$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa File: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (raw, json) Hash identifier: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg= Subject key identifier: 65:97:E9:F7:8B:9D:62:1A:05:8B:16:86:C2:31:A0:88:22:02:B2:8D Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 49731FBCE33B937B120F4DB3625C34C93A80B46C Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa Signing time: Fri 10 Jan 2025 10:00:01 +0000 ROA not before: Fri 10 Jan 2025 09:55:01 +0000 ROA not after: Fri 09 Jan 2026 10:00:01 +0000 asID: 152365 IP address blocks: 157.15.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 14:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:73:1f:bc:e3:3b:93:7b:12:0f:4d:b3:62:5c:34:c9:3a:80:b4:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Jan 10 09:55:01 2025 GMT Not After : Jan 9 10:00:01 2026 GMT Subject: CN=6597E9F78B9D621A058B1686C231A0882202B28D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:1b:9a:54:96:aa:75:d5:43:c8:7c:f0:e5: 2c:2c:52:75:d3:c3:4d:f4:69:26:ad:29:a0:c5:d4: 43:11:50:24:77:08:ab:6f:8a:30:43:4a:c4:64:91: b3:d2:1b:2d:7c:e0:01:17:40:16:d2:41:a0:e7:f1: 03:71:da:a6:fb:22:e8:c4:3d:32:5c:d8:4b:2b:e7: 03:fe:0a:9f:c1:7f:bc:98:d8:b2:73:a4:0c:07:5f: c0:58:47:55:9a:1b:3b:e8:9c:ad:6b:08:e8:21:7d: 67:fe:29:cb:1f:59:ea:46:80:e8:b3:da:03:55:fc: bb:8d:a3:c8:64:ed:1c:12:8b:41:3f:35:37:8f:a5: a7:21:69:9f:cb:32:44:ad:03:3d:1b:9a:63:26:3d: 71:1e:49:44:66:a2:2d:c1:d4:91:6e:07:3e:37:44: 58:b4:d7:6b:9a:80:98:46:1e:83:da:4f:ca:4b:44: e9:40:98:a2:a9:e5:19:89:2a:ae:8e:55:28:8c:c2: 2b:6e:22:b5:20:2b:49:b4:a9:ad:df:0d:e3:15:41: cc:60:8b:d4:2e:76:e3:93:02:80:d5:74:d1:4f:20: c9:cc:32:e2:ed:12:d2:88:9f:fc:87:d1:c1:4e:72: ed:fe:75:c1:a7:fb:9a:94:8f:8e:85:c7:6d:77:21: 2d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:97:E9:F7:8B:9D:62:1A:05:8B:16:86:C2:31:A0:88:22:02:B2:8D X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34322e302f32342d3234203d3e20313532333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.42.0/24 Signature Algorithm: sha256WithRSAEncryption 04:2d:51:16:2c:c4:43:26:29:0f:4c:2a:0e:ee:82:a2:3e:30: 4d:44:b7:c0:34:72:36:83:2f:9b:c7:00:29:df:46:3d:51:d6: d9:be:7a:3d:5d:47:db:85:5c:a0:3f:28:a7:74:96:e1:ec:88: 63:1b:1a:e4:d8:86:ae:18:0f:78:b9:c4:99:51:4a:27:4c:df: 7d:7e:b9:12:5f:79:49:f1:0e:c7:38:da:c8:1d:44:71:49:56: 18:54:a5:93:2b:af:d9:0e:67:ca:0c:c6:32:87:6b:18:56:0a: 1b:33:b5:90:19:35:7b:d8:44:25:7e:ea:6d:6b:1d:9c:29:c1: 36:c1:69:c1:4c:37:90:3c:96:9f:b6:86:ae:06:18:ab:8e:85: 86:20:03:ab:dc:b2:51:5a:84:45:85:10:31:70:3c:f2:14:8a: 8b:68:13:09:27:2b:3c:9c:69:af:35:69:78:d4:fa:8e:c3:dd: 1a:62:98:5d:ae:9f:74:7a:db:8c:42:15:b1:6f:a2:b6:8f:f1: 48:e3:40:96:ef:59:fe:c6:f5:8e:1b:df:dd:18:1e:84:4e:e3: 1b:54:33:d6:12:5e:d8:5a:fb:1a:4d:39:d0:e2:6b:87:ab:e2: 2e:23:0c:f4:be:5c:57:80:dc:13:5c:2c:3d:cd:92:92:f3:f8: 93:9a:ab:8c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSXMfvOM7k3sSD02zYlw0yTqAtGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTAxMTAwOTU1MDFaFw0yNjAxMDkxMDAwMDFaMDMxMTAvBgNV BAMTKDY1OTdFOUY3OEI5RDYyMUEwNThCMTY4NkMyMzFBMDg4MjIwMkIyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6lBuaVJaqddVDyHzw5SwsUnXT w030aSatKaDF1EMRUCR3CKtvijBDSsRkkbPSGy184AEXQBbSQaDn8QNx2qb7IujE PTJc2Esr5wP+Cp/Bf7yY2LJzpAwHX8BYR1WaGzvonK1rCOghfWf+KcsfWepGgOiz 2gNV/LuNo8hk7RwSi0E/NTePpachaZ/LMkStAz0bmmMmPXEeSURmoi3B1JFuBz43 RFi012uagJhGHoPaT8pLROlAmKKp5RmJKq6OVSiMwituIrUgK0m0qa3fDeMVQcxg i9QuduOTAoDVdNFPIMnMMuLtEtKIn/yH0cFOcu3+dcGn+5qUj46Fx213IS05AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUZZfp94udYhoFixaGwjGgiCICso0wHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFjLTdmOWYtNDdkNC05 NTMzLTlkZjgyYWZjNTk3My8wLzMxMzUzNzJlMzEzNTJlMzQzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PKjANBgkqhkiG 9w0BAQsFAAOCAQEABC1RFizEQyYpD0wqDu6Coj4wTUS3wDRyNoMvm8cAKd9GPVHW 2b56PV1H24VcoD8op3SW4eyIYxsa5NiGrhgPeLnEmVFKJ0zffX65El95SfEOxzja yB1EcUlWGFSlkyuv2Q5nygzGModrGFYKGzO1kBk1e9hEJX7qbWsdnCnBNsFpwUw3 kDyWn7aGrgYYq46FhiADq9yyUVqERYUQMXA88hSKi2gTCScrPJxprzVpeNT6jsPd GmKYXa6fdHrbjEIVsW+ito/xSONAlu9Z/sb1jhvf3RgehE7jG1Qz1hJe2Fr7Gk05 0OJrh6viLiMM9L5cV4DcE1wsPc2SkvP4k5qrjA== -----END CERTIFICATE-----Generated at Mon Apr 21 04:14:49 2025 by rpki-client