$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa File: 3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa (raw, json) Hash identifier: UD6uPbiybd2gYQ34RwGBqvbNDHuw/OBXgpqqJ4vtt5c= Subject key identifier: E1:81:AA:F0:83:8E:4E:22:52:6A:74:81:B7:5A:A0:FA:91:F3:8B:61 Certificate issuer: /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Certificate serial: 650E46FC6859F7DC9B9FD01E11479FAFE54CBD84 Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa Signing time: Mon 02 Jun 2025 01:03:18 +0000 ROA not before: Mon 02 Jun 2025 00:58:18 +0000 ROA not after: Mon 01 Jun 2026 01:03:18 +0000 asID: 45706 IP address blocks: 150.107.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 23:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0e:46:fc:68:59:f7:dc:9b:9f:d0:1e:11:47:9f:af:e5:4c:bd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5 Validity Not Before: Jun 2 00:58:18 2025 GMT Not After : Jun 1 01:03:18 2026 GMT Subject: CN=E181AAF0838E4E22526A7481B75AA0FA91F38B61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:f1:cd:86:48:e2:59:7e:ff:c7:a5:26:37: 5c:ef:16:27:4f:43:40:f8:21:a5:fd:da:23:d0:5b: b2:66:a2:6d:ec:bb:d3:78:4e:f5:c7:d8:36:1f:ec: 3d:de:d8:25:0e:4a:a1:69:7f:1f:83:9c:47:b4:51: 06:a6:5d:59:4e:fb:af:47:bf:7e:ba:41:39:36:a0: 1c:c5:6c:61:38:e7:7e:35:c0:82:71:76:cd:d2:ac: e6:04:b3:96:6b:03:fa:34:e1:5f:29:16:94:28:cc: ff:09:a5:4f:f5:09:73:9f:55:ac:8b:15:25:d9:8a: 40:cc:e4:bd:09:8e:62:81:36:e9:11:e4:cc:14:9f: bd:c5:89:74:c3:91:d1:9f:71:8c:52:b1:5a:c0:0d: 63:6a:df:e8:72:16:f1:ef:31:7d:6d:76:72:ca:f9: ac:fe:62:89:46:09:a4:72:fe:89:71:ca:75:66:44: d1:76:7b:f3:da:24:9e:42:58:a5:3c:b0:97:52:f2: 0a:c0:e0:a2:7a:67:da:a1:72:43:38:df:d1:fa:dc: 68:05:2a:7b:9b:22:04:a6:4c:96:76:a9:f5:44:ea: d4:0c:79:c9:7c:8c:cb:4f:57:ed:f2:e6:5f:fa:74: b5:70:73:5e:f3:8d:3c:b8:84:76:96:da:07:7d:89: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:81:AA:F0:83:8E:4E:22:52:6A:74:81:B7:5A:A0:FA:91:F3:8B:61 X509v3 Authority Key Identifier: keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3135302e3130372e3234382e302f32322d3234203d3e203435373036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.248.0/22 Signature Algorithm: sha256WithRSAEncryption 70:2b:b8:7c:22:4d:83:45:8e:18:54:a0:b0:43:3c:51:20:85: 03:f1:87:1f:11:c6:54:74:51:f4:4e:df:15:b2:23:52:6f:22: fd:f4:42:cb:a8:e4:6a:ee:ef:bb:f9:21:69:3d:e3:c7:2d:52: c2:7c:a6:02:67:e3:85:f9:74:3a:84:d6:84:61:82:a9:7f:27: 68:bd:15:a7:f4:6d:ee:91:ff:f8:16:23:01:cf:84:62:eb:7b: 33:12:95:09:e1:44:de:3f:53:ac:b1:36:df:21:d6:1c:52:a7: ac:e7:8d:f4:5a:84:67:f9:31:78:10:fb:61:c6:1c:78:45:05: d8:06:56:42:85:68:bc:38:fe:6e:dc:79:96:41:e8:11:a3:c6: 39:f9:25:a0:20:38:49:fe:31:f3:a1:06:7a:f1:45:6b:6e:24: 2f:10:d9:1b:9e:fe:f7:55:6c:82:19:db:56:94:9f:27:85:32: 71:09:14:93:d0:ec:2a:2a:80:06:a5:f9:91:31:eb:75:ce:51: ae:51:98:ac:4b:92:90:29:13:c9:c4:cf:1f:40:24:c3:7f:9c: 22:26:17:6e:0b:ee:cb:a8:70:fd:30:d5:c6:e0:07:5b:64:0b: 14:11:2d:4d:98:36:7a:74:19:a7:5a:9f:1b:bd:17:25:15:d4: 7f:91:3f:52 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZQ5G/GhZ99ybn9AeEUefr+VMvYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1 MDU3QUNFNTAeFw0yNTA2MDIwMDU4MThaFw0yNjA2MDEwMTAzMThaMDMxMTAvBgNV BAMTKEUxODFBQUYwODM4RTRFMjI1MjZBNzQ4MUI3NUFBMEZBOTFGMzhCNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGvHNhkjiWX7/x6UmN1zvFidP Q0D4IaX92iPQW7Jmom3su9N4TvXH2DYf7D3e2CUOSqFpfx+DnEe0UQamXVlO+69H v366QTk2oBzFbGE45341wIJxds3SrOYEs5ZrA/o04V8pFpQozP8JpU/1CXOfVayL FSXZikDM5L0JjmKBNukR5MwUn73FiXTDkdGfcYxSsVrADWNq3+hyFvHvMX1tdnLK +az+YolGCaRy/olxynVmRNF2e/PaJJ5CWKU8sJdS8grA4KJ6Z9qhckM439H63GgF KnubIgSmTJZ2qfVE6tQMecl8jMtPV+3y5l/6dLVwc17zjTy4hHaW2gd9if4NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4YGq8IOOTiJSanSBt1qg+pHzi2EwHwYDVR0j BBgwFoAUSQs/vMbw/GV4UJahU9yHvFBXrOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2NkNjhmNC02OWE1LTQ3NWYtYWVlNC0zZWY0YjhkMzAyZGQvMC80OTBCM0ZCQ0M2 RjBGQzY1Nzg1MDk2QTE1M0RDODdCQzUwNTdBQ0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDkwQjNGQkNDNkYwRkM2NTc4NTA5NkExNTNEQzg3QkM1MDU3 QUNFNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3Y2Q2OGY0LTY5YTUtNDc1Zi1h ZWU0LTNlZjRiOGQzMDJkZC8wLzMxMzUzMDJlMzEzMDM3MmUzMjM0MzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzNDM1MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmv4MA0GCSqG SIb3DQEBCwUAA4IBAQBwK7h8Ik2DRY4YVKCwQzxRIIUD8YcfEcZUdFH0Tt8VsiNS byL99ELLqORq7u+7+SFpPePHLVLCfKYCZ+OF+XQ6hNaEYYKpfydovRWn9G3ukf/4 FiMBz4Ri63szEpUJ4UTeP1OssTbfIdYcUqes5430WoRn+TF4EPthxhx4RQXYBlZC hWi8OP5u3HmWQegRo8Y5+SWgIDhJ/jHzoQZ68UVrbiQvENkbnv73VWyCGdtWlJ8n hTJxCRST0OwqKoAGpfmRMet1zlGuUZisS5KQKRPJxM8fQCTDf5wiJhduC+7LqHD9 MNXG4AdbZAsUES1NmDZ6dBmnWp8bvRclFdR/kT9S -----END CERTIFICATE-----Generated at Mon Jun 16 20:56:32 2025 by rpki-client