$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3139312e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3139312e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: W1Aw/14l5pHBhiIa2w81POb32xWiuLEisZ/sQcORxUM= Subject key identifier: CA:E7:55:98:4A:DE:E1:ED:9C:62:6B:B4:85:5B:5D:86:9D:B5:93:33 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 6222A6F536B1CE3A674FA2DD98D0CAC0D9A03180 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3139312e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 12:00:02 +0000 ROA not before: Sun 13 Jul 2025 11:55:02 +0000 ROA not after: Sun 12 Jul 2026 12:00:02 +0000 asID: 63859 IP address blocks: 158.140.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 18:41:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:22:a6:f5:36:b1:ce:3a:67:4f:a2:dd:98:d0:ca:c0:d9:a0:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Jul 13 11:55:02 2025 GMT Not After : Jul 12 12:00:02 2026 GMT Subject: CN=CAE755984ADEE1ED9C626BB4855B5D869DB59333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1b:91:dd:94:ad:76:9b:fc:59:34:98:5e:01: 99:5d:eb:50:bd:30:85:c4:86:1f:50:6d:6b:8e:b9: 83:ae:a2:e7:35:4a:55:c0:9d:02:c7:b5:67:03:4a: d4:20:48:6d:b6:4b:d5:a8:d5:78:c3:44:1b:eb:57: 71:2d:03:87:28:5f:d4:5e:69:b3:34:52:4d:6d:6c: e9:5d:69:31:62:d9:9a:8f:cf:ad:67:e2:55:d2:87: 3d:df:cb:64:4e:64:c7:ed:cc:d6:6d:5e:6d:3f:c1: 5f:9b:0d:95:02:18:5f:e2:4e:41:52:a9:9c:ce:ed: cf:26:f6:83:73:52:f2:04:70:fa:37:c8:94:56:2c: fe:c4:64:15:5a:f6:02:3f:33:7e:52:ed:1a:52:e0: d1:56:a5:5f:98:8b:96:77:a0:b7:a3:b8:da:2e:48: 37:85:e4:8d:15:95:c2:b1:5e:3a:ec:e9:78:ef:db: 71:e0:ff:09:62:48:28:9a:07:7b:c7:d4:a8:5e:33: 5f:72:2d:9a:8c:e3:2a:7e:ba:cd:42:ee:10:1f:ba: 20:db:e4:20:9a:10:49:67:85:b7:bc:48:ca:02:62: 8a:0d:db:7b:23:34:94:4b:1b:c1:77:13:41:74:81: f6:85:10:fa:6d:b9:5c:96:8a:1a:45:9a:e0:02:8f: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:55:98:4A:DE:E1:ED:9C:62:6B:B4:85:5B:5D:86:9D:B5:93:33 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3139312e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.191.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:e0:df:44:cc:98:51:aa:c4:4d:f5:98:34:93:f6:fb:0b:9c: 48:d3:8d:17:44:e4:ee:0c:82:98:e2:31:7f:d8:af:a9:ec:92: 03:31:8d:f7:5a:e0:15:75:3a:9f:40:de:ff:09:99:f7:5e:03: d6:5d:10:69:ba:7b:e7:62:16:ab:68:21:9e:55:14:d2:61:26: 14:60:b8:2e:ab:1b:7f:42:cb:9f:4e:7d:b4:f4:04:4d:0a:e7: f9:e0:0c:5c:7e:c3:d2:36:d6:be:8d:56:f8:5c:2a:80:aa:1b: ee:4f:2a:69:a4:ee:eb:03:b8:a9:8a:d8:26:ab:92:bf:1b:b7: 0a:24:f5:7b:d8:bf:34:46:7c:98:49:34:63:93:ba:26:54:7c: 15:3f:0b:db:d6:29:c5:75:75:40:14:9a:56:ea:0b:98:70:ca: 65:50:f9:cb:77:e0:26:61:e9:3f:6d:b6:0a:08:af:d6:3a:4e: b8:9e:5b:34:5d:27:c2:a7:af:e7:73:1e:09:89:d2:0a:a4:37: ba:66:aa:f9:37:a3:ec:05:38:bf:be:c8:5b:06:4d:c8:df:78: 41:a7:bb:7f:42:ff:ff:58:da:97:4b:e8:55:8c:5e:cd:d0:cd: 23:aa:e5:0e:7c:44:80:05:e2:4f:af:0a:d0:a7:35:9d:db:7e: 53:95:04:cd -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYiKm9TaxzjpnT6LdmNDKwNmgMYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA3MTMxMTU1MDJaFw0yNjA3MTIxMjAwMDJaMDMxMTAvBgNV BAMTKENBRTc1NTk4NEFERUUxRUQ5QzYyNkJCNDg1NUI1RDg2OURCNTkzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaG5HdlK12m/xZNJheAZld61C9 MIXEhh9QbWuOuYOuouc1SlXAnQLHtWcDStQgSG22S9Wo1XjDRBvrV3EtA4coX9Re abM0Uk1tbOldaTFi2ZqPz61n4lXShz3fy2ROZMftzNZtXm0/wV+bDZUCGF/iTkFS qZzO7c8m9oNzUvIEcPo3yJRWLP7EZBVa9gI/M35S7RpS4NFWpV+Yi5Z3oLejuNou SDeF5I0VlcKxXjrs6Xjv23Hg/wliSCiaB3vH1KheM19yLZqM4yp+us1C7hAfuiDb 5CCaEElnhbe8SMoCYooN23sjNJRLG8F3E0F0gfaFEPptuVyWihpFmuACjzrvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyudVmEre4e2cYmu0hVtdhp21kzMwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM5MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy/MA0GCSqG SIb3DQEBCwUAA4IBAQAP4N9EzJhRqsRN9Zg0k/b7C5xI040XROTuDIKY4jF/2K+p 7JIDMY33WuAVdTqfQN7/CZn3XgPWXRBpunvnYharaCGeVRTSYSYUYLguqxt/Qsuf Tn209ARNCuf54AxcfsPSNta+jVb4XCqAqhvuTypppO7rA7ipitgmq5K/G7cKJPV7 2L80RnyYSTRjk7omVHwVPwvb1inFdXVAFJpW6guYcMplUPnLd+AmYek/bbYKCK/W Ok64nls0XSfCp6/ncx4JidIKpDe6Zqr5N6PsBTi/vshbBk3I33hBp7t/Qv//WNqX S+hVjF7N0M0jquUOfESABeJPrwrQpzWd235TlQTN -----END CERTIFICATE-----Generated at Sun Oct 26 22:57:45 2025 by rpki-client