$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa File: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (raw, json) Hash identifier: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI= Subject key identifier: 7F:F0:E2:E8:67:BA:7B:75:A6:47:AA:DF:21:EA:6E:8C:F3:0A:E8:CB Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 0D21734D294FB19F1E50EAEF746D7B214D89F84E Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa Signing time: Fri 09 May 2025 08:00:00 +0000 ROA not before: Fri 09 May 2025 07:55:00 +0000 ROA not after: Fri 08 May 2026 08:00:00 +0000 asID: 141950 IP address blocks: 103.166.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 23:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:21:73:4d:29:4f:b1:9f:1e:50:ea:ef:74:6d:7b:21:4d:89:f8:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: May 9 07:55:00 2025 GMT Not After : May 8 08:00:00 2026 GMT Subject: CN=7FF0E2E867BA7B75A647AADF21EA6E8CF30AE8CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1e:25:4e:09:fe:67:c8:e6:b3:b2:ea:f2:3f: 45:eb:90:5b:fe:b9:d6:0e:82:47:73:0d:17:a0:7a: 65:a4:93:09:8c:8f:db:68:ea:68:0c:04:8a:5d:f6: 83:a2:8e:49:1a:5b:6f:28:24:b6:32:39:4a:6d:21: 7d:45:4e:30:e5:16:27:24:77:03:8c:f1:5c:ff:5e: 2a:bb:0e:41:e4:af:30:02:f2:c7:45:91:80:31:01: 4a:f4:7c:23:0b:49:af:74:bd:29:f3:0c:43:c9:b8: 3c:50:8c:c6:1e:a7:af:22:41:61:87:f6:4e:9c:82: 56:6a:a0:90:7c:e0:bd:11:b1:6e:95:ed:0f:fd:13: 06:2e:d3:89:40:a6:f1:d0:36:60:8c:46:9f:95:d3: 8c:a6:c6:dd:fa:ca:a3:66:a3:85:cf:e6:1b:20:c5: 0d:17:c6:91:49:85:49:a5:1f:9b:be:96:25:99:08: 70:0d:3a:30:28:6b:d2:a4:1f:ad:83:5a:a8:75:e3: 4b:ce:b1:11:a0:b4:ae:40:91:6f:13:e2:b3:92:66: 95:79:74:70:ba:53:b8:02:fe:c3:fe:12:2f:dc:44: 63:83:23:af:a5:78:11:17:e7:4b:9e:d5:15:ed:45: f1:58:56:47:29:5f:ae:f9:eb:2d:30:70:07:77:e2: 94:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F0:E2:E8:67:BA:7B:75:A6:47:AA:DF:21:EA:6E:8C:F3:0A:E8:CB X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.164.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c6:2c:3b:3f:40:a1:26:9e:fe:e6:9f:77:d7:bc:49:96:2b: cc:fb:b0:b3:2a:b4:2e:48:d5:b1:36:9d:31:a3:73:47:11:e7: f3:63:c3:b0:4f:de:bc:ec:64:10:1a:b4:68:dd:ca:f7:95:95: e5:ca:a1:a1:5d:96:aa:24:10:f9:13:c5:75:60:f5:97:9e:c6: 75:08:2f:12:6c:52:ab:f7:4f:07:81:25:95:de:27:1f:be:67: a6:86:12:e6:4f:0f:71:50:ac:bb:4b:80:6b:dd:d9:19:66:5e: 47:37:d8:bb:e1:f8:b3:7f:ef:cc:3d:43:b8:41:24:1c:f9:48: ea:14:43:b7:d3:91:f3:38:04:49:b9:be:65:6d:2f:87:7f:17: 68:48:ac:e4:94:8d:5f:6d:fa:6c:df:16:62:3f:e6:13:26:6b: 5b:02:75:fe:f1:be:f9:f3:c5:b7:b4:a6:5a:38:4b:22:f2:db: 44:bf:9e:6d:19:d2:ac:41:97:f1:52:21:3b:24:49:a4:87:b5: 75:ae:8f:40:d9:2b:37:1c:bd:d8:91:d0:01:d6:67:bb:61:88: 60:0f:a4:46:c3:94:b2:49:c7:62:05:5e:0c:63:a2:5f:4e:c9: b4:2e:7c:26:6f:29:ed:e1:42:60:05:e8:58:2f:1a:f0:d6:50: b3:c9:2d:e1 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUDSFzTSlPsZ8eUOrvdG17IU2J+E4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTA1MDkwNzU1MDBaFw0yNjA1MDgwODAwMDBaMDMxMTAvBgNV BAMTKDdGRjBFMkU4NjdCQTdCNzVBNjQ3QUFERjIxRUE2RThDRjMwQUU4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSHiVOCf5nyOazsuryP0XrkFv+ udYOgkdzDRegemWkkwmMj9to6mgMBIpd9oOijkkaW28oJLYyOUptIX1FTjDlFick dwOM8Vz/Xiq7DkHkrzAC8sdFkYAxAUr0fCMLSa90vSnzDEPJuDxQjMYep68iQWGH 9k6cglZqoJB84L0RsW6V7Q/9EwYu04lApvHQNmCMRp+V04ymxt36yqNmo4XP5hsg xQ0XxpFJhUmlH5u+liWZCHANOjAoa9KkH62DWqh140vOsRGgtK5AkW8T4rOSZpV5 dHC6U7gC/sP+Ei/cRGODI6+leBEX50ue1RXtRfFYVkcpX6756y0wcAd34pSTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUf/Di6Ge6e3WmR6rfIepujPMK6MswHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhOWI4MjJhLThiOTEtNDhkMi05 YmMxLWFlMGQ5MDBiZjljNy8wLzMxMzAzMzJlMzEzNjM2MmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTM1MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpqQwDQYJ KoZIhvcNAQELBQADggEBAE3GLDs/QKEmnv7mn3fXvEmWK8z7sLMqtC5I1bE2nTGj c0cR5/Njw7BP3rzsZBAatGjdyveVleXKoaFdlqokEPkTxXVg9ZeexnUILxJsUqv3 TweBJZXeJx++Z6aGEuZPD3FQrLtLgGvd2RlmXkc32Lvh+LN/78w9Q7hBJBz5SOoU Q7fTkfM4BEm5vmVtL4d/F2hIrOSUjV9t+mzfFmI/5hMma1sCdf7xvvnzxbe0plo4 SyLy20S/nm0Z0qxBl/FSITskSaSHtXWuj0DZKzccvdiR0AHWZ7thiGAPpEbDlLJJ x2IFXgxjol9OybQufCZvKe3hQmAF6FgvGvDWULPJLeE= -----END CERTIFICATE-----Generated at Sat Jun 7 21:15:00 2025 by rpki-client