$ rpki-client -vvf repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa File: 3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa (raw, json) Hash identifier: wm/OwjMJ3Mw2kK4LX3m4F0/jsfG1NixZfT/MRVx2gUc= Subject key identifier: C9:88:9F:0E:9F:CF:44:3A:03:E4:01:1E:EF:75:E3:5B:46:E8:C2:7A Certificate issuer: /CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Certificate serial: 6B75DD9A42BF313134C64C0DBD454B5890B0315A Authority key identifier: FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa Signing time: Wed 14 May 2025 05:00:03 +0000 ROA not before: Wed 14 May 2025 04:55:03 +0000 ROA not after: Wed 13 May 2026 05:00:03 +0000 asID: 152437 IP address blocks: 157.20.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:75:dd:9a:42:bf:31:31:34:c6:4c:0d:bd:45:4b:58:90:b0:31:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE79E56CBE99C773CD721DF7AB0E5CA2809D0739 Validity Not Before: May 14 04:55:03 2025 GMT Not After : May 13 05:00:03 2026 GMT Subject: CN=C9889F0E9FCF443A03E4011EEF75E35B46E8C27A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c3:60:2f:2c:79:bc:bc:e9:01:76:a5:8f:a3: 36:88:32:71:86:50:bd:0f:ea:d4:51:14:7f:da:32: 54:a8:be:dd:96:bd:a6:14:ca:23:68:60:d4:a0:96: 80:5d:08:e2:ad:c2:d8:a8:ca:59:8b:03:f9:3f:13: 60:74:a0:d2:b8:05:5c:43:90:d5:b7:cf:c2:f2:66: 7a:8a:6b:30:47:dc:e6:f2:e5:8a:00:1f:7a:c9:da: c3:a9:7b:fb:76:11:65:9d:6e:39:8b:f5:7f:dd:a6: 75:90:51:68:05:e8:08:7a:49:89:8f:bd:63:07:f8: f9:d8:c8:f5:6d:22:ea:55:13:22:49:2b:07:c7:a6: 01:e0:9c:fe:33:2c:9a:79:96:0a:27:e8:9c:eb:5b: 11:12:d9:e8:02:d2:e4:e9:c9:1e:95:a1:93:d4:2b: a2:3a:1d:97:c1:22:32:74:be:f2:1c:47:71:76:49: 3f:ae:ef:e9:57:7a:76:d4:4a:7d:10:25:61:1a:c7: e5:5f:2f:a4:71:b7:14:ca:16:cb:3a:38:4c:97:bc: 28:6b:13:c4:41:d7:ec:3c:a9:29:3e:28:3f:3d:65: e1:91:06:d7:fc:cb:74:2a:75:06:ad:af:8b:f0:ec: a6:e3:a7:14:2b:84:e4:4e:69:23:93:1d:47:8a:c6: 9d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:88:9F:0E:9F:CF:44:3A:03:E4:01:1E:EF:75:E3:5B:46:E8:C2:7A X509v3 Authority Key Identifier: keyid:FE:79:E5:6C:BE:99:C7:73:CD:72:1D:F7:AB:0E:5C:A2:80:9D:07:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FE79E56CBE99C773CD721DF7AB0E5CA2809D0739.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1f15a1d-5dac-4cc9-811a-e49cb4e7bce1/0/3135372e32302e3232332e302f32342d3234203d3e20313532343337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.223.