$ rpki-client -vvf repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3135372e32302e39332e302f32342d3234203d3e20313532343037.roa File: 3135372e32302e39332e302f32342d3234203d3e20313532343037.roa (raw, json) Hash identifier: 7xhwBLoxBcZfSoTZvdUTvLkraKKygpQjYGPK+6LQ1oA= Subject key identifier: 21:FA:13:1A:10:75:CF:D1:D6:1B:B8:7E:2C:89:48:E9:08:1A:74:85 Certificate issuer: /CN=871B4235DFC56C482416E7BBA192562092FFE055 Certificate serial: 3098A0EA72DE8FA9D24FDB437F752EA7215B470E Authority key identifier: 87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3135372e32302e39332e302f32342d3234203d3e20313532343037.roa Signing time: Tue 15 Jul 2025 03:26:17 +0000 ROA not before: Tue 15 Jul 2025 03:21:17 +0000 ROA not after: Tue 14 Jul 2026 03:26:17 +0000 asID: 152407 IP address blocks: 157.20.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:98:a0:ea:72:de:8f:a9:d2:4f:db:43:7f:75:2e:a7:21:5b:47:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871B4235DFC56C482416E7BBA192562092FFE055 Validity Not Before: Jul 15 03:21:17 2025 GMT Not After : Jul 14 03:26:17 2026 GMT Subject: CN=21FA131A1075CFD1D61BB87E2C8948E9081A7485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:2a:f8:6d:e4:ab:dc:bd:a8:07:b5:5f:3e: 12:09:53:15:ff:ca:e1:89:e9:26:9b:bc:a3:f0:c5: be:ed:39:14:7d:c2:8f:6c:d9:12:b6:f1:76:a4:e8: 04:98:27:ea:53:8c:6f:2e:91:1f:4b:fa:b4:c7:64: 54:d2:33:7c:c0:2c:ff:e7:e1:ac:d1:3c:7f:c1:6b: c6:b0:f8:e5:95:4b:c2:bc:9d:f0:90:a4:6a:61:65: 54:90:a2:cf:68:9f:3a:c8:89:2d:24:9d:db:ec:46: e7:a9:3e:fd:81:af:5f:66:d8:4f:43:4d:e5:2e:15: 48:f4:43:ae:e4:8a:f0:5e:11:2a:d4:2f:2d:cb:4a: 34:be:26:d6:3d:94:72:75:65:28:8f:3f:b6:06:a3: f3:ff:aa:d1:10:8f:30:63:95:b0:34:94:53:03:f1: 80:e9:72:8d:cb:a4:6d:cd:dd:1e:9c:7f:ca:44:bf: 58:4f:ad:25:ab:a6:2e:41:ea:aa:9b:f9:11:9e:25: f1:e1:4f:09:4b:bd:d4:ba:0c:cb:9f:7a:f8:a1:8e: c5:c0:aa:94:f4:20:29:38:38:87:2c:31:34:c0:b0: 4e:5d:43:e8:21:8b:b2:29:0c:36:c3:48:fb:9b:89: 31:b1:f6:97:2c:62:9e:01:6c:6d:89:b3:d2:ac:e5: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:13:1A:10:75:CF:D1:D6:1B:B8:7E:2C:89:48:E9:08:1A:74:85 X509v3 Authority Key Identifier: keyid:87:1B:42:35:DF:C5:6C:48:24:16:E7:BB:A1:92:56:20:92:FF:E0:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/871B4235DFC56C482416E7BBA192562092FFE055.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/871B4235DFC56C482416E7BBA192562092FFE055.