$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa File: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (raw, json) Hash identifier: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4= Subject key identifier: B7:23:5F:12:4B:1F:CD:1E:10:9F:50:FC:8F:7D:26:83:5C:2D:F9:36 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 15E2AAF6B9E4806A368548229DDF328FED8A2F76 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa Signing time: Tue 28 Jan 2025 10:01:07 +0000 ROA not before: Tue 28 Jan 2025 09:56:07 +0000 ROA not after: Tue 27 Jan 2026 10:01:07 +0000 asID: 9341 IP address blocks: 103.180.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e2:aa:f6:b9:e4:80:6a:36:85:48:22:9d:df:32:8f:ed:8a:2f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Jan 28 09:56:07 2025 GMT Not After : Jan 27 10:01:07 2026 GMT Subject: CN=B7235F124B1FCD1E109F50FC8F7D26835C2DF936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:35:2f:e9:c2:bd:d1:c4:cb:d9:59:7e:bd:57: d8:57:d5:7b:66:5b:e8:6c:96:31:4e:cc:26:02:74: c6:dc:b0:a2:eb:41:73:d2:f5:38:ff:8a:43:52:3c: 6e:ed:a6:cd:2e:89:55:2b:f7:93:ee:fa:8d:91:3e: e7:c6:56:df:6c:77:2d:2a:ed:1b:3d:af:20:d0:7e: 66:c2:52:63:05:97:a9:48:f0:5d:e2:aa:f0:af:c5: 64:99:72:e1:0d:c1:a6:b1:35:91:34:b2:a8:09:d0: 7a:c4:5b:cc:ca:88:79:fd:e4:ce:08:84:c0:41:14: d8:82:aa:fd:9c:5c:24:87:3d:b7:63:c3:7a:cb:9c: 48:11:2f:0f:62:17:9b:de:3d:81:60:8f:d3:29:df: 2f:86:aa:ef:de:3c:4c:e0:42:75:6e:89:bf:93:a9: a8:fb:2a:af:0b:22:26:fd:5a:ee:fa:2b:97:9e:4a: a6:ea:f3:13:55:33:b2:6e:a1:b2:a0:55:4e:5c:17: d5:e8:d4:76:31:ea:5c:8c:18:57:d9:ea:31:1b:63: 51:be:b1:23:e1:92:be:28:cb:2a:32:7f:e3:16:9c: e4:52:b7:17:de:bd:8e:88:58:03:1d:92:e6:6b:f4: 94:f4:92:28:4a:cb:5f:d4:56:bd:95:60:51:62:44: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:23:5F:12:4B:1F:CD:1E:10:9F:50:FC:8F:7D:26:83:5C:2D:F9:36 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.58.0/23 Signature Algorithm: sha256WithRSAEncryption 53:dd:08:7f:ca:7c:c6:71:46:b2:cc:f6:ae:b6:5d:c3:b0:d6: fd:8e:c7:4d:36:2c:f3:36:09:c1:8b:40:0e:d5:a7:11:83:2a: d4:92:77:ab:d3:14:a0:58:b9:a6:48:93:cd:9f:93:47:36:3f: d6:d1:5e:08:7c:b1:b6:e1:ab:c5:34:66:c7:17:0a:18:7f:45: a6:10:55:d9:71:f3:e6:30:86:50:b5:d8:4b:27:71:94:b1:52: e3:aa:74:b1:5f:b7:06:ab:76:ff:63:c9:43:e8:f9:f4:26:04: e7:d7:5d:54:33:9a:ad:41:17:bc:f4:52:0f:7b:1c:a9:24:65: 04:fa:1f:0e:36:11:cf:9c:d6:ec:6e:65:ef:10:13:c7:51:96: 90:2e:ea:93:27:1c:0e:60:65:14:15:f0:49:5c:75:8e:42:4a: 4b:db:11:30:eb:bf:23:c7:cc:d0:3a:2b:a5:53:a4:a6:61:c9: 76:6a:58:6d:b8:98:9e:70:53:40:36:19:47:5a:c0:07:06:a6: 5e:2c:d6:fc:72:f4:32:64:08:23:d2:68:13:b4:bb:64:55:54: d7:ca:13:d9:3d:a3:61:f7:36:6d:e2:33:21:61:3f:b0:9c:24: fa:7a:ef:49:82:a5:c4:02:36:15:83:3f:be:0e:e2:e9:d9:0b: 13:56:15:62 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUFeKq9rnkgGo2hUgind8yj+2KL3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTAxMjgwOTU2MDdaFw0yNjAxMjcxMDAxMDdaMDMxMTAvBgNV BAMTKEI3MjM1RjEyNEIxRkNEMUUxMDlGNTBGQzhGN0QyNjgzNUMyREY5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeNS/pwr3RxMvZWX69V9hX1Xtm W+hsljFOzCYCdMbcsKLrQXPS9Tj/ikNSPG7tps0uiVUr95Pu+o2RPufGVt9sdy0q 7Rs9ryDQfmbCUmMFl6lI8F3iqvCvxWSZcuENwaaxNZE0sqgJ0HrEW8zKiHn95M4I hMBBFNiCqv2cXCSHPbdjw3rLnEgRLw9iF5vePYFgj9Mp3y+Gqu/ePEzgQnVuib+T qaj7Kq8LIib9Wu76K5eeSqbq8xNVM7JuobKgVU5cF9Xo1HYx6lyMGFfZ6jEbY1G+ sSPhkr4oyyoyf+MWnORStxfevY6IWAMdkuZr9JT0kihKy1/UVr2VYFFiRE3nAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUtyNfEksfzR4Qn1D8j30mg1wt+TYwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MWE4NDdkLTI1MzEtNGQ3Zi05 MjQxLTk3Nzc4NTA2MDVkNi8wLzMxMzAzMzJlMzEzODMwMmUzNTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFntDowDQYJKoZIhvcN AQELBQADggEBAFPdCH/KfMZxRrLM9q62XcOw1v2Ox002LPM2CcGLQA7VpxGDKtSS d6vTFKBYuaZIk82fk0c2P9bRXgh8sbbhq8U0ZscXChh/RaYQVdlx8+YwhlC12Esn cZSxUuOqdLFftwardv9jyUPo+fQmBOfXXVQzmq1BF7z0Ug97HKkkZQT6Hw42Ec+c 1uxuZe8QE8dRlpAu6pMnHA5gZRQV8ElcdY5CSkvbETDrvyPHzNA6K6VTpKZhyXZq WG24mJ5wU0A2GUdawAcGpl4s1vxy9DJkCCPSaBO0u2RVVNfKE9k9o2H3Nm3iMyFh P7CcJPp670mCpcQCNhWDP74O4unZCxNWFWI= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:39 2025 by rpki-client