$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa File: 35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: 0+6+N7y7+z5+GZ0LUn4in9mnEACESucH1zgQmC9xHAA= Subject key identifier: 87:C6:09:B5:E6:F2:A8:95:72:93:6D:74:8C:66:64:18:85:65:3F:CB Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 5E799A053D05E91EF94EC45CB8E510CBCA445626 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa Signing time: Sat 21 Jun 2025 12:00:01 +0000 ROA not before: Sat 21 Jun 2025 11:55:01 +0000 ROA not after: Sat 20 Jun 2026 12:00:01 +0000 asID: 24534 IP address blocks: 58.147.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:79:9a:05:3d:05:e9:1e:f9:4e:c4:5c:b8:e5:10:cb:ca:44:56:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Jun 21 11:55:01 2025 GMT Not After : Jun 20 12:00:01 2026 GMT Subject: CN=87C609B5E6F2A89572936D748C66641885653FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:7b:24:cd:8d:31:63:1c:32:d3:50:0c:f8: ec:6a:70:18:8d:a6:fd:e7:0a:f9:9f:cb:ef:be:a1: b8:d5:d5:57:a2:04:eb:93:bc:92:09:30:e1:98:b6: c2:dc:a9:b6:28:a2:4b:59:c8:dc:4e:fa:7e:3f:51: 7c:0c:8e:f9:92:ad:ad:ff:d6:f4:7d:7d:da:1b:b8: 9c:04:9f:ab:57:cc:05:9c:29:b1:4b:65:03:1d:cf: f7:da:fc:db:c7:5f:99:08:35:e2:ad:32:43:87:57: 0d:9b:f0:49:2f:61:03:f7:b6:da:12:6d:e8:50:51: 2c:95:d2:af:26:da:f4:bf:14:ef:01:40:9b:65:c4: 3a:43:91:33:8e:cd:a3:0b:f1:82:64:b2:d9:b5:a9: de:73:20:f8:58:e6:63:43:cb:f4:8f:49:90:c7:90: 19:3f:97:01:99:80:ba:bd:26:1d:05:ff:e2:b6:df: 63:fd:15:a5:7e:93:84:e4:ca:a7:bc:63:10:87:2f: e5:10:12:99:8d:c3:7c:8c:fc:be:7c:44:d2:c0:f9: 21:56:41:24:e3:4c:6f:68:48:af:2d:d3:e7:c8:37: 7b:5e:8d:5d:a0:0b:e7:57:73:75:97:8d:d3:22:19: 76:ef:7f:7e:fa:3f:67:3e:ec:7e:73:55:00:4b:aa: 54:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C6:09:B5:E6:F2:A8:95:72:93:6D:74:8C:66:64:18:85:65:3F:CB X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.147.185.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:40:c2:b2:cd:e9:25:76:bf:4e:64:46:78:41:92:8e:63:90: 46:7e:58:b4:58:fe:a4:2e:f3:e7:45:aa:29:2a:92:f2:04:8c: 24:4b:01:80:27:c5:8a:21:ab:e5:53:d8:d1:9d:c8:bd:e0:83: 97:05:21:3a:42:fe:8f:3a:1e:8e:ff:57:a7:53:f5:ac:d3:b5: 86:c1:77:1e:41:73:a3:c1:31:5a:53:e9:e2:c5:3e:5f:8d:91: 1b:fa:ee:f1:20:20:a0:2b:1e:28:32:d6:8e:98:e6:cb:c8:6f: 9e:a6:c6:a4:fa:fc:e3:5c:16:fd:e2:8f:37:34:05:24:d0:ce: f6:02:99:10:87:70:62:dc:56:3d:72:db:4d:46:08:98:12:88: 06:56:47:3a:04:3c:92:33:93:2e:dc:d9:9d:cd:a5:03:fa:ef: 5b:2c:7a:26:e5:18:8c:db:76:b7:99:d3:59:30:45:1f:25:d2: f6:ac:d3:c5:df:29:37:17:d7:ba:1d:fd:05:0c:58:f7:d3:c9: fb:1b:09:49:97:85:1a:0a:68:60:02:12:a2:13:65:1c:d9:0e: 25:9b:a8:37:07:94:a8:8c:f6:9a:e1:65:7e:6e:a5:6e:3b:7a: 6f:a5:84:fd:48:32:f2:5c:ab:c5:3e:5f:d0:79:51:37:0e:4d: 71:58:63:4d -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUXnmaBT0F6R75TsRcuOUQy8pEViYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA2MjExMTU1MDFaFw0yNjA2MjAxMjAwMDFaMDMxMTAvBgNV BAMTKDg3QzYwOUI1RTZGMkE4OTU3MjkzNkQ3NDhDNjY2NDE4ODU2NTNGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC413skzY0xYxwy01AM+OxqcBiN pv3nCvmfy+++objV1VeiBOuTvJIJMOGYtsLcqbYooktZyNxO+n4/UXwMjvmSra3/ 1vR9fdobuJwEn6tXzAWcKbFLZQMdz/fa/NvHX5kINeKtMkOHVw2b8EkvYQP3ttoS behQUSyV0q8m2vS/FO8BQJtlxDpDkTOOzaML8YJkstm1qd5zIPhY5mNDy/SPSZDH kBk/lwGZgLq9Jh0F/+K232P9FaV+k4Tkyqe8YxCHL+UQEpmNw3yM/L58RNLA+SFW QSTjTG9oSK8t0+fIN3tejV2gC+dXc3WXjdMiGXbvf376P2c+7H5zVQBLqlTFAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUh8YJtebyqJVyk210jGZkGIVlP8swHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzM1MzgyZTMxMzQzNzJlMzEzODM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqTuTANBgkqhkiG 9w0BAQsFAAOCAQEAH0DCss3pJXa/TmRGeEGSjmOQRn5YtFj+pC7z50WqKSqS8gSM JEsBgCfFiiGr5VPY0Z3IveCDlwUhOkL+jzoejv9Xp1P1rNO1hsF3HkFzo8ExWlPp 4sU+X42RG/ru8SAgoCseKDLWjpjmy8hvnqbGpPr841wW/eKPNzQFJNDO9gKZEIdw YtxWPXLbTUYImBKIBlZHOgQ8kjOTLtzZnc2lA/rvWyx6JuUYjNt2t5nTWTBFHyXS 9qzTxd8pNxfXuh39BQxY99PJ+xsJSZeFGgpoYAISohNlHNkOJZuoNweUqIz2muFl fm6lbjt6b6WE/Ugy8lyrxT5f0HlRNw5NcVhjTQ== -----END CERTIFICATE-----Generated at Tue Jul 1 21:23:48 2025 by rpki-client