$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa File: 3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (raw, json) Hash identifier: TuVqDXW8MpVE10vVBcu9sQVQsL0l/kEvRxGqJqvUgn0= Subject key identifier: 8B:09:38:33:D4:E1:81:6D:F3:85:B4:DA:1A:F2:AA:EC:37:EA:67:68 Certificate issuer: /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Certificate serial: 2C827FE0B8653675F5E857273DCBB465A98AC34B Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa Signing time: Sat 04 Oct 2025 09:00:02 +0000 ROA not before: Sat 04 Oct 2025 08:55:02 +0000 ROA not after: Sat 03 Oct 2026 09:00:02 +0000 asID: 4787 IP address blocks: 175.158.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 16:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:82:7f:e0:b8:65:36:75:f5:e8:57:27:3d:cb:b4:65:a9:8a:c3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Validity Not Before: Oct 4 08:55:02 2025 GMT Not After : Oct 3 09:00:02 2026 GMT Subject: CN=8B093833D4E1816DF385B4DA1AF2AAEC37EA6768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:52:2e:b8:9b:6f:d6:7f:ee:46:f6:d7:af:1f: 32:a1:79:13:9d:5e:99:58:46:dd:5e:3d:8d:8e:e8: a0:41:93:fc:c5:7f:36:11:ca:26:66:c6:43:03:8c: 54:59:2d:fb:65:38:eb:c0:68:6f:4a:88:6d:50:0c: 19:af:d8:5b:d0:92:80:a4:70:d2:c8:fa:e7:05:f3: 1a:1a:48:69:5e:c6:a2:c6:cd:a9:f1:2c:19:28:35: 3f:bc:37:03:7d:0d:31:49:6e:14:67:2f:33:45:f6: c1:df:eb:c1:2c:ed:03:25:1a:e4:25:96:6f:e2:cd: 76:8d:16:1b:10:bd:50:a1:e2:d2:fd:19:c5:ac:6c: 10:ba:97:3b:55:64:57:25:8d:56:f1:6e:f6:e8:9f: 01:b4:95:a0:76:7d:cd:38:b8:96:67:64:20:41:70: a0:f7:2c:1b:05:8f:69:ac:28:57:82:ef:7e:f2:cc: 79:25:74:54:bf:09:78:d1:f5:8a:c1:54:e5:49:49: c3:30:a3:a2:af:ad:01:1c:8a:0b:e1:ac:c3:89:98: 3f:70:0f:42:ff:39:bd:b1:23:ed:ec:c3:3f:6f:7b: 8b:50:9e:f8:45:07:0d:e0:0a:ce:2c:06:c4:b6:3c: ed:4f:cc:2e:2a:b8:fb:27:c9:e9:0a:c3:37:ce:98: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:09:38:33:D4:E1:81:6D:F3:85:B4:DA:1A:F2:AA:EC:37:EA:67:68 X509v3 Authority Key Identifier: keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.158.32.0/22 Signature Algorithm: sha256WithRSAEncryption 50:81:8e:fe:3a:49:b9:7a:c2:4b:7f:c6:e3:56:eb:a7:08:ff: 30:a2:fb:25:68:a2:39:ee:1b:a3:3e:26:76:ae:fe:09:cc:42: 17:ae:c8:b7:e1:4a:c7:2c:09:16:fc:94:e8:c1:89:ba:43:49: 89:7c:6f:9d:2c:01:9f:47:dd:63:07:94:1c:f9:23:ab:f9:9f: 01:c8:66:9a:68:6a:29:e6:8f:fc:9b:e9:4b:52:72:2b:04:fe: 2b:70:f6:e9:e5:72:23:94:9d:73:3a:c4:f6:2b:33:dd:5a:c3: cc:5d:01:63:f6:77:5e:00:b6:59:c2:3d:6a:43:6b:1d:95:55: 53:bf:60:38:77:34:bb:35:53:e4:a8:6a:4a:6d:c8:27:8a:69: 8c:97:8a:9e:9d:6e:8f:e3:f4:85:39:eb:69:aa:67:69:7c:b6: 95:b1:9f:77:c8:af:5d:ec:80:cc:e6:4f:db:c7:aa:53:e0:08: bc:7f:a7:57:53:0c:34:13:c4:32:aa:04:22:5c:4c:27:78:44: 64:01:e5:04:72:4d:77:15:ff:52:56:5b:cb:e9:34:9e:ec:49: 0b:5b:63:52:25:4a:13:a8:f0:28:7c:0f:cd:04:cb:0f:13:ad: 15:02:cd:58:91:c8:04:0b:e9:4c:1e:1e:9b:bb:34:04:d4:54: b7:50:64:3e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIULIJ/4LhlNnX16FcnPcu0ZamKw0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3 MkZGQUUwRTAeFw0yNTEwMDQwODU1MDJaFw0yNjEwMDMwOTAwMDJaMDMxMTAvBgNV BAMTKDhCMDkzODMzRDRFMTgxNkRGMzg1QjREQTFBRjJBQUVDMzdFQTY3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEUi64m2/Wf+5G9tevHzKheROd XplYRt1ePY2O6KBBk/zFfzYRyiZmxkMDjFRZLftlOOvAaG9KiG1QDBmv2FvQkoCk cNLI+ucF8xoaSGlexqLGzanxLBkoNT+8NwN9DTFJbhRnLzNF9sHf68Es7QMlGuQl lm/izXaNFhsQvVCh4tL9GcWsbBC6lztVZFcljVbxbvbonwG0laB2fc04uJZnZCBB cKD3LBsFj2msKFeC737yzHkldFS/CXjR9YrBVOVJScMwo6KvrQEcigvhrMOJmD9w D0L/Ob2xI+3swz9ve4tQnvhFBw3gCs4sBsS2PO1PzC4quPsnyekKwzfOmL6bAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUiwk4M9ThgW3zhbTaGvKq7DfqZ2gwHwYDVR0j BBgwFoAU/NBThZBOAPPBCjOe4Z2STXL/rg4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMC9GQ0QwNTM4NTkw NEUwMEYzQzEwQTMzOUVFMTlEOTI0RDcyRkZBRTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNEMDUzODU5MDRFMDBGM0MxMEEzMzlFRTE5RDkyNEQ3MkZG QUUwRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFmLWZlNjctNDVjOC04 MGI3LTA2ZmMxMThkZjhlMi8wLzMxMzczNTJlMzEzNTM4MmUzMzMyMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzQzNzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKvniAwDQYJKoZIhvcN AQELBQADggEBAFCBjv46Sbl6wkt/xuNW66cI/zCi+yVoojnuG6M+Jnau/gnMQheu yLfhSscsCRb8lOjBibpDSYl8b50sAZ9H3WMHlBz5I6v5nwHIZppoainmj/yb6UtS cisE/itw9unlciOUnXM6xPYrM91aw8xdAWP2d14AtlnCPWpDax2VVVO/YDh3NLs1 U+SoakptyCeKaYyXip6dbo/j9IU562mqZ2l8tpWxn3fIr13sgMzmT9vHqlPgCLx/ p1dTDDQTxDKqBCJcTCd4RGQB5QRyTXcV/1JWW8vpNJ7sSQtbY1IlShOo8Ch8D80E yw8TrRUCzViRyAQL6UweHpu7NATUVLdQZD4= -----END CERTIFICATE-----Generated at Mon Oct 27 09:28:20 2025 by rpki-client