$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3139312e302f32342d3234203d3e203234353334.roa File: 35382e3134372e3139312e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: 8qZ2PfVPSW4Gale+B6XAN2CyhRmIb70LvF4xop7XFFw= Subject key identifier: 2F:C6:15:0A:28:CE:FE:5C:4C:04:E1:15:D3:B2:2E:6A:72:55:1D:57 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 4375113F6E6E46B290DC35E5D2A7E2342BAED01D Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3139312e302f32342d3234203d3e203234353334.roa Signing time: Sat 21 Jun 2025 13:00:00 +0000 ROA not before: Sat 21 Jun 2025 12:55:00 +0000 ROA not after: Sat 20 Jun 2026 13:00:00 +0000 asID: 24534 IP address blocks: 58.147.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:75:11:3f:6e:6e:46:b2:90:dc:35:e5:d2:a7:e2:34:2b:ae:d0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Jun 21 12:55:00 2025 GMT Not After : Jun 20 13:00:00 2026 GMT Subject: CN=2FC6150A28CEFE5C4C04E115D3B22E6A72551D57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:b3:3c:37:51:72:d7:25:a3:63:fb:b6:06: c2:ce:16:59:f8:e7:6e:56:1c:5c:5d:92:9b:ce:b8: da:34:78:bc:cf:8d:e3:71:50:b5:34:5f:0a:16:4e: 33:44:b9:4f:6c:58:e9:73:80:e6:a3:11:49:92:f0: 12:26:fc:da:34:00:d7:bb:c6:f3:a8:70:ac:6c:94: ea:64:2a:94:19:10:db:16:6f:40:28:91:6f:01:60: 5c:0d:e5:1b:7d:0d:9c:ba:72:2b:ca:8c:3c:bd:d5: 94:01:ce:a2:7f:ee:2d:c7:a8:66:ba:af:f2:04:94: ad:3c:27:cd:cc:12:7c:19:04:4d:22:42:e7:2d:da: 92:19:db:66:56:84:24:5e:a3:b1:e4:c9:7b:e9:2b: ad:ba:f8:48:ff:be:60:cf:ed:44:c4:e2:ca:74:97: 84:02:64:12:1a:8d:6e:30:c5:d6:07:f0:eb:4c:40: fb:ee:12:b7:f6:cd:82:6a:b3:42:f3:d4:46:7e:1e: 7e:e9:9f:e7:9a:25:4b:47:18:ad:5e:a2:e1:5a:49: e2:0e:3c:08:85:b9:27:f3:0f:d4:cf:a2:28:f0:00: 7a:10:7e:b5:9c:28:30:ff:bb:d1:72:49:e4:ef:4c: 40:3f:16:e7:02:39:25:60:3c:76:8b:61:14:7f:8a: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C6:15:0A:28:CE:FE:5C:4C:04:E1:15:D3:B2:2E:6A:72:55:1D:57 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3139312e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.147.191.0/24 Signature Algorithm: sha256WithRSAEncryption 84:90:21:d0:5b:6e:e7:d9:30:7a:b4:61:8d:e3:f4:0b:64:a1: 5b:b6:b7:e9:63:7d:2d:89:c3:30:fe:3d:64:d7:89:00:6d:32: fc:de:9b:29:be:29:5e:32:0c:61:68:ff:05:3d:ac:f6:84:9e: a6:20:71:e8:0b:51:97:74:f7:6e:70:54:cf:6e:c2:56:52:3f: c2:b8:01:11:a7:56:ba:5b:49:0f:ed:f1:1c:18:49:3f:f7:62: b4:47:7e:56:9b:02:65:1c:60:f5:ec:7f:4e:c0:bb:48:67:21: 04:86:4d:01:82:0c:c7:cc:16:fd:ea:9d:cb:50:c1:c2:d8:98: cf:59:5d:a7:4a:cc:d6:9f:4f:9b:15:46:51:7a:41:bf:83:c4: 49:95:3e:87:92:9e:72:7f:b7:d7:cd:84:10:dd:75:f0:5d:e7: 68:af:0c:0a:b0:e1:fc:5a:29:f4:15:51:76:72:60:4a:06:b5: 3f:8b:5d:2a:54:e1:70:41:cb:15:6f:39:b4:ed:a8:d1:9e:e2: 2e:1b:95:c0:09:00:59:f6:24:b7:4a:5e:b3:c7:2e:da:85:cd: 27:27:e5:9f:20:ba:34:e2:b0:a2:cd:0a:9d:18:34:68:21:be: 52:b6:6c:18:c9:a7:96:73:68:ae:66:a3:ab:93:e4:19:64:bd: 09:89:eb:e5 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUQ3URP25uRrKQ3DXl0qfiNCuu0B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA2MjExMjU1MDBaFw0yNjA2MjAxMzAwMDBaMDMxMTAvBgNV BAMTKDJGQzYxNTBBMjhDRUZFNUM0QzA0RTExNUQzQjIyRTZBNzI1NTFENTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtrM8N1Fy1yWjY/u2BsLOFln4 525WHFxdkpvOuNo0eLzPjeNxULU0XwoWTjNEuU9sWOlzgOajEUmS8BIm/No0ANe7 xvOocKxslOpkKpQZENsWb0AokW8BYFwN5Rt9DZy6civKjDy91ZQBzqJ/7i3HqGa6 r/IElK08J83MEnwZBE0iQuct2pIZ22ZWhCReo7HkyXvpK626+Ej/vmDP7UTE4sp0 l4QCZBIajW4wxdYH8OtMQPvuErf2zYJqs0Lz1EZ+Hn7pn+eaJUtHGK1eouFaSeIO PAiFuSfzD9TPoijwAHoQfrWcKDD/u9FySeTvTEA/FucCOSVgPHaLYRR/ijz7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUL8YVCijO/lxMBOEV07IuanJVHVcwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzM1MzgyZTMxMzQzNzJlMzEzOTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqTvzANBgkqhkiG 9w0BAQsFAAOCAQEAhJAh0Ftu59kwerRhjeP0C2ShW7a36WN9LYnDMP49ZNeJAG0y /N6bKb4pXjIMYWj/BT2s9oSepiBx6AtRl3T3bnBUz27CVlI/wrgBEadWultJD+3x HBhJP/ditEd+VpsCZRxg9ex/TsC7SGchBIZNAYIMx8wW/eqdy1DBwtiYz1ldp0rM 1p9PmxVGUXpBv4PESZU+h5Kecn+3182EEN118F3naK8MCrDh/Fop9BVRdnJgSga1 P4tdKlThcEHLFW85tO2o0Z7iLhuVwAkAWfYkt0pes8cu2oXNJyflnyC6NOKwos0K nRg0aCG+UrZsGMmnlnNormajq5PkGWS9CYnr5Q== -----END CERTIFICATE-----Generated at Tue Jul 1 14:20:18 2025 by rpki-client