$ rpki-client -vvf repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203134363138.roa File: 3135372e36362e3134322e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: Aqb3Rff8cnEuvXpd1W9ojs0mMU2mmA+sLqe/bSrMJgo= Subject key identifier: 59:B1:61:EA:E3:03:E7:6C:66:05:18:FF:FE:A3:3D:F0:D3:2C:DF:A8 Certificate issuer: /CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Certificate serial: 2A58207FAD4163BF530CC615A9ED521BE4535B1D Authority key identifier: 9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203134363138.roa Signing time: Mon 05 May 2025 17:00:00 +0000 ROA not before: Mon 05 May 2025 16:55:00 +0000 ROA not after: Mon 04 May 2026 17:00:00 +0000 asID: 14618 IP address blocks: 157.66.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:58:20:7f:ad:41:63:bf:53:0c:c6:15:a9:ed:52:1b:e4:53:5b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9C0CD04CE56225A0085EF8AB28640C3808768B42 Validity Not Before: May 5 16:55:00 2025 GMT Not After : May 4 17:00:00 2026 GMT Subject: CN=59B161EAE303E76C660518FFFEA33DF0D32CDFA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:72:3f:25:7e:0d:ba:dc:68:90:ac:dc:c3: d2:29:be:5a:7a:b2:f3:98:ef:89:b7:31:58:dc:ae: 2e:e7:79:4e:70:47:6e:fa:db:0f:d3:b3:32:60:0a: 8b:b5:9a:c2:cc:ef:c7:2e:22:59:39:d8:cf:fb:9f: c1:c2:f3:98:96:fb:de:a5:f1:c9:8e:f8:46:48:00: 57:8a:58:f6:39:bf:22:8c:30:3b:a5:6a:c2:85:fc: f3:63:5d:44:37:73:9e:bf:a2:0b:cc:6f:cb:c3:dc: 67:19:3e:ff:51:86:54:3f:22:28:60:68:1c:6f:87: 5f:6b:24:cc:ff:55:1b:d0:56:df:92:f1:79:af:8c: da:6f:9a:33:e2:45:b3:f1:ad:92:1e:18:56:e5:d4: 34:ac:54:9d:5b:4a:f4:09:35:92:82:b7:4c:03:08: 15:81:91:d5:aa:9f:b3:9b:80:3c:9c:fd:97:55:03: e9:f9:cd:24:41:77:ca:cd:5b:0a:f5:1a:57:96:5e: 1e:8b:57:53:d1:23:ce:4c:fc:78:c9:8a:ff:e2:6f: 22:cb:c7:3e:e1:89:6f:f7:61:f4:bd:fd:98:6d:27: b0:58:7f:fe:7a:a0:a5:ee:2e:9d:c4:79:16:9e:a9: 25:6b:fd:f7:d8:bd:76:5b:b3:c5:58:52:22:45:4e: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:61:EA:E3:03:E7:6C:66:05:18:FF:FE:A3:3D:F0:D3:2C:DF:A8 X509v3 Authority Key Identifier: keyid:9C:0C:D0:4C:E5:62:25:A0:08:5E:F8:AB:28:64:0C:38:08:76:8B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/9C0CD04CE56225A0085EF8AB28640C3808768B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9C0CD04CE56225A0085EF8AB28640C3808768B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6311f89-38fd-4424-8a96-fa2172d87d6f/0/3135372e36362e3134322e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.142.