$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32342d3234203d3e20313532333931.roa File: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (raw, json) Hash identifier: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g= Subject key identifier: 34:C9:B0:25:68:EF:1A:2D:D5:1B:3B:8C:B7:74:D8:D5:A4:CE:BA:9C Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 06DF9D70B28F2E935BF034F5E6A0284EB4C93368 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32342d3234203d3e20313532333931.roa Signing time: Thu 11 Sep 2025 06:00:01 +0000 ROA not before: Thu 11 Sep 2025 05:55:01 +0000 ROA not after: Thu 10 Sep 2026 06:00:01 +0000 asID: 152391 IP address blocks: 157.15.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:df:9d:70:b2:8f:2e:93:5b:f0:34:f5:e6:a0:28:4e:b4:c9:33:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Sep 11 05:55:01 2025 GMT Not After : Sep 10 06:00:01 2026 GMT Subject: CN=34C9B02568EF1A2DD51B3B8CB774D8D5A4CEBA9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:cf:8f:2d:5f:f4:e2:08:43:9b:62:78:d2: 0a:49:f5:4c:ba:10:e9:e4:89:71:51:9b:47:3f:6e: 2b:d4:f3:3b:ec:06:dd:77:eb:9d:0a:89:14:42:f3: ee:1c:d6:bf:90:73:ac:f1:8e:3f:c8:8d:ce:12:5c: d5:03:76:59:55:61:00:cf:b1:1a:e1:ad:4b:08:15: 6a:b5:a9:a7:1c:f2:ed:21:32:2e:fb:53:81:7b:01: 34:64:5f:1f:62:57:f0:d8:96:13:5b:a7:29:14:cc: cf:e6:f0:a2:27:19:6d:c2:83:dd:e5:24:5a:1d:8c: ed:89:86:06:be:14:e3:ef:ce:ff:dc:69:41:83:96: 95:db:6a:4b:95:6a:ea:d7:8e:88:30:71:83:ac:8f: 6d:f7:5c:95:e9:6c:85:ca:8a:54:c0:54:6a:a9:e1: ab:69:d2:5d:11:20:3a:a6:6d:fb:19:2d:53:45:96: 23:8e:a5:8f:87:b4:ae:b3:51:c9:56:2c:25:23:26: 72:85:b9:cf:26:7e:f2:36:a1:29:5f:21:d3:7d:3d: b2:dc:5f:b2:d9:39:02:9e:8b:6e:6e:d3:fe:4f:16: 07:d4:2b:ed:03:51:1e:03:24:52:63:9b:6f:49:03: 8b:55:e7:84:6e:14:0f:00:42:45:d9:72:8b:b7:41: de:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C9:B0:25:68:EF:1A:2D:D5:1B:3B:8C:B7:74:D8:D5:A4:CE:BA:9C X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/3135372e31352e34342e302f32342d3234203d3e20313532333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.44.0/24 Signature Algorithm: sha256WithRSAEncryption b2:22:eb:0c:97:08:fa:52:e0:80:3e:5f:c3:b1:57:ca:3d:a9: 1a:1d:0c:2a:84:e1:12:a7:d0:db:ae:83:86:20:6b:65:13:d8: d0:e4:87:7e:32:68:1b:6f:81:ae:c2:a8:93:f4:32:98:b0:1d: c0:5c:a1:7b:af:f9:2e:53:0f:f3:ab:43:43:83:43:5e:2c:dd: c3:0f:c9:43:99:f3:6c:f3:d1:14:62:39:bf:3b:a0:23:d3:99: a2:e6:dc:24:16:ac:f3:64:6c:15:4f:3b:9d:f2:18:53:bb:ca: 94:4f:b2:a3:e9:7f:31:b8:9a:cd:85:6e:f5:9b:e1:79:ba:fa: 78:dd:88:9c:25:36:86:60:de:dc:c8:f5:4a:a3:2c:81:f2:3b: ea:53:15:5f:44:79:bf:59:fa:55:97:82:5c:0e:89:25:d1:37: 04:28:84:e9:82:34:03:c4:ab:c0:b3:e1:fc:65:62:97:d5:9a: 54:26:8d:41:4a:e5:c8:19:18:d9:cf:57:a6:e3:e3:fa:39:26: 26:fd:43:d4:28:84:9c:2b:ef:96:f6:b7:b4:74:6a:0f:cd:ce: 17:f4:d4:cc:fd:28:e6:e3:be:3a:18:a5:ed:0e:36:1f:c1:3e: 61:a8:e2:01:a4:fd:d4:f8:35:1a:72:ac:cb:e0:d1:bc:b7:d8: 7b:52:e4:79 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBt+dcLKPLpNb8DT15qAoTrTJM2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNTA5MTEwNTU1MDFaFw0yNjA5MTAwNjAwMDFaMDMxMTAvBgNV BAMTKDM0QzlCMDI1NjhFRjFBMkRENTFCM0I4Q0I3NzREOEQ1QTRDRUJBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuT8+PLV/04ghDm2J40gpJ9Uy6 EOnkiXFRm0c/bivU8zvsBt13650KiRRC8+4c1r+Qc6zxjj/Ijc4SXNUDdllVYQDP sRrhrUsIFWq1qacc8u0hMi77U4F7ATRkXx9iV/DYlhNbpykUzM/m8KInGW3Cg93l JFodjO2Jhga+FOPvzv/caUGDlpXbakuVaurXjogwcYOsj233XJXpbIXKilTAVGqp 4atp0l0RIDqmbfsZLVNFliOOpY+HtK6zUclWLCUjJnKFuc8mfvI2oSlfIdN9PbLc X7LZOQKei25u0/5PFgfUK+0DUR4DJFJjm29JA4tV54RuFA8AQkXZcou3Qd7HAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUNMmwJWjvGi3VGzuMt3TY1aTOupwwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmZGFmMDZhLWY2MjQtNDJjZi1i YjE5LWI2YmJmOTMxYWFjOC8wLzMxMzUzNzJlMzEzNTJlMzQzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PLDANBgkqhkiG 9w0BAQsFAAOCAQEAsiLrDJcI+lLggD5fw7FXyj2pGh0MKoThEqfQ266DhiBrZRPY 0OSHfjJoG2+BrsKok/QymLAdwFyhe6/5LlMP86tDQ4NDXizdww/JQ5nzbPPRFGI5 vzugI9OZoubcJBas82RsFU87nfIYU7vKlE+yo+l/MbiazYVu9Zvhebr6eN2InCU2 hmDe3Mj1SqMsgfI76lMVX0R5v1n6VZeCXA6JJdE3BCiE6YI0A8SrwLPh/GVil9Wa VCaNQUrlyBkY2c9XpuPj+jkmJv1D1CiEnCvvlva3tHRqD83OF/TUzP0o5uO+Ohil 7Q42H8E+YajiAaT91Pg1GnKsy+DRvLfYe1LkeQ== -----END CERTIFICATE-----Generated at Tue Oct 21 09:17:28 2025 by rpki-client