$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 1gCaPTSU4uMwxSA/uOkRuR3dSYpFxu4jxXo8P8Xr4VU= Subject key identifier: 98:22:AF:B7:64:02:E6:47:9A:0C:42:FD:1A:BB:5B:4A:65:39:F3:44 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 2EB36D2ECA14DEEC3C46EE64EFA91A066E571B8F Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 12:00:04 +0000 ROA not before: Sun 13 Jul 2025 11:55:04 +0000 ROA not after: Sun 12 Jul 2026 12:00:04 +0000 asID: 63859 IP address blocks: 158.140.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b3:6d:2e:ca:14:de:ec:3c:46:ee:64:ef:a9:1a:06:6e:57:1b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Jul 13 11:55:04 2025 GMT Not After : Jul 12 12:00:04 2026 GMT Subject: CN=9822AFB76402E6479A0C42FD1ABB5B4A6539F344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e0:9b:59:b7:2b:4b:54:fd:ce:e8:bd:d6:1e: e8:f2:6e:d2:4d:d7:de:c4:12:83:fe:dd:94:9a:eb: 43:9f:c9:ea:61:81:d1:80:d5:33:5e:e7:8e:a6:9a: d7:da:9d:85:ad:40:8d:30:60:5b:2b:86:44:98:6a: 5a:04:6c:87:18:78:9b:49:d0:f8:d3:a0:74:3a:f6: 7a:45:69:68:13:bc:33:31:c9:94:25:50:a7:21:c6: ef:54:df:c2:f9:c9:47:e9:46:bb:cf:54:52:da:31: c9:c3:05:79:71:75:53:f3:e5:75:5b:2c:02:b0:5e: 94:d6:a9:1d:1f:29:62:0b:2e:53:ca:3c:aa:6d:39: c6:1f:52:ed:d7:91:72:da:66:c8:7c:9f:05:bb:5b: 00:d9:91:7b:be:ff:49:19:20:9d:7c:cf:c4:1f:2b: e8:ff:1f:a0:ef:c9:2b:80:f7:16:d8:c1:c0:ae:b3: 37:01:4c:74:7d:60:87:10:53:a8:ce:e3:d7:c6:08: f3:fc:ee:ed:85:23:37:77:2c:64:27:2d:38:10:47: c6:ea:ca:49:f3:49:92:75:ff:c2:49:2e:66:f3:2e: 1a:c9:c9:89:22:20:f9:d6:8a:8e:78:ce:56:5f:0b: 9b:c9:e3:6b:6e:0a:d8:36:74:e8:15:18:f0:28:40: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:22:AF:B7:64:02:E6:47:9A:0C:42:FD:1A:BB:5B:4A:65:39:F3:44 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137382e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.178.0/24 Signature Algorithm: sha256WithRSAEncryption 56:98:b3:f2:7f:57:65:fb:fb:3a:12:04:11:f6:a6:a0:61:99: 24:ae:60:53:0a:0b:08:54:67:96:05:de:ac:bf:46:c9:f2:cb: dd:c1:7b:c3:6a:3b:eb:18:4d:7a:74:ab:a0:d4:ca:62:bd:7e: 86:f9:e1:73:e8:20:63:d5:74:ad:40:d0:ad:67:6e:de:9c:fe: 77:b8:ef:5d:e1:98:29:4b:7e:1c:0e:bb:c9:0a:8f:4b:0f:33: 45:f0:be:1e:4d:c6:16:6a:b7:b3:21:c9:c7:80:0b:0e:d1:50: 9f:c1:21:30:4a:86:a7:8d:16:00:58:6c:c8:28:1d:cc:22:f5: 4e:46:44:f5:69:b5:1e:cf:5e:16:be:63:19:ae:dc:a2:72:3c: 20:05:bf:39:ca:a1:2e:1b:82:d6:53:ea:1c:8c:50:b3:db:c2: 6a:ca:80:96:85:b0:57:ba:4a:75:3e:bf:fd:29:d5:bf:e7:bb: dd:df:9e:70:95:90:b8:60:cf:52:a9:25:73:ec:46:9e:f0:81: 99:5e:f6:ac:78:8e:78:95:b3:67:5e:b2:cc:e3:0a:8e:ae:ef: f9:00:70:d4:17:de:92:67:ae:c9:f8:0a:85:07:62:c0:ce:c4: ac:2b:10:c9:d6:76:ff:76:ff:6d:73:e1:d5:4f:92:0f:df:8a: e4:b8:83:2a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULrNtLsoU3uw8Ru5k76kaBm5XG48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA3MTMxMTU1MDRaFw0yNjA3MTIxMjAwMDRaMDMxMTAvBgNV BAMTKDk4MjJBRkI3NjQwMkU2NDc5QTBDNDJGRDFBQkI1QjRBNjUzOUYzNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo4JtZtytLVP3O6L3WHujybtJN 197EEoP+3ZSa60OfyephgdGA1TNe546mmtfanYWtQI0wYFsrhkSYaloEbIcYeJtJ 0PjToHQ69npFaWgTvDMxyZQlUKchxu9U38L5yUfpRrvPVFLaMcnDBXlxdVPz5XVb LAKwXpTWqR0fKWILLlPKPKptOcYfUu3XkXLaZsh8nwW7WwDZkXu+/0kZIJ18z8Qf K+j/H6DvySuA9xbYwcCuszcBTHR9YIcQU6jO49fGCPP87u2FIzd3LGQnLTgQR8bq yknzSZJ1/8JJLmbzLhrJyYkiIPnWio54zlZfC5vJ42tuCtg2dOgVGPAoQJtHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUmCKvt2QC5keaDEL9GrtbSmU580QwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM3MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoyyMA0GCSqG SIb3DQEBCwUAA4IBAQBWmLPyf1dl+/s6EgQR9qagYZkkrmBTCgsIVGeWBd6sv0bJ 8svdwXvDajvrGE16dKug1MpivX6G+eFz6CBj1XStQNCtZ27enP53uO9d4ZgpS34c DrvJCo9LDzNF8L4eTcYWarezIcnHgAsO0VCfwSEwSoanjRYAWGzIKB3MIvVORkT1 abUez14WvmMZrtyicjwgBb85yqEuG4LWU+ocjFCz28JqyoCWhbBXukp1Pr/9KdW/ 57vd355wlZC4YM9SqSVz7Eae8IGZXvaseI54lbNnXrLM4wqOru/5AHDUF96SZ67J +AqFB2LAzsSsKxDJ1nb/dv9tc+HVT5IP34rkuIMq -----END CERTIFICATE-----Generated at Mon Jul 21 14:49:35 2025 by rpki-client