$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa File: 3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa (raw, json) Hash identifier: ZHedf5a1rG9lJeS0uS/ImmLjDRCP4CcA2uNcNO56l7I= Subject key identifier: F8:B0:6E:9A:FE:5E:14:C3:26:87:46:47:41:8A:09:A8:8E:55:B1:A8 Certificate issuer: /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Certificate serial: 0601DE0E0B7EB1603283FC2C9ED1D9255922AAE3 Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa Signing time: Fri 26 Sep 2025 05:00:01 +0000 ROA not before: Fri 26 Sep 2025 04:55:01 +0000 ROA not after: Fri 25 Sep 2026 05:00:01 +0000 asID: 18059 IP address blocks: 150.107.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 15:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:01:de:0e:0b:7e:b1:60:32:83:fc:2c:9e:d1:d9:25:59:22:aa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Validity Not Before: Sep 26 04:55:01 2025 GMT Not After : Sep 25 05:00:01 2026 GMT Subject: CN=F8B06E9AFE5E14C326874647418A09A88E55B1A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:96:e7:d0:b8:9b:26:02:a6:a8:15:38:68:0e: f1:c2:d2:21:02:b3:8a:e1:aa:ef:48:db:ec:99:0e: 33:be:f9:7c:ca:76:83:8f:cf:2f:b2:4d:41:37:45: 8b:38:b7:9d:2f:dd:fe:4e:06:e2:6a:07:2c:1d:e2: f8:31:44:2e:5b:03:5a:7e:57:88:98:d2:e1:61:f7: 3e:ab:71:73:53:39:e6:44:9f:9b:4c:bc:c3:ed:9a: 83:69:e4:24:7e:d7:91:b5:61:62:49:8f:6e:fe:36: 45:1c:6f:6f:21:56:ea:4b:5e:52:9a:43:17:d0:0c: c1:fe:5b:da:ff:80:3f:14:5d:2f:d7:a8:56:3c:80: ec:38:4e:93:ed:2e:59:2f:44:92:9b:87:02:14:9a: 66:d6:d3:c0:90:42:12:74:c5:7a:b9:1f:47:0b:37: 8f:5a:ef:d2:50:74:ef:de:ce:12:c4:2d:d9:38:9c: 24:e6:96:81:4d:6c:eb:d1:8f:74:23:d0:f1:44:eb: 2c:2a:ef:96:b9:89:d4:e7:54:28:97:a0:fa:76:00: 39:86:dc:c3:2c:c2:1b:3e:7c:70:66:73:9b:71:7f: c3:e9:a4:c5:69:b9:ca:e6:27:83:d5:b2:8c:5a:fc: 90:4f:7a:76:fb:6d:84:9e:3f:78:c4:75:26:df:18: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B0:6E:9A:FE:5E:14:C3:26:87:46:47:41:8A:09:A8:8E:55:B1:A8 X509v3 Authority Key Identifier: keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3131312e302f32342d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.111.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:83:d5:2d:26:20:19:79:c8:12:19:1b:c8:6c:f8:ad:74:85: a9:2d:8b:0b:f7:27:c8:d8:23:38:da:bb:85:c6:2c:8e:cb:bc: 4d:40:9a:fd:23:93:74:41:00:4d:72:4a:19:52:1e:19:1d:59: 70:03:42:7b:cd:fd:50:d9:8e:57:e7:44:9b:0c:8d:69:a5:ce: f9:7b:e2:10:99:87:a4:99:09:90:a1:3e:18:c8:2f:0c:44:dc: 22:a2:25:3c:d6:89:97:32:1e:8c:a2:52:72:35:5d:cf:d1:56: 55:5f:ef:aa:56:f5:b5:97:d9:3f:3a:44:99:13:e6:24:0b:42: 25:41:2c:94:aa:13:95:0a:aa:8a:49:a6:e3:bd:c2:cf:7b:dc: e5:1d:af:e8:97:70:73:01:45:17:70:17:b3:99:8d:b7:43:f6: 89:29:3e:07:0b:3f:9f:60:74:97:d7:46:db:67:4f:f6:bc:b1: 29:fe:d8:bc:78:5d:b9:6c:49:cb:e6:f7:c9:83:55:41:72:c9: f9:2e:e4:7f:31:00:28:7d:24:17:14:65:0e:53:51:38:e0:77: c0:63:10:ef:72:30:d5:e2:87:c4:da:e0:26:3b:1c:41:6e:58: 7e:db:0e:98:99:a5:b3:e4:f6:80:5e:92:a7:da:07:92:3a:4e: 36:a1:02:4b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBgHeDgt+sWAyg/wsntHZJVkiquMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2 QzhBMUQ4RTAeFw0yNTA5MjYwNDU1MDFaFw0yNjA5MjUwNTAwMDFaMDMxMTAvBgNV BAMTKEY4QjA2RTlBRkU1RTE0QzMyNjg3NDY0NzQxOEEwOUE4OEU1NUIxQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlufQuJsmAqaoFThoDvHC0iEC s4rhqu9I2+yZDjO++XzKdoOPzy+yTUE3RYs4t50v3f5OBuJqBywd4vgxRC5bA1p+ V4iY0uFh9z6rcXNTOeZEn5tMvMPtmoNp5CR+15G1YWJJj27+NkUcb28hVupLXlKa QxfQDMH+W9r/gD8UXS/XqFY8gOw4TpPtLlkvRJKbhwIUmmbW08CQQhJ0xXq5H0cL N49a79JQdO/ezhLELdk4nCTmloFNbOvRj3Qj0PFE6ywq75a5idTnVCiXoPp2ADmG 3MMswhs+fHBmc5txf8PppMVpucrmJ4PVsoxa/JBPenb7bYSeP3jEdSbfGO+fAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+LBumv5eFMMmh0ZHQYoJqI5VsagwHwYDVR0j BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1 MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMxMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmtvMA0GCSqG SIb3DQEBCwUAA4IBAQAdg9UtJiAZecgSGRvIbPitdIWpLYsL9yfI2CM42ruFxiyO y7xNQJr9I5N0QQBNckoZUh4ZHVlwA0J7zf1Q2Y5X50SbDI1ppc75e+IQmYekmQmQ oT4YyC8MRNwioiU81omXMh6MolJyNV3P0VZVX++qVvW1l9k/OkSZE+YkC0IlQSyU qhOVCqqKSabjvcLPe9zlHa/ol3BzAUUXcBezmY23Q/aJKT4HCz+fYHSX10bbZ0/2 vLEp/ti8eF25bEnL5vfJg1VBcsn5LuR/MQAofSQXFGUOU1E44HfAYxDvcjDV4ofE 2uAmOxxBblh+2w6YmaWz5PaAXpKn2geSOk42oQJL -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:04 2025 by rpki-client