$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32302e302f32342d3234203d3e20313337333439.roa File: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (raw, json) Hash identifier: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg= Subject key identifier: E3:8F:CD:50:C0:36:FD:22:4E:38:DF:8F:C2:B8:AA:6D:57:AB:D9:5F Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 45643A5ADAEB74E0CD66251AA5357F8E5EBC9962 Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32302e302f32342d3234203d3e20313337333439.roa Signing time: Sun 20 Jul 2025 03:00:16 +0000 ROA not before: Sun 20 Jul 2025 02:55:16 +0000 ROA not after: Sun 19 Jul 2026 03:00:16 +0000 asID: 137349 IP address blocks: 157.66.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 06:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:64:3a:5a:da:eb:74:e0:cd:66:25:1a:a5:35:7f:8e:5e:bc:99:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Jul 20 02:55:16 2025 GMT Not After : Jul 19 03:00:16 2026 GMT Subject: CN=E38FCD50C036FD224E38DF8FC2B8AA6D57ABD95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:a9:9e:d9:c4:a7:7b:1c:bd:9c:2b:87:fe: 4e:48:e6:4f:7c:9b:da:db:95:7f:43:e4:4e:be:db: 90:bc:a7:b4:28:2b:a2:96:68:4a:11:e8:4d:f2:ad: 90:cd:23:f4:e0:0e:98:eb:b7:f5:75:a2:b7:86:59: e1:1b:ef:c7:f4:96:47:52:07:0f:97:d6:cf:b0:0a: 7e:9e:4f:f8:72:56:f5:1d:43:3e:37:ae:d8:9d:f4: c2:79:88:57:26:1f:d6:da:96:07:c7:69:19:9b:e4: 85:56:8f:5e:c5:ef:b0:85:68:2b:93:e4:6b:a3:fe: 19:ae:71:df:94:e6:de:aa:67:ed:a1:7a:2d:f4:da: ef:4b:c6:ba:35:15:c8:ec:e7:a1:a9:e1:fa:86:88: e0:f3:95:33:a5:11:c3:7d:72:ff:af:a1:ff:e6:e9: 17:bd:2e:50:94:1e:7c:32:37:ae:64:c3:82:af:f9: 8c:00:82:73:cb:84:bf:62:5d:93:6c:71:f1:89:f4: 1b:73:2a:b3:eb:6e:0a:2c:86:26:b7:e2:3f:20:a6: 9f:38:32:2d:0e:b9:b6:45:46:97:ec:ce:3f:01:d6: 31:68:18:c6:fe:f9:ca:0e:e2:0d:91:75:2a:90:d6: e9:d9:8c:a6:28:6e:53:02:45:2d:16:47:fb:8b:9c: de:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:CD:50:C0:36:FD:22:4E:38:DF:8F:C2:B8:AA:6D:57:AB:D9:5F X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32302e302f32342d3234203d3e20313337333439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.20.0/24 Signature Algorithm: sha256WithRSAEncryption a7:e1:9e:50:32:fd:27:5b:16:76:c3:a2:d2:c4:79:62:22:44: 49:89:b3:97:5f:6b:d0:65:f8:da:d1:33:45:fe:fc:57:f3:69: 23:2a:9a:d2:e4:79:17:b8:77:b0:7a:51:8f:ff:1b:9e:9f:4e: aa:85:72:7f:c7:da:9d:12:59:29:eb:3e:6e:d0:bf:ef:6c:5a: af:c3:26:ed:60:b8:25:ee:25:29:2f:e0:16:7b:89:6f:b5:f2: 58:42:66:41:5a:90:55:af:1a:bf:eb:64:b4:12:7e:f0:ec:8b: 70:51:73:42:5c:fb:f1:0a:9c:90:c7:36:d0:eb:29:db:43:dd: 27:0e:ee:1a:f8:f1:a8:8f:be:f7:7b:00:31:87:09:8b:89:c9: 81:eb:a6:90:26:eb:ef:00:3b:f7:e5:3e:ef:48:83:9b:80:72: c0:54:e1:5b:d2:25:d3:c6:d0:2d:5f:85:b3:0a:bf:f1:75:a0: 1b:d9:e6:d3:bb:68:e8:8b:40:ca:93:f0:39:3b:8c:62:62:9c: 8c:86:62:0e:07:d0:57:81:66:c3:3c:6f:4c:d5:8c:f9:e1:42: 12:11:c9:28:14:8f:3d:a0:2c:ed:8b:90:3f:b7:19:e6:61:af: 9a:5e:03:b8:8e:a9:f4:d2:fb:cd:be:15:d9:f0:a7:a3:9b:9f: 23:79:1f:a0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIURWQ6WtrrdODNZiUapTV/jl68mWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNTA3MjAwMjU1MTZaFw0yNjA3MTkwMzAwMTZaMDMxMTAvBgNV BAMTKEUzOEZDRDUwQzAzNkZEMjI0RTM4REY4RkMyQjhBQTZENTdBQkQ5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBame2cSnexy9nCuH/k5I5k98 m9rblX9D5E6+25C8p7QoK6KWaEoR6E3yrZDNI/TgDpjrt/V1oreGWeEb78f0lkdS Bw+X1s+wCn6eT/hyVvUdQz43rtid9MJ5iFcmH9balgfHaRmb5IVWj17F77CFaCuT 5Guj/hmucd+U5t6qZ+2hei302u9Lxro1Fcjs56Gp4fqGiODzlTOlEcN9cv+vof/m 6Re9LlCUHnwyN65kw4Kv+YwAgnPLhL9iXZNscfGJ9BtzKrPrbgoshia34j8gpp84 Mi0OubZFRpfszj8B1jFoGMb++coO4g2RdSqQ1unZjKYoblMCRS0WR/uLnN7HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU44/NUMA2/SJOON+PwriqbVer2V8wHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1ZjVlZjE4LTZmZmEtNGQ2OS04 YzBjLTM1MThjZmE4NzU4ZS8wLzMxMzUzNzJlMzYzNjJlMzIzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CFDANBgkqhkiG 9w0BAQsFAAOCAQEAp+GeUDL9J1sWdsOi0sR5YiJESYmzl19r0GX42tEzRf78V/Np Iyqa0uR5F7h3sHpRj/8bnp9OqoVyf8fanRJZKes+btC/72xar8Mm7WC4Je4lKS/g FnuJb7XyWEJmQVqQVa8av+tktBJ+8OyLcFFzQlz78QqckMc20Osp20PdJw7uGvjx qI++93sAMYcJi4nJgeumkCbr7wA79+U+70iDm4BywFThW9Il08bQLV+Fswq/8XWg G9nm07to6ItAypPwOTuMYmKcjIZiDgfQV4FmwzxvTNWM+eFCEhHJKBSPPaAs7YuQ P7cZ5mGvml4DuI6p9NL7zb4V2fCno5ufI3kfoA== -----END CERTIFICATE-----Generated at Wed Jul 23 12:25:51 2025 by rpki-client