$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa File: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (raw, json) Hash identifier: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4= Subject key identifier: 25:3D:DD:1A:DD:1C:15:9B:BC:A7:9A:30:56:8B:F6:5B:1C:D4:76:5B Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 5162A7D9E4E790E01BA207834C86E65401CDAF97 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa Signing time: Tue 15 Jul 2025 02:30:05 +0000 ROA not before: Tue 15 Jul 2025 02:25:05 +0000 ROA not after: Tue 14 Jul 2026 02:30:05 +0000 asID: 152082 IP address blocks: 157.10.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 09:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:62:a7:d9:e4:e7:90:e0:1b:a2:07:83:4c:86:e6:54:01:cd:af:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Jul 15 02:25:05 2025 GMT Not After : Jul 14 02:30:05 2026 GMT Subject: CN=253DDD1ADD1C159BBCA79A30568BF65B1CD4765B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:af:5c:50:0f:7d:c7:f2:e4:4a:87:1d:6d: 1e:ff:b0:5c:5e:e3:50:73:85:b0:8e:62:a0:a7:d7: 4a:a3:79:d2:12:98:b4:80:65:1c:75:14:d9:fc:75: 07:9d:dc:29:b8:29:22:25:82:35:f4:61:f2:bd:1e: b2:d8:b2:3f:37:fd:b0:f3:08:a1:e5:47:0a:00:56: ee:80:cb:a8:a5:d9:40:b6:ef:f9:19:aa:87:8a:b9: b3:44:57:03:f4:02:ce:87:b5:8e:f9:03:c8:57:28: 42:47:83:28:b9:56:9d:bc:8f:bf:a4:ad:6c:66:a2: d2:3d:ec:f4:03:b9:92:55:82:c5:0c:4c:a3:b5:0a: 2d:c3:62:b6:c4:f8:ac:25:27:1e:fa:43:6f:cb:60: b6:b7:fe:c5:cc:a0:7d:13:36:ff:6e:27:24:4c:92: 94:0c:7b:97:72:a7:66:a5:9a:e7:7d:bc:77:9b:86: 3b:1d:f8:c1:1b:b9:9c:fc:f3:1a:87:94:fe:cd:1d: fe:31:25:ca:e1:c5:d1:23:57:b7:3c:0c:13:36:18: 27:be:28:f3:0a:a5:6f:53:b4:43:9a:ba:bb:af:5c: ac:b5:ed:3c:14:77:68:9c:25:38:67:98:ec:1f:37: 6d:a7:09:7f:e5:e0:bf:a2:ec:96:df:16:16:b4:74: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3D:DD:1A:DD:1C:15:9B:BC:A7:9A:30:56:8B:F6:5B:1C:D4:76:5B X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/3135372e31302e38392e302f32342d3234203d3e20313532303832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.89.0/24 Signature Algorithm: sha256WithRSAEncryption 84:48:44:7d:8d:ff:c4:5b:f1:a7:79:fa:3c:dd:0c:0d:81:99: a1:78:b7:85:67:b3:3a:ef:6a:84:1d:34:0e:78:a6:fa:5f:d9: 28:2c:89:47:8c:00:5e:53:e6:c3:f6:20:a9:0f:ec:e0:44:4a: 3a:2d:0d:76:a2:f2:b4:d7:8f:49:1a:72:80:5c:f8:af:b4:dd: 2d:6c:87:7c:9b:d6:92:81:a2:19:85:78:fc:dd:94:f4:91:06: d4:05:7a:fc:74:6c:be:fd:54:60:dd:b8:e0:ff:ae:4c:d1:e4: 0c:ac:9a:de:5d:c8:e0:d0:33:2b:fb:3e:f8:f1:f4:ae:41:26: 8c:6f:d8:71:b0:55:ad:a6:57:e5:1b:10:14:8e:80:ec:41:9a: 96:e0:dd:e6:b2:88:98:0d:f4:ea:2f:e0:11:3b:ee:81:8f:42: d8:15:42:d8:6e:fe:5e:1b:e1:35:4f:6f:6e:6f:08:db:a7:e9: 67:45:9f:ee:22:be:98:ea:d1:d9:75:32:bc:8f:b9:63:cf:85: 3e:4a:6f:8c:ec:87:d6:42:3e:69:2e:3b:aa:d3:64:ba:63:cd: 70:81:b9:f8:a8:d6:02:ef:59:2e:9f:2f:79:e7:04:9b:b9:73: c6:da:63:df:a1:29:8c:7f:5f:cc:cd:e2:c6:2f:b9:0a:ee:fb: cc:1a:6d:ef -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUUWKn2eTnkOAbogeDTIbmVAHNr5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNTA3MTUwMjI1MDVaFw0yNjA3MTQwMjMwMDVaMDMxMTAvBgNV BAMTKDI1M0RERDFBREQxQzE1OUJCQ0E3OUEzMDU2OEJGNjVCMUNENDc2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCw69cUA99x/LkSocdbR7/sFxe 41BzhbCOYqCn10qjedISmLSAZRx1FNn8dQed3Cm4KSIlgjX0YfK9HrLYsj83/bDz CKHlRwoAVu6Ay6il2UC27/kZqoeKubNEVwP0As6HtY75A8hXKEJHgyi5Vp28j7+k rWxmotI97PQDuZJVgsUMTKO1Ci3DYrbE+KwlJx76Q2/LYLa3/sXMoH0TNv9uJyRM kpQMe5dyp2almud9vHebhjsd+MEbuZz88xqHlP7NHf4xJcrhxdEjV7c8DBM2GCe+ KPMKpW9TtEOauruvXKy17TwUd2icJThnmOwfN22nCX/l4L+i7JbfFha0dO2ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUJT3dGt0cFZu8p5owVov2WxzUdlswHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0N2NkNWEyLWE3NDItNDUwYy1i MTkwLTUwMGU3NTQ1MjBkZS8wLzMxMzUzNzJlMzEzMDJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0KWTANBgkqhkiG 9w0BAQsFAAOCAQEAhEhEfY3/xFvxp3n6PN0MDYGZoXi3hWezOu9qhB00Dnim+l/Z KCyJR4wAXlPmw/YgqQ/s4ERKOi0NdqLytNePSRpygFz4r7TdLWyHfJvWkoGiGYV4 /N2U9JEG1AV6/HRsvv1UYN244P+uTNHkDKya3l3I4NAzK/s++PH0rkEmjG/YcbBV raZX5RsQFI6A7EGaluDd5rKImA306i/gETvugY9C2BVC2G7+XhvhNU9vbm8I26fp Z0Wf7iK+mOrR2XUyvI+5Y8+FPkpvjOyH1kI+aS47qtNkumPNcIG5+KjWAu9ZLp8v eecEm7lzxtpj36EpjH9fzM3ixi+5Cu77zBpt7w== -----END CERTIFICATE-----Generated at Sat Jul 26 10:14:37 2025 by rpki-client