$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: cf/fTFw9S140tFJspWZGF8ccTxSOEBwN/v9Xi+qLWYQ= Subject key identifier: B6:F1:6B:4B:E0:D1:2B:EB:9A:EC:FC:DC:24:4D:B5:98:EB:54:61:2E Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 7748F64E2916ECABD6DE96B5DB2CD862A7358152 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 12:00:06 +0000 ROA not before: Sun 13 Jul 2025 11:55:06 +0000 ROA not after: Sun 12 Jul 2026 12:00:06 +0000 asID: 63859 IP address blocks: 158.140.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:48:f6:4e:29:16:ec:ab:d6:de:96:b5:db:2c:d8:62:a7:35:81:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Jul 13 11:55:06 2025 GMT Not After : Jul 12 12:00:06 2026 GMT Subject: CN=B6F16B4BE0D12BEB9AECFCDC244DB598EB54612E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:2e:15:f9:31:10:fd:06:5c:0c:31:e7:cc: 27:85:f3:24:e1:f0:a6:0b:f2:91:f4:1e:de:20:32: 48:39:6c:bb:1a:62:c3:7c:d1:0e:8d:3f:b8:94:0e: 93:67:95:2e:fc:f7:32:41:fe:85:75:ce:91:28:51: 85:ea:03:80:f1:01:d9:64:a7:d3:85:b2:65:e9:19: 5f:8c:3e:68:bd:79:df:9e:be:d4:c5:d5:47:c8:92: dc:8c:f4:e8:c6:bb:b4:9f:bc:eb:1a:7b:dd:7b:68: 18:96:40:f8:8d:35:c5:84:43:3a:cd:64:70:1a:ee: 55:0a:64:d5:9f:a4:88:78:5d:5c:fd:af:6c:6b:4c: 44:07:24:4c:46:3d:6f:23:25:eb:ae:f9:a8:df:d7: 4e:4b:05:7a:18:36:48:2a:1c:d5:16:fa:c5:a2:8e: 25:56:71:f7:61:02:f3:9b:f3:9b:91:6b:b8:1d:3f: 0e:3c:82:25:20:36:58:ab:f0:87:cb:7c:22:2b:78: 6e:e8:63:94:cd:76:4c:68:05:6c:e7:0f:c4:9d:e1: 47:79:a0:6f:68:ec:cc:4c:36:00:03:7f:7d:04:c0: 44:1f:b7:20:fe:5c:3c:c7:e0:9d:e3:7d:f0:ea:b7: 46:27:48:97:e1:c1:20:19:f9:f1:c0:48:0e:e7:42: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F1:6B:4B:E0:D1:2B:EB:9A:EC:FC:DC:24:4D:B5:98:EB:54:61:2E X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136322e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.162.0/24 Signature Algorithm: sha256WithRSAEncryption 66:1c:45:05:9d:4c:e2:83:3b:1c:83:df:cf:09:18:da:8f:55: 2b:cc:65:42:ed:95:72:11:d1:a0:50:7b:53:ca:95:fc:83:e9: e3:3e:28:85:fd:fc:b7:2c:0e:c6:ac:2d:fe:0f:c2:b0:b4:e9: 42:db:39:9f:ad:cf:df:70:f0:c9:97:81:52:b3:fa:b4:b0:47: 38:34:96:ed:6e:df:34:0e:d9:cc:e7:7a:8b:3c:0b:7d:01:bf: 69:1d:ac:38:fe:f0:58:d5:44:6c:ff:1b:42:4a:4b:70:48:f2: 5f:22:e8:a0:bd:7d:14:97:ec:00:7b:42:b8:cd:b1:a5:83:71: 32:39:52:15:e8:a6:f8:ca:05:2b:07:52:93:13:c6:8c:1a:8f: da:76:68:50:cf:f9:37:22:95:62:6e:3d:b6:50:a4:ad:7c:8a: 33:f6:05:e2:f2:73:94:94:3f:8a:74:11:9e:b2:16:f0:33:83: e4:4f:97:7a:fa:64:91:4b:1b:04:22:f7:32:41:31:a8:1f:2b: 4f:c5:8e:80:52:22:b1:7c:03:33:d3:f1:99:ad:ed:c0:00:ca: d5:ee:e6:29:e0:b0:cc:86:45:fa:82:94:0a:5d:8f:c3:af:99: ee:04:34:65:fe:48:c2:25:b6:f8:e9:15:b5:c7:f5:1b:f9:72: 80:a4:60:a6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUd0j2TikW7KvW3pa12yzYYqc1gVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA3MTMxMTU1MDZaFw0yNjA3MTIxMjAwMDZaMDMxMTAvBgNV BAMTKEI2RjE2QjRCRTBEMTJCRUI5QUVDRkNEQzI0NERCNTk4RUI1NDYxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv1i4V+TEQ/QZcDDHnzCeF8yTh 8KYL8pH0Ht4gMkg5bLsaYsN80Q6NP7iUDpNnlS789zJB/oV1zpEoUYXqA4DxAdlk p9OFsmXpGV+MPmi9ed+evtTF1UfIktyM9OjGu7SfvOsae917aBiWQPiNNcWEQzrN ZHAa7lUKZNWfpIh4XVz9r2xrTEQHJExGPW8jJeuu+ajf105LBXoYNkgqHNUW+sWi jiVWcfdhAvOb85uRa7gdPw48giUgNlir8IfLfCIreG7oY5TNdkxoBWznD8Sd4Ud5 oG9o7MxMNgADf30EwEQftyD+XDzH4J3jffDqt0YnSJfhwSAZ+fHASA7nQgNJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtvFrS+DRK+ua7PzcJE21mOtUYS4wHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM2MzIyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoyiMA0GCSqG SIb3DQEBCwUAA4IBAQBmHEUFnUzigzscg9/PCRjaj1UrzGVC7ZVyEdGgUHtTypX8 g+njPiiF/fy3LA7GrC3+D8KwtOlC2zmfrc/fcPDJl4FSs/q0sEc4NJbtbt80DtnM 53qLPAt9Ab9pHaw4/vBY1URs/xtCSktwSPJfIuigvX0Ul+wAe0K4zbGlg3EyOVIV 6Kb4ygUrB1KTE8aMGo/admhQz/k3IpVibj22UKStfIoz9gXi8nOUlD+KdBGeshbw M4PkT5d6+mSRSxsEIvcyQTGoHytPxY6AUiKxfAMz0/GZre3AAMrV7uYp4LDMhkX6 gpQKXY/Dr5nuBDRl/kjCJbb46RW1x/Ub+XKApGCm -----END CERTIFICATE-----Generated at Mon Jul 21 14:45:08 2025 by rpki-client