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:48:c8:89:a8:86:a2:93:e5:31:15:6c:f4:e9:4c:fc:df:ff: 7d:87:83:86:3d:b0:59:60:29:d3:85:48:e5:4d:c8:ce:c2:d3: e3:f6:f2:9f:02:20:a5:25:1e:c4:f6:3f:ae:12:11:38:43:84: c8:aa:37:6e:07:63:ef:26:aa:e1:11:5d:95:21:3a:17:b3:ec: df:d6:97:55:67:96:1d:9a:f5:9f:52:1f:88:3d:b1:8a:99:83: b6:29:35:74:84:1b:06:f6:03:9c:f1:47:15:fd:bd:5c:a2:d9: 74:13:b9:80:9d:15:fb:cf:08:23:f5:f9:aa:03:09:b4:aa:a0: 6f:fa:0c:c6:e5:33:d9:68:f8:72:c9:10:67:0a:6a:1a:4c:13: 3b:40:a6:79:06:62:33:fc:88:fc:4a:f9:03:c3:d0:7e:2d:c2: 3f:e6:08:a4:51:fc:a5:c3:42:2a:8c:ea:fa:3f:90:e2:af:0c: e6:63:2a:8d:14:ab:d8:db:30:21:de:71:7d:78:5f:43:f8:77: 16:7f:fd:ea:bd:b4:2c:cb:55:22:89:a1:b7:a2:24:cf:45:38: b3:62:43:05:a1:f2:38:e9:e0:34:76:19:bb:09:4a:0f:56:0d: d6:c6:55:cb:d5:ba:9b:37:43:bf:73:d1:f0:47:71:1a:f2:a3: a1:92:3f:37 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKlggf61BY79TDMYVqe1SG+RTWx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgw ODc2OEI0MjAeFw0yNTA1MDUxNjU1MDBaFw0yNjA1MDQxNzAwMDBaMDMxMTAvBgNV BAMTKDU5QjE2MUVBRTMwM0U3NkM2NjA1MThGRkZFQTMzREYwRDMyQ0RGQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgSXI/JX4NutxokKzcw9Ipvlp6 svOY74m3MVjcri7neU5wR2762w/TszJgCou1msLM78cuIlk52M/7n8HC85iW+96l 8cmO+EZIAFeKWPY5vyKMMDulasKF/PNjXUQ3c56/ogvMb8vD3GcZPv9RhlQ/Iihg aBxvh19rJMz/VRvQVt+S8XmvjNpvmjPiRbPxrZIeGFbl1DSsVJ1bSvQJNZKCt0wD CBWBkdWqn7ObgDyc/ZdVA+n5zSRBd8rNWwr1GleWXh6LV1PRI85M/HjJiv/ibyLL xz7hiW/3YfS9/ZhtJ7BYf/56oKXuLp3EeRaeqSVr/ffYvXZbs8VYUiJFTn+LAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUWbFh6uMD52xmBRj//qM98NMs36gwHwYDVR0j BBgwFoAUnAzQTOViJaAIXvirKGQMOAh2i0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjMxMWY4OS0zOGZkLTQ0MjQtOGE5Ni1mYTIxNzJkODdkNmYvMC85QzBDRDA0Q0U1 NjIyNUEwMDg1RUY4QUIyODY0MEMzODA4NzY4QjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUMwQ0QwNENFNTYyMjVBMDA4NUVGOEFCMjg2NDBDMzgwODc2 OEI0Mi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2MzExZjg5LTM4ZmQtNDQyNC04 YTk2LWZhMjE3MmQ4N2Q2Zi8wLzMxMzUzNzJlMzYzNjJlMzEzNDMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDM2MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CjjANBgkqhkiG 9w0BAQsFAAOCAQEATkjIiaiGopPlMRVs9OlM/N//fYeDhj2wWWAp04VI5U3IzsLT 4/bynwIgpSUexPY/rhIROEOEyKo3bgdj7yaq4RFdlSE6F7Ps39aXVWeWHZr1n1If iD2xipmDtik1dIQbBvYDnPFHFf29XKLZdBO5gJ0V+88II/X5qgMJtKqgb/oMxuUz 2Wj4cskQZwpqGkwTO0CmeQZiM/yI/Er5A8PQfi3CP+YIpFH8pcNCKozq+j+Q4q8M 5mMqjRSr2NswId5xfXhfQ/h3Fn/96r20LMtVIomht6Ikz0U4s2JDBaHyOOngNHYZ uwlKD1YN1sZVy9W6mzdDv3PR8EdxGvKjoZI/Nw== -----END CERTIFICATE-----Generated at Sat May 10 19:16:16 2025 by rpki-client