$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa File: 3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: tgGGslIm+JlwZ3B9SMFEH85qZqhmUeU8C5Oc+jwQtf0= Subject key identifier: 78:2F:5C:D6:26:B7:C8:FE:84:E6:83:63:E5:B7:60:A1:B9:A2:88:C0 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 5B344A501B338F13F272453243A1C6BABE3A6F12 Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa Signing time: Tue 19 Aug 2025 01:00:00 +0000 ROA not before: Tue 19 Aug 2025 00:55:00 +0000 ROA not after: Tue 18 Aug 2026 01:00:00 +0000 asID: 38149 IP address blocks: 150.129.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 06:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:34:4a:50:1b:33:8f:13:f2:72:45:32:43:a1:c6:ba:be:3a:6f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Aug 19 00:55:00 2025 GMT Not After : Aug 18 01:00:00 2026 GMT Subject: CN=782F5CD626B7C8FE84E68363E5B760A1B9A288C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:d6:8f:83:a8:f3:bd:b7:78:ae:21:1c:17: a2:2c:5a:bd:e9:94:91:99:30:50:17:e1:99:c5:f2: 57:3f:11:80:a3:2d:3c:62:32:06:34:73:42:f1:fa: 57:cc:11:93:f6:c8:0a:5b:91:0c:b3:30:2e:84:43: 2a:a6:64:67:73:86:80:0e:93:25:02:41:4a:b8:83: ed:ce:32:a0:ad:47:b7:38:17:4e:e8:f4:e0:4e:b2: 30:cc:3b:46:c1:ed:5e:37:df:53:06:e8:e9:57:d1: 80:b0:7f:25:9f:6b:38:81:fd:96:78:92:bc:fb:c2: 51:0d:fe:0e:10:70:89:d8:f8:4a:0a:54:73:fd:13: f2:ed:ce:44:15:d5:93:57:10:51:91:a7:fe:ca:37: f3:74:ab:61:4d:e9:ed:1b:f2:eb:f5:11:03:51:33: 50:50:cc:87:db:d7:fd:ea:ff:6c:77:83:91:81:44: cb:c6:4d:20:67:4a:5c:7a:a5:ae:65:67:6b:c8:68: d1:bc:ea:1e:87:67:9c:fb:dd:89:51:e5:8e:16:37: 7d:ff:c4:15:57:da:73:85:a2:e1:22:94:61:20:17: f0:31:84:f7:10:b4:54:3d:59:a9:72:88:55:6d:f8: b3:91:0e:ef:6a:41:f0:78:9b:e0:e1:64:45:32:c8: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2F:5C:D6:26:B7:C8:FE:84:E6:83:63:E5:B7:60:A1:B9:A2:88:C0 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138382e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.188.0/24 Signature Algorithm: sha256WithRSAEncryption 72:4a:e4:70:7a:74:56:0f:ac:1c:d4:bd:04:b2:62:91:fc:24: 98:53:f7:76:1c:8d:d4:a8:3d:b3:31:22:e8:a8:ab:e0:e3:57: e0:8d:63:d3:4e:31:6a:c2:5b:c3:35:3b:ac:f8:6a:a5:5e:74: 88:96:c7:18:4d:e2:7d:d8:63:ab:b4:e0:94:c6:2d:44:00:37: 43:7d:19:93:ae:f1:96:cf:94:51:3f:89:ef:98:cf:05:ab:eb: 30:78:c0:3b:8d:96:26:1b:55:08:b3:5b:d8:f4:98:ed:ba:6c: 75:08:6c:67:ef:d2:bc:c1:17:dd:17:9e:62:c4:64:69:3c:2c: c7:c1:d3:11:c3:c0:b4:bd:b8:dd:dd:17:c2:2c:3e:5e:ad:70: 4a:0e:61:d9:5d:31:9c:5b:13:01:cb:9a:e7:16:b5:d2:19:ea: 21:f8:67:16:3e:00:e9:39:e3:0f:88:cf:d5:d9:64:0e:53:07: 5a:6d:06:f1:72:a7:bf:06:29:e8:72:81:7f:45:b5:c0:26:60: 1b:2e:41:e4:52:1a:f1:f3:86:82:64:0b:65:11:99:9b:78:e2: cf:5d:d1:5a:88:ec:e1:fd:43:bf:29:d8:2d:8c:37:c0:81:d2: 0f:a4:d7:7e:d8:c5:4c:ac:8a:47:58:40:fb:d3:23:1f:be:27: 63:d3:8a:27 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWzRKUBszjxPyckUyQ6HGur46bxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA4MTkwMDU1MDBaFw0yNjA4MTgwMTAwMDBaMDMxMTAvBgNV BAMTKDc4MkY1Q0Q2MjZCN0M4RkU4NEU2ODM2M0U1Qjc2MEExQjlBMjg4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNtaPg6jzvbd4riEcF6IsWr3p lJGZMFAX4ZnF8lc/EYCjLTxiMgY0c0Lx+lfMEZP2yApbkQyzMC6EQyqmZGdzhoAO kyUCQUq4g+3OMqCtR7c4F07o9OBOsjDMO0bB7V4331MG6OlX0YCwfyWfaziB/ZZ4 krz7wlEN/g4QcInY+EoKVHP9E/LtzkQV1ZNXEFGRp/7KN/N0q2FN6e0b8uv1EQNR M1BQzIfb1/3q/2x3g5GBRMvGTSBnSlx6pa5lZ2vIaNG86h6HZ5z73YlR5Y4WN33/ xBVX2nOFouEilGEgF/AxhPcQtFQ9WalyiFVt+LORDu9qQfB4m+DhZEUyyLUHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUeC9c1ia3yP6E5oNj5bdgobmiiMAwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzUzMDJlMzEzMjM5MmUzMTM4MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAloG8MA0GCSqG SIb3DQEBCwUAA4IBAQBySuRwenRWD6wc1L0EsmKR/CSYU/d2HI3UqD2zMSLoqKvg 41fgjWPTTjFqwlvDNTus+GqlXnSIlscYTeJ92GOrtOCUxi1EADdDfRmTrvGWz5RR P4nvmM8Fq+sweMA7jZYmG1UIs1vY9Jjtumx1CGxn79K8wRfdF55ixGRpPCzHwdMR w8C0vbjd3RfCLD5erXBKDmHZXTGcWxMBy5rnFrXSGeoh+GcWPgDpOeMPiM/V2WQO UwdabQbxcqe/BinocoF/RbXAJmAbLkHkUhrx84aCZAtlEZmbeOLPXdFaiOzh/UO/ KdgtjDfAgdIPpNd+2MVMrIpHWED70yMfvidj04on -----END CERTIFICATE-----Generated at Sun Aug 24 09:31:24 2025 by rpki-client