$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3130332e3136372e33302e302f32332d3234203d3e203137393935.roa File: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (raw, json) Hash identifier: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4= Subject key identifier: AA:5A:E1:DB:FB:24:E7:5C:47:27:16:CA:AC:50:C4:B9:4A:CD:8D:18 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 3BA720580EC53BD33353F0720A25CDF81DB64A3E Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3130332e3136372e33302e302f32332d3234203d3e203137393935.roa Signing time: Fri 04 Jul 2025 11:02:22 +0000 ROA not before: Fri 04 Jul 2025 10:57:22 +0000 ROA not after: Fri 03 Jul 2026 11:02:22 +0000 asID: 17995 IP address blocks: 103.167.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a7:20:58:0e:c5:3b:d3:33:53:f0:72:0a:25:cd:f8:1d:b6:4a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Jul 4 10:57:22 2025 GMT Not After : Jul 3 11:02:22 2026 GMT Subject: CN=AA5AE1DBFB24E75C472716CAAC50C4B94ACD8D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:43:6b:e6:ed:c2:69:ed:56:3b:bb:99:70:ba: 23:25:33:fc:71:13:6b:77:9b:04:da:2b:ad:63:9f: f9:38:b2:11:1e:b8:91:63:0c:6c:89:19:4b:fe:c8: 47:cc:a0:28:60:4b:f2:28:4f:32:71:0c:49:4b:92: ad:9c:26:16:de:1e:94:ff:9d:4b:03:39:41:e4:8a: da:4c:49:2b:9b:d7:f6:ae:5e:46:48:09:4c:88:f5: 91:12:d4:f1:3d:64:18:6f:80:06:fd:46:11:97:1e: e9:9d:42:7a:ff:38:48:a0:85:f3:5a:a1:b1:81:c8: a9:fb:76:a3:9e:58:6b:b3:c1:e1:12:0f:05:c2:3d: 4b:20:d4:16:67:b8:ea:4e:f1:68:48:c2:e6:c4:76: 41:b8:cd:38:fa:00:b1:95:50:05:84:d6:89:45:42: 91:41:2f:7f:98:6f:87:c8:89:d0:ae:e3:50:d8:10: b4:33:07:c7:fb:75:8b:2c:db:21:2d:61:f2:a2:d8: 43:04:d3:af:99:20:bf:e3:65:fa:ec:f0:83:f1:98: 7e:ad:d2:8b:44:9b:01:e3:be:ad:b7:2f:5f:42:27: 41:61:cd:c0:50:75:31:8a:34:f9:06:37:c3:c6:8b: ca:66:08:09:da:7e:af:a7:cf:18:14:cc:f2:77:7d: 39:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5A:E1:DB:FB:24:E7:5C:47:27:16:CA:AC:50:C4:B9:4A:CD:8D:18 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/3130332e3136372e33302e302f32332d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.30.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:69:98:a5:d6:ef:20:f5:17:4a:4d:f4:97:86:e5:62:bb:be: 6f:20:58:6f:b4:65:02:17:fd:6a:62:53:ce:b6:6b:bf:33:96: f5:b1:49:8c:32:41:46:5b:44:18:ad:64:5b:f8:b0:03:be:57: 2c:0c:bb:76:80:e0:ee:1e:99:31:25:13:ab:9e:3d:be:a5:16: d6:e6:51:5d:55:49:95:a2:20:88:89:69:dd:35:03:7f:01:ad: b5:04:e7:e6:e4:e6:16:65:eb:cc:b7:99:86:33:b5:12:ec:0f: 86:39:e2:bf:74:b8:72:d7:29:be:d0:28:29:da:f3:77:9d:21: 1b:91:b0:5e:97:12:44:20:ed:b9:bd:c1:58:21:21:dc:24:dd: 85:b8:db:74:77:d4:0e:33:09:7b:87:ea:3c:5b:af:cd:8d:5e: 59:c0:f4:c7:97:0d:4f:2e:75:ca:4b:7b:0c:15:db:16:98:fa: 56:49:ef:da:c9:cb:45:28:d7:d5:f9:0a:f1:79:60:15:52:69: 57:91:4b:b8:8a:d8:9a:98:b0:60:01:d6:e0:55:4b:85:0d:b3: cd:43:98:a1:c0:1a:24:55:45:53:94:84:7c:75:21:42:30:10: 84:dd:68:27:3d:bf:3d:c8:d2:66:85:78:50:ca:63:b1:b6:c9: 58:52:ab:81 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUO6cgWA7FO9MzU/ByCiXN+B22Sj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTA3MDQxMDU3MjJaFw0yNjA3MDMxMTAyMjJaMDMxMTAvBgNV BAMTKEFBNUFFMURCRkIyNEU3NUM0NzI3MTZDQUFDNTBDNEI5NEFDRDhEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQ2vm7cJp7VY7u5lwuiMlM/xx E2t3mwTaK61jn/k4shEeuJFjDGyJGUv+yEfMoChgS/IoTzJxDElLkq2cJhbeHpT/ nUsDOUHkitpMSSub1/auXkZICUyI9ZES1PE9ZBhvgAb9RhGXHumdQnr/OEighfNa obGByKn7dqOeWGuzweESDwXCPUsg1BZnuOpO8WhIwubEdkG4zTj6ALGVUAWE1olF QpFBL3+Yb4fIidCu41DYELQzB8f7dYss2yEtYfKi2EME06+ZIL/jZfrs8IPxmH6t 0otEmwHjvq23L19CJ0FhzcBQdTGKNPkGN8PGi8pmCAnafq+nzxgUzPJ3fTnVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqlrh2/sk51xHJxbKrFDEuUrNjRgwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjNjM1Y2U5LTBlYTUtNDdkOC05 ZmNjLWNhZDFjOWYwNmZiZS8wLzMxMzAzMzJlMzEzNjM3MmUzMzMwMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWenHjANBgkqhkiG 9w0BAQsFAAOCAQEAS2mYpdbvIPUXSk30l4blYru+byBYb7RlAhf9amJTzrZrvzOW 9bFJjDJBRltEGK1kW/iwA75XLAy7doDg7h6ZMSUTq549vqUW1uZRXVVJlaIgiIlp 3TUDfwGttQTn5uTmFmXrzLeZhjO1EuwPhjniv3S4ctcpvtAoKdrzd50hG5GwXpcS RCDtub3BWCEh3CTdhbjbdHfUDjMJe4fqPFuvzY1eWcD0x5cNTy51ykt7DBXbFpj6 Vknv2snLRSjX1fkK8XlgFVJpV5FLuIrYmpiwYAHW4FVLhQ2zzUOYocAaJFVFU5SE fHUhQjAQhN1oJz2/PcjSZoV4UMpjsbbJWFKrgQ== -----END CERTIFICATE-----Generated at Thu Aug 7 20:24:08 2025 by rpki-client