$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa File: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (raw, json) Hash identifier: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA= Subject key identifier: 7F:63:F4:F2:CA:E9:F5:23:6C:15:3F:C6:9C:AD:61:36:3D:54:F4:89 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 2DA7ACC0AA9FE8A508F33AEA1F8311BC8C609222 Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa Signing time: Tue 26 Aug 2025 18:00:00 +0000 ROA not before: Tue 26 Aug 2025 17:55:00 +0000 ROA not after: Tue 25 Aug 2026 18:00:00 +0000 asID: 133354 IP address blocks: 103.232.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 17:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a7:ac:c0:aa:9f:e8:a5:08:f3:3a:ea:1f:83:11:bc:8c:60:92:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Aug 26 17:55:00 2025 GMT Not After : Aug 25 18:00:00 2026 GMT Subject: CN=7F63F4F2CAE9F5236C153FC69CAD61363D54F489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:e9:71:2f:bc:e3:a1:d4:fd:89:da:f4:4c: 1d:a2:92:30:1b:f2:f2:41:36:d5:21:40:ed:e7:d8: b1:c8:c1:b8:11:96:3e:4e:08:9b:8a:fd:45:2f:f9: f7:dc:44:29:9c:6b:33:2b:74:f9:38:f6:54:9b:70: bb:24:ab:54:d3:f0:19:80:bb:87:c2:98:02:9f:d4: 6e:db:7a:b2:f2:bd:bf:11:a3:8b:6f:c8:89:1b:42: 9b:40:a7:df:05:18:1e:54:f6:ca:ce:45:54:cc:7e: 49:ac:ca:6e:ec:a4:c7:12:fe:fa:b4:33:87:e1:53: 52:0f:25:5d:d3:c9:7f:01:45:54:40:6d:70:99:06: df:d5:c9:9b:fa:82:e7:81:35:cc:03:90:ff:c1:6c: 83:4a:40:7e:73:1a:cc:18:7a:a7:f0:18:24:12:0d: 6a:2d:d1:e1:78:7a:9a:de:05:40:01:4c:96:df:a7: dd:8a:ec:29:42:10:ce:ca:9f:c8:6b:fd:c1:65:8f: fb:27:32:32:32:ba:fc:d6:ed:af:c1:e0:72:f2:fc: ce:e4:83:87:c7:41:ef:46:86:ac:1e:d6:76:48:8a: a7:12:d0:ca:c2:1e:d0:36:fd:50:18:34:06:09:07: c3:3b:94:a7:03:93:90:5a:86:3e:0e:44:aa:f8:f4: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:63:F4:F2:CA:E9:F5:23:6C:15:3F:C6:9C:AD:61:36:3D:54:F4:89 X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.232.32.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:44:99:68:2e:f0:02:f1:b7:70:12:70:d4:0a:4b:55:3e:9c: 03:da:e5:6b:19:44:61:92:cf:c2:4e:20:54:5d:e2:5e:2b:3c: 17:07:d2:19:8a:ad:f3:52:2b:48:6a:f9:c8:a2:5e:e9:4c:bf: 3e:4d:06:9a:6e:10:f5:54:7f:a0:78:ec:2b:3e:03:53:f9:1a: 7b:64:3d:b0:c9:c7:8c:29:dd:94:51:4e:37:18:66:c2:bc:3f: 7a:49:a7:ae:dc:7b:c1:05:26:e9:e7:af:47:79:ee:fe:9f:b7: d5:39:de:6a:cc:a1:a2:7a:12:05:33:a6:97:ea:a3:76:a8:ac: e2:c9:0c:52:50:e0:74:71:7c:de:bc:20:cd:5f:b8:ee:f9:32: d4:c2:f2:7f:dd:be:56:af:15:36:79:9e:17:7c:0d:ef:7b:1c: c3:6e:6d:aa:ca:69:c2:6c:e8:3f:f3:b8:2b:3f:75:c8:da:2d: b7:4d:12:79:02:bb:bc:30:57:88:4d:d8:9e:20:70:3d:e3:bd: b0:a0:52:f3:8d:96:78:8a:79:16:38:cf:ba:2f:f5:3d:3e:6d: 9d:9a:ed:1d:29:c6:06:82:6d:28:5a:47:36:b4:81:e6:85:0d: 3a:cc:87:45:1c:fc:8f:84:26:f4:76:5d:92:fc:c9:38:a7:c0: de:41:e4:74 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULaeswKqf6KUI8zrqH4MRvIxgkiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNTA4MjYxNzU1MDBaFw0yNjA4MjUxODAwMDBaMDMxMTAvBgNV BAMTKDdGNjNGNEYyQ0FFOUY1MjM2QzE1M0ZDNjlDQUQ2MTM2M0Q1NEY0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQelxL7zjodT9idr0TB2ikjAb 8vJBNtUhQO3n2LHIwbgRlj5OCJuK/UUv+ffcRCmcazMrdPk49lSbcLskq1TT8BmA u4fCmAKf1G7berLyvb8Ro4tvyIkbQptAp98FGB5U9srORVTMfkmsym7spMcS/vq0 M4fhU1IPJV3TyX8BRVRAbXCZBt/VyZv6gueBNcwDkP/BbINKQH5zGswYeqfwGCQS DWot0eF4epreBUABTJbfp92K7ClCEM7Kn8hr/cFlj/snMjIyuvzW7a/B4HLy/M7k g4fHQe9Ghqwe1nZIiqcS0MrCHtA2/VAYNAYJB8M7lKcDk5Bahj4ORKr49BbFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUf2P08srp9SNsFT/GnK1hNj1U9IkwHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzZTQ1MDM5LTZlZDAtNDgzZC1h MWI5LWM0ZjQ4NTRjNWNmNS8wLzMxMzAzMzJlMzIzMzMyMmUzMzMyMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMzMzMzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+ggMA0GCSqG SIb3DQEBCwUAA4IBAQBLRJloLvAC8bdwEnDUCktVPpwD2uVrGURhks/CTiBUXeJe KzwXB9IZiq3zUitIavnIol7pTL8+TQaabhD1VH+geOwrPgNT+Rp7ZD2wyceMKd2U UU43GGbCvD96Saeu3HvBBSbp569Hee7+n7fVOd5qzKGiehIFM6aX6qN2qKziyQxS UOB0cXzevCDNX7ju+TLUwvJ/3b5WrxU2eZ4XfA3vexzDbm2qymnCbOg/87grP3XI 2i23TRJ5Aru8MFeITdieIHA9472woFLzjZZ4inkWOM+6L/U9Pm2dmu0dKcYGgm0o Wkc2tIHmhQ06zIdFHPyPhCb0dl2S/Mk4p8DeQeR0 -----END CERTIFICATE-----Generated at Mon Sep 8 10:42:02 2025 by rpki-client