$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa File: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo= Subject key identifier: A3:F2:3C:1F:4C:96:64:68:73:1E:0E:0F:DE:95:08:05:E2:A1:D3:0D Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 3B308300248BB59375FA8266DE38A8B9A2EB5E6A Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa Signing time: Thu 05 Jun 2025 07:00:00 +0000 ROA not before: Thu 05 Jun 2025 06:55:00 +0000 ROA not after: Thu 04 Jun 2026 07:00:00 +0000 asID: 9341 IP address blocks: 103.179.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:30:83:00:24:8b:b5:93:75:fa:82:66:de:38:a8:b9:a2:eb:5e:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Jun 5 06:55:00 2025 GMT Not After : Jun 4 07:00:00 2026 GMT Subject: CN=A3F23C1F4C966468731E0E0FDE950805E2A1D30D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:16:6b:aa:70:89:ed:25:6a:3d:38:52:5d: 67:f2:b7:c0:29:94:b6:da:22:7a:22:68:d9:28:6b: 57:59:7e:55:ba:3c:8e:a3:a5:4b:4e:d9:55:25:b4: b6:65:0c:8d:ee:1b:c5:f6:36:f4:ac:9d:b8:dc:43: 54:0a:92:01:56:91:37:54:55:f2:5c:42:ad:d0:7e: c8:75:2c:24:8c:ce:b5:29:86:a1:13:ef:4c:73:36: b8:34:ad:ba:38:1c:ed:12:dc:99:3c:ac:9d:89:fe: af:0d:3c:2b:73:5b:d2:57:77:e5:23:6b:b6:e3:a0: 92:03:9b:fd:eb:ad:3f:70:0d:46:d7:ce:3f:aa:f2: ca:15:40:25:1e:31:e7:ec:93:3f:79:f7:85:3d:97: f1:16:85:b7:dd:45:3f:4a:07:63:2a:88:80:34:98: ff:7a:47:0c:a3:40:bf:af:10:d5:9d:3c:30:53:6b: f3:56:b4:cc:24:dc:5e:0e:90:bd:ad:4e:bf:b4:45: 12:7f:db:f0:f4:7c:e4:11:13:61:d6:a1:cf:3c:4a: 55:09:ce:33:15:94:c9:ac:32:f2:71:ac:56:51:be: 23:d9:4c:cc:bc:f1:ab:89:34:8e:95:ce:4b:5d:84: 77:36:09:75:22:85:0a:50:f2:98:97:89:44:8f:80: 61:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F2:3C:1F:4C:96:64:68:73:1E:0E:0F:DE:95:08:05:E2:A1:D3:0D X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.73.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:eb:49:f3:d2:41:06:45:53:9f:54:fa:dd:31:c6:0d:f9:d8: 9b:a5:d2:77:78:05:17:88:80:aa:58:9d:8a:d8:fd:e4:a5:21: 5e:89:fe:cc:84:66:51:6c:29:83:ce:7e:2b:70:50:8c:2d:58: 8c:b0:ef:c0:3d:10:ac:fd:09:94:35:d0:28:80:b7:c7:10:24: 17:75:e8:0f:19:1d:36:45:a9:b3:e7:8d:2d:9b:b9:eb:af:ed: 35:98:2e:b3:1f:34:48:e2:a3:37:6b:7a:02:72:60:65:e6:d0: fb:1c:46:34:a3:35:41:fa:65:78:63:09:21:f8:56:3f:ee:df: 56:49:b0:f9:73:5b:9c:29:81:ff:a5:ee:59:47:65:29:31:64: cd:28:3c:dc:f4:b8:f8:eb:26:4d:51:c9:8a:48:ff:23:79:27: 5c:83:77:27:63:e3:22:7c:e5:1c:b1:25:26:72:c9:93:02:77: dc:fc:05:b5:61:dd:77:92:f8:7c:86:e2:4f:48:39:cc:6b:95: 65:31:3a:a3:29:d6:73:0a:cc:bc:11:f5:48:93:2e:18:02:2e: 01:e4:bf:cf:a3:e4:5e:72:9d:5b:1d:5a:4b:db:69:2e:72:75: 08:8d:1a:04:61:d7:22:a8:d1:09:68:a2:17:37:07:7a:5b:bc: eb:50:21:57 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUOzCDACSLtZN1+oJm3jiouaLrXmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTA2MDUwNjU1MDBaFw0yNjA2MDQwNzAwMDBaMDMxMTAvBgNV BAMTKEEzRjIzQzFGNEM5NjY0Njg3MzFFMEUwRkRFOTUwODA1RTJBMUQzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3xZrqnCJ7SVqPThSXWfyt8Ap lLbaInoiaNkoa1dZflW6PI6jpUtO2VUltLZlDI3uG8X2NvSsnbjcQ1QKkgFWkTdU VfJcQq3Qfsh1LCSMzrUphqET70xzNrg0rbo4HO0S3Jk8rJ2J/q8NPCtzW9JXd+Uj a7bjoJIDm/3rrT9wDUbXzj+q8soVQCUeMefskz9594U9l/EWhbfdRT9KB2MqiIA0 mP96RwyjQL+vENWdPDBTa/NWtMwk3F4OkL2tTr+0RRJ/2/D0fOQRE2HWoc88SlUJ zjMVlMmsMvJxrFZRviPZTMy88auJNI6VzktdhHc2CXUihQpQ8piXiUSPgGFrAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUo/I8H0yWZGhzHg4P3pUIBeKh0w0wHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxYWI4YTU4LWYxM2YtNGY3MS05 ZGRlLWFlZDU3ZWE2ZGNhNy8wLzMxMzAzMzJlMzEzNzM5MmUzNzMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABns0kwDQYJKoZIhvcN AQELBQADggEBAArrSfPSQQZFU59U+t0xxg352Jul0nd4BReIgKpYnYrY/eSlIV6J /syEZlFsKYPOfitwUIwtWIyw78A9EKz9CZQ10CiAt8cQJBd16A8ZHTZFqbPnjS2b ueuv7TWYLrMfNEjiozdregJyYGXm0PscRjSjNUH6ZXhjCSH4Vj/u31ZJsPlzW5wp gf+l7llHZSkxZM0oPNz0uPjrJk1RyYpI/yN5J1yDdydj4yJ85RyxJSZyyZMCd9z8 BbVh3XeS+HyG4k9IOcxrlWUxOqMp1nMKzLwR9UiTLhgCLgHkv8+j5F5ynVsdWkvb aS5ydQiNGgRh1yKo0Qloohc3B3pbvOtQIVc= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:46 2025 by rpki-client