$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa File: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (raw, json) Hash identifier: mcmmT8pT8SsuE0p1UknEAcW7BeTtM+31BJ7lasnlFWU= Subject key identifier: D0:5A:3D:B0:28:CE:3B:15:BE:FB:48:AD:1B:80:4C:58:5D:6C:77:75 Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505 Certificate serial: 1F55483B84DC985EDF0753AFD82E17522932F6D3 Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa Signing time: Sat 08 Mar 2025 15:00:00 +0000 ROA not before: Sat 08 Mar 2025 14:55:00 +0000 ROA not after: Sat 07 Mar 2026 15:00:00 +0000 asID: 141984 IP address blocks: 103.167.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Mar 2025 01:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:55:48:3b:84:dc:98:5e:df:07:53:af:d8:2e:17:52:29:32:f6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505 Validity Not Before: Mar 8 14:55:00 2025 GMT Not After : Mar 7 15:00:00 2026 GMT Subject: CN=D05A3DB028CE3B15BEFB48AD1B804C585D6C7775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:86:8f:e9:51:aa:27:8a:d9:3c:e1:ae:f9: 28:ed:eb:cd:f9:7a:f3:b1:f3:71:a9:e7:53:85:8f: 72:7d:d5:1f:d4:b4:c1:18:ec:53:8d:14:a0:fc:d5: 46:59:d6:93:0e:fc:15:e0:01:c6:a5:05:df:47:17: 8a:9d:4f:8d:68:be:2b:fd:a2:09:db:78:1f:e8:b6: 1b:7f:ce:c7:1b:3f:aa:76:79:73:aa:30:d8:ba:07: b7:14:06:31:e4:9d:90:38:b2:17:01:e6:fd:d5:17: e3:63:eb:5c:e4:09:1e:90:01:09:8f:a3:f0:0a:ce: 71:d4:56:e6:f6:72:6c:71:a3:e0:16:90:aa:b6:81: ba:0e:1e:4b:0c:08:0b:8f:bc:a7:ed:ea:04:bd:27: 98:24:13:79:65:49:fa:65:5f:63:17:30:bf:61:b6: 60:74:45:9d:b0:4a:6f:84:d8:51:be:df:49:06:d5: 62:49:ff:23:9f:71:c4:4b:05:eb:34:b1:85:b5:14: 97:30:af:6b:b9:34:4c:ee:f1:ee:21:62:42:06:8e: 3e:b8:60:c3:f8:83:ea:50:d9:11:d2:1b:89:58:36: cb:c0:40:04:b2:96:43:fe:98:6c:98:75:a8:81:55: 1b:cd:86:2a:ee:89:cd:d8:e4:31:7e:2a:7d:5d:f2: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:3D:B0:28:CE:3B:15:BE:FB:48:AD:1B:80:4C:58:5D:6C:77:75 X509v3 Authority Key Identifier: keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.167.0/24 Signature Algorithm: sha256WithRSAEncryption 73:33:33:a8:8c:43:15:b1:b4:f8:f5:b1:e8:77:46:6d:34:a5: cf:80:79:7d:94:61:e7:3d:fa:de:93:e6:26:c6:35:c7:a7:74: 33:40:de:a5:4f:de:0a:ed:4f:a6:01:18:f0:57:14:7e:30:3b: aa:f7:0e:d6:f2:4d:39:cd:96:d9:18:aa:67:f8:8e:00:10:cc: d6:1f:ce:b8:80:44:b0:b7:cd:cd:10:ab:10:db:1e:4a:24:fa: 0f:46:d3:ad:14:e9:58:ca:a5:69:fb:13:01:52:89:e4:86:73: a4:e1:19:37:e9:82:60:9c:af:46:ae:c9:3d:d0:99:12:ac:4a: 13:ac:00:30:20:0b:6d:2f:98:4a:88:58:21:87:bf:16:52:e9: 60:9b:7a:63:54:13:91:32:30:a2:88:90:c7:47:ec:0b:22:8b: 05:c9:25:9c:88:cc:b6:f5:ac:ee:2f:16:b9:4a:da:45:b9:fa: 30:39:18:8e:0b:3d:c3:0d:f1:17:a9:0d:47:8f:0c:b2:db:5c: 55:f1:c8:c7:c5:be:82:92:16:ba:ed:9b:3e:55:c8:29:d3:b4: c7:d7:24:41:02:13:22:c0:f4:82:cc:79:8d:2e:9c:f6:17:1f: 51:42:f4:e0:e2:08:2c:83:49:24:89:c7:6c:79:a6:51:39:f2: 76:b0:a0:12 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUH1VIO4TcmF7fB1Ov2C4XUiky9tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVD MjdCODUwNTAeFw0yNTAzMDgxNDU1MDBaFw0yNjAzMDcxNTAwMDBaMDMxMTAvBgNV BAMTKEQwNUEzREIwMjhDRTNCMTVCRUZCNDhBRDFCODA0QzU4NUQ2Qzc3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4YaP6VGqJ4rZPOGu+Sjt6835 evOx83Gp51OFj3J91R/UtMEY7FONFKD81UZZ1pMO/BXgAcalBd9HF4qdT41oviv9 ognbeB/otht/zscbP6p2eXOqMNi6B7cUBjHknZA4shcB5v3VF+Nj61zkCR6QAQmP o/AKznHUVub2cmxxo+AWkKq2gboOHksMCAuPvKft6gS9J5gkE3llSfplX2MXML9h tmB0RZ2wSm+E2FG+30kG1WJJ/yOfccRLBes0sYW1FJcwr2u5NEzu8e4hYkIGjj64 YMP4g+pQ2RHSG4lYNsvAQASylkP+mGyYdaiBVRvNhiruic3Y5DF+Kn1d8r3BAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU0Fo9sCjOOxW++0itG4BMWF1sd3UwHwYDVR0j BBgwFoAUci/nljjm0U5HlIFRIiR8vsJ7hQUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTQwY2Y4MC05MzE1LTQyYzEtODQ0ZS1iYjAzNjIyYTA1YzEvMC83MjJGRTc5NjM4 RTZEMTRFNDc5NDgxNTEyMjI0N0NCRUMyN0I4NTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVDMjdC ODUwNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1NDBjZjgwLTkzMTUtNDJjMS04 NDRlLWJiMDM2MjJhMDVjMS8wLzMxMzAzMzJlMzEzNjM3MmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM4MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnp6cwDQYJ KoZIhvcNAQELBQADggEBAHMzM6iMQxWxtPj1seh3Rm00pc+AeX2UYec9+t6T5ibG NcendDNA3qVP3grtT6YBGPBXFH4wO6r3DtbyTTnNltkYqmf4jgAQzNYfzriARLC3 zc0QqxDbHkok+g9G060U6VjKpWn7EwFSieSGc6ThGTfpgmCcr0auyT3QmRKsShOs ADAgC20vmEqIWCGHvxZS6WCbemNUE5EyMKKIkMdH7AsiiwXJJZyIzLb1rO4vFrlK 2kW5+jA5GI4LPcMN8RepDUePDLLbXFXxyMfFvoKSFrrtmz5VyCnTtMfXJEECEyLA 9ILMeY0unPYXH1FC9ODiCCyDSSSJx2x5plE58nawoBI= -----END CERTIFICATE-----Generated at Tue Mar 11 05:05:01 2025 by rpki-client