$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa File: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (raw, json) Hash identifier: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg= Subject key identifier: 75:2A:5B:F6:5F:8F:DD:EE:F9:41:E7:1B:CE:2E:C3:2B:3F:D1:09:DD Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 2DBAE2120C7401E89C74BC6907C6B77C10C9DEB5 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa Signing time: Mon 29 Sep 2025 11:00:03 +0000 ROA not before: Mon 29 Sep 2025 10:55:03 +0000 ROA not after: Mon 28 Sep 2026 11:00:03 +0000 asID: 138120 IP address blocks: 175.111.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ba:e2:12:0c:74:01:e8:9c:74:bc:69:07:c6:b7:7c:10:c9:de:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Sep 29 10:55:03 2025 GMT Not After : Sep 28 11:00:03 2026 GMT Subject: CN=752A5BF65F8FDDEEF941E71BCE2EC32B3FD109DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:e6:b5:be:d3:68:ed:ad:c0:68:56:e0:60: 35:02:e8:3d:49:9f:c7:45:b3:cd:5b:f2:75:eb:ac: 93:fc:87:1a:cb:91:d2:c0:26:9e:9f:e0:8d:38:32: fd:c5:ff:04:fa:9c:1d:5c:17:18:f4:f0:fb:21:b3: 82:bf:c9:8d:05:ed:36:9a:b2:a9:fa:4c:f4:ee:54: d8:17:4a:22:f3:90:1a:48:6a:e9:94:17:37:ce:74: 4a:28:96:d1:77:e7:b9:7c:a3:76:4d:2c:4d:55:24: 94:22:89:97:98:4f:a9:fa:97:0b:05:9f:c6:2c:25: 1d:a6:98:12:e3:0b:62:62:c4:3d:c8:40:38:18:1e: 75:46:3a:ae:30:f2:f0:b7:11:52:cc:ab:bd:ea:06: e7:64:bc:db:87:8a:45:b1:6c:5d:bc:b1:2d:bb:ba: 8f:68:d0:74:2f:e3:d5:51:04:e4:b6:94:81:52:e5: ab:75:de:fb:85:1b:92:19:d6:ca:2c:48:5b:e2:01: 64:f9:36:ec:76:2e:4d:3b:3f:72:94:7e:da:5d:aa: 91:d1:54:be:25:6d:82:7d:99:a6:ca:62:cd:7b:b1: f0:7d:cd:1e:6b:c5:5a:d9:ec:3d:15:aa:95:90:a2: 5e:63:e0:38:d5:61:27:4a:01:2c:e2:33:d6:2c:d3: 4f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2A:5B:F6:5F:8F:DD:EE:F9:41:E7:1B:CE:2E:C3:2B:3F:D1:09:DD X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.98.0/24 Signature Algorithm: sha256WithRSAEncryption b8:a5:dc:c2:6f:45:54:eb:b2:a5:31:01:71:46:9b:0a:3f:dc: 4a:fb:a3:3a:e7:37:cb:04:a7:da:eb:93:12:78:4a:30:f5:11: 84:69:64:92:3f:b0:99:fa:7c:c2:26:54:78:5a:32:4a:25:ef: bb:16:0c:68:95:91:0b:0c:2d:00:63:8b:b6:7b:e4:92:0e:34: ad:85:ab:4f:d0:66:a0:42:68:89:7f:bb:8e:3f:e9:06:c7:17: bb:12:07:98:38:c5:72:10:44:8d:a1:2c:a6:f2:4e:b1:2c:84: 76:4a:d2:db:05:ed:96:a0:d4:6f:f5:be:47:bf:58:aa:31:f3: 62:6b:95:e3:f9:05:66:d7:b3:b7:5f:a6:8b:a3:a3:d0:da:3c: 82:e6:4f:a6:91:cb:84:87:16:c4:c1:e0:7c:ab:77:31:39:2a: c1:20:75:d1:f4:36:73:a5:de:cd:86:a1:2b:cc:59:52:79:ec: fa:4f:36:c3:74:34:b2:02:40:85:1c:a8:d3:f9:72:e3:13:e8: 24:59:b4:56:36:92:87:05:e6:3b:c0:37:4b:c8:bc:a8:6c:a8: 2e:81:0a:d8:e6:a9:c9:eb:d2:ea:56:53:ca:a0:4e:87:4b:36: ee:08:f5:59:24:72:24:47:26:cf:96:07:a3:91:9b:9b:2e:92: 80:88:be:a6 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULbriEgx0AeicdLxpB8a3fBDJ3rUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTA5MjkxMDU1MDNaFw0yNjA5MjgxMTAwMDNaMDMxMTAvBgNV BAMTKDc1MkE1QkY2NUY4RkRERUVGOTQxRTcxQkNFMkVDMzJCM0ZEMTA5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmea1vtNo7a3AaFbgYDUC6D1J n8dFs81b8nXrrJP8hxrLkdLAJp6f4I04Mv3F/wT6nB1cFxj08Pshs4K/yY0F7Taa sqn6TPTuVNgXSiLzkBpIaumUFzfOdEooltF357l8o3ZNLE1VJJQiiZeYT6n6lwsF n8YsJR2mmBLjC2JixD3IQDgYHnVGOq4w8vC3EVLMq73qBudkvNuHikWxbF28sS27 uo9o0HQv49VRBOS2lIFS5at13vuFG5IZ1sosSFviAWT5Nux2Lk07P3KUftpdqpHR VL4lbYJ9mabKYs17sfB9zR5rxVrZ7D0VqpWQol5j4DjVYSdKASziM9Ys00+rAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUdSpb9l+P3e75Qecbzi7DKz/RCd0wHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiYThjZjY1LWQ0NjgtNDMwOS05 ZjMwLTliOWYyNmQ5Y2UyZC8wLzMxMzczNTJlMzEzMTMxMmUzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr29iMA0GCSqG SIb3DQEBCwUAA4IBAQC4pdzCb0VU67KlMQFxRpsKP9xK+6M65zfLBKfa65MSeEow 9RGEaWSSP7CZ+nzCJlR4WjJKJe+7FgxolZELDC0AY4u2e+SSDjSthatP0GagQmiJ f7uOP+kGxxe7EgeYOMVyEESNoSym8k6xLIR2StLbBe2WoNRv9b5Hv1iqMfNia5Xj +QVm17O3X6aLo6PQ2jyC5k+mkcuEhxbEweB8q3cxOSrBIHXR9DZzpd7NhqErzFlS eez6TzbDdDSyAkCFHKjT+XLjE+gkWbRWNpKHBeY7wDdLyLyobKgugQrY5qnJ69Lq VlPKoE6HSzbuCPVZJHIkRybPlgejkZubLpKAiL6m -----END CERTIFICATE-----Generated at Tue Oct 21 00:38:56 2025 by rpki-client