$ rpki-client -vvf repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32332d3233203d3e203633383633.roa File: 3135372e36362e35382e302f32332d3233203d3e203633383633.roa (raw, json) Hash identifier: 9tXtFpTSK8/Gv6WVGpyrNnATNqrkJEwmK6WzmGqcUmQ= Subject key identifier: 66:CA:CB:9A:7B:AC:F5:6D:35:43:85:F5:75:DD:7A:BF:B4:BB:60:56 Certificate issuer: /CN=145856688D58EEB673E59CC02D21114CF78E87E5 Certificate serial: 20ED6838355D8BC116DE02033452B35002254A7B Authority key identifier: 14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32332d3233203d3e203633383633.roa Signing time: Tue 15 Jul 2025 02:12:23 +0000 ROA not before: Tue 15 Jul 2025 02:07:23 +0000 ROA not after: Tue 14 Jul 2026 02:12:23 +0000 asID: 63863 IP address blocks: 157.66.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ed:68:38:35:5d:8b:c1:16:de:02:03:34:52:b3:50:02:25:4a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145856688D58EEB673E59CC02D21114CF78E87E5 Validity Not Before: Jul 15 02:07:23 2025 GMT Not After : Jul 14 02:12:23 2026 GMT Subject: CN=66CACB9A7BACF56D354385F575DD7ABFB4BB6056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:9f:7a:9b:46:de:a6:e0:d0:c2:bd:c7:1c: 92:f8:ed:c0:d4:c5:2a:4c:73:4d:b4:3a:a1:9a:6d: 7e:af:e7:91:32:1b:db:b9:ca:98:ed:9e:6e:c5:e4: c9:c0:4b:0b:37:fb:69:b3:cc:74:10:a6:86:b1:7d: 60:8d:91:25:18:7d:f3:0f:0d:27:c8:60:1b:a8:31: d3:44:1e:2d:ff:04:9e:8d:2b:dc:86:91:a5:99:06: 25:0e:b5:29:a7:f5:c1:97:49:35:df:ec:b1:e6:5e: 1a:25:00:28:d9:ce:9d:b7:4c:fb:a2:cd:8d:47:a9: b9:ff:29:1c:fc:4d:d7:07:2b:d3:aa:e7:2b:37:ac: 80:f5:14:16:c4:e0:a2:a8:26:d1:28:c2:ca:7d:1a: 33:68:e2:d4:e0:af:f1:8f:80:3f:4d:28:10:dc:fd: 87:4a:84:09:f1:5d:ae:fc:c2:68:99:65:d8:44:95: 8a:7e:3f:aa:98:85:3e:e2:38:36:8a:02:e1:aa:61: b3:a8:38:0a:7d:e6:94:46:3f:a0:cf:74:15:e8:b6: 70:aa:57:c7:07:e4:35:23:0f:5e:0d:a0:e0:62:78: 0b:44:10:2d:f0:a8:9f:d4:3d:de:5f:e2:5e:98:e6: cf:62:e2:ba:3c:ae:1a:b3:2c:54:d1:e9:0c:a7:42: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CA:CB:9A:7B:AC:F5:6D:35:43:85:F5:75:DD:7A:BF:B4:BB:60:56 X509v3 Authority Key Identifier: keyid:14:58:56:68:8D:58:EE:B6:73:E5:9C:C0:2D:21:11:4C:F7:8E:87:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/145856688D58EEB673E59CC02D21114CF78E87E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/145856688D58EEB673E59CC02D21114CF78E87E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46b05f36-e174-4dad-bc2a-08926c5dd046/0/3135372e36362e35382e302f32332d3233203d3e203633383633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.58.0/23 Signature Algorithm: sha256WithRSAEncryption 