$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa File: 3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa (raw, json) Hash identifier: zTY/Xpdv3MSQoDsOl/9obTqa4WAjpeiNnIpy7In5lOI= Subject key identifier: 39:57:6C:9F:3B:B0:48:13:20:9B:AC:1D:84:87:89:7C:D1:13:BD:FB Certificate issuer: /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Certificate serial: 7420F1580D1A4DC2C0647CF875EDFCC852B0312F Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa Signing time: Sun 27 Apr 2025 02:00:01 +0000 ROA not before: Sun 27 Apr 2025 01:55:01 +0000 ROA not after: Sun 26 Apr 2026 02:00:01 +0000 asID: 141913 IP address blocks: 103.164.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:20:f1:58:0d:1a:4d:c2:c0:64:7c:f8:75:ed:fc:c8:52:b0:31:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58 Validity Not Before: Apr 27 01:55:01 2025 GMT Not After : Apr 26 02:00:01 2026 GMT Subject: CN=39576C9F3BB04813209BAC1D8487897CD113BDFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:40:47:7f:9a:f9:31:f4:fa:53:6d:9c:e3: 00:c9:db:fa:19:9e:a1:bd:59:ca:20:08:6c:62:7c: ff:dc:90:53:bc:e3:eb:cc:d9:f0:1a:36:b3:70:06: e9:b4:f8:44:05:f9:fe:88:9d:bc:f4:06:39:fc:16: f6:eb:73:bf:b1:6f:90:b0:61:19:2b:57:d6:9e:d4: 70:36:c2:43:dc:79:b5:86:4a:97:2f:fc:77:ec:68: 91:dd:74:a2:fd:02:2b:59:ec:e8:73:b8:82:59:7f: 62:38:23:03:f2:d7:a8:4b:ff:e3:ca:1b:4f:34:ae: e1:58:dd:73:2a:b4:1d:c5:3a:11:e3:1e:44:6c:6a: f2:db:73:4d:1e:bc:ce:d8:74:07:a7:9e:87:43:a4: f4:75:a9:7a:30:45:78:03:13:19:28:26:ca:ae:c0: d2:c2:53:33:0f:10:b4:be:7e:d7:a5:fe:6f:d7:e1: 3c:1e:8b:9d:1c:26:6a:72:29:b9:37:1a:f6:8e:93: a1:13:53:d0:55:08:5a:6f:86:e8:7f:65:c2:73:d4: d7:3e:35:4f:43:c6:50:ab:14:de:7b:e7:b7:32:bb: ed:1c:45:2d:02:f1:6c:41:8f:d2:a2:5f:39:14:4e: 36:99:86:7c:e7:15:a2:1f:6f:81:ee:55:1c:f7:f1: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:57:6C:9F:3B:B0:48:13:20:9B:AC:1D:84:87:89:7C:D1:13:BD:FB X509v3 Authority Key Identifier: keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32342d3234203d3e20313431393133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.230.0/24 Signature Algorithm: sha256WithRSAEncryption 98:10:b8:c7:94:e1:f9:d6:31:ca:ad:4e:11:8d:78:5f:db:72: 4a:73:0e:e8:6e:b5:49:0e:68:21:25:c6:15:08:b6:18:b6:a5: ec:92:f6:4b:49:9f:a7:e7:ab:e5:15:46:12:fc:1c:d9:6f:f4: c6:41:79:88:b2:86:e7:61:c5:49:95:a6:63:bd:98:fe:76:3c: 33:1f:8c:16:c8:b7:59:19:00:5b:01:ef:54:92:cf:ba:1a:e9: 29:b5:ac:c0:3a:c1:b6:e3:39:2a:eb:19:a2:72:90:f7:c3:2c: e0:7d:a2:b2:71:6f:2f:28:e8:be:62:1a:27:af:e6:bb:8b:20: 58:19:bc:dc:3c:1a:d5:cc:19:a4:ba:27:fa:f9:84:e9:c0:cb: ac:0e:dd:4e:51:6c:ad:0e:02:16:55:f9:5a:25:7b:67:96:e3: b3:1d:60:28:12:04:96:6d:f2:9d:8b:dd:47:4c:d8:a0:e5:1f: f6:99:99:0a:7c:fb:1f:d8:41:84:8d:ee:74:1c:75:15:12:ad: a6:5b:94:5a:2a:d8:00:5e:42:1d:c8:6d:f5:63:93:17:08:b1: c8:f3:9e:1b:38:2b:25:4e:f3:4f:53:29:e0:cf:1c:dc:29:c4: 82:1d:97:98:f4:eb:16:dd:17:d8:32:37:ba:5f:31:cf:bc:3c: 56:ea:19:c0 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUdCDxWA0aTcLAZHz4de38yFKwMS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIz MzNFQkI1ODAeFw0yNTA0MjcwMTU1MDFaFw0yNjA0MjYwMjAwMDFaMDMxMTAvBgNV BAMTKDM5NTc2QzlGM0JCMDQ4MTMyMDlCQUMxRDg0ODc4OTdDRDExM0JERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnUBHf5r5MfT6U22c4wDJ2/oZ nqG9WcogCGxifP/ckFO84+vM2fAaNrNwBum0+EQF+f6Inbz0Bjn8Fvbrc7+xb5Cw YRkrV9ae1HA2wkPcebWGSpcv/HfsaJHddKL9AitZ7OhzuIJZf2I4IwPy16hL/+PK G080ruFY3XMqtB3FOhHjHkRsavLbc00evM7YdAennodDpPR1qXowRXgDExkoJsqu wNLCUzMPELS+ftel/m/X4Twei50cJmpyKbk3GvaOk6ETU9BVCFpvhuh/ZcJz1Nc+ NU9DxlCrFN5757cyu+0cRS0C8WxBj9KiXzkUTjaZhnznFaIfb4HuVRz38YebAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUOVdsnzuwSBMgm6wdhIeJfNETvfswHwYDVR0j BBgwFoAU5yMdGj4FG9kD24bX3gB3wjM+u1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTE3OTRhYS0zMjkxLTQ4M2ItYWMwYi03YmM3YjFhNjdjYzYvMC9FNzIzMUQxQTNF MDUxQkQ5MDNEQjg2RDdERTAwNzdDMjMzM0VCQjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcyMzFEMUEzRTA1MUJEOTAzREI4NkQ3REUwMDc3QzIzMzNF QkI1OC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhMTc5NGFhLTMyOTEtNDgzYi1h YzBiLTdiYzdiMWE2N2NjNi8wLzMxMzAzMzJlMzEzNjM0MmUzMjMzMzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMxMzMucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpOYwDQYJ KoZIhvcNAQELBQADggEBAJgQuMeU4fnWMcqtThGNeF/bckpzDuhutUkOaCElxhUI thi2peyS9ktJn6fnq+UVRhL8HNlv9MZBeYiyhudhxUmVpmO9mP52PDMfjBbIt1kZ AFsB71SSz7oa6Sm1rMA6wbbjOSrrGaJykPfDLOB9orJxby8o6L5iGiev5ruLIFgZ vNw8GtXMGaS6J/r5hOnAy6wO3U5RbK0OAhZV+Vole2eW47MdYCgSBJZt8p2L3UdM 2KDlH/aZmQp8+x/YQYSN7nQcdRUSraZblFoq2ABeQh3IbfVjkxcIscjznhs4KyVO 809TKeDPHNwpxIIdl5j06xbdF9gyN7pfMc+8PFbqGcA= -----END CERTIFICATE-----Generated at Mon May 12 14:36:38 2025 by rpki-client