$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa File: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (raw, json) Hash identifier: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s= Subject key identifier: 4E:7C:8D:89:3B:F1:4D:D1:CB:1B:50:50:37:59:D4:8B:8B:70:FB:4A Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 4CC5B9576C0C45672E9D3834446DE5E4A06367F9 Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa Signing time: Tue 24 Jun 2025 07:00:00 +0000 ROA not before: Tue 24 Jun 2025 06:55:00 +0000 ROA not after: Tue 23 Jun 2026 07:00:00 +0000 asID: 152749 IP address blocks: 157.66.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c5:b9:57:6c:0c:45:67:2e:9d:38:34:44:6d:e5:e4:a0:63:67:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Jun 24 06:55:00 2025 GMT Not After : Jun 23 07:00:00 2026 GMT Subject: CN=4E7C8D893BF14DD1CB1B50503759D48B8B70FB4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:e9:d5:b7:57:e0:47:23:a5:7c:3a:df:f3: 24:4b:b6:bd:10:60:7d:7a:18:d1:71:d2:74:8f:22: ec:c6:cd:9b:88:e9:d2:8c:2c:bb:a6:4e:ff:41:62: 97:d5:71:18:64:3d:c0:30:5a:b0:96:20:d4:3f:f5: 28:45:46:9e:f7:ed:81:cf:58:51:aa:e9:0d:d6:ed: f1:63:83:ee:2d:a9:b0:0e:4f:e4:ab:33:2d:e2:1b: 0f:09:58:95:7b:3b:cf:4f:19:31:d3:9e:4c:84:77: c6:4a:1f:29:b7:62:6a:ad:6e:3c:6b:1f:fb:b7:c6: 1f:cd:50:c1:b6:35:83:fd:f1:76:3c:48:cb:2a:87: c0:07:bf:d6:53:70:21:d8:28:a2:99:29:65:bc:c5: 60:57:a4:73:ff:08:65:25:8c:7b:41:23:96:47:52: ea:fc:a7:c7:fe:d2:f5:1f:bb:98:a9:9c:9a:80:de: e8:92:d8:90:a8:03:37:b2:fc:d2:b2:d1:88:aa:61: 7d:b4:e5:60:6b:0d:e4:71:e9:13:65:81:f8:3b:0c: 90:0a:db:ad:85:c9:99:67:a8:5f:1c:50:28:75:f3: e8:3c:cc:78:ef:80:da:f1:56:5b:35:d0:37:08:71: 00:c5:40:63:8c:58:b5:cf:56:2b:68:4e:a5:8c:83: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7C:8D:89:3B:F1:4D:D1:CB:1B:50:50:37:59:D4:8B:8B:70:FB:4A X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.174.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:73:0c:43:b9:26:16:8a:eb:c6:e9:7a:2f:e3:30:04:80:fb: 30:7c:62:0e:6d:0b:c2:df:f9:47:d9:b6:fc:48:f8:6c:80:52: 51:8f:cb:f3:88:f9:e6:2d:e8:32:58:17:b4:d0:9b:76:05:23: bd:79:5c:bc:74:d1:8b:33:0e:b5:21:b0:ff:83:12:69:62:43: 67:0b:db:b1:22:6a:ba:97:21:74:3b:73:17:b5:7c:34:4c:2c: d4:10:fc:96:1b:ec:38:89:e7:7a:3a:3d:c6:c6:b4:c3:68:74: 18:91:55:cf:03:30:28:36:c3:f6:39:c3:0c:b5:80:12:28:10: 3b:01:92:d2:f8:ec:bc:e4:37:dd:17:89:b6:5c:0a:45:e4:a8: 6b:a3:f0:fa:67:cd:15:6c:8d:b5:5d:34:60:a7:98:85:69:7a: c2:6c:e4:7d:e0:1f:4a:e2:50:9f:8c:da:a8:1a:0d:ad:96:eb: 2f:f9:9f:b4:07:5b:fb:60:e5:a8:d8:eb:f7:17:5f:7d:a6:d3: 28:f0:b4:f6:57:24:e0:a0:e8:4a:14:de:80:07:84:71:a3:a6: b1:4a:0e:91:1b:d9:8d:68:b6:8b:ea:f2:dc:d6:6e:d6:4b:43: d7:05:36:9d:d6:3d:3d:60:ba:72:82:bd:25:fb:65:8e:e5:e8: ed:62:5b:9b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTMW5V2wMRWcunTg0RG3l5KBjZ/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNTA2MjQwNjU1MDBaFw0yNjA2MjMwNzAwMDBaMDMxMTAvBgNV BAMTKDRFN0M4RDg5M0JGMTRERDFDQjFCNTA1MDM3NTlENDhCOEI3MEZCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/venVt1fgRyOlfDrf8yRLtr0Q YH16GNFx0nSPIuzGzZuI6dKMLLumTv9BYpfVcRhkPcAwWrCWINQ/9ShFRp737YHP WFGq6Q3W7fFjg+4tqbAOT+SrMy3iGw8JWJV7O89PGTHTnkyEd8ZKHym3Ymqtbjxr H/u3xh/NUMG2NYP98XY8SMsqh8AHv9ZTcCHYKKKZKWW8xWBXpHP/CGUljHtBI5ZH Uur8p8f+0vUfu5ipnJqA3uiS2JCoAzey/NKy0YiqYX205WBrDeRx6RNlgfg7DJAK 262FyZlnqF8cUCh18+g8zHjvgNrxVls10DcIcQDFQGOMWLXPVitoTqWMg95LAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTnyNiTvxTdHLG1BQN1nUi4tw+0owHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzMzZGNmLTlmNWUtNDc3NS05 Y2U3LTlkZDUyNWI0NGI4Ni8wLzMxMzUzNzJlMzYzNjJlMzEzNzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKuMA0GCSqG SIb3DQEBCwUAA4IBAQBucwxDuSYWiuvG6Xov4zAEgPswfGIObQvC3/lH2bb8SPhs gFJRj8vziPnmLegyWBe00Jt2BSO9eVy8dNGLMw61IbD/gxJpYkNnC9uxImq6lyF0 O3MXtXw0TCzUEPyWG+w4ied6Oj3GxrTDaHQYkVXPAzAoNsP2OcMMtYASKBA7AZLS +Oy85DfdF4m2XApF5Khro/D6Z80VbI21XTRgp5iFaXrCbOR94B9K4lCfjNqoGg2t lusv+Z+0B1v7YOWo2Ov3F199ptMo8LT2VyTgoOhKFN6AB4Rxo6axSg6RG9mNaLaL 6vLc1m7WS0PXBTad1j09YLpygr0l+2WO5ejtYlub -----END CERTIFICATE-----Generated at Mon Jun 30 17:20:23 2025 by rpki-client