$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa File: 3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa (raw, json) Hash identifier: f25oJq4Qxw4DkfsL02CwlrR3sXxxJT8C5cal6l3FJqI= Subject key identifier: 97:F3:3A:EE:A5:87:4E:7A:CB:54:EE:81:A8:E1:92:1B:78:D3:EA:C7 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 53B30ADF343DC5122A0863DEAA8260FAFC37DDAD Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa Signing time: Fri 26 Sep 2025 06:02:25 +0000 ROA not before: Fri 26 Sep 2025 05:57:25 +0000 ROA not after: Fri 25 Sep 2026 06:02:25 +0000 asID: 63859 IP address blocks: 158.140.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 18:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b3:0a:df:34:3d:c5:12:2a:08:63:de:aa:82:60:fa:fc:37:dd:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Sep 26 05:57:25 2025 GMT Not After : Sep 25 06:02:25 2026 GMT Subject: CN=97F33AEEA5874E7ACB54EE81A8E1921B78D3EAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:40:4a:f9:81:b6:78:08:97:2b:ae:07:f1:86: 76:e7:c6:3f:31:6f:ca:40:9b:fd:29:85:ad:01:58: 13:58:a5:84:0e:73:5d:2b:83:6f:77:9c:42:24:ca: 06:05:84:2c:d1:d0:61:8d:b9:67:6d:f0:e3:38:2e: 74:d7:65:10:fe:a0:f1:c1:1c:43:45:55:21:32:e7: ca:d5:bf:de:9f:dc:92:73:d5:2b:22:33:c1:ed:c4: 76:4b:dd:69:3d:5e:1e:31:29:ad:8f:16:99:a1:b7: 64:71:5b:4a:96:26:89:2d:a6:d5:8e:8f:4c:79:61: 5e:b4:d9:c6:62:37:5f:f5:c4:3f:1a:f5:74:9e:16: d4:65:a3:ee:a7:ae:63:79:11:7c:cb:85:7c:61:d6: be:12:4c:2e:ad:ef:dc:dc:71:0e:3b:d1:62:c8:fe: 02:39:cf:19:be:30:ce:ec:6e:ed:06:b7:4a:af:4d: a5:36:b7:80:70:b8:25:53:b6:d3:f2:23:56:06:11: 75:67:a2:b6:6b:26:e7:ae:b4:2a:35:cb:a5:4c:d0: 2c:68:e4:ae:2b:90:c9:d7:31:2b:bc:d8:48:b8:79: 50:29:5b:35:a5:7d:c3:ae:ea:3c:b4:ab:74:d0:52: 0c:84:1a:77:3f:2e:38:04:6a:fe:5d:89:8e:00:b6: 36:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F3:3A:EE:A5:87:4E:7A:CB:54:EE:81:A8:E1:92:1B:78:D3:EA:C7 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.184.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:95:7f:34:8e:8c:0c:61:12:db:cf:28:58:70:36:84:2e:68: a7:77:fd:43:4d:28:b4:dd:0c:3e:29:a9:c1:3e:f8:b7:3a:8f: 32:8d:98:ff:fe:c5:9b:15:11:22:2d:d7:1f:ff:66:cd:d2:27: 03:1f:0e:96:f5:92:a2:82:40:aa:5c:bc:42:58:5e:c5:98:63: a5:d8:49:e1:c5:0b:1c:94:f9:e0:53:e9:fd:b6:14:dd:b8:c8: 2b:d8:94:a0:6c:34:88:fc:83:73:cf:6b:37:0a:f4:37:64:c9: d7:66:6e:c1:0d:eb:0b:7a:00:b1:93:f4:af:a4:cd:08:07:00: 3f:31:8a:da:01:0b:21:4f:ff:56:7c:9f:19:89:e0:a7:9d:f3: 34:8a:87:c5:fd:bd:ba:2f:67:35:80:e4:6f:6f:90:ae:21:e0: af:7b:c4:7e:dd:ce:0e:5b:c8:20:25:46:f5:e6:cf:29:40:98: 87:7e:cb:55:5f:de:b6:e8:80:9e:b1:82:6c:42:70:fc:19:42: 70:c1:35:04:02:f7:82:c2:51:1b:7a:48:fe:16:b5:e9:ea:52: 23:fc:8f:18:5c:2e:d5:ae:41:d1:3a:55:70:92:98:0b:0c:e5: a1:ef:dc:ba:e6:53:17:fa:22:b1:26:a6:27:5b:e9:99:a6:36: 67:eb:9e:eb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUU7MK3zQ9xRIqCGPeqoJg+vw33a0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA5MjYwNTU3MjVaFw0yNjA5MjUwNjAyMjVaMDMxMTAvBgNV BAMTKDk3RjMzQUVFQTU4NzRFN0FDQjU0RUU4MUE4RTE5MjFCNzhEM0VBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQEr5gbZ4CJcrrgfxhnbnxj8x b8pAm/0pha0BWBNYpYQOc10rg293nEIkygYFhCzR0GGNuWdt8OM4LnTXZRD+oPHB HENFVSEy58rVv96f3JJz1SsiM8HtxHZL3Wk9Xh4xKa2PFpmht2RxW0qWJoktptWO j0x5YV602cZiN1/1xD8a9XSeFtRlo+6nrmN5EXzLhXxh1r4STC6t79zccQ470WLI /gI5zxm+MM7sbu0Gt0qvTaU2t4BwuCVTttPyI1YGEXVnorZrJueutCo1y6VM0Cxo 5K4rkMnXMSu82Ei4eVApWzWlfcOu6jy0q3TQUgyEGnc/LjgEav5diY4AtjbhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUl/M67qWHTnrLVO6BqOGSG3jT6scwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM4MzQyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnoy4MA0GCSqG SIb3DQEBCwUAA4IBAQB+lX80jowMYRLbzyhYcDaELmind/1DTSi03Qw+KanBPvi3 Oo8yjZj//sWbFREiLdcf/2bN0icDHw6W9ZKigkCqXLxCWF7FmGOl2EnhxQsclPng U+n9thTduMgr2JSgbDSI/INzz2s3CvQ3ZMnXZm7BDesLegCxk/SvpM0IBwA/MYra AQshT/9WfJ8ZieCnnfM0iofF/b26L2c1gORvb5CuIeCve8R+3c4OW8ggJUb15s8p QJiHfstVX9626ICesYJsQnD8GUJwwTUEAveCwlEbekj+FrXp6lIj/I8YXC7VrkHR OlVwkpgLDOWh79y65lMX+iKxJqYnW+mZpjZn657r -----END CERTIFICATE-----Generated at Sun Oct 26 22:57:12 2025 by rpki-client