$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32342d3234203d3e20313432333935.roa File: 3130332e3137322e3131382e302f32342d3234203d3e20313432333935.roa (raw, json) Hash identifier: 0t0e2dlzNcSNOxgzqAzFKq2/WhHtKwH2MrCSPrjZMeQ= Subject key identifier: 35:AC:37:31:F3:D3:DF:0C:6E:72:80:50:E0:ED:38:64:D2:E8:9B:42 Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 4F62632E0DAB21FEA431BE9DA348055E247063C0 Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32342d3234203d3e20313432333935.roa Signing time: Thu 06 Mar 2025 11:29:22 +0000 ROA not before: Thu 06 Mar 2025 11:24:22 +0000 ROA not after: Thu 05 Mar 2026 11:29:22 +0000 asID: 142395 IP address blocks: 103.172.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 22:03:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:62:63:2e:0d:ab:21:fe:a4:31:be:9d:a3:48:05:5e:24:70:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Mar 6 11:24:22 2025 GMT Not After : Mar 5 11:29:22 2026 GMT Subject: CN=35AC3731F3D3DF0C6E728050E0ED3864D2E89B42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7e:88:f1:c6:32:df:e5:27:da:d0:b4:be:f7: 3c:bb:9e:25:82:0e:9f:b0:ee:8a:66:7f:62:b6:7a: 1f:c3:7d:b7:71:d6:85:63:1d:5a:b0:42:b0:5d:cc: 7f:53:bc:38:05:59:c8:11:fc:b6:44:d6:df:11:de: 0c:21:4c:d7:8e:b7:7d:6f:72:84:13:92:5d:79:d7: 2f:75:e3:50:7b:05:92:fd:84:0a:14:ea:5f:0c:6b: b0:d7:45:ef:e6:16:d9:8c:90:2b:64:71:ca:79:a3: 96:24:3a:85:cd:0a:04:6b:cf:90:22:b0:d6:61:22: ef:7f:bb:ab:54:e3:39:44:38:f4:40:5b:91:69:51: 77:97:ae:ca:df:7a:f2:74:03:f5:fe:b0:17:99:d1: 86:49:28:bf:b6:2e:5e:59:81:7a:66:6e:97:87:02: 35:2c:6e:2f:cb:e5:44:3e:c5:66:24:38:c9:ea:98: 43:30:b1:8f:1f:68:a9:fe:98:80:b1:5f:2b:54:90: a7:26:02:d4:68:82:07:e3:9c:15:41:ec:ca:46:44: 9f:fd:5a:3b:00:4d:80:e0:09:c2:7b:3e:6e:21:24: 76:6e:d2:67:ab:55:f7:30:93:77:bc:bf:8e:fa:c2: da:79:0d:16:25:d5:54:72:10:29:1a:77:a0:bf:1c: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:37:31:F3:D3:DF:0C:6E:72:80:50:E0:ED:38:64:D2:E8:9B:42 X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/3130332e3137322e3131382e302f32342d3234203d3e20313432333935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.118.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:26:b7:7c:85:ab:89:a6:76:17:ee:bb:8e:a2:7b:07:02:25: b4:1c:66:ee:50:da:49:3d:c1:43:32:79:2d:67:70:1c:24:d8: a4:b5:e2:0f:21:b8:03:99:ea:62:ef:37:5b:65:2a:fe:f3:55: 08:19:1c:80:57:9e:95:4a:5e:eb:c6:9c:df:fd:a9:dd:3f:8f: 31:1d:ce:e4:a1:4a:92:7d:01:fd:e2:3d:37:c5:57:c1:b1:57: 74:c3:e4:7e:a2:e0:2f:17:f8:fe:d3:56:4b:70:52:2f:e6:a4: 6a:91:12:8d:7e:cc:e9:40:d9:65:72:f3:42:80:5d:ff:45:ac: 05:7f:a3:e4:3f:b6:0b:43:4a:c4:ae:7c:51:7b:1a:73:ba:4d: fd:da:aa:85:13:c3:cc:3a:cd:d0:4b:16:06:21:e3:75:3f:ae: 66:0c:44:bf:3a:8a:a3:27:00:76:6e:89:96:f0:04:07:46:a6: 86:81:61:1d:cb:26:46:2d:6b:9c:bc:12:9a:9d:8e:b5:6d:32: 46:89:a6:6a:7c:68:1a:40:c7:ee:e5:4a:03:5b:ee:36:aa:7a: 65:8b:86:02:5f:33:b1:85:a2:a0:50:6d:d0:af:30:42:7a:b8: ac:30:05:fb:32:5a:13:63:8f:87:15:05:1d:16:0b:b3:e7:23: 51:df:39:ae -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUT2JjLg2rIf6kMb6do0gFXiRwY8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTAzMDYxMTI0MjJaFw0yNjAzMDUxMTI5MjJaMDMxMTAvBgNV BAMTKDM1QUMzNzMxRjNEM0RGMEM2RTcyODA1MEUwRUQzODY0RDJFODlCNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfojxxjLf5Sfa0LS+9zy7niWC Dp+w7opmf2K2eh/Dfbdx1oVjHVqwQrBdzH9TvDgFWcgR/LZE1t8R3gwhTNeOt31v coQTkl151y9141B7BZL9hAoU6l8Ma7DXRe/mFtmMkCtkccp5o5YkOoXNCgRrz5Ai sNZhIu9/u6tU4zlEOPRAW5FpUXeXrsrfevJ0A/X+sBeZ0YZJKL+2Ll5ZgXpmbpeH AjUsbi/L5UQ+xWYkOMnqmEMwsY8faKn+mICxXytUkKcmAtRoggfjnBVB7MpGRJ/9 WjsATYDgCcJ7Pm4hJHZu0merVfcwk3e8v476wtp5DRYl1VRyECkad6C/HP2NAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNaw3MfPT3wxucoBQ4O04ZNLom0IwHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNGU5N2QzLTcxYzMtNGQwYS04 YjA0LTcwODhmZTM4MmJjMy8wLzMxMzAzMzJlMzEzNzMyMmUzMTMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM5MzUucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrHYwDQYJ KoZIhvcNAQELBQADggEBAFwmt3yFq4mmdhfuu46iewcCJbQcZu5Q2kk9wUMyeS1n cBwk2KS14g8huAOZ6mLvN1tlKv7zVQgZHIBXnpVKXuvGnN/9qd0/jzEdzuShSpJ9 Af3iPTfFV8GxV3TD5H6i4C8X+P7TVktwUi/mpGqREo1+zOlA2WVy80KAXf9FrAV/ o+Q/tgtDSsSufFF7GnO6Tf3aqoUTw8w6zdBLFgYh43U/rmYMRL86iqMnAHZuiZbw BAdGpoaBYR3LJkYta5y8EpqdjrVtMkaJpmp8aBpAx+7lSgNb7jaqemWLhgJfM7GF oqBQbdCvMEJ6uKwwBfsyWhNjj4cVBR0WC7PnI1HfOa4= -----END CERTIFICATE-----Generated at Sun Apr 6 08:34:25 2025 by rpki-client