$ rpki-client -vvf repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa File: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: 31mkkj2+9HZK3DntlbInuHBDcdFSQRlGXD8Zmc4rUM0= Subject key identifier: 2B:5E:C6:9E:C2:DD:D3:EA:23:2D:42:1F:5C:28:FF:72:58:83:1D:03 Certificate issuer: /CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Certificate serial: 6531D641972E253322F0C25393FE21B168063A1C Authority key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa Signing time: Tue 19 Aug 2025 01:00:01 +0000 ROA not before: Tue 19 Aug 2025 00:55:01 +0000 ROA not after: Tue 18 Aug 2026 01:00:01 +0000 asID: 38149 IP address blocks: 150.129.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 06:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:31:d6:41:97:2e:25:33:22:f0:c2:53:93:fe:21:b1:68:06:3a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Validity Not Before: Aug 19 00:55:01 2025 GMT Not After : Aug 18 01:00:01 2026 GMT Subject: CN=2B5EC69EC2DDD3EA232D421F5C28FF7258831D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b5:b7:f4:a2:66:36:65:19:81:d9:86:d8:f4: 4d:0f:73:3d:fc:9c:16:ec:7b:25:1d:85:75:a1:60: fa:28:f2:2f:5c:f5:19:c4:f2:27:53:c5:3a:6e:6a: e5:27:90:e0:59:53:aa:e1:9f:ad:37:ac:1a:67:64: a4:ff:64:8e:92:d4:c7:5c:41:44:26:34:aa:6f:a8: f1:52:31:24:1e:7e:9d:75:57:86:45:97:d0:8c:3d: b4:0e:28:18:d1:f0:a5:63:eb:d6:0b:a0:6a:3f:c3: 68:db:6d:eb:62:02:a5:d0:7a:3e:1b:c1:51:11:6d: ed:fa:c3:a8:77:fe:69:7e:4c:e6:79:98:ab:1e:b2: 39:64:9f:8b:4f:a6:75:e6:81:4a:7b:2b:3f:af:79: 5f:44:46:27:24:e6:49:b4:0f:df:0f:cd:c0:78:76: 4b:d9:6a:a4:02:ea:01:86:15:35:03:1f:15:e9:34: ad:7e:cc:f0:5b:e8:7b:0d:ac:b9:82:35:38:5e:ad: 83:db:97:17:e0:69:61:a7:d2:e0:8b:1d:ff:f7:06: b5:e8:76:33:ca:d9:9e:0c:db:40:ba:74:11:02:d0: 22:49:8d:51:32:16:d9:68:f4:e4:72:4b:43:51:7c: b4:cc:58:8f:af:4e:94:62:93:21:93:50:87:ce:15: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5E:C6:9E:C2:DD:D3:EA:23:2D:42:1F:5C:28:FF:72:58:83:1D:03 X509v3 Authority Key Identifier: keyid:50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.189.0/24 Signature Algorithm: sha256WithRSAEncryption 83:78:f8:8d:4e:e8:07:77:78:e0:84:bb:d3:34:67:9b:e7:3b: 8c:05:89:09:46:bc:a3:7f:46:1d:98:45:03:83:46:f8:7a:12: c8:c7:80:70:0f:91:b6:ef:23:d1:6f:52:56:9e:78:c0:3c:6b: 4b:94:21:45:73:00:9d:f2:a7:93:dc:ad:69:c8:ba:0a:20:30: 43:02:0e:b8:23:1e:04:53:ad:0c:71:c1:ec:24:30:db:0f:cb: 8d:45:a8:2e:ff:90:b4:bb:10:d8:92:e5:79:38:c1:98:fb:ff: 13:f5:8d:e7:d8:12:92:38:2b:c1:c1:5d:d9:50:34:d8:c5:b2: 96:a8:8f:41:b0:bc:ac:b9:b1:ef:2e:d9:61:e5:c0:e2:f2:56: 62:0e:5e:88:b4:73:c1:7b:d1:e1:83:f5:85:0b:a1:8c:b7:58: 1e:4d:74:ef:30:9b:86:c1:e6:a6:90:57:27:36:c8:c0:38:2c: 64:f9:86:c0:97:39:51:bd:57:a6:03:a7:49:d8:aa:c6:4a:72: 93:49:2b:fe:7d:e8:fc:35:82:86:4d:3d:5a:41:26:a4:20:a8: 75:25:31:25:e0:ae:44:5c:5c:b2:e4:90:a1:04:94:7c:9c:ad: 6b:84:a2:f0:1a:c4:7a:f9:6b:f9:8b:6f:ac:60:96:e5:2a:4d: b2:95:6f:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZTHWQZcuJTMi8MJTk/4hsWgGOhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFB OEY5OTE1MDAeFw0yNTA4MTkwMDU1MDFaFw0yNjA4MTgwMTAwMDFaMDMxMTAvBgNV BAMTKDJCNUVDNjlFQzJEREQzRUEyMzJENDIxRjVDMjhGRjcyNTg4MzFEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrtbf0omY2ZRmB2YbY9E0Pcz38 nBbseyUdhXWhYPoo8i9c9RnE8idTxTpuauUnkOBZU6rhn603rBpnZKT/ZI6S1Mdc QUQmNKpvqPFSMSQefp11V4ZFl9CMPbQOKBjR8KVj69YLoGo/w2jbbetiAqXQej4b wVERbe36w6h3/ml+TOZ5mKsesjlkn4tPpnXmgUp7Kz+veV9ERick5km0D98PzcB4 dkvZaqQC6gGGFTUDHxXpNK1+zPBb6HsNrLmCNTherYPblxfgaWGn0uCLHf/3BrXo djPK2Z4M20C6dBEC0CJJjVEyFtlo9ORyS0NRfLTMWI+vTpRikyGTUIfOFVa3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUK17GnsLd0+ojLUIfXCj/cliDHQMwHwYDVR0j BBgwFoAUUFjLxa8hKAVGiH3vbPpDQaj5kVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMC81MDU4Q0JDNUFG MjEyODA1NDY4ODdERUY2Q0ZBNDM0MUE4Rjk5MTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTA1OENCQzVBRjIxMjgwNTQ2ODg3REVGNkNGQTQzNDFBOEY5 OTE1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzUzMDJlMzEzMjM5MmUzMTM4MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAloG9MA0GCSqG SIb3DQEBCwUAA4IBAQCDePiNTugHd3jghLvTNGeb5zuMBYkJRryjf0YdmEUDg0b4 ehLIx4BwD5G27yPRb1JWnnjAPGtLlCFFcwCd8qeT3K1pyLoKIDBDAg64Ix4EU60M ccHsJDDbD8uNRagu/5C0uxDYkuV5OMGY+/8T9Y3n2BKSOCvBwV3ZUDTYxbKWqI9B sLysubHvLtlh5cDi8lZiDl6ItHPBe9Hhg/WFC6GMt1geTXTvMJuGweamkFcnNsjA OCxk+YbAlzlRvVemA6dJ2KrGSnKTSSv+fej8NYKGTT1aQSakIKh1JTEl4K5EXFyy 5JChBJR8nK1rhKLwGsR6+Wv5i2+sYJblKk2ylW/3 -----END CERTIFICATE-----Generated at Sun Aug 24 09:31:25 2025 by rpki-client