$ rpki-client -vvf repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/3135372e32302e33382e302f32332d3234203d3e20313532333838.roa File: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (raw, json) Hash identifier: mVf5a9vExgGJKEfnRVhSrrkQjjAkp42h9gYkIf1hcMA= Subject key identifier: 7C:DE:2F:E2:52:3B:69:97:C7:17:35:C0:E0:31:C9:6B:0D:E1:73:B3 Certificate issuer: /CN=170979C0E31958FA76259F360B8405233C40BA7A Certificate serial: 3AAB2EC0D236E12DAA2B11D801CF7222AA829A48 Authority key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/3135372e32302e33382e302f32332d3234203d3e20313532333838.roa Signing time: Thu 08 May 2025 06:00:01 +0000 ROA not before: Thu 08 May 2025 05:55:01 +0000 ROA not after: Thu 07 May 2026 06:00:01 +0000 asID: 152388 IP address blocks: 157.20.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ab:2e:c0:d2:36:e1:2d:aa:2b:11:d8:01:cf:72:22:aa:82:9a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170979C0E31958FA76259F360B8405233C40BA7A Validity Not Before: May 8 05:55:01 2025 GMT Not After : May 7 06:00:01 2026 GMT Subject: CN=7CDE2FE2523B6997C71735C0E031C96B0DE173B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:69:c9:51:67:bd:f5:fc:be:3e:73:bc:0d: a2:c5:52:e8:4d:97:3b:5b:90:8d:d9:92:49:c8:2b: 05:ed:7a:19:06:f8:b9:7f:be:51:11:47:9c:3f:3f: 0d:f0:71:02:7b:c0:3a:5b:b6:8a:e4:ae:c4:d2:e4: 02:c5:eb:d4:62:35:00:33:f5:fe:76:89:4e:4a:16: 11:50:86:50:53:02:39:93:19:b8:4b:c5:fb:8b:be: 78:57:98:56:00:fd:63:71:dc:1b:a4:6e:7f:f9:2f: aa:f7:b9:8a:7e:cb:23:90:71:6c:01:85:de:02:e2: 4c:e8:96:a5:d4:a0:71:3a:29:7d:19:52:2b:c4:e3: 61:6d:e2:78:8f:cc:93:99:9c:84:d3:3a:c1:a5:27: 3c:3e:23:b3:62:ca:a9:e6:cd:ee:61:bc:de:0c:dc: 8b:0c:a3:c8:d1:c2:8b:74:23:68:e0:c0:90:23:7b: 4e:16:30:4b:10:52:63:ad:34:a6:c1:9d:98:d3:dd: c2:a0:86:90:e7:4e:52:fa:9c:61:ce:82:be:fe:d8: 70:5c:87:a5:c4:4c:64:8f:01:b3:72:d8:d6:96:3c: 24:46:bd:44:59:59:71:a6:aa:b9:32:7e:4f:b3:86: 8a:7b:59:76:63:99:b4:7a:65:bd:c0:99:5a:15:ed: dd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DE:2F:E2:52:3B:69:97:C7:17:35:C0:E0:31:C9:6B:0D:E1:73:B3 X509v3 Authority Key Identifier: keyid:17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/3135372e32302e33382e302f32332d3234203d3e20313532333838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.38.