$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa File: 3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: 3PtnPo57fYv+q3qPhFBJeBEPgfkMWouj5smqbR5HlUQ= Subject key identifier: 59:E9:02:09:61:9E:6C:DD:B4:95:2F:51:5D:69:4E:81:F1:6D:D0:69 Certificate issuer: /CN=B6F0131510E62F73E5F29246F9C8F691811A704D Certificate serial: 17190BE4FE765E285C01904AD0B501278F60A9A0 Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa Signing time: Fri 04 Apr 2025 09:00:02 +0000 ROA not before: Fri 04 Apr 2025 08:55:02 +0000 ROA not after: Fri 03 Apr 2026 09:00:02 +0000 asID: 55685 IP address blocks: 150.107.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:19:0b:e4:fe:76:5e:28:5c:01:90:4a:d0:b5:01:27:8f:60:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D Validity Not Before: Apr 4 08:55:02 2025 GMT Not After : Apr 3 09:00:02 2026 GMT Subject: CN=59E90209619E6CDDB4952F515D694E81F16DD069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f9:1f:3e:7c:bc:d8:d8:77:e7:a9:19:ce:86: ea:e2:90:67:3f:e2:11:31:f2:b2:ea:bf:b4:cd:b5: 1a:34:1b:4f:6b:88:9a:61:3d:6e:6a:f4:75:20:e5: 17:0c:54:7d:0c:3e:b4:00:c8:f6:0f:6d:4b:1c:09: 0e:4a:0a:97:86:9a:21:4e:83:79:a0:e8:32:c7:e5: 2a:f5:01:72:59:ac:4b:d0:1f:22:b5:a3:12:41:de: 1c:aa:fe:65:1f:7e:50:bb:18:ea:70:50:45:b7:19: 1e:39:db:fb:10:65:5f:30:6e:a8:4a:14:fe:50:af: f8:87:bc:c8:e9:e4:f2:fe:de:8c:f9:02:73:04:56: f6:11:37:14:5a:9e:3e:0c:d1:b7:06:0d:23:4e:3d: f2:d2:66:8c:17:5a:c8:96:6a:57:0f:91:2d:27:5b: db:2f:3f:01:16:55:a8:99:41:27:f2:a6:21:c0:ad: 42:85:57:34:e6:f1:7d:21:f4:4a:fa:87:28:42:d7: 9e:ad:f8:30:37:75:19:16:9d:e3:82:32:61:ab:77: b2:ef:04:b4:f9:dc:9a:2e:c4:3c:43:ed:9c:b8:b5: 79:f0:07:08:d6:a1:5a:f3:2b:72:82:76:99:ae:43: 12:23:73:ec:2a:ce:95:ef:86:08:9c:5e:8e:48:0c: e9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E9:02:09:61:9E:6C:DD:B4:95:2F:51:5D:69:4E:81:F1:6D:D0:69 X509v3 Authority Key Identifier: keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.140.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:af:db:48:13:93:48:79:94:ec:de:8d:ac:ee:0e:a5:cf:9d: 5d:95:68:f2:e8:a0:76:27:e6:76:f9:f1:c7:0d:65:9b:d0:24: 80:00:21:5e:6a:26:4a:32:e9:52:e8:eb:5a:a0:0a:26:e4:2e: 30:99:04:40:c5:39:21:f5:0f:48:25:a3:bc:14:e4:1a:79:5b: 6f:12:fa:ae:da:c8:a3:ac:6c:c9:8b:a0:c0:dd:23:91:a0:41: f4:0a:38:b6:7c:33:67:cc:42:2f:5d:d7:75:94:3a:56:a7:b7: 05:cd:98:5d:68:d0:a4:be:c8:f3:cd:73:73:99:13:73:4f:28: cf:c1:59:6d:24:80:30:ca:ef:bd:51:72:71:ba:6c:ce:0a:e9: fb:e4:28:c2:ac:46:98:69:95:c6:d7:e9:15:99:c3:f8:75:b6: 83:3d:ad:f3:d8:cf:46:a4:bd:c0:5b:b9:7a:2d:46:0d:02:97: 95:d2:ae:d6:66:b3:fe:84:36:d9:73:15:ac:7c:5e:a9:e3:7a: 16:85:8b:68:79:83:ec:98:73:32:57:bc:d0:ee:ce:f0:15:74: 62:a9:9a:54:08:59:8d:e8:91:1d:00:5d:2b:e7:b7:a8:bf:8b: 63:8e:30:92:a6:36:4e:94:1e:41:ae:bb:6b:98:be:ee:7f:0f: 97:41:a3:97 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFxkL5P52XihcAZBK0LUBJ49gqaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4 MTFBNzA0RDAeFw0yNTA0MDQwODU1MDJaFw0yNjA0MDMwOTAwMDJaMDMxMTAvBgNV BAMTKDU5RTkwMjA5NjE5RTZDRERCNDk1MkY1MTVENjk0RTgxRjE2REQwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+R8+fLzY2HfnqRnOhurikGc/ 4hEx8rLqv7TNtRo0G09riJphPW5q9HUg5RcMVH0MPrQAyPYPbUscCQ5KCpeGmiFO g3mg6DLH5Sr1AXJZrEvQHyK1oxJB3hyq/mUfflC7GOpwUEW3GR452/sQZV8wbqhK FP5Qr/iHvMjp5PL+3oz5AnMEVvYRNxRanj4M0bcGDSNOPfLSZowXWsiWalcPkS0n W9svPwEWVaiZQSfypiHArUKFVzTm8X0h9Er6hyhC156t+DA3dRkWneOCMmGrd7Lv BLT53JouxDxD7Zy4tXnwBwjWoVrzK3KCdpmuQxIjc+wqzpXvhgicXo5IDOmHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWekCCWGebN20lS9RXWlOgfFt0GkwHwYDVR0j BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB NzA0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzUzMDJlMzEzMDM3MmUzMTM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmuMMA0GCSqG SIb3DQEBCwUAA4IBAQANr9tIE5NIeZTs3o2s7g6lz51dlWjy6KB2J+Z2+fHHDWWb 0CSAACFeaiZKMulS6OtaoAom5C4wmQRAxTkh9Q9IJaO8FOQaeVtvEvqu2sijrGzJ i6DA3SORoEH0Cji2fDNnzEIvXdd1lDpWp7cFzZhdaNCkvsjzzXNzmRNzTyjPwVlt JIAwyu+9UXJxumzOCun75CjCrEaYaZXG1+kVmcP4dbaDPa3z2M9GpL3AW7l6LUYN ApeV0q7WZrP+hDbZcxWsfF6p43oWhYtoeYPsmHMyV7zQ7s7wFXRiqZpUCFmN6JEd AF0r57eov4tjjjCSpjZOlB5BrrtrmL7ufw+XQaOX -----END CERTIFICATE-----Generated at Sun Apr 6 11:03:29 2025 by rpki-client