$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa File: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c= Subject key identifier: 73:35:B5:AA:C2:C7:43:4D:91:67:7B:1E:25:B7:68:AF:A4:F8:34:0C Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 7F0A4BA085502FDBD2F9EEA253063C383D115A3D Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa Signing time: Tue 28 Jan 2025 10:01:08 +0000 ROA not before: Tue 28 Jan 2025 09:56:08 +0000 ROA not after: Tue 27 Jan 2026 10:01:08 +0000 asID: 9341 IP address blocks: 103.180.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0a:4b:a0:85:50:2f:db:d2:f9:ee:a2:53:06:3c:38:3d:11:5a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Jan 28 09:56:08 2025 GMT Not After : Jan 27 10:01:08 2026 GMT Subject: CN=7335B5AAC2C7434D91677B1E25B768AFA4F8340C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:14:07:4d:88:0b:fc:90:97:5a:7c:4b:37: 01:2b:72:11:24:32:de:ee:30:7c:88:27:16:9d:5b: 94:28:50:fe:6d:24:f9:87:b4:9b:1f:f7:81:f1:c4: e0:9d:cd:09:3c:b0:0c:16:ed:2a:16:2e:b4:b5:ba: 93:b7:97:7d:eb:55:2c:bb:56:58:94:b9:ec:67:f7: 2d:2a:43:6a:5d:68:b7:7c:cc:94:77:df:26:f3:a2: d6:84:41:bb:3e:f5:95:b6:be:2d:24:76:73:ac:30: ee:81:d7:98:03:29:2c:c5:7f:a8:c4:90:b0:dc:7b: 91:3a:72:db:a8:89:68:be:67:fd:fe:07:50:0f:cb: ab:f0:d9:29:b5:15:c3:ea:b0:a2:74:54:56:66:bb: 60:c3:cc:71:f6:b9:f8:15:5c:32:3e:d2:69:51:ab: 79:14:67:af:ed:03:cd:64:2e:3d:bd:c2:96:71:52: 66:cb:2f:55:df:2e:e4:75:ac:c9:0c:27:8d:13:62: 55:1a:84:87:c2:9d:4c:05:5c:52:36:46:28:28:67: 02:f1:d2:a5:38:12:f1:18:3c:00:78:7e:1d:77:15: b8:62:0e:87:c8:26:46:33:8a:14:8e:ed:a0:27:01: aa:3d:92:28:00:6f:7c:29:7d:ab:86:b5:e8:99:fc: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:35:B5:AA:C2:C7:43:4D:91:67:7B:1E:25:B7:68:AF:A4:F8:34:0C X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.59.0/24 Signature Algorithm: sha256WithRSAEncryption 49:66:a2:ea:28:27:1d:31:92:ba:6d:22:32:b3:68:3a:42:35: b8:7f:9d:15:cb:a2:af:43:54:ed:1c:c7:f8:3d:28:d7:b9:21: ca:09:de:a8:ed:44:86:ba:ad:63:46:a1:d9:d8:8f:2b:1d:5f: ee:50:9a:31:38:32:ac:74:7b:16:f7:93:97:d1:f8:21:92:f7: c0:77:57:3d:31:e0:a6:f6:e5:59:70:fc:fd:46:60:a4:33:fc: 9d:53:32:af:bf:69:b5:b1:cd:49:b7:ce:03:2f:2e:c3:37:42: 68:0e:b2:15:23:f2:90:d1:9f:49:39:b9:1d:34:ce:02:31:58: 53:3b:3a:5a:cc:da:b4:c2:aa:8a:e8:37:59:35:2b:6b:eb:6c: 83:9a:ea:ff:10:e8:6f:10:7b:8a:af:48:3f:3c:ea:aa:19:f1: cb:28:9c:ae:ae:0e:7b:ee:45:e8:9b:0b:26:1e:c3:77:19:5e: 9e:34:40:dc:24:cd:47:03:73:5e:65:33:3b:93:48:28:ca:df: 86:19:ce:9d:46:6c:b8:64:ba:bd:d3:17:6e:14:0c:ee:1a:10: 6a:e6:0f:93:86:69:f4:a8:8e:c7:aa:05:59:77:95:94:46:88: ea:bc:13:e4:46:62:a2:4f:8e:ea:20:04:7a:9d:9d:00:24:11: 4b:e1:3f:5b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUfwpLoIVQL9vS+e6iUwY8OD0RWj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTAxMjgwOTU2MDhaFw0yNjAxMjcxMDAxMDhaMDMxMTAvBgNV BAMTKDczMzVCNUFBQzJDNzQzNEQ5MTY3N0IxRTI1Qjc2OEFGQTRGODM0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKRQHTYgL/JCXWnxLNwErchEk Mt7uMHyIJxadW5QoUP5tJPmHtJsf94HxxOCdzQk8sAwW7SoWLrS1upO3l33rVSy7 VliUuexn9y0qQ2pdaLd8zJR33ybzotaEQbs+9ZW2vi0kdnOsMO6B15gDKSzFf6jE kLDce5E6ctuoiWi+Z/3+B1APy6vw2Sm1FcPqsKJ0VFZmu2DDzHH2ufgVXDI+0mlR q3kUZ6/tA81kLj29wpZxUmbLL1XfLuR1rMkMJ40TYlUahIfCnUwFXFI2RigoZwLx 0qU4EvEYPAB4fh13FbhiDofIJkYzihSO7aAnAao9kigAb3wpfauGteiZ/DMRAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUczW1qsLHQ02RZ3seJbdor6T4NAwwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MWE4NDdkLTI1MzEtNGQ3Zi05 MjQxLTk3Nzc4NTA2MDVkNi8wLzMxMzAzMzJlMzEzODMwMmUzNTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntDswDQYJKoZIhvcN AQELBQADggEBAElmouooJx0xkrptIjKzaDpCNbh/nRXLoq9DVO0cx/g9KNe5IcoJ 3qjtRIa6rWNGodnYjysdX+5QmjE4Mqx0exb3k5fR+CGS98B3Vz0x4Kb25Vlw/P1G YKQz/J1TMq+/abWxzUm3zgMvLsM3QmgOshUj8pDRn0k5uR00zgIxWFM7OlrM2rTC qoroN1k1K2vrbIOa6v8Q6G8Qe4qvSD886qoZ8csonK6uDnvuReibCyYew3cZXp40 QNwkzUcDc15lMzuTSCjK34YZzp1GbLhkur3TF24UDO4aEGrmD5OGafSojseqBVl3 lZRGiOq8E+RGYqJPjuogBHqdnQAkEUvhP1s= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:39 2025 by rpki-client