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:b4:0e:24:e5:c3:e7:82:7b:7b:30:2a:37:b3:fb:93:eb:50: 45:27:f7:0f:75:8f:15:7c:77:ce:4a:fd:59:1f:ea:d4:53:2f: 01:ff:66:a8:c5:fb:0c:fb:82:d9:78:25:62:8a:07:56:88:33: 1e:c6:b9:e5:56:5d:2c:71:7d:56:60:75:11:7e:68:72:83:8d: 92:f1:d1:5a:65:28:b2:08:9d:33:98:15:e9:c0:39:0b:38:f9: 7f:a0:1b:20:62:ee:5b:1a:60:43:8e:12:e0:6b:0b:99:1c:91: 03:b9:59:5c:94:69:bb:81:38:4d:ae:c3:92:7f:29:d7:db:f8: 4b:37:97:42:29:78:72:23:bc:63:31:7a:ea:8a:17:84:89:7e: 8b:f2:a2:6c:a5:c5:76:03:99:bd:a6:2c:0e:c9:17:e9:d4:f4: 72:bb:7b:38:e0:6f:ca:a7:e9:b7:59:b9:69:d4:ac:15:16:9e: db:26:2b:af:0f:f8:55:45:53:23:7d:26:d6:05:5c:88:55:ae: ce:38:79:b9:7e:2f:60:d6:0f:0a:1c:a3:25:e6:3c:cd:fc:51: 6e:6b:4d:c0:36:00:60:4f:4c:ee:51:df:f0:90:da:48:a2:1f: 86:52:2e:d9:57:31:19:0f:35:63:68:1c:5e:c1:5e:01:81:db: 32:43:7e:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa3XdmkK/MTE0xkwNvUVLWJCwMVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4 MDlEMDczOTAeFw0yNTA1MTQwNDU1MDNaFw0yNjA1MTMwNTAwMDNaMDMxMTAvBgNV BAMTKEM5ODg5RjBFOUZDRjQ0M0EwM0U0MDExRUVGNzVFMzVCNDZFOEMyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsw2AvLHm8vOkBdqWPozaIMnGG UL0P6tRRFH/aMlSovt2WvaYUyiNoYNSgloBdCOKtwtioylmLA/k/E2B0oNK4BVxD kNW3z8LyZnqKazBH3Oby5YoAH3rJ2sOpe/t2EWWdbjmL9X/dpnWQUWgF6Ah6SYmP vWMH+PnYyPVtIupVEyJJKwfHpgHgnP4zLJp5lgon6JzrWxES2egC0uTpyR6VoZPU K6I6HZfBIjJ0vvIcR3F2ST+u7+lXenbUSn0QJWEax+VfL6RxtxTKFss6OEyXvChr E8RB1+w8qSk+KD89ZeGRBtf8y3QqdQatr4vw7KbjpxQrhOROaSOTHUeKxp1XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyYifDp/PRDoD5AEe73XjW0bownowHwYDVR0j BBgwFoAU/nnlbL6Zx3PNch33qw5cooCdBzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWYxNWExZC01ZGFjLTRjYzktODExYS1lNDljYjRlN2JjZTEvMC9GRTc5RTU2Q0JF OTlDNzczQ0Q3MjFERjdBQjBFNUNBMjgwOUQwNzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkU3OUU1NkNCRTk5Qzc3M0NENzIxREY3QUIwRTVDQTI4MDlE MDczOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExZjE1YTFkLTVkYWMtNGNjOS04 MTFhLWU0OWNiNGU3YmNlMS8wLzMxMzUzNzJlMzIzMDJlMzIzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTfMA0GCSqG SIb3DQEBCwUAA4IBAQBqtA4k5cPngnt7MCo3s/uT61BFJ/cPdY8VfHfOSv1ZH+rU Uy8B/2aoxfsM+4LZeCViigdWiDMexrnlVl0scX1WYHURfmhyg42S8dFaZSiyCJ0z mBXpwDkLOPl/oBsgYu5bGmBDjhLgawuZHJEDuVlclGm7gThNrsOSfynX2/hLN5dC KXhyI7xjMXrqiheEiX6L8qJspcV2A5m9piwOyRfp1PRyu3s44G/Kp+m3Wblp1KwV Fp7bJiuvD/hVRVMjfSbWBVyIVa7OOHm5fi9g1g8KHKMl5jzN/FFua03ANgBgT0zu Ud/wkNpIoh+GUi7ZVzEZDzVjaBxewV4BgdsyQ36R -----END CERTIFICATE-----Generated at Sat Jun 7 21:08:04 2025 by rpki-client