$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32332d3233203d3e20313532333931.roa File: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (raw, json) Hash identifier: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM= Subject key identifier: 6C:43:2B:13:28:69:6A:04:B6:38:26:7D:C1:A8:0E:7F:BD:0B:0B:BB Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 557B9DAAFE4141D9FBE71B3DCBF19332057ABC53 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32332d3233203d3e20313532333931.roa Signing time: Thu 11 Sep 2025 06:00:01 +0000 ROA not before: Thu 11 Sep 2025 05:55:01 +0000 ROA not after: Thu 10 Sep 2026 06:00:01 +0000 asID: 152391 IP address blocks: 157.15.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:7b:9d:aa:fe:41:41:d9:fb:e7:1b:3d:cb:f1:93:32:05:7a:bc:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Sep 11 05:55:01 2025 GMT Not After : Sep 10 06:00:01 2026 GMT Subject: CN=6C432B1328696A04B638267DC1A80E7FBD0B0BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:db:20:3f:84:a4:3d:a5:c4:29:0b:46:da: 8f:37:a5:32:5b:af:b7:90:db:0d:30:e2:82:a8:00: 55:51:f8:d4:3f:0d:ec:c1:01:59:e2:94:78:3d:fd: 89:27:04:13:bd:be:d1:63:02:59:92:60:ea:3a:ba: e9:1e:b1:1a:da:c9:6e:56:15:79:52:a0:3c:cb:d9: b7:ed:c0:5d:42:9f:c6:e5:34:73:79:07:0d:62:db: 56:98:02:fc:b2:22:0b:14:fc:e1:72:7d:7e:5d:24: d3:5a:4b:f8:66:e5:a8:ea:5a:03:c1:6a:82:9a:55: ce:b3:0d:2c:43:b1:c1:40:09:5d:bb:ea:95:b7:c2: 2d:d1:88:f5:ee:08:bc:17:8a:63:34:6e:c9:12:6f: c0:ae:43:13:54:f8:26:73:39:ff:a8:5a:6e:95:e3: 30:d7:85:89:07:e2:76:49:59:38:20:0e:35:e8:89: 8b:6c:52:5f:d6:f9:5c:43:98:46:41:e2:d3:9d:49: 61:39:5a:11:98:94:68:af:f8:ec:d8:83:49:63:51: a7:c9:5c:84:e1:47:c7:f9:35:5e:c2:fa:1a:09:5c: 7e:9a:a3:0e:fd:e9:c7:09:b0:2f:f4:4a:43:ae:93: 8f:1e:df:35:9e:13:7d:97:01:7f:df:aa:a5:b5:11: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:43:2B:13:28:69:6A:04:B6:38:26:7D:C1:A8:0E:7F:BD:0B:0B:BB X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32332d3233203d3e20313532333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.44.0/23 Signature Algorithm: sha256WithRSAEncryption 78:36:bb:35:3c:6e:c2:1a:54:ef:3d:42:be:11:ae:b1:5b:03: 8e:22:3e:42:86:90:a4:8c:f6:4a:8b:40:e4:d4:35:c5:df:e2: ea:37:71:89:73:70:00:f4:8f:3e:99:c7:1b:be:7d:93:f6:0c: da:e3:e6:52:72:65:d9:6f:6c:29:c7:14:70:d2:33:c6:e0:4d: 81:ef:3a:e8:b1:c3:32:fd:1a:f4:c9:31:8d:5f:cf:ef:ff:a7: 2d:ec:39:ec:fc:69:3d:fc:0f:eb:29:f8:e8:17:3f:49:8b:5d: 54:84:a3:31:7e:f4:2f:06:ca:85:b2:cf:37:3e:55:88:1b:60: 95:ee:fb:cd:2e:78:67:1e:eb:aa:b9:1d:79:5b:8a:ca:d9:a5: 00:2e:5d:f0:8d:c3:c6:ca:4b:b2:95:5d:01:33:7f:10:9e:62: 9d:d6:69:d5:70:1c:b3:fa:c6:4b:a4:54:97:59:e2:a5:2b:35: c5:6d:ca:f2:e8:97:a3:9a:92:bb:c7:a7:ab:a6:a4:47:74:33: b4:eb:81:a0:8d:f6:74:0a:1c:75:93:43:46:4d:80:d5:24:69: 23:23:65:ea:d1:f0:45:7f:99:7d:e6:66:0c:61:d4:24:2a:82: 01:66:96:4c:80:3b:01:5c:46:01:41:23:a9:58:94:c2:87:ea: b2:61:09:e0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVXudqv5BQdn75xs9y/GTMgV6vFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA5MTEwNTU1MDFaFw0yNjA5MTAwNjAwMDFaMDMxMTAvBgNV BAMTKDZDNDMyQjEzMjg2OTZBMDRCNjM4MjY3REMxQTgwRTdGQkQwQjBCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8dsgP4SkPaXEKQtG2o83pTJb r7eQ2w0w4oKoAFVR+NQ/DezBAVnilHg9/YknBBO9vtFjAlmSYOo6uukesRrayW5W FXlSoDzL2bftwF1Cn8blNHN5Bw1i21aYAvyyIgsU/OFyfX5dJNNaS/hm5ajqWgPB aoKaVc6zDSxDscFACV276pW3wi3RiPXuCLwXimM0bskSb8CuQxNU+CZzOf+oWm6V 4zDXhYkH4nZJWTggDjXoiYtsUl/W+VxDmEZB4tOdSWE5WhGYlGiv+OzYg0ljUafJ XIThR8f5NV7C+hoJXH6aow796ccJsC/0SkOuk48e3zWeE32XAX/fqqW1EQkVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUbEMrEyhpagS2OCZ9wagOf70LC7swHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmZGFmMDZhLWY2MjQtNDJjZi1i YjE5LWI2YmJmOTMxYWFjOC8wLzMxMzUzNzJlMzEzNTJlMzQzNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjMzMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0PLDANBgkqhkiG 9w0BAQsFAAOCAQEAeDa7NTxuwhpU7z1CvhGusVsDjiI+QoaQpIz2SotA5NQ1xd/i 6jdxiXNwAPSPPpnHG759k/YM2uPmUnJl2W9sKccUcNIzxuBNge866LHDMv0a9Mkx jV/P7/+nLew57PxpPfwP6yn46Bc/SYtdVISjMX70LwbKhbLPNz5ViBtgle77zS54 Zx7rqrkdeVuKytmlAC5d8I3DxspLspVdATN/EJ5indZp1XAcs/rGS6RUl1nipSs1 xW3K8uiXo5qSu8enq6akR3QztOuBoI32dAocdZNDRk2A1SRpIyNl6tHwRX+ZfeZm DGHUJCqCAWaWTIA7AVxGAUEjqViUwofqsmEJ4A== -----END CERTIFICATE-----Generated at Tue Oct 21 09:15:58 2025 by rpki-client