$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa File: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (raw, json) Hash identifier: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI= Subject key identifier: B1:CF:40:1B:49:DA:0D:E1:01:E1:B5:97:60:F0:E5:FA:7B:09:49:64 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 0418B183CC18A52EEE598E60F69B0E29237A91D0 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa Signing time: Sat 31 May 2025 13:02:21 +0000 ROA not before: Sat 31 May 2025 12:57:21 +0000 ROA not after: Sat 30 May 2026 13:02:21 +0000 asID: 142401 IP address blocks: 103.172.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:18:b1:83:cc:18:a5:2e:ee:59:8e:60:f6:9b:0e:29:23:7a:91:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: May 31 12:57:21 2025 GMT Not After : May 30 13:02:21 2026 GMT Subject: CN=B1CF401B49DA0DE101E1B59760F0E5FA7B094964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:b4:08:37:3a:eb:b3:d2:96:7a:ee:c8:75: 45:85:ad:8c:e9:c2:bc:09:7d:48:a8:b1:0a:cb:16: df:88:25:d3:c3:a4:7f:bd:93:10:66:90:75:94:95: 0b:d9:19:2e:01:34:33:95:26:31:6e:41:5d:28:24: 15:9b:83:de:36:a9:12:87:0c:94:5e:de:e6:12:c7: a9:9f:03:ad:4c:64:bc:89:13:9d:b3:35:65:54:23: 8d:08:df:2a:17:88:87:3d:0d:78:c7:d1:d8:4b:c4: 3a:f8:77:36:0b:6b:81:2b:25:fd:56:62:7e:c9:d3: 43:63:d4:4f:55:c3:19:e0:13:48:14:e4:86:6a:d4: 1a:45:73:a0:53:cd:00:5a:f5:dd:f3:b3:e9:7d:39: 8e:1d:14:56:2a:42:89:f7:70:4f:74:3a:1a:ff:c4: 8b:01:83:a3:90:49:37:29:91:64:df:62:b2:13:d0: 17:ce:b1:81:0e:0e:5b:ed:34:e9:00:8e:bb:81:08: 2d:2e:19:3e:8a:bb:8d:13:4a:b0:48:4f:1f:12:b8: a9:76:38:8d:d9:98:d8:b9:c9:f3:b2:f9:2f:c8:dd: 9a:10:2d:99:aa:23:d2:bb:6f:e9:78:6a:32:4a:b9: 01:d1:65:74:00:6f:96:db:f4:d9:16:c0:f6:7a:fd: ac:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:CF:40:1B:49:DA:0D:E1:01:E1:B5:97:60:F0:E5:FA:7B:09:49:64 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.241.0/24 Signature Algorithm: sha256WithRSAEncryption 41:86:93:eb:01:01:af:55:0f:51:c6:88:33:d1:dc:83:17:ec: 3b:39:0c:59:60:45:73:9e:9e:71:9e:51:41:b1:cc:2d:85:13: b9:e6:1a:19:3f:f6:76:98:93:80:7d:fc:e5:78:33:a6:95:e9: e3:a9:c4:55:80:40:fb:03:e3:02:25:a7:b9:09:26:69:0a:3d: 09:01:35:8b:d6:1e:32:8c:bd:be:6f:7d:56:4c:b2:9a:66:61: eb:22:b6:b2:73:34:5b:51:55:ee:25:ed:fe:1e:58:d3:e5:8a: 69:5a:a4:67:4d:3d:e1:66:fa:48:e5:06:7c:6f:9e:a5:d4:1e: 24:6e:6c:b6:61:fe:9e:cb:b9:6f:04:d0:a7:1a:d6:32:4e:87: 0f:6b:df:51:67:c1:86:13:8c:70:bc:3a:58:1b:e8:f7:18:62: 57:13:7f:c4:5a:79:09:56:5d:6b:26:c2:60:10:10:b2:81:69: 21:c3:84:cc:32:fc:75:d3:df:6f:4a:81:c2:8c:61:db:72:6a: 0b:d9:13:a0:d2:18:b2:31:73:91:70:bc:d8:74:6d:ca:99:ba: 48:36:9d:fa:3c:1c:68:a5:74:12:1d:b6:6f:5e:6b:99:b7:8a: a7:8c:c0:a6:24:45:fc:0a:1e:94:ec:1b:d5:bd:eb:dc:4e:79: 71:8a:fb:42 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUBBixg8wYpS7uWY5g9psOKSN6kdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTA1MzExMjU3MjFaFw0yNjA1MzAxMzAyMjFaMDMxMTAvBgNV BAMTKEIxQ0Y0MDFCNDlEQTBERTEwMUUxQjU5NzYwRjBFNUZBN0IwOTQ5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXybQINzrrs9KWeu7IdUWFrYzp wrwJfUiosQrLFt+IJdPDpH+9kxBmkHWUlQvZGS4BNDOVJjFuQV0oJBWbg942qRKH DJRe3uYSx6mfA61MZLyJE52zNWVUI40I3yoXiIc9DXjH0dhLxDr4dzYLa4ErJf1W Yn7J00Nj1E9VwxngE0gU5IZq1BpFc6BTzQBa9d3zs+l9OY4dFFYqQon3cE90Ohr/ xIsBg6OQSTcpkWTfYrIT0BfOsYEODlvtNOkAjruBCC0uGT6Ku40TSrBITx8SuKl2 OI3ZmNi5yfOy+S/I3ZoQLZmqI9K7b+l4ajJKuQHRZXQAb5bb9NkWwPZ6/ayPAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUsc9AG0naDeEB4bWXYPDl+nsJSWQwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxMmMxMzhjLTJlMjQtNDlmNS04 YWRhLTAwMjdjYmE3ZjE3OC8wLzMxMzAzMzJlMzEzNzMyMmUzMjM0MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrPEwDQYJ KoZIhvcNAQELBQADggEBAEGGk+sBAa9VD1HGiDPR3IMX7Ds5DFlgRXOennGeUUGx zC2FE7nmGhk/9naYk4B9/OV4M6aV6eOpxFWAQPsD4wIlp7kJJmkKPQkBNYvWHjKM vb5vfVZMsppmYesitrJzNFtRVe4l7f4eWNPlimlapGdNPeFm+kjlBnxvnqXUHiRu bLZh/p7LuW8E0Kca1jJOhw9r31FnwYYTjHC8Olgb6PcYYlcTf8RaeQlWXWsmwmAQ ELKBaSHDhMwy/HXT329KgcKMYdtyagvZE6DSGLIxc5FwvNh0bcqZukg2nfo8HGil dBIdtm9ea5m3iqeMwKYkRfwKHpTsG9W969xOeXGK+0I= -----END CERTIFICATE-----Generated at Wed Jun 18 23:17:40 2025 by rpki-client