$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa File: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (raw, json) Hash identifier: wP7WlQEFbQk8vKWjoSw9Vlhgkk9UBNqB1fB0mYPDnk8= Subject key identifier: 8C:8B:BE:48:E2:6F:E3:12:DF:A6:76:83:72:73:F1:8F:16:88:9B:90 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 2689A72C9CFDFEA4DC4BCC71A034D59F572C0912 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa Signing time: Thu 08 May 2025 07:00:03 +0000 ROA not before: Thu 08 May 2025 06:55:03 +0000 ROA not after: Thu 07 May 2026 07:00:03 +0000 asID: 152769 IP address blocks: 157.15.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 10:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:89:a7:2c:9c:fd:fe:a4:dc:4b:cc:71:a0:34:d5:9f:57:2c:09:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: May 8 06:55:03 2025 GMT Not After : May 7 07:00:03 2026 GMT Subject: CN=8C8BBE48E26FE312DFA676837273F18F16889B90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bd:e1:34:c8:fe:68:71:30:70:f9:ff:87:29: 08:41:bd:51:a7:1c:f4:f9:26:b9:01:9f:6a:88:d6: ab:44:db:33:23:12:83:ed:45:97:46:39:72:b9:cc: db:34:1d:a6:92:e4:63:7c:c0:e7:90:77:59:6c:cd: 48:d1:4d:1b:c5:ba:21:79:26:5b:d4:33:f8:f7:ee: 36:bf:1e:da:5d:79:e0:1f:58:49:01:35:bc:7d:29: b2:ad:02:04:79:08:82:77:10:e4:c8:cd:85:49:ae: 4b:a0:80:83:d3:4d:c4:41:c8:c7:05:97:b4:ad:3f: 86:2a:ac:26:dc:5e:85:ff:2c:5e:f0:d3:0d:a4:c0: 18:b8:90:62:8b:a8:54:6d:bb:53:a9:48:dc:fc:d8: 6d:84:06:1b:2e:4b:b2:e1:62:d0:89:fe:46:37:ed: a2:1d:e7:9b:05:0d:9d:cb:04:ee:d4:ed:74:d2:a4: a9:2d:39:2d:87:2b:0f:39:0e:be:06:17:7c:ab:11: b5:a1:e9:05:de:78:7f:ae:df:b6:bb:86:27:d8:06: 94:e3:ab:21:7d:ba:cc:68:84:bb:60:47:e9:23:81: 80:73:df:8e:2e:78:fd:ed:9d:bf:c5:e0:57:18:f1: b9:92:6d:73:a0:b6:64:e1:7c:7f:43:89:d7:6f:65: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8B:BE:48:E2:6F:E3:12:DF:A6:76:83:72:73:F1:8F:16:88:9B:90 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/3135372e31352e302e302f32332d3234203d3e20313532373639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.0.0/23 Signature Algorithm: sha256WithRSAEncryption 31:a2:7b:26:9a:d5:b5:98:ac:9c:3b:e5:14:15:0c:6e:78:28: cf:94:57:f5:19:a1:1c:74:82:6e:a0:61:71:c9:d7:64:64:7e: bc:51:13:49:22:48:a3:2c:35:8c:be:bf:c9:2c:87:dd:8c:1c: e4:e5:02:b7:db:6a:b3:3b:96:ba:b6:94:c5:82:de:34:4b:37: 7a:e4:ad:f1:b4:ae:07:66:4d:dc:58:ca:32:d8:25:30:40:88: b5:a8:d6:5a:a9:16:42:47:df:09:59:bb:a4:36:e8:67:f9:a4: 87:33:d0:b1:40:72:8b:b8:14:ef:b1:4e:6f:18:e7:2e:80:12: 74:03:f3:e3:e9:4d:2e:73:e3:43:0c:09:3d:1e:94:62:f8:b2: 86:ff:b3:31:ed:c8:63:2e:81:05:23:2f:bf:5a:12:66:a5:db: 8e:40:cb:df:30:a8:7d:a1:57:e8:2b:72:3d:8a:c8:b4:65:50: db:6a:85:db:3e:b3:31:36:2b:c3:c9:e0:78:9d:2a:db:0b:8d: 0c:24:36:2d:c4:bd:89:b1:05:ba:55:d9:23:9b:57:35:f6:4d: 8a:4e:bb:77:4a:2c:d8:65:3f:1a:22:53:57:5f:c4:33:e8:73: 82:9e:72:8c:a7:50:f0:96:f4:ae:dc:58:0b:9d:c7:7a:e4:f9: 3b:6c:85:b3 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUJomnLJz9/qTcS8xxoDTVn1csCRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNTA1MDgwNjU1MDNaFw0yNjA1MDcwNzAwMDNaMDMxMTAvBgNV BAMTKDhDOEJCRTQ4RTI2RkUzMTJERkE2NzY4MzcyNzNGMThGMTY4ODlCOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTveE0yP5ocTBw+f+HKQhBvVGn HPT5JrkBn2qI1qtE2zMjEoPtRZdGOXK5zNs0HaaS5GN8wOeQd1lszUjRTRvFuiF5 JlvUM/j37ja/HtpdeeAfWEkBNbx9KbKtAgR5CIJ3EOTIzYVJrkuggIPTTcRByMcF l7StP4YqrCbcXoX/LF7w0w2kwBi4kGKLqFRtu1OpSNz82G2EBhsuS7LhYtCJ/kY3 7aId55sFDZ3LBO7U7XTSpKktOS2HKw85Dr4GF3yrEbWh6QXeeH+u37a7hifYBpTj qyF9usxohLtgR+kjgYBz344ueP3tnb/F4FcY8bmSbXOgtmThfH9DiddvZcZLAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUjIu+SOJv4xLfpnaDcnPxjxaIm5AwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0NjEzN2FlLTJlZmItNDNjMC1i ZGI3LTQzZjVkOTM5Y2YwYy8wLzMxMzUzNzJlMzEzNTJlMzAyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzMTM1MzIzNzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdDwAwDQYJKoZIhvcN AQELBQADggEBADGieyaa1bWYrJw75RQVDG54KM+UV/UZoRx0gm6gYXHJ12RkfrxR E0kiSKMsNYy+v8ksh92MHOTlArfbarM7lrq2lMWC3jRLN3rkrfG0rgdmTdxYyjLY JTBAiLWo1lqpFkJH3wlZu6Q26Gf5pIcz0LFAcou4FO+xTm8Y5y6AEnQD8+PpTS5z 40MMCT0elGL4sob/szHtyGMugQUjL79aEmal245Ay98wqH2hV+grcj2KyLRlUNtq hds+szE2K8PJ4HidKtsLjQwkNi3EvYmxBbpV2SObVzX2TYpOu3dKLNhlPxoiU1df xDPoc4KecoynUPCW9K7cWAudx3rk+TtshbM= -----END CERTIFICATE-----Generated at Thu May 8 19:36:14 2025 by rpki-client