$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa File: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (raw, json) Hash identifier: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0= Subject key identifier: 7E:FA:71:99:2E:9B:59:5C:9B:7F:0C:1E:87:64:27:42:99:DB:2D:AA Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 0A986D395F8902A21235D3D5EF16AC4E83BF3E97 Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa Signing time: Fri 02 May 2025 09:00:00 +0000 ROA not before: Fri 02 May 2025 08:55:00 +0000 ROA not after: Fri 01 May 2026 09:00:00 +0000 asID: 141967 IP address blocks: 103.167.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:98:6d:39:5f:89:02:a2:12:35:d3:d5:ef:16:ac:4e:83:bf:3e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: May 2 08:55:00 2025 GMT Not After : May 1 09:00:00 2026 GMT Subject: CN=7EFA71992E9B595C9B7F0C1E8764274299DB2DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fd:6e:b6:e4:98:32:f2:73:3e:63:c1:74:e6: f8:66:99:b2:4a:78:fd:40:d5:e0:bf:f0:ff:f1:28: c2:b0:c2:2c:8e:95:a1:4c:cd:4a:da:8a:cf:b4:0c: 68:f4:5c:a1:1d:da:d5:39:d0:76:fd:1f:f1:04:c8: ba:fe:de:c0:06:d2:70:11:09:7f:95:84:4d:58:bb: 63:4c:0e:8e:65:21:8d:b4:4e:61:5e:d9:33:4f:4d: 73:37:7a:6c:1e:df:2f:ff:67:a0:b9:d7:66:70:e1: c0:40:f4:3b:78:1e:43:af:81:04:2a:19:9b:05:d6: 4d:1a:3e:23:3f:c3:1d:ab:e6:0d:59:45:0e:1a:d4: 4e:c1:d9:d2:e6:8c:b4:4f:1b:aa:7b:60:b6:aa:51: 77:03:86:65:db:8e:a4:66:7b:af:ce:28:8f:99:d6: 72:d3:99:97:39:4c:a9:d8:2f:9b:25:54:14:af:8d: fb:64:d4:3d:ba:fe:ba:77:67:50:63:cf:d1:56:cc: be:e2:1a:f1:e9:c1:fc:9b:ec:76:71:74:74:7e:4d: 38:19:bb:83:aa:e2:8b:4c:cc:5e:50:d8:12:e7:11: a8:a5:90:68:4a:8f:89:92:7d:e6:32:86:9b:56:0a: 79:51:3b:f8:70:b8:ff:cb:1f:c8:e7:98:7e:fa:f3: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FA:71:99:2E:9B:59:5C:9B:7F:0C:1E:87:64:27:42:99:DB:2D:AA X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.2.0/24 Signature Algorithm: sha256WithRSAEncryption ab:65:b1:7f:2b:2f:3c:04:8a:cf:71:0f:52:30:96:31:61:ca: 5f:6e:5c:eb:d2:76:c1:d1:dd:89:2b:23:27:e0:74:6d:f0:91: c0:63:23:90:98:40:e7:a1:d7:d7:1a:0c:9f:cd:1d:ed:ef:47: 09:ca:3d:dc:3d:d2:fe:3e:91:a5:82:5a:fb:94:be:87:4c:ff: 2f:17:08:f5:84:d5:b0:7d:9e:99:0c:46:ef:6c:93:ab:8b:bd: fc:f8:04:21:74:55:f9:a3:3e:b9:7c:56:0c:bf:ca:ff:4c:97: 84:95:07:92:be:30:f1:d7:45:58:3a:35:1a:8f:9a:e6:68:84: 50:e7:75:53:f2:ed:c3:59:57:32:82:b5:5c:4b:41:c0:c0:98: 73:18:53:e6:c9:dd:66:1a:7a:e6:ee:41:8f:23:2b:50:bd:2d: 71:2c:9f:29:de:bb:5a:35:f8:14:8d:f8:0f:81:4b:04:df:3c: 66:0e:05:1b:0a:9a:24:9a:4d:f5:ad:8b:d3:45:60:c2:99:63: 2d:d1:f2:28:e5:ef:87:31:62:c6:87:1a:77:dc:d2:58:87:0d: 32:2c:95:1e:12:0a:ed:d6:3c:fb:13:f5:a3:d0:35:e5:54:2a: 21:05:64:11:6b:38:a0:d2:81:8d:b4:23:29:ce:2b:81:20:e2: b6:63:9c:9c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCphtOV+JAqISNdPV7xasToO/PpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNTA1MDIwODU1MDBaFw0yNjA1MDEwOTAwMDBaMDMxMTAvBgNV BAMTKDdFRkE3MTk5MkU5QjU5NUM5QjdGMEMxRTg3NjQyNzQyOTlEQjJEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/W625Jgy8nM+Y8F05vhmmbJK eP1A1eC/8P/xKMKwwiyOlaFMzUrais+0DGj0XKEd2tU50Hb9H/EEyLr+3sAG0nAR CX+VhE1Yu2NMDo5lIY20TmFe2TNPTXM3emwe3y//Z6C512Zw4cBA9Dt4HkOvgQQq GZsF1k0aPiM/wx2r5g1ZRQ4a1E7B2dLmjLRPG6p7YLaqUXcDhmXbjqRme6/OKI+Z 1nLTmZc5TKnYL5slVBSvjftk1D26/rp3Z1Bjz9FWzL7iGvHpwfyb7HZxdHR+TTgZ u4Oq4otMzF5Q2BLnEailkGhKj4mSfeYyhptWCnlRO/hwuP/LH8jnmH7685KDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfvpxmS6bWVybfwweh2QnQpnbLaowHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlMjdiM2UxLWY2MTEtNGFmZS05 YTQ5LTVmYTRmZDU1NzY1My8wLzMxMzAzMzJlMzEzNjM3MmUzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM5MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGenAjANBgkqhkiG 9w0BAQsFAAOCAQEAq2WxfysvPASKz3EPUjCWMWHKX25c69J2wdHdiSsjJ+B0bfCR wGMjkJhA56HX1xoMn80d7e9HCco93D3S/j6RpYJa+5S+h0z/LxcI9YTVsH2emQxG 72yTq4u9/PgEIXRV+aM+uXxWDL/K/0yXhJUHkr4w8ddFWDo1Go+a5miEUOd1U/Lt w1lXMoK1XEtBwMCYcxhT5sndZhp65u5BjyMrUL0tcSyfKd67WjX4FI34D4FLBN88 Zg4FGwqaJJpN9a2L00VgwpljLdHyKOXvhzFixocad9zSWIcNMiyVHhIK7dY8+xP1 o9A15VQqIQVkEWs4oNKBjbQjKc4rgSDitmOcnA== -----END CERTIFICATE-----Generated at Wed Nov 5 09:54:53 2025 by rpki-client