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:65:e3:10:72:cc:68:35:77:2d:5f:ca:19:55:f8:a4:ef:99: 7e:98:06:b8:de:29:86:ac:2a:c2:2d:b0:70:82:42:13:7f:e1: cd:8b:b6:ab:35:20:ec:85:8c:26:e9:19:49:78:de:66:eb:0d: 94:7a:d7:05:72:fa:ea:dc:d1:98:5c:ac:14:fe:27:15:be:bc: d7:97:23:7b:ac:57:fb:82:2e:0b:b0:4b:46:49:26:04:83:7e: c8:1e:02:61:b3:3d:0f:f9:67:3e:5b:e7:54:c3:2f:a7:87:7e: 8d:77:9e:06:72:bf:0a:74:24:fe:ed:41:c4:e0:a0:7f:dd:1a: f2:b0:e6:a8:e3:ec:4a:fa:0e:c7:bd:77:15:ee:ef:36:1f:7d: ca:1c:26:4e:64:2e:7a:b3:69:4b:a0:3b:68:75:59:f6:73:41: a6:53:db:f4:93:a3:6a:87:f3:9b:65:10:a4:13:f0:5d:56:4a: 4c:73:9d:f1:0b:a6:fc:8d:77:e2:66:f7:10:e6:fb:24:98:b5: 3f:16:95:da:b7:da:63:79:39:4c:92:bc:b2:58:63:70:a0:36: bb:6f:3d:77:a8:60:cb:cc:e6:11:d2:ba:fd:1d:fd:3d:1b:09: 38:9d:02:b1:d2:ba:5f:2d:e3:0b:03:d2:21:79:95:5d:cf:7c: 1d:c7:3c:a3 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOqsuwNI24S2qKxHYAc9yIqqCmkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMz QzQwQkE3QTAeFw0yNTA1MDgwNTU1MDFaFw0yNjA1MDcwNjAwMDFaMDMxMTAvBgNV BAMTKDdDREUyRkUyNTIzQjY5OTdDNzE3MzVDMEUwMzFDOTZCMERFMTczQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpqGnJUWe99fy+PnO8DaLFUuhN lztbkI3ZkknIKwXtehkG+Ll/vlERR5w/Pw3wcQJ7wDpbtorkrsTS5ALF69RiNQAz 9f52iU5KFhFQhlBTAjmTGbhLxfuLvnhXmFYA/WNx3Bukbn/5L6r3uYp+yyOQcWwB hd4C4kzolqXUoHE6KX0ZUivE42Ft4niPzJOZnITTOsGlJzw+I7Niyqnmze5hvN4M 3IsMo8jRwot0I2jgwJAje04WMEsQUmOtNKbBnZjT3cKghpDnTlL6nGHOgr7+2HBc h6XETGSPAbNy2NaWPCRGvURZWXGmqrkyfk+zhop7WXZjmbR6Zb3AmVoV7d0ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfN4v4lI7aZfHFzXA4DHJaw3hc7MwHwYDVR0j BBgwFoAUFwl5wOMZWPp2JZ82C4QFIzxAunowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTkyYmYyNi1jOGU2LTRhODYtOWIzMy1lYTNhMmFmNTU3ZjAvMC8xNzA5NzlDMEUz MTk1OEZBNzYyNTlGMzYwQjg0MDUyMzNDNDBCQTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMzQzQw QkE3QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5OTJiZjI2LWM4ZTYtNGE4Ni05 YjMzLWVhM2EyYWY1NTdmMC8wLzMxMzUzNzJlMzIzMDJlMzMzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0UJjANBgkqhkiG 9w0BAQsFAAOCAQEAi2XjEHLMaDV3LV/KGVX4pO+ZfpgGuN4phqwqwi2wcIJCE3/h zYu2qzUg7IWMJukZSXjeZusNlHrXBXL66tzRmFysFP4nFb6815cje6xX+4IuC7BL RkkmBIN+yB4CYbM9D/lnPlvnVMMvp4d+jXeeBnK/CnQk/u1BxOCgf90a8rDmqOPs SvoOx713Fe7vNh99yhwmTmQuerNpS6A7aHVZ9nNBplPb9JOjaofzm2UQpBPwXVZK THOd8Qum/I134mb3EOb7JJi1PxaV2rfaY3k5TJK8slhjcKA2u289d6hgy8zmEdK6 /R39PRsJOJ0CsdK6Xy3jCwPSIXmVXc98Hcc8ow== -----END CERTIFICATE-----Generated at Sat May 10 11:49:11 2025 by rpki-client