$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa File: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns= Subject key identifier: 0F:89:57:46:1B:AF:9D:DB:0B:07:9D:BC:35:A8:35:A1:2D:9F:DA:33 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 2F01D7B285B32731EB4114FF5B88FEE2A388EEE5 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa Signing time: Fri 12 Sep 2025 05:00:01 +0000 ROA not before: Fri 12 Sep 2025 04:55:01 +0000 ROA not after: Fri 11 Sep 2026 05:00:01 +0000 asID: 138089 IP address blocks: 157.20.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 18:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:01:d7:b2:85:b3:27:31:eb:41:14:ff:5b:88:fe:e2:a3:88:ee:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Sep 12 04:55:01 2025 GMT Not After : Sep 11 05:00:01 2026 GMT Subject: CN=0F8957461BAF9DDB0B079DBC35A835A12D9FDA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:ea:7f:a3:be:c9:1c:70:05:16:da:16:b9: 66:a6:b3:c3:d3:b3:fa:79:aa:70:fb:af:48:25:47: 1b:43:9c:c2:02:27:b0:bb:2d:af:a6:62:93:ad:77: 60:5a:ff:21:6d:fc:19:b8:9b:2f:81:27:5e:d8:45: b7:93:2c:bf:55:97:e0:65:08:a7:e3:2b:de:e2:76: 5f:91:93:95:32:41:37:e2:a3:d1:3d:3b:d5:a0:53: 06:7d:a5:ef:9b:9f:ea:b6:e1:82:42:36:3e:58:c5: 7e:30:42:e9:49:7c:c7:90:f9:9a:03:40:4e:63:71: 90:e0:47:74:14:73:af:29:e3:b6:e6:fb:31:08:4a: fa:13:38:9f:48:af:5c:9c:ab:02:57:c9:04:38:2d: 43:7c:ee:58:d9:91:f8:40:db:56:ac:92:12:b9:e5: 76:e4:7f:f6:f0:9e:21:d6:23:8e:19:66:72:4a:c0: f6:4d:de:71:e0:89:53:a3:ab:86:ae:0d:b5:43:4f: 64:52:55:44:d0:fa:cc:11:f8:18:20:c7:ef:02:06: 1a:c7:14:76:1b:c0:1f:2b:5a:ed:e7:1e:e7:39:a7: e0:58:99:db:30:50:72:7e:20:40:5d:1f:a5:b6:e4: d6:5e:a8:f1:40:34:0b:b8:e1:26:c2:c4:4b:09:d1: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:89:57:46:1B:AF:9D:DB:0B:07:9D:BC:35:A8:35:A1:2D:9F:DA:33 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.252.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:f5:32:8c:fe:3e:0c:14:76:1e:98:1d:da:93:99:0f:3d:7d: ec:34:dc:3d:ca:c1:03:31:df:67:25:d7:7a:f8:85:fa:a0:a8: 6e:11:fc:cd:83:e7:33:04:48:72:af:f5:72:2e:04:c0:72:28: 7d:68:d2:79:7f:ed:c8:61:db:1b:01:52:4f:50:ac:3e:d0:c9: 00:ec:6f:10:f0:60:20:59:a7:83:65:dc:0c:f1:a4:d1:6a:a8: 0f:4b:ce:c4:f7:b3:b2:9b:1c:76:4f:6f:a5:ad:ab:4e:8f:e5: fd:18:fc:e2:fd:71:13:42:86:be:07:0c:fc:6f:8c:18:4a:35: d8:b3:07:b4:08:48:23:15:6d:9c:45:35:7b:aa:8d:e5:2d:f9: 55:3b:57:72:3d:31:bb:58:5b:ac:e7:cb:5e:a8:7f:9a:78:d3: 93:da:ca:41:9c:ee:fb:e7:07:78:96:14:f3:11:fc:4f:bf:45: d7:5c:cf:61:d3:03:7a:c1:a5:61:ea:90:79:98:96:20:38:12: bc:5e:7f:af:42:62:39:16:8a:90:23:ae:5b:0a:31:6b:64:ee: 9e:a4:c2:6f:ac:f3:4b:c1:95:ee:7f:11:ec:20:8d:d1:29:f1: 4e:64:35:8d:b2:f3:c8:87:77:6d:af:b3:23:4d:8a:14:fb:05: cc:b8:91:ba -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULwHXsoWzJzHrQRT/W4j+4qOI7uUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTA5MTIwNDU1MDFaFw0yNjA5MTEwNTAwMDFaMDMxMTAvBgNV BAMTKDBGODk1NzQ2MUJBRjlEREIwQjA3OURCQzM1QTgzNUExMkQ5RkRBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8ep/o77JHHAFFtoWuWams8PT s/p5qnD7r0glRxtDnMICJ7C7La+mYpOtd2Ba/yFt/Bm4my+BJ17YRbeTLL9Vl+Bl CKfjK97idl+Rk5UyQTfio9E9O9WgUwZ9pe+bn+q24YJCNj5YxX4wQulJfMeQ+ZoD QE5jcZDgR3QUc68p47bm+zEISvoTOJ9Ir1ycqwJXyQQ4LUN87ljZkfhA21askhK5 5Xbkf/bwniHWI44ZZnJKwPZN3nHgiVOjq4auDbVDT2RSVUTQ+swR+Bggx+8CBhrH FHYbwB8rWu3nHuc5p+BYmdswUHJ+IEBdH6W25NZeqPFANAu44SbCxEsJ0YxXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUD4lXRhuvndsLB528Nag1oS2f2jMwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlOGQ1OGE4LWUxOTctNDE3OS1i NzNjLTYwOGUwNDdkMDlhMy8wLzMxMzUzNzJlMzIzMDJlMzIzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRT8MA0GCSqG SIb3DQEBCwUAA4IBAQAM9TKM/j4MFHYemB3ak5kPPX3sNNw9ysEDMd9nJdd6+IX6 oKhuEfzNg+czBEhyr/VyLgTAcih9aNJ5f+3IYdsbAVJPUKw+0MkA7G8Q8GAgWaeD ZdwM8aTRaqgPS87E97Oymxx2T2+lratOj+X9GPzi/XETQoa+Bwz8b4wYSjXYswe0 CEgjFW2cRTV7qo3lLflVO1dyPTG7WFus58teqH+aeNOT2spBnO775wd4lhTzEfxP v0XXXM9h0wN6waVh6pB5mJYgOBK8Xn+vQmI5FoqQI65bCjFrZO6epMJvrPNLwZXu fxHsII3RKfFOZDWNsvPIh3dtr7MjTYoU+wXMuJG6 -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:53 2025 by rpki-client