$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa File: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (raw, json) Hash identifier: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng= Subject key identifier: 5F:8B:C6:D6:3F:55:FA:5B:9F:6A:B4:C0:C4:F5:16:DB:34:F5:63:80 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 231570278EB8A669B7B182E702677ECB73091D23 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa Signing time: Thu 10 Jul 2025 05:00:00 +0000 ROA not before: Thu 10 Jul 2025 04:55:00 +0000 ROA not after: Thu 09 Jul 2026 05:00:00 +0000 asID: 141606 IP address blocks: 103.160.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:15:70:27:8e:b8:a6:69:b7:b1:82:e7:02:67:7e:cb:73:09:1d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Jul 10 04:55:00 2025 GMT Not After : Jul 9 05:00:00 2026 GMT Subject: CN=5F8BC6D63F55FA5B9F6AB4C0C4F516DB34F56380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2a:d9:6b:ee:d6:a1:b7:22:a6:06:5f:aa:89: 5b:fe:be:50:0f:60:19:a2:a3:a3:ca:f2:50:ba:2e: f7:22:c9:5d:e0:49:2f:13:49:cf:b0:28:37:24:49: b1:a7:d6:2d:fc:4d:00:c0:a0:49:28:dc:12:10:bd: fb:7a:f1:ba:c0:ba:e5:2f:46:f9:66:a8:1e:e9:3d: 09:28:5d:15:4a:d9:82:71:ef:c1:67:84:5a:61:82: 16:40:4e:26:8d:a9:82:b4:90:e1:e2:d9:01:50:78: 18:97:ab:2f:d5:00:a4:38:09:d7:3c:0e:c5:f9:61: 8a:b0:6c:de:99:75:d5:33:c4:72:97:7a:db:3d:c6: bc:e3:4a:b3:0d:bd:fe:63:20:c7:f1:ba:eb:25:ea: ad:e2:b0:45:91:43:83:a9:2e:62:b0:4c:cb:ff:19: 41:9e:e8:a6:aa:50:a6:cb:7a:5a:f3:0b:16:38:ba: 11:ad:9e:b5:8d:20:27:11:8c:79:27:58:22:e4:48: 72:b9:0a:88:94:5c:32:ac:1f:e2:10:e7:a9:6d:a8: 0e:30:03:07:16:26:f5:d9:5a:4b:e1:39:4a:a2:14: ef:8d:49:56:30:27:31:a0:34:16:9a:2a:57:2f:c0: f9:03:3b:a5:cf:b1:63:5a:9c:f8:ff:e4:41:2c:24: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8B:C6:D6:3F:55:FA:5B:9F:6A:B4:C0:C4:F5:16:DB:34:F5:63:80 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.202.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c2:ac:10:82:dc:8b:d7:17:09:3e:d8:b9:9b:1c:4b:17:12: a9:7e:ec:6f:86:c0:39:12:25:97:ad:9e:ef:8a:f3:b0:d2:5c: 44:42:dd:33:7d:60:4b:7a:01:33:d1:d5:a7:8c:f8:5a:25:fc: 78:fb:f9:94:de:6e:93:a8:02:c9:81:0d:f9:1e:31:fe:62:a2: 10:3f:b8:c6:ff:bc:23:c3:6c:a7:16:56:3b:23:21:43:0c:35: 55:3f:aa:b5:4d:8d:ba:97:ec:81:81:e1:9f:d7:b7:59:4c:3c: 4e:0f:2e:c3:e1:f2:e4:91:d6:15:b0:21:d3:b1:1d:1f:49:f9: b8:2b:6a:94:ae:d6:1b:e4:41:03:af:98:63:2d:25:c4:6a:18: 78:44:26:be:ac:cb:9e:a3:da:d9:87:cc:3f:f2:7a:45:4a:ed: e5:44:f2:0d:4d:5b:b4:d6:19:2a:b4:b8:a7:db:65:0b:91:52: 44:46:49:64:f8:fa:cf:2b:38:83:fc:c8:b0:01:2e:19:43:84: d2:ce:8e:1c:d8:de:c8:52:0d:24:29:67:ed:11:bb:63:3f:83: 8d:b2:88:11:3c:e5:20:d5:23:3a:6b:87:3a:7d:60:fe:13:51: b1:86:c0:b4:de:73:08:71:15:a4:88:67:eb:ef:06:04:1a:fd: 6c:84:bc:27 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIxVwJ464pmm3sYLnAmd+y3MJHSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTA3MTAwNDU1MDBaFw0yNjA3MDkwNTAwMDBaMDMxMTAvBgNV BAMTKDVGOEJDNkQ2M0Y1NUZBNUI5RjZBQjRDMEM0RjUxNkRCMzRGNTYzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnKtlr7tahtyKmBl+qiVv+vlAP YBmio6PK8lC6LvciyV3gSS8TSc+wKDckSbGn1i38TQDAoEko3BIQvft68brAuuUv RvlmqB7pPQkoXRVK2YJx78FnhFphghZATiaNqYK0kOHi2QFQeBiXqy/VAKQ4Cdc8 DsX5YYqwbN6ZddUzxHKXets9xrzjSrMNvf5jIMfxuusl6q3isEWRQ4OpLmKwTMv/ GUGe6KaqUKbLelrzCxY4uhGtnrWNICcRjHknWCLkSHK5CoiUXDKsH+IQ56ltqA4w AwcWJvXZWkvhOUqiFO+NSVYwJzGgNBaaKlcvwPkDO6XPsWNanPj/5EEsJItdAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUX4vG1j9V+lufarTAxPUW2zT1Y4AwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNjRiZjZhLTQzMDItNDYwZi05 NjY5LTA5YTUwYTczYWYxYS8wLzMxMzAzMzJlMzEzNjMwMmUzMjMwMzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMwMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoMowDQYJ KoZIhvcNAQELBQADggEBAEHCrBCC3IvXFwk+2LmbHEsXEql+7G+GwDkSJZetnu+K 87DSXERC3TN9YEt6ATPR1aeM+Fol/Hj7+ZTebpOoAsmBDfkeMf5iohA/uMb/vCPD bKcWVjsjIUMMNVU/qrVNjbqX7IGB4Z/Xt1lMPE4PLsPh8uSR1hWwIdOxHR9J+bgr apSu1hvkQQOvmGMtJcRqGHhEJr6sy56j2tmHzD/yekVK7eVE8g1NW7TWGSq0uKfb ZQuRUkRGSWT4+s8rOIP8yLABLhlDhNLOjhzY3shSDSQpZ+0Ru2M/g42yiBE85SDV Izprhzp9YP4TUbGGwLTecwhxFaSIZ+vvBgQa/WyEvCc= -----END CERTIFICATE-----Generated at Wed Jul 23 12:00:34 2025 by rpki-client