$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137312e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3137312e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: oaBY2ybMv8nfzTm1+Hk1G4MLfQyWI5q/jr3LwGMcq7Y= Subject key identifier: 7C:E9:64:79:41:13:CB:68:32:6E:22:0F:92:9B:B5:A0:A4:6E:B7:1D Certificate issuer: /CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Certificate serial: 30A49D3822637642158084475FE5C68DDBB3E8D2 Authority key identifier: 7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137312e302f32342d3234203d3e203633383539.roa Signing time: Sun 13 Jul 2025 12:00:03 +0000 ROA not before: Sun 13 Jul 2025 11:55:03 +0000 ROA not after: Sun 12 Jul 2026 12:00:03 +0000 asID: 63859 IP address blocks: 158.140.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 11:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a4:9d:38:22:63:76:42:15:80:84:47:5f:e5:c6:8d:db:b3:e8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D0C886CFBAF0624029CCAE57824C3CF470E8FCF Validity Not Before: Jul 13 11:55:03 2025 GMT Not After : Jul 12 12:00:03 2026 GMT Subject: CN=7CE964794113CB68326E220F929BB5A0A46EB71D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:57:ab:b1:24:92:ac:30:09:15:b1:27:8d:2e: 9c:55:41:d0:9d:4f:c6:f5:43:32:6d:e8:86:d4:44: 99:aa:c6:dd:3d:92:5e:7f:33:fb:df:ca:38:62:ae: 5b:7c:1e:8a:92:e7:c0:3d:ce:a6:06:52:57:67:1b: ba:a3:b1:a8:0b:0c:23:c4:d0:3c:1b:89:a3:8c:57: 17:28:bd:18:b9:31:4a:f9:69:d5:fa:17:4d:10:8d: e3:56:68:58:77:e1:ab:a3:99:e3:7b:18:22:89:d3: 2f:6b:5f:34:cb:14:9e:1b:27:6a:f8:51:a0:01:17: e6:d7:97:99:29:18:8e:5f:bb:4d:ba:71:38:46:49: b9:f5:da:91:0f:04:0a:61:7a:ad:3f:10:4e:0b:6f: 3b:fd:64:90:1d:12:49:b7:6e:c5:aa:94:d4:c2:78: 3c:ff:50:80:2e:aa:f5:5d:07:7c:4f:cd:f9:1c:6a: 44:42:d4:8e:f3:55:de:16:a8:d4:99:5a:cc:d1:e1: 3e:16:73:1c:ed:bd:82:26:20:29:83:bd:94:70:da: ac:22:b2:65:4e:d3:7c:e6:e8:14:3c:3d:1c:be:c4: ed:03:d6:c0:3d:d7:9e:14:ff:1f:75:48:f6:e7:d2: 7c:f8:93:b1:81:70:c9:05:46:b3:9e:c0:da:c3:9f: d1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E9:64:79:41:13:CB:68:32:6E:22:0F:92:9B:B5:A0:A4:6E:B7:1D X509v3 Authority Key Identifier: keyid:7D:0C:88:6C:FB:AF:06:24:02:9C:CA:E5:78:24:C3:CF:47:0E:8F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7D0C886CFBAF0624029CCAE57824C3CF470E8FCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/1/3135382e3134302e3137312e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.171.0/24 Signature Algorithm: sha256WithRSAEncryption aa:04:c5:34:52:f9:74:0c:e0:d7:19:e0:59:08:31:fb:38:9b: 5b:ff:76:fd:a7:d7:df:e0:97:67:c1:c9:a5:48:eb:e4:e2:04: a3:cd:be:90:06:3d:8d:d8:62:28:f3:8b:f9:05:f5:a0:cf:81: 73:5c:33:16:ae:54:b7:ec:6a:a1:76:34:b7:94:9c:8d:2c:c4: 81:68:ee:ba:e6:b9:8f:6d:54:1d:19:9e:05:22:13:45:d1:86: 34:78:5f:65:9a:64:3a:41:eb:53:50:d3:41:4e:cc:df:36:53: 21:37:b5:23:0f:3e:0b:46:64:f4:68:c5:cf:82:e2:d3:ba:ce: 29:d7:24:d1:df:1b:37:57:01:dd:3f:38:2c:7a:2d:ee:0b:73: 01:fd:83:5e:21:2a:9b:64:d9:a9:30:1b:55:38:20:f5:c6:99: 59:14:d5:7d:23:41:31:81:df:e7:c7:41:b2:03:d5:b5:8d:4e: ed:12:93:e4:fe:b1:3c:a5:5a:85:15:51:37:4d:2b:e4:c2:d8: 2e:02:67:1d:b7:95:e6:56:98:8f:00:ea:77:71:35:64:1b:03: 9d:41:8a:d7:af:14:61:2d:fb:79:e4:c6:8f:1a:cd:09:45:d3: f5:2b:19:24:76:c0:f6:66:2b:b3:7a:c1:be:dd:6d:f7:7b:8c: 62:40:be:57 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMKSdOCJjdkIVgIRHX+XGjduz6NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0 NzBFOEZDRjAeFw0yNTA3MTMxMTU1MDNaFw0yNjA3MTIxMjAwMDNaMDMxMTAvBgNV BAMTKDdDRTk2NDc5NDExM0NCNjgzMjZFMjIwRjkyOUJCNUEwQTQ2RUI3MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSV6uxJJKsMAkVsSeNLpxVQdCd T8b1QzJt6IbURJmqxt09kl5/M/vfyjhirlt8HoqS58A9zqYGUldnG7qjsagLDCPE 0DwbiaOMVxcovRi5MUr5adX6F00QjeNWaFh34aujmeN7GCKJ0y9rXzTLFJ4bJ2r4 UaABF+bXl5kpGI5fu026cThGSbn12pEPBApheq0/EE4Lbzv9ZJAdEkm3bsWqlNTC eDz/UIAuqvVdB3xPzfkcakRC1I7zVd4WqNSZWszR4T4WcxztvYImICmDvZRw2qwi smVO03zm6BQ8PRy+xO0D1sA9154U/x91SPbn0nz4k7GBcMkFRrOewNrDn9F7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfOlkeUETy2gybiIPkpu1oKRutx0wHwYDVR0j BBgwFoAUfQyIbPuvBiQCnMrleCTDz0cOj88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMS83RDBDODg2Q0ZC QUYwNjI0MDI5Q0NBRTU3ODI0QzNDRjQ3MEU4RkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0QwQzg4NkNGQkFGMDYyNDAyOUNDQUU1NzgyNEMzQ0Y0NzBF OEZDRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8xLzMxMzUzODJlMzEzNDMwMmUzMTM3MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoyrMA0GCSqG SIb3DQEBCwUAA4IBAQCqBMU0Uvl0DODXGeBZCDH7OJtb/3b9p9ff4JdnwcmlSOvk 4gSjzb6QBj2N2GIo84v5BfWgz4FzXDMWrlS37GqhdjS3lJyNLMSBaO665rmPbVQd GZ4FIhNF0YY0eF9lmmQ6QetTUNNBTszfNlMhN7UjDz4LRmT0aMXPguLTus4p1yTR 3xs3VwHdPzgsei3uC3MB/YNeISqbZNmpMBtVOCD1xplZFNV9I0Exgd/nx0GyA9W1 jU7tEpPk/rE8pVqFFVE3TSvkwtguAmcdt5XmVpiPAOp3cTVkGwOdQYrXrxRhLft5 5MaPGs0JRdP1KxkkdsD2ZiuzesG+3W33e4xiQL5X -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:27 2025 by rpki-client