$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa File: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (raw, json) Hash identifier: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU= Subject key identifier: 7A:EA:35:6F:DD:31:A4:89:9A:29:CB:33:63:38:AC:28:E4:ED:68:5B Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 6E9B51BCB841213D6076A795E1A485DCD709B68B Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa Signing time: Mon 03 Mar 2025 03:26:42 +0000 ROA not before: Mon 03 Mar 2025 03:21:42 +0000 ROA not after: Mon 02 Mar 2026 03:26:42 +0000 asID: 141606 IP address blocks: 103.160.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 23:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9b:51:bc:b8:41:21:3d:60:76:a7:95:e1:a4:85:dc:d7:09:b6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Mar 3 03:21:42 2025 GMT Not After : Mar 2 03:26:42 2026 GMT Subject: CN=7AEA356FDD31A4899A29CB336338AC28E4ED685B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:0d:3b:ba:65:5a:b1:74:59:52:6a:e8:67: af:c0:2d:0e:e3:97:a2:02:c0:a6:ff:0e:7e:d1:9d: d7:34:bf:fc:42:f6:9d:c7:eb:8c:b0:11:b9:8a:aa: cf:f2:c9:da:6a:72:3f:47:88:68:dd:a2:84:a9:56: 86:00:91:a4:77:cc:89:2e:09:42:d6:02:8b:7e:a5: a9:8e:30:38:cd:38:44:05:c6:82:47:1b:84:84:be: 17:b2:0c:9f:37:10:5a:93:24:83:75:db:a8:b3:fa: e5:df:e0:78:e3:21:15:8a:08:43:6a:1e:2a:3a:c7: 42:32:bd:9a:75:81:14:29:62:a2:af:4b:92:dc:23: 7d:95:e5:21:6d:92:ba:69:72:3d:66:58:a2:ae:55: 44:88:14:79:8a:5d:48:e1:6d:46:a4:dc:16:ee:c2: c2:b5:a7:06:98:74:e0:64:a8:66:9a:5a:30:e2:47: 61:f2:6d:17:de:48:9b:85:b4:a0:aa:c2:23:90:04: c8:1e:1c:59:33:94:28:fd:b9:4c:46:68:4c:11:df: a3:4f:69:75:78:18:9b:86:75:17:52:5f:6f:e0:6e: 1a:a6:11:8d:7f:9e:ad:e0:c9:75:11:c5:ef:a3:66: 41:eb:cc:dc:9a:35:56:34:38:6c:85:d1:5e:1f:1e: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EA:35:6F:DD:31:A4:89:9A:29:CB:33:63:38:AC:28:E4:ED:68:5B X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.202.0/23 Signature Algorithm: sha256WithRSAEncryption e5:78:86:5e:2a:be:03:4d:b0:77:40:13:dc:67:07:e1:a6:b5: 50:ab:5b:ae:e4:b5:9f:97:44:5c:6e:4a:fd:fb:32:e9:63:2f: c2:21:85:2f:00:90:58:50:4e:3b:34:c8:cf:8e:60:39:c9:90: cb:2b:66:0d:61:23:9c:6a:f6:e7:4b:16:1f:5d:3e:d9:d0:58: ab:d5:9c:e7:a0:7d:6c:78:c8:40:d6:20:90:22:6f:21:ea:06: 7e:0d:68:0e:33:cb:63:3d:1c:7d:79:e3:5e:3a:a4:76:f7:f9: 26:9c:30:63:29:56:ab:41:d8:58:3a:44:22:93:41:2e:41:43: 94:e9:3e:9d:85:18:14:c3:a6:23:7f:cf:85:5e:20:dc:75:5d: 57:83:0e:f2:87:86:a1:76:89:26:1b:f3:12:19:0f:97:3e:45: 57:fa:47:f2:a1:2d:12:c2:37:77:1b:1a:e4:d7:65:c1:f8:5e: 40:cd:f6:9f:00:06:62:f0:2c:b7:90:2a:d5:c7:c1:ec:43:94: 70:cb:3b:9c:79:c5:a8:ba:e7:e8:58:d3:0d:cd:ca:bb:35:e8: 11:7c:b6:b2:23:20:4a:f4:7e:94:62:0f:1d:fe:cf:4d:98:e4: 22:64:71:fd:d8:b7:61:0d:37:f6:3c:cb:3c:cd:5d:79:96:df: 40:2c:5a:c7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUbptRvLhBIT1gdqeV4aSF3NcJtoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTAzMDMwMzIxNDJaFw0yNjAzMDIwMzI2NDJaMDMxMTAvBgNV BAMTKDdBRUEzNTZGREQzMUE0ODk5QTI5Q0IzMzYzMzhBQzI4RTRFRDY4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOg07umVasXRZUmroZ6/ALQ7j l6ICwKb/Dn7Rndc0v/xC9p3H64ywEbmKqs/yydpqcj9HiGjdooSpVoYAkaR3zIku CULWAot+pamOMDjNOEQFxoJHG4SEvheyDJ83EFqTJIN126iz+uXf4HjjIRWKCENq Hio6x0IyvZp1gRQpYqKvS5LcI32V5SFtkrppcj1mWKKuVUSIFHmKXUjhbUak3Bbu wsK1pwaYdOBkqGaaWjDiR2HybRfeSJuFtKCqwiOQBMgeHFkzlCj9uUxGaEwR36NP aXV4GJuGdRdSX2/gbhqmEY1/nq3gyXURxe+jZkHrzNyaNVY0OGyF0V4fHp/VAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUeuo1b90xpImaKcszYzisKOTtaFswHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNjRiZjZhLTQzMDItNDYwZi05 NjY5LTA5YTUwYTczYWYxYS8wLzMxMzAzMzJlMzEzNjMwMmUzMjMwMzIyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzNjMwMzYucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnoMowDQYJ KoZIhvcNAQELBQADggEBAOV4hl4qvgNNsHdAE9xnB+GmtVCrW67ktZ+XRFxuSv37 MuljL8IhhS8AkFhQTjs0yM+OYDnJkMsrZg1hI5xq9udLFh9dPtnQWKvVnOegfWx4 yEDWIJAibyHqBn4NaA4zy2M9HH154146pHb3+SacMGMpVqtB2Fg6RCKTQS5BQ5Tp Pp2FGBTDpiN/z4VeINx1XVeDDvKHhqF2iSYb8xIZD5c+RVf6R/KhLRLCN3cbGuTX ZcH4XkDN9p8ABmLwLLeQKtXHwexDlHDLO5x5xai65+hY0w3Nyrs16BF8trIjIEr0 fpRiDx3+z02Y5CJkcf3Yt2ENN/Y8yzzNXXmW30AsWsc= -----END CERTIFICATE-----Generated at Sun Apr 6 22:58:04 2025 by rpki-client