$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa File: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (raw, json) Hash identifier: bRm34Kjf+sNcSdy5iGqBX+Tp5Wv6W94v5DYv7HCdcv4= Subject key identifier: 00:33:8D:7E:F1:00:48:18:4F:62:9D:FF:94:BE:11:D1:0B:7A:DD:0E Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 16AB9764A7C324F648B88029EF4507B4E96F6788 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa Signing time: Tue 29 Jul 2025 09:00:02 +0000 ROA not before: Tue 29 Jul 2025 08:55:02 +0000 ROA not after: Tue 28 Jul 2026 09:00:02 +0000 asID: 58477 IP address blocks: 157.66.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ab:97:64:a7:c3:24:f6:48:b8:80:29:ef:45:07:b4:e9:6f:67:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: Jul 29 08:55:02 2025 GMT Not After : Jul 28 09:00:02 2026 GMT Subject: CN=00338D7EF10048184F629DFF94BE11D10B7ADD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:41:2e:8d:16:90:44:33:4b:fd:ec:27:7f:3b: d3:b5:c6:0a:13:c0:f3:d1:ec:7b:c2:49:c1:20:ad: 76:92:3e:9e:30:35:3b:e5:88:ed:e0:29:b4:25:b3: 71:a2:67:62:fd:57:2f:a5:cc:1f:0d:d3:45:5c:bd: 46:0e:fd:29:7b:a0:fc:83:4f:65:47:e6:9b:93:bf: 67:38:35:68:67:a0:d3:61:54:bd:36:be:22:7c:71: 46:80:ab:35:8b:cb:f9:66:2b:69:73:4f:1a:e1:06: 56:fa:80:81:24:c9:2a:48:d7:71:38:cd:f2:a0:0b: 20:52:b1:f5:14:b5:83:b5:e7:53:e5:00:fb:a5:c3: 0f:e6:de:87:28:0e:73:4d:7d:55:d3:fe:b5:dc:dc: 38:79:59:9f:e0:09:04:ce:42:bb:a3:0b:d5:cc:32: d8:d8:3c:98:d7:93:46:76:e7:b0:48:01:e4:4d:6e: 5f:a9:2b:36:2e:a9:8a:d7:a3:97:90:54:e2:51:f2: fe:fb:c7:b8:b7:58:b5:08:d4:e3:16:d9:3e:a8:41: 24:e0:8d:ae:88:15:6e:4e:d0:d8:45:1a:51:80:9a: c4:90:89:55:4e:54:ee:06:ba:17:fd:94:c7:e1:af: b7:3d:08:3c:30:72:98:c8:15:82:9b:7a:b5:7a:8c: b2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:33:8D:7E:F1:00:48:18:4F:62:9D:FF:94:BE:11:D1:0B:7A:DD:0E X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/3135372e36362e35362e302f32342d3234203d3e203538343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.56.0/24 Signature Algorithm: sha256WithRSAEncryption 68:93:08:8b:62:da:c4:13:a4:2d:ff:bc:3f:59:ab:d6:27:77: 68:79:ce:1c:8f:58:24:ea:94:53:82:72:8e:04:b9:bb:51:76: 80:43:92:fa:90:32:46:32:b9:1a:b5:67:4c:3d:65:32:d8:46: 4a:df:4f:1e:f2:1c:09:0a:c7:a9:b0:9d:80:2e:b5:f8:1c:9a: a4:6e:bd:6e:26:ff:29:e8:de:8b:25:e2:76:81:11:af:9c:db: ee:02:c0:b2:f9:37:1f:15:a0:6f:dc:e7:24:be:b2:e2:2e:4e: 96:ad:04:fd:6e:50:c8:1e:9b:34:48:b7:0a:77:89:6b:89:ee: 2b:7a:e2:82:16:58:0d:75:f5:8c:0c:68:3e:17:4b:ac:6f:8f: 40:88:3c:65:ba:84:03:18:c2:7e:87:bd:b6:c0:e8:58:14:01: 40:39:d1:72:46:57:d4:ea:41:92:a2:8a:eb:3d:d3:91:05:68: a4:f1:cc:aa:a2:5f:76:09:ed:b9:ad:53:b9:89:e1:ab:ae:53: 18:7c:7a:9f:ed:68:20:d6:ec:bd:1b:db:0b:35:41:53:80:cd: e5:36:03:e5:3b:a6:0d:cc:97:da:91:73:96:7e:a0:0e:d1:af: 14:31:c6:0c:91:c1:65:66:a8:54:5a:ad:2d:5d:a0:dd:05:f1: ed:8d:98:22 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUFquXZKfDJPZIuIAp70UHtOlvZ4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTA3MjkwODU1MDJaFw0yNjA3MjgwOTAwMDJaMDMxMTAvBgNV BAMTKDAwMzM4RDdFRjEwMDQ4MTg0RjYyOURGRjk0QkUxMUQxMEI3QUREMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQS6NFpBEM0v97Cd/O9O1xgoT wPPR7HvCScEgrXaSPp4wNTvliO3gKbQls3GiZ2L9Vy+lzB8N00VcvUYO/Sl7oPyD T2VH5puTv2c4NWhnoNNhVL02viJ8cUaAqzWLy/lmK2lzTxrhBlb6gIEkySpI13E4 zfKgCyBSsfUUtYO151PlAPulww/m3ocoDnNNfVXT/rXc3Dh5WZ/gCQTOQrujC9XM MtjYPJjXk0Z257BIAeRNbl+pKzYuqYrXo5eQVOJR8v77x7i3WLUI1OMW2T6oQSTg ja6IFW5O0NhFGlGAmsSQiVVOVO4Guhf9lMfhr7c9CDwwcpjIFYKberV6jLJDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUADONfvEASBhPYp3/lL4R0Qt63Q4wHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkNzU1MzQ3LTZiMWMtNDJjMS05 ZjU0LWQ3ZWFiMjJlMTgyYy8wLzMxMzUzNzJlMzYzNjJlMzUzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDM1MzgzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdQjgwDQYJKoZIhvcN AQELBQADggEBAGiTCIti2sQTpC3/vD9Zq9Ynd2h5zhyPWCTqlFOCco4EubtRdoBD kvqQMkYyuRq1Z0w9ZTLYRkrfTx7yHAkKx6mwnYAutfgcmqRuvW4m/yno3osl4naB Ea+c2+4CwLL5Nx8VoG/c5yS+suIuTpatBP1uUMgemzRItwp3iWuJ7it64oIWWA11 9YwMaD4XS6xvj0CIPGW6hAMYwn6HvbbA6FgUAUA50XJGV9TqQZKiius905EFaKTx zKqiX3YJ7bmtU7mJ4auuUxh8ep/taCDW7L0b2ws1QVOAzeU2A+U7pg3Ml9qRc5Z+ oA7RrxQxxgyRwWVmqFRarS1doN0F8e2NmCI= -----END CERTIFICATE-----Generated at Thu Aug 7 13:02:01 2025 by rpki-client