$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa File: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (raw, json) Hash identifier: X871KmxDisPDxaQpNaNmNV8uKTNCiB9DC630xRuhDpo= Subject key identifier: 04:1B:02:E7:78:1E:6F:73:F5:5B:CB:4F:32:3D:42:17:72:F8:2E:13 Certificate issuer: /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Certificate serial: 194C89EFEA763443CD6AF4A4BD5B26AF4174275D Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa Signing time: Mon 02 Jun 2025 01:02:36 +0000 ROA not before: Mon 02 Jun 2025 00:57:36 +0000 ROA not after: Mon 01 Jun 2026 01:02:36 +0000 asID: 46026 IP address blocks: 175.111.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 16:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:4c:89:ef:ea:76:34:43:cd:6a:f4:a4:bd:5b:26:af:41:74:27:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Validity Not Before: Jun 2 00:57:36 2025 GMT Not After : Jun 1 01:02:36 2026 GMT Subject: CN=041B02E7781E6F73F55BCB4F323D421772F82E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f2:18:fc:19:b8:d0:6f:80:45:6e:93:69:70: af:77:de:c9:b2:43:ab:ee:47:06:8d:e4:6b:0b:fc: fa:ff:c8:24:4c:44:64:9a:76:9e:99:3e:4e:c8:04: bb:5f:0b:61:e6:48:01:a4:79:34:19:7f:be:cf:45: 71:24:8d:5c:a7:a8:85:f8:79:d4:1a:33:9d:97:b1: c9:c2:09:93:cc:40:9b:1a:67:9c:a9:e3:50:29:83: b9:6e:26:61:6b:e8:4b:f2:0c:71:35:43:27:1c:77: 7b:a9:c0:b9:db:72:90:85:be:f9:ea:00:fb:53:a4: be:04:cd:6b:3e:33:1d:36:06:41:5c:80:da:18:79: 2e:e2:c4:f2:35:43:54:a6:96:00:a1:97:a2:2b:dc: 8a:3f:23:db:5b:9c:29:65:80:b0:cb:56:02:1d:e5: 0b:62:36:6b:92:b4:21:03:e3:05:47:51:27:f6:26: a5:33:74:94:b3:45:6c:ec:ce:5b:4c:e9:c0:97:97: bc:a1:7b:57:a6:2e:0c:bf:89:71:5b:48:91:94:ad: ad:e8:9f:ea:8b:2a:dc:75:43:5e:58:70:2b:c7:d3: 2c:fe:f7:26:6b:30:f7:32:1a:c1:b2:5b:1a:3e:95: 31:47:a0:79:b6:6f:95:93:54:41:63:6d:91:cb:66: ee:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1B:02:E7:78:1E:6F:73:F5:5B:CB:4F:32:3D:42:17:72:F8:2E:13 X509v3 Authority Key Identifier: keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.111.115.0/24 Signature Algorithm: sha256WithRSAEncryption 28:a8:87:73:26:13:63:62:8d:5f:8a:b7:38:8a:1d:53:d6:fe: 56:49:81:7d:71:b9:a2:03:e9:27:76:3e:3f:6f:92:fe:21:a1: 34:10:ec:e7:7c:dc:17:d8:ed:da:a0:c3:51:54:6a:7b:6f:ba: d3:7c:33:9d:a7:15:73:f2:c0:66:f9:c0:03:c8:98:a8:01:57: 1a:14:70:4a:29:0d:b6:db:cc:7b:41:45:34:00:cd:a8:44:55: 17:8c:3a:8a:29:e0:f4:ea:b5:8c:1b:1f:29:b7:e2:af:84:4c: 16:68:cf:f7:ec:66:aa:a6:13:f4:f9:cb:27:e3:85:71:b1:6e: 1e:8f:3d:a4:34:9e:7b:64:ed:4b:e1:b0:1f:ec:56:ec:28:e5: e8:45:e0:b2:d9:83:32:6b:02:67:91:5d:3f:c3:b6:a1:b2:41: fd:ef:5a:43:87:91:e5:b0:0c:71:6d:a8:2c:b4:6a:31:f0:ee: ce:cb:b4:7e:9e:83:df:6d:78:b5:34:a3:58:da:b1:ad:34:2f: e6:1d:59:a3:fc:19:3a:13:4a:cc:44:6d:27:53:6c:87:fa:69: 46:30:be:3f:1f:1a:de:a0:ee:93:5b:58:a2:f9:85:37:0b:bb: c7:9d:f9:13:57:f7:cd:7b:80:fc:6a:8b:aa:a8:23:5a:b3:f5: 4a:28:da:4c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGUyJ7+p2NEPNavSkvVsmr0F0J10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4 NDkwM0UxNzAeFw0yNTA2MDIwMDU3MzZaFw0yNjA2MDEwMTAyMzZaMDMxMTAvBgNV BAMTKDA0MUIwMkU3NzgxRTZGNzNGNTVCQ0I0RjMyM0Q0MjE3NzJGODJFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8hj8GbjQb4BFbpNpcK933smy Q6vuRwaN5GsL/Pr/yCRMRGSadp6ZPk7IBLtfC2HmSAGkeTQZf77PRXEkjVynqIX4 edQaM52XscnCCZPMQJsaZ5yp41Apg7luJmFr6EvyDHE1Qyccd3upwLnbcpCFvvnq APtTpL4EzWs+Mx02BkFcgNoYeS7ixPI1Q1SmlgChl6Ir3Io/I9tbnCllgLDLVgId 5QtiNmuStCED4wVHUSf2JqUzdJSzRWzszltM6cCXl7yhe1emLgy/iXFbSJGUra3o n+qLKtx1Q15YcCvH0yz+9yZrMPcyGsGyWxo+lTFHoHm2b5WTVEFjbZHLZu4bAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBBsC53geb3P1W8tPMj1CF3L4LhMwHwYDVR0j BBgwFoAU+MGaj4yw3chdHI5VY4+0NYSQPhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMC9GOEMxOUE4RjhD QjBEREM4NUQxQzhFNTU2MzhGQjQzNTg0OTAzRTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjhDMTlBOEY4Q0IwRERDODVEMUM4RTU1NjM4RkI0MzU4NDkw M0UxNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzczNTJlMzEzMTMxMmUzMTMxMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr29zMA0GCSqG SIb3DQEBCwUAA4IBAQAoqIdzJhNjYo1firc4ih1T1v5WSYF9cbmiA+kndj4/b5L+ IaE0EOznfNwX2O3aoMNRVGp7b7rTfDOdpxVz8sBm+cADyJioAVcaFHBKKQ2228x7 QUU0AM2oRFUXjDqKKeD06rWMGx8pt+KvhEwWaM/37GaqphP0+csn44VxsW4ejz2k NJ57ZO1L4bAf7FbsKOXoReCy2YMyawJnkV0/w7ahskH971pDh5HlsAxxbagstGox 8O7Oy7R+noPfbXi1NKNY2rGtNC/mHVmj/Bk6E0rMRG0nU2yH+mlGML4/HxreoO6T W1ii+YU3C7vHnfkTV/fNe4D8aouqqCNas/VKKNpM -----END CERTIFICATE-----Generated at Mon Jun 16 13:29:46 2025 by rpki-client