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a896fdc-5638-41d2-8a99-68ce816bd3cf/0/3135372e32302e39332e302f32342d3234203d3e20313532343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.93.0/24 Signature Algorithm: sha256WithRSAEncryption 89:87:da:2a:27:7d:61:d2:8e:10:d6:89:c1:38:81:48:bd:20: 6b:cf:cd:f1:8e:22:71:12:94:29:bc:3d:c4:7f:e3:d1:98:3d: bc:ef:db:e6:db:30:0e:4c:0f:69:dc:1f:c1:66:99:75:3c:40: 17:5c:88:1b:0d:af:48:ff:d6:87:5b:7b:5f:a4:d7:f0:22:b8: 98:be:24:11:75:de:d7:fe:e5:c0:82:3b:35:08:f5:bc:0f:ef: f0:74:6c:30:7f:81:fe:04:b1:8a:58:51:8b:8c:74:0a:be:76: 50:36:b2:f0:b2:6e:3a:5d:28:06:7d:56:3c:21:00:2e:ff:75: 62:4f:16:86:5e:ce:34:9d:4b:27:a1:67:9b:2f:ae:90:1f:f1: 06:b6:a9:08:97:57:54:5c:0d:61:84:f8:74:1a:43:4e:48:1f: a9:c5:12:2c:a7:7c:1f:ca:07:a7:57:bf:03:7f:36:21:58:ec: a2:14:07:b1:fb:b0:82:79:d0:13:00:09:19:c4:b6:fa:ce:b8: 4c:21:88:88:5d:6f:88:40:ec:d1:33:e9:be:6c:db:25:ec:ac: 3f:61:70:c2:e1:16:69:75:9c:df:a7:39:22:76:13:40:9a:a4: 06:46:33:0e:72:4d:2e:50:63:0f:66:90:bb:bd:a9:77:7f:09: 81:45:95:b7 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMJig6nLej6nST9tDf3UupyFbRw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5 MkZGRTA1NTAeFw0yNTA3MTUwMzIxMTdaFw0yNjA3MTQwMzI2MTdaMDMxMTAvBgNV BAMTKDIxRkExMzFBMTA3NUNGRDFENjFCQjg3RTJDODk0OEU5MDgxQTc0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcSr4beSr3L2oB7VfPhIJUxX/ yuGJ6SabvKPwxb7tORR9wo9s2RK28Xak6ASYJ+pTjG8ukR9L+rTHZFTSM3zALP/n 4azRPH/Ba8aw+OWVS8K8nfCQpGphZVSQos9onzrIiS0kndvsRuepPv2Br19m2E9D TeUuFUj0Q67kivBeESrULy3LSjS+JtY9lHJ1ZSiPP7YGo/P/qtEQjzBjlbA0lFMD 8YDpco3LpG3N3R6cf8pEv1hPrSWrpi5B6qqb+RGeJfHhTwlLvdS6DMufevihjsXA qpT0ICk4OIcsMTTAsE5dQ+ghi7IpDDbDSPubiTGx9pcsYp4BbG2Js9Ks5THdAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUIfoTGhB1z9HWG7h+LIlI6QgadIUwHwYDVR0j BBgwFoAUhxtCNd/FbEgkFue7oZJWIJL/4FUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTg5NmZkYy01NjM4LTQxZDItOGE5OS02OGNlODE2YmQzY2YvMC84NzFCNDIzNURG QzU2QzQ4MjQxNkU3QkJBMTkyNTYyMDkyRkZFMDU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODcxQjQyMzVERkM1NkM0ODI0MTZFN0JCQTE5MjU2MjA5MkZG RTA1NS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhODk2ZmRjLTU2MzgtNDFkMi04 YTk5LTY4Y2U4MTZiZDNjZi8wLzMxMzUzNzJlMzIzMDJlMzkzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM0MzAzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0UXTANBgkqhkiG 9w0BAQsFAAOCAQEAiYfaKid9YdKOENaJwTiBSL0ga8/N8Y4icRKUKbw9xH/j0Zg9 vO/b5tswDkwPadwfwWaZdTxAF1yIGw2vSP/Wh1t7X6TX8CK4mL4kEXXe1/7lwII7 NQj1vA/v8HRsMH+B/gSxilhRi4x0Cr52UDay8LJuOl0oBn1WPCEALv91Yk8Whl7O NJ1LJ6Fnmy+ukB/xBrapCJdXVFwNYYT4dBpDTkgfqcUSLKd8H8oHp1e/A382IVjs ohQHsfuwgnnQEwAJGcS2+s64TCGIiF1viEDs0TPpvmzbJeysP2FwwuEWaXWc36c5 InYTQJqkBkYzDnJNLlBjD2aQu72pd38JgUWVtw== -----END CERTIFICATE-----Generated at Wed Jul 23 12:09:35 2025 by rpki-client