$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: X6zuWfTDNO+F78YG5Tc2+pmv7Vfl0FtMwLrsRSLkNf8= Subject key identifier: 50:AA:D4:79:75:A8:56:68:22:63:B6:F7:22:73:D9:3B:74:7D:EE:C8 Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 0C99759D91E1BCC9EC8777EDA38F9C218D1A990B Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 12:00:04 +0000 ROA not before: Sun 13 Jul 2025 11:55:04 +0000 ROA not after: Sun 12 Jul 2026 12:00:04 +0000 asID: 63859 IP address blocks: 158.140.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:99:75:9d:91:e1:bc:c9:ec:87:77:ed:a3:8f:9c:21:8d:1a:99:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Jul 13 11:55:04 2025 GMT Not After : Jul 12 12:00:04 2026 GMT Subject: CN=50AAD47975A856682263B6F72273D93B747DEEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:11:48:10:57:af:75:66:6e:88:5f:08:8b: 1a:4f:3f:36:7f:60:30:39:e9:27:a5:41:70:c8:ac: b4:b0:11:95:bd:03:83:d4:41:d7:29:96:cb:18:a4: a5:75:66:6c:35:fc:f4:6f:e4:2f:77:1f:4b:79:40: 8a:b5:c7:1d:36:3f:98:a9:31:70:61:95:7d:fe:dd: 53:ce:4d:13:9d:86:d7:29:6f:52:07:0f:71:2f:60: a6:7a:8a:43:3a:aa:0c:b5:69:33:6e:e4:bc:8c:a1: 03:28:d8:c7:60:56:7e:81:a9:83:23:aa:aa:5f:40: 06:4d:ff:fc:60:46:61:40:d1:4a:7a:58:bd:11:16: 8b:4d:35:c7:06:ae:95:65:22:2c:c2:87:dc:42:92: 82:f4:3a:b8:b8:90:4a:82:60:8c:4b:72:30:b3:f3: 18:9a:be:d1:48:ef:38:6c:50:7f:86:94:7e:be:5e: f6:c7:4f:f1:37:76:ac:71:20:04:88:41:58:e9:a1: ac:e0:9b:d3:a8:c1:d1:eb:7c:31:dd:3d:70:09:41: 2f:37:76:6a:a7:d6:a5:a1:02:21:db:59:c1:f6:b9: c3:b3:92:a4:00:2f:6d:2a:8a:1c:c7:91:d2:ec:72: 14:43:ac:70:97:29:22:76:95:f2:97:71:6c:55:94: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AA:D4:79:75:A8:56:68:22:63:B6:F7:22:73:D9:3B:74:7D:EE:C8 X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3136342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.164.0/24 Signature Algorithm: sha256WithRSAEncryption 00:b4:e3:71:1b:c2:f6:e4:83:6b:d4:83:9a:91:8f:26:f1:aa: a7:1f:ea:0f:ef:bd:aa:30:91:c4:5c:cc:96:e5:39:95:5d:03: 08:3e:87:1b:b1:66:9d:32:18:0f:7c:76:bb:b5:22:36:da:1b: 3a:e0:87:08:93:ac:f3:22:25:6e:03:9d:08:61:49:cf:0d:ab: 99:61:04:dd:ec:44:df:0a:fc:c5:53:07:d7:37:7c:cc:f5:49: ca:b6:eb:04:14:67:f5:d9:d7:27:c8:4c:fa:ac:84:75:98:32: a0:ed:f2:fa:42:f1:a5:34:16:23:ec:82:30:d8:2c:c5:8d:fb: 9e:47:ee:eb:2f:7c:92:20:15:59:62:c4:fc:56:3b:eb:be:13: 30:8d:ed:8d:e1:c4:b6:36:59:22:d3:c1:03:cf:8f:02:35:34: 6d:5e:ab:d4:d5:82:49:95:89:58:22:5c:1d:b4:e1:20:03:dc: b2:6f:67:07:93:ec:cf:ca:83:40:be:da:a2:ce:e1:d1:ff:34: 74:a9:4f:a6:21:8e:dc:9c:93:77:f1:67:a8:c8:b2:fc:fa:b8: db:6b:b6:a1:bf:77:3e:c6:bd:2a:58:57:e3:a3:2f:47:9b:bb: 99:0a:47:62:02:35:89:6d:4c:7a:45:c1:8d:02:89:dd:08:e1: 36:4c:7a:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDJl1nZHhvMnsh3fto4+cIY0amQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA3MTMxMTU1MDRaFw0yNjA3MTIxMjAwMDRaMDMxMTAvBgNV BAMTKDUwQUFENDc5NzVBODU2NjgyMjYzQjZGNzIyNzNEOTNCNzQ3REVFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0hFIEFevdWZuiF8IixpPPzZ/ YDA56SelQXDIrLSwEZW9A4PUQdcplssYpKV1Zmw1/PRv5C93H0t5QIq1xx02P5ip MXBhlX3+3VPOTROdhtcpb1IHD3EvYKZ6ikM6qgy1aTNu5LyMoQMo2MdgVn6BqYMj qqpfQAZN//xgRmFA0Up6WL0RFotNNccGrpVlIizCh9xCkoL0Ori4kEqCYIxLcjCz 8xiavtFI7zhsUH+GlH6+XvbHT/E3dqxxIASIQVjpoazgm9OowdHrfDHdPXAJQS83 dmqn1qWhAiHbWcH2ucOzkqQAL20qihzHkdLschRDrHCXKSJ2lfKXcWxVlCG1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUKrUeXWoVmgiY7b3InPZO3R97sgwHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM2MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoykMA0GCSqG SIb3DQEBCwUAA4IBAQAAtONxG8L25INr1IOakY8m8aqnH+oP772qMJHEXMyW5TmV XQMIPocbsWadMhgPfHa7tSI22hs64IcIk6zzIiVuA50IYUnPDauZYQTd7ETfCvzF UwfXN3zM9UnKtusEFGf12dcnyEz6rIR1mDKg7fL6QvGlNBYj7IIw2CzFjfueR+7r L3ySIBVZYsT8VjvrvhMwje2N4cS2Nlki08EDz48CNTRtXqvU1YJJlYlYIlwdtOEg A9yyb2cHk+zPyoNAvtqizuHR/zR0qU+mIY7cnJN38WeoyLL8+rjba7ahv3c+xr0q WFfjoy9Hm7uZCkdiAjWJbUx6RcGNAondCOE2THoy -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:23 2025 by rpki-client