$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa File: 3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa (raw, json) Hash identifier: SP12xLDyV/VP9N1xqFMD2+nxhDzqIZUfpt67MZUwfE8= Subject key identifier: 11:5B:57:A4:0F:69:A0:0E:72:0E:C6:99:6B:E9:9E:6F:46:F2:9F:04 Certificate issuer: /CN=62F71C75A752B45AE4B51A4E7010124979820A90 Certificate serial: 339B31E180C954DA1C6C38ED2F3E2A4B3EE5CA8A Authority key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa Signing time: Mon 12 May 2025 08:01:21 +0000 ROA not before: Mon 12 May 2025 07:56:21 +0000 ROA not after: Mon 11 May 2026 08:01:21 +0000 asID: 152770 IP address blocks: 157.66.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9b:31:e1:80:c9:54:da:1c:6c:38:ed:2f:3e:2a:4b:3e:e5:ca:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Validity Not Before: May 12 07:56:21 2025 GMT Not After : May 11 08:01:21 2026 GMT Subject: CN=115B57A40F69A00E720EC6996BE99E6F46F29F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fe:eb:fa:f7:15:14:d9:ee:2c:08:d4:77:45: 4b:06:f6:e4:44:12:be:5e:e5:0e:8a:35:46:6c:f8: 8f:52:81:d1:f5:f2:62:65:22:0b:68:0b:d5:6c:6f: d0:f6:04:da:1b:8e:5f:17:04:4e:3f:8b:35:82:30: 46:c8:6b:ca:46:21:6c:fc:7a:54:71:b9:f8:2e:38: c3:ea:5e:16:cb:92:00:60:3f:cb:64:46:05:19:6a: fd:45:2d:87:0a:96:79:ae:aa:74:47:53:22:8e:1f: 43:a4:48:87:c9:95:d4:e4:39:3a:6c:88:7a:99:a6: 5a:d6:82:9e:a8:55:c1:2f:98:7d:34:7d:38:bc:7a: 3b:a8:6f:7e:1c:d1:7d:8f:c0:26:2c:8c:18:02:16: f7:eb:fb:85:0f:46:bc:5b:0e:23:d6:e7:7f:ff:31: 6c:80:73:62:8e:dd:3f:2f:dd:19:b3:c5:98:37:b9: bb:f9:eb:51:73:f1:e7:93:68:eb:f9:a1:7a:32:61: e4:f8:50:74:f1:7a:38:04:74:b0:6a:16:36:62:57: 05:81:91:a5:18:e1:38:49:5e:f6:22:5f:49:9e:70: 7a:15:0f:06:c1:87:41:93:f7:0c:16:0b:8f:ad:d6: c1:fa:29:e7:8f:8a:93:cc:c3:f3:06:a4:7f:cf:07: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5B:57:A4:0F:69:A0:0E:72:0E:C6:99:6B:E9:9E:6F:46:F2:9F:04 X509v3 Authority Key Identifier: keyid:62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/3135372e36362e3139322e302f32342d3234203d3e20313532373730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.192.0/24 Signature Algorithm: sha256WithRSAEncryption 63:15:52:0a:26:9e:5a:46:32:38:e2:60:20:3b:78:dc:9d:64: 8a:50:5f:fd:81:07:59:36:6b:4b:6b:21:21:37:60:1d:b8:45: 5d:33:a1:01:5f:c0:07:4c:9b:59:49:b6:e0:9d:25:50:4e:e6: 6d:14:91:3c:91:19:61:d5:4b:19:19:0c:fe:4c:47:32:ec:34: 40:49:54:3d:21:fc:10:80:11:1a:aa:39:f4:d8:56:b4:2a:c2: 15:cf:72:0f:0a:ed:b7:7e:bf:04:4a:d2:b7:b3:46:1b:c9:eb: 3d:79:53:e2:27:c6:0d:23:a5:6b:51:00:63:46:a0:2c:52:3b: 10:f5:08:26:3e:d1:2e:db:c5:b1:b4:d4:eb:db:47:bb:53:d4: 01:e0:65:57:2d:3d:f6:78:ec:ee:f9:47:a4:33:e6:8c:00:b5: a6:3c:05:f4:79:b2:04:cd:65:a5:9b:96:18:06:c1:bc:d8:20: ee:9d:f0:d9:37:ae:66:8e:69:09:c3:65:4a:b8:89:d9:13:0e: 08:08:77:35:0f:cc:25:bd:b5:d5:25:c2:b0:cc:b1:0b:9f:0b: c0:1d:80:44:0c:a8:20:59:84:5f:0f:a7:e2:aa:f2:c4:e2:b4: d4:13:75:e8:a6:3b:8a:75:3d:b7:2c:30:08:14:19:4b:26:49: 53:c9:cd:70 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUM5sx4YDJVNocbDjtLz4qSz7lyoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3 OTgyMEE5MDAeFw0yNTA1MTIwNzU2MjFaFw0yNjA1MTEwODAxMjFaMDMxMTAvBgNV BAMTKDExNUI1N0E0MEY2OUEwMEU3MjBFQzY5OTZCRTk5RTZGNDZGMjlGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/uv69xUU2e4sCNR3RUsG9uRE Er5e5Q6KNUZs+I9SgdH18mJlIgtoC9Vsb9D2BNobjl8XBE4/izWCMEbIa8pGIWz8 elRxufguOMPqXhbLkgBgP8tkRgUZav1FLYcKlnmuqnRHUyKOH0OkSIfJldTkOTps iHqZplrWgp6oVcEvmH00fTi8ejuob34c0X2PwCYsjBgCFvfr+4UPRrxbDiPW53// MWyAc2KO3T8v3RmzxZg3ubv561Fz8eeTaOv5oXoyYeT4UHTxejgEdLBqFjZiVwWB kaUY4ThJXvYiX0mecHoVDwbBh0GT9wwWC4+t1sH6KeePipPMw/MGpH/PB0UZAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUEVtXpA9poA5yDsaZa+meb0bynwQwHwYDVR0j BBgwFoAUYvccdadStFrktRpOcBASSXmCCpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMC82MkY3MUM3NUE3 NTJCNDVBRTRCNTFBNEU3MDEwMTI0OTc5ODIwQTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjJGNzFDNzVBNzUyQjQ1QUU0QjUxQTRFNzAxMDEyNDk3OTgy MEE5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkZTJkMDkwLTQ3NjYtNDc1Yy05 Y2VmLTdiZWI1ODVjZjI0MS8wLzMxMzUzNzJlMzYzNjJlMzEzOTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnULAMA0GCSqG SIb3DQEBCwUAA4IBAQBjFVIKJp5aRjI44mAgO3jcnWSKUF/9gQdZNmtLayEhN2Ad uEVdM6EBX8AHTJtZSbbgnSVQTuZtFJE8kRlh1UsZGQz+TEcy7DRASVQ9IfwQgBEa qjn02Fa0KsIVz3IPCu23fr8EStK3s0Ybyes9eVPiJ8YNI6VrUQBjRqAsUjsQ9Qgm PtEu28WxtNTr20e7U9QB4GVXLT32eOzu+UekM+aMALWmPAX0ebIEzWWlm5YYBsG8 2CDunfDZN65mjmkJw2VKuInZEw4ICHc1D8wlvbXVJcKwzLELnwvAHYBEDKggWYRf D6fiqvLE4rTUE3XopjuKdT23LDAIFBlLJklTyc1w -----END CERTIFICATE-----Generated at Mon Oct 20 20:22:40 2025 by rpki-client