$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138342e302f32342d3234203d3e203234353334.roa File: 35382e3134372e3138342e302f32342d3234203d3e203234353334.roa (raw, json) Hash identifier: x2jz47JNdTLcNfT8vbEKIJnVX3m/vRvrmqpmvqODREA= Subject key identifier: 7D:E7:3D:94:D8:68:94:17:43:E1:1B:7A:1F:07:71:72:8A:A1:20:31 Certificate issuer: /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Certificate serial: 04B5F9B06732F7C814C126A64785D20038747866 Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138342e302f32342d3234203d3e203234353334.roa Signing time: Sat 21 Jun 2025 13:00:00 +0000 ROA not before: Sat 21 Jun 2025 12:55:00 +0000 ROA not after: Sat 20 Jun 2026 13:00:00 +0000 asID: 24534 IP address blocks: 58.147.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b5:f9:b0:67:32:f7:c8:14:c1:26:a6:47:85:d2:00:38:74:78:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Validity Not Before: Jun 21 12:55:00 2025 GMT Not After : Jun 20 13:00:00 2026 GMT Subject: CN=7DE73D94D868941743E11B7A1F0771728AA12031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:aa:b2:18:7d:a3:a5:90:44:ce:ad:31:9a: a0:1f:ce:59:d2:83:2e:d8:7e:61:b0:28:93:1f:27: e5:c5:bd:4a:da:b7:a1:1e:d8:e9:b8:74:09:67:ec: 45:fb:c1:c1:d9:94:b7:cb:13:98:0a:40:78:5f:70: 50:8b:b5:7c:8b:c8:8f:b1:ab:8e:a2:60:93:59:34: b7:5f:41:c5:c0:ff:8e:64:56:dd:01:c3:6b:2c:e1: 47:07:13:51:3d:da:14:e9:81:09:96:e4:c6:72:f7: d4:a9:4c:5b:58:1c:0d:b8:f7:8d:7e:8e:bc:4e:22: d0:4c:38:8f:f1:6f:06:2a:01:d7:7a:f0:5c:62:7e: 37:be:0b:c2:ab:a2:77:12:1a:53:d2:f9:89:2d:f1: 95:1e:70:55:b7:b7:4e:5b:36:ac:9f:2f:df:4a:03: a0:b4:a9:30:7a:8d:80:9b:80:c4:72:54:18:19:50: d5:6d:ca:00:77:54:35:4d:ee:f0:c9:a3:3f:a3:47: bc:02:51:35:0d:12:9c:9d:0c:35:a0:5b:b0:9d:33: e2:3c:dd:2b:f7:87:c3:bc:5a:8f:bb:68:ef:1d:ad: 82:46:15:76:84:95:fd:38:46:51:8e:26:68:11:23: 3c:a3:d2:49:c1:40:f4:6d:92:a1:65:fb:1b:d9:89: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E7:3D:94:D8:68:94:17:43:E1:1B:7A:1F:07:71:72:8A:A1:20:31 X509v3 Authority Key Identifier: keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138342e302f32342d3234203d3e203234353334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.147.184.0/24 Signature Algorithm: sha256WithRSAEncryption 65:4b:3c:eb:40:2b:e0:84:4c:d2:e4:61:93:01:b7:b4:66:47: aa:54:42:4c:ba:5b:80:9f:f6:bc:d5:49:29:3d:30:e4:07:f7: f0:85:8b:24:46:38:66:83:fa:b7:2a:bb:f5:55:a7:b3:7a:a4: 63:7c:e1:8e:f6:af:87:4d:8c:83:21:6b:d7:7e:5b:ea:e0:47: 29:94:f0:43:89:27:26:f5:c6:0b:58:80:f6:6d:cc:af:c5:71: cc:9e:80:8e:de:d0:26:d0:06:e1:b4:ce:74:16:05:f5:f2:46: 6a:64:3c:79:92:81:e1:00:88:9d:e3:70:2b:7f:c3:40:c0:be: fb:85:1d:32:57:85:af:b2:a5:18:97:d3:98:e9:2d:9c:b8:56: 2a:78:cc:2d:a1:b7:54:86:db:6f:ff:06:fb:cb:c1:4e:86:0d: 52:31:26:5e:49:50:61:b0:77:08:9b:0c:a7:95:df:62:bd:61: 0c:b5:2e:36:b2:43:8e:29:77:df:0b:b4:3c:aa:a6:a4:19:91: 2c:af:f8:a6:a4:fb:a5:31:82:aa:5c:68:c2:a5:89:00:78:04: 91:e2:ad:10:0f:88:a6:44:5c:c0:9c:3a:d0:24:32:d1:82:b9: 13:c9:63:44:dc:f3:3e:bb:45:3e:c3:de:66:d4:32:66:45:63: 3b:d2:6f:70 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUBLX5sGcy98gUwSamR4XSADh0eGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJF NzUyNjNENzAeFw0yNTA2MjExMjU1MDBaFw0yNjA2MjAxMzAwMDBaMDMxMTAvBgNV BAMTKDdERTczRDk0RDg2ODk0MTc0M0UxMUI3QTFGMDc3MTcyOEFBMTIwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvnaqyGH2jpZBEzq0xmqAfzlnS gy7YfmGwKJMfJ+XFvUrat6Ee2Om4dAln7EX7wcHZlLfLE5gKQHhfcFCLtXyLyI+x q46iYJNZNLdfQcXA/45kVt0Bw2ss4UcHE1E92hTpgQmW5MZy99SpTFtYHA24941+ jrxOItBMOI/xbwYqAdd68Fxifje+C8KroncSGlPS+Ykt8ZUecFW3t05bNqyfL99K A6C0qTB6jYCbgMRyVBgZUNVtygB3VDVN7vDJoz+jR7wCUTUNEpydDDWgW7CdM+I8 3Sv3h8O8Wo+7aO8drYJGFXaElf04RlGOJmgRIzyj0knBQPRtkqFl+xvZid5TAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUfec9lNholBdD4Rt6HwdxcoqhIDEwHwYDVR0j BBgwFoAU3Sn15M5WF2CgIS8ESJh6++dSY9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMC9ERDI5RjVFNENF NTYxNzYwQTAyMTJGMDQ0ODk4N0FGQkU3NTI2M0Q3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQyOUY1RTRDRTU2MTc2MEEwMjEyRjA0NDg5ODdBRkJFNzUy NjNENy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJlLTIyMDUtNDhmMy1h M2NiLWNlOGIzMjZiOGY3MS8wLzM1MzgyZTMxMzQzNzJlMzEzODM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzIzNDM1MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADqTuDANBgkqhkiG 9w0BAQsFAAOCAQEAZUs860Ar4IRM0uRhkwG3tGZHqlRCTLpbgJ/2vNVJKT0w5Af3 8IWLJEY4ZoP6tyq79VWns3qkY3zhjvavh02MgyFr135b6uBHKZTwQ4knJvXGC1iA 9m3Mr8VxzJ6Ajt7QJtAG4bTOdBYF9fJGamQ8eZKB4QCIneNwK3/DQMC++4UdMleF r7KlGJfTmOktnLhWKnjMLaG3VIbbb/8G+8vBToYNUjEmXklQYbB3CJsMp5XfYr1h DLUuNrJDjil33wu0PKqmpBmRLK/4pqT7pTGCqlxowqWJAHgEkeKtEA+IpkRcwJw6 0CQy0YK5E8ljRNzzPrtFPsPeZtQyZkVjO9JvcA== -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:19 2025 by rpki-client