$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa File: 3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa (raw, json) Hash identifier: CEJ3yKIwnTpt+ImukVgRvxnWPT8Hth1fQgkKpGWcSEo= Subject key identifier: E1:C2:B2:98:EA:09:52:32:CC:FA:14:38:66:6E:EF:E1:9D:B5:5D:C9 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 6774B445B546185608E35FD00930FBD4F4BC114A Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa Signing time: Thu 21 Aug 2025 15:00:00 +0000 ROA not before: Thu 21 Aug 2025 14:55:00 +0000 ROA not after: Thu 20 Aug 2026 15:00:00 +0000 asID: 38149 IP address blocks: 150.129.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:74:b4:45:b5:46:18:56:08:e3:5f:d0:09:30:fb:d4:f4:bc:11:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Aug 21 14:55:00 2025 GMT Not After : Aug 20 15:00:00 2026 GMT Subject: CN=E1C2B298EA095232CCFA1438666EEFE19DB55DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:56:d0:5e:f6:0f:9b:28:88:f1:a8:20:fc: 80:d0:f6:a6:23:60:9d:04:fc:4d:7a:ec:1e:29:1f: 60:7b:b6:45:d8:d8:cb:59:e5:c0:a8:1f:25:02:a3: b2:91:89:ce:78:f2:3f:1d:c4:dc:28:e4:92:51:68: 6e:6d:14:29:53:12:9f:ee:ad:00:12:21:fd:a2:5a: 5a:5f:9e:52:ea:f4:eb:48:0c:d2:7c:cc:6a:d5:56: 2c:e1:2b:de:87:fa:d4:ac:a3:50:45:c4:2f:73:19: 93:f3:5d:44:25:5d:d4:79:d9:ca:09:d6:3f:fb:15: a7:e8:20:6d:b5:ea:f0:58:43:bb:fc:6b:9a:b2:33: 55:8c:53:b3:9f:ec:97:3c:50:99:c8:f1:f6:4a:46: e9:ff:01:f5:ba:af:4c:9c:26:ac:59:53:88:a8:3c: 9a:a2:79:0e:93:38:a8:68:b5:cd:aa:a2:e8:82:d6: 2b:89:95:ab:5d:4d:ae:cf:2e:bc:56:d9:51:b8:eb: 4b:53:67:17:4d:12:7b:14:78:5a:f0:ff:9a:27:72: ca:2f:33:9d:0c:c0:4a:61:ec:3f:0c:ee:b4:07:26: d1:df:b4:02:ce:72:f9:59:6b:eb:05:82:78:70:0c: 1f:6a:40:eb:f7:b0:99:6f:7c:5f:e0:1b:10:a1:a9: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C2:B2:98:EA:09:52:32:CC:FA:14:38:66:6E:EF:E1:9D:B5:5D:C9 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32322d3232203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.188.0/22 Signature Algorithm: sha256WithRSAEncryption 56:cf:23:5f:9f:8e:c7:f0:e9:4a:66:df:83:23:77:96:62:1d: 85:80:58:5d:b3:cf:a7:e3:86:b4:56:67:26:a3:22:05:2a:cb: 3c:35:6a:8a:09:40:88:21:e1:82:2d:22:48:f3:61:9b:b4:f6: 62:84:9c:41:7c:e5:7b:4b:0d:04:f4:1b:f6:84:7c:99:ec:c1: 4c:d4:3b:39:a0:87:7b:80:2c:ee:c7:c3:4c:24:81:48:3c:f1: cf:f6:1e:f3:16:f5:30:18:98:63:a1:76:37:83:15:40:45:a4: 2d:52:b3:c2:8f:01:b8:46:e9:ac:b2:f2:08:df:50:6e:bb:46: a1:c9:45:30:80:d0:9a:0c:61:dd:23:30:ac:6b:e7:23:10:2a: 50:bd:ef:f8:9f:10:4a:9d:96:fc:03:ff:b9:31:03:d5:0f:60: e9:36:9e:aa:a7:1a:28:e6:fc:d9:02:8f:e3:44:08:de:09:49: 1b:2d:13:22:d1:e2:da:9d:92:ff:b0:db:38:9a:73:3a:76:3a: 01:fd:79:bd:18:7f:c0:dc:4c:18:43:c5:89:ec:e9:e8:90:8d: 93:91:46:3e:83:e1:37:da:0a:fd:2b:f5:b5:b8:4f:6c:d1:70: 1e:88:dd:e3:be:bc:16:fe:04:e9:5f:d9:5f:d9:a1:6b:71:85: 95:5a:93:6b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ3S0RbVGGFYI41/QCTD71PS8EUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA4MjExNDU1MDBaFw0yNjA4MjAxNTAwMDBaMDMxMTAvBgNV BAMTKEUxQzJCMjk4RUEwOTUyMzJDQ0ZBMTQzODY2NkVFRkUxOURCNTVEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrrlbQXvYPmyiI8agg/IDQ9qYj YJ0E/E167B4pH2B7tkXY2MtZ5cCoHyUCo7KRic548j8dxNwo5JJRaG5tFClTEp/u rQASIf2iWlpfnlLq9OtIDNJ8zGrVVizhK96H+tSso1BFxC9zGZPzXUQlXdR52coJ 1j/7FafoIG216vBYQ7v8a5qyM1WMU7Of7Jc8UJnI8fZKRun/AfW6r0ycJqxZU4io PJqieQ6TOKhotc2qouiC1iuJlatdTa7PLrxW2VG460tTZxdNEnsUeFrw/5oncsov M50MwEph7D8M7rQHJtHftALOcvlZa+sFgnhwDB9qQOv3sJlvfF/gGxChqVYDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4cKymOoJUjLM+hQ4Zm7v4Z21XckwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzUzMDJlMzEzMjM5MmUzMTM4MzgyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCloG8MA0GCSqG SIb3DQEBCwUAA4IBAQBWzyNfn47H8OlKZt+DI3eWYh2FgFhds8+n44a0VmcmoyIF Kss8NWqKCUCIIeGCLSJI82GbtPZihJxBfOV7Sw0E9Bv2hHyZ7MFM1Ds5oId7gCzu x8NMJIFIPPHP9h7zFvUwGJhjoXY3gxVARaQtUrPCjwG4RumssvII31Buu0ahyUUw gNCaDGHdIzCsa+cjECpQve/4nxBKnZb8A/+5MQPVD2DpNp6qpxoo5vzZAo/jRAje CUkbLRMi0eLanZL/sNs4mnM6djoB/Xm9GH/A3EwYQ8WJ7OnokI2TkUY+g+E32gr9 K/W1uE9s0XAeiN3jvrwW/gTpX9lf2aFrcYWVWpNr -----END CERTIFICATE-----Generated at Mon Oct 27 04:21:42 2025 by rpki-client