afd3EwHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNmU0NTY0LTQ4ZjItNDNiNS04 NTA1LTkzYjQ5OGU3ZDhhYi8wLzMxMzAzMzJlMzIzMDM3MmUzOTM2MmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ89gMA0GCSqG SIb3DQEBCwUAA4IBAQDLDUmXO6pZXGtxb3+V47bgENZlAGlz49CTOospciQsqJCx EdFacw8vFvDgLfxe+RYHTtUVrAFcLlFk4LI14ieI/7p6YeYVwVxFRBBkKqbQhEMn SkJYRRqH46yplSFE1FasRfS/mWzduKtRQqa0Fc+oUCGO70rSVSeq2txKseCferu+ Y8mvRpushwN5I80eNGkIkhUXXOWNJ/tlYlV2PaLi3PpsZR2QLyiw3tYVCZbEvwJZ EEAmXhBy8Xhv2U/tphSUHIl+LbrFn9j391V2QwAiRf4NQNB92r/nPuoYF/LPjN7M gRiRZX8dZ/L6m9/toYuM7haJjQktlFG51BUDZTpU -----END CERTIFICATE-----Generated at Sun Sep 7 17:49:22 2025 by rpki-client