90:11:7d:ef:23:94:2d:83:2f:3c:6d:27:ea:21:bb:b2:67:da: 8c:6f:65:d5:1b:58:08:dd:22:3e:02:7b:36:ad:59:7b:20:e1: d9:2f:21:c2:09:63:04:b5:0c:4f:d2:34:f2:3a:ba:76:1c:31: 5a:65:d5:7f:34:c5:26:fb:7e:09:bb:bd:d0:86:2b:a8:cf:82: df:5d:71:44:e6:48:1c:4d:d9:76:10:91:d6:17:0d:70:83:3d: d4:e6:05:d8:80:6e:aa:fd:00:fd:4a:3f:ab:1d:38:d1:5f:79: 79:cc:7c:13:27:12:cd:e3:19:cb:30:6c:c2:7e:f6:a8:1b:f0: 6b:76:97:0c:e1:5f:1c:a8:ae:bd:b3:ad:be:1d:5f:e1:ba:80: e5:f2:41:93:42:74:81:b5:d4:d8:0a:bf:bf:98:dd:6c:1e:03: a5:de:31:91:11:38:32:0e:32:4f:e9:65:a4:21:1f:1e:45:b2: d8:4d:a7:a4:b5:41:bd:94:f6:46:42:77:03:bf:97:a5:d2:77: be:7b:81:54:95:73:15:d4:52:10:83:6e:c9:7b:9d:47:33:31: 14:53:8d:1c:36:af:e2:4c:a5:79:11:e9:26:f8:4d:3f:89:21: a6:b6:10:ac:c3:1e:77:eb:bb:38:95:9b:e7:1a:24:53:d2:8d: 0e:f7:51:2b -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUIO1oODVdi8EW3gIDNFKzUAIlSnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENG NzhFODdFNTAeFw0yNTA3MTUwMjA3MjNaFw0yNjA3MTQwMjEyMjNaMDMxMTAvBgNV BAMTKDY2Q0FDQjlBN0JBQ0Y1NkQzNTQzODVGNTc1REQ3QUJGQjRCQjYwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aJ96m0bepuDQwr3HHJL47cDU xSpMc020OqGabX6v55EyG9u5ypjtnm7F5MnASws3+2mzzHQQpoaxfWCNkSUYffMP DSfIYBuoMdNEHi3/BJ6NK9yGkaWZBiUOtSmn9cGXSTXf7LHmXholACjZzp23TPui zY1Hqbn/KRz8TdcHK9Oq5ys3rID1FBbE4KKoJtEowsp9GjNo4tTgr/GPgD9NKBDc /YdKhAnxXa78wmiZZdhElYp+P6qYhT7iODaKAuGqYbOoOAp95pRGP6DPdBXotnCq V8cH5DUjD14NoOBieAtEEC3wqJ/UPd5f4l6Y5s9i4ro8rhqzLFTR6QynQom/AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUZsrLmnus9W01Q4X1dd16v7S7YFYwHwYDVR0j BBgwFoAUFFhWaI1Y7rZz5ZzALSERTPeOh+UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmIwNWYzNi1lMTc0LTRkYWQtYmMyYS0wODkyNmM1ZGQwNDYvMC8xNDU4NTY2ODhE NThFRUI2NzNFNTlDQzAyRDIxMTE0Q0Y3OEU4N0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQ1ODU2Njg4RDU4RUVCNjczRTU5Q0MwMkQyMTExNENGNzhF ODdFNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2YjA1ZjM2LWUxNzQtNGRhZC1i YzJhLTA4OTI2YzVkZDA0Ni8wLzMxMzUzNzJlMzYzNjJlMzUzODJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDM2MzMzODM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQjowDQYJKoZIhvcN AQELBQADggEBAJARfe8jlC2DLzxtJ+ohu7Jn2oxvZdUbWAjdIj4CezatWXsg4dkv IcIJYwS1DE/SNPI6unYcMVpl1X80xSb7fgm7vdCGK6jPgt9dcUTmSBxN2XYQkdYX DXCDPdTmBdiAbqr9AP1KP6sdONFfeXnMfBMnEs3jGcswbMJ+9qgb8Gt2lwzhXxyo rr2zrb4dX+G6gOXyQZNCdIG11NgKv7+Y3WweA6XeMZERODIOMk/pZaQhHx5FsthN p6S1Qb2U9kZCdwO/l6XSd757gVSVcxXUUhCDbsl7nUczMRRTjRw2r+JMpXkR6Sb4 TT+JIaa2EKzDHnfruziVm+caJFPSjQ73USs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:36:06 2025 by rpki-client