$ rpki-client -vvf repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa File: 3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa (raw, json) Hash identifier: c4zKb4BC8Sb0059Tmuc8jeyTEWO85EjEdef3ktgt6EU= Subject key identifier: 16:C7:D3:0F:6D:ED:49:3F:F1:FB:EC:6F:DD:A8:B2:CF:37:35:68:FF Certificate issuer: /CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Certificate serial: 408C5677DBD4A97DFB039628341DAC3980BAEA92 Authority key identifier: 06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa Signing time: Fri 07 Mar 2025 05:03:23 +0000 ROA not before: Fri 07 Mar 2025 04:58:23 +0000 ROA not after: Fri 06 Mar 2026 05:03:23 +0000 asID: 152389 IP address blocks: 157.15.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8c:56:77:db:d4:a9:7d:fb:03:96:28:34:1d:ac:39:80:ba:ea:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A03596D6FA10E3F50810F586E3F63AEE96F98E Validity Not Before: Mar 7 04:58:23 2025 GMT Not After : Mar 6 05:03:23 2026 GMT Subject: CN=16C7D30F6DED493FF1FBEC6FDDA8B2CF373568FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:84:6e:ba:c6:29:31:41:48:7c:5f:94:20:45: 19:ac:de:fe:53:2f:81:60:b7:7b:01:a6:ee:61:b2: 14:20:1f:1d:7f:b2:ec:40:6e:8e:eb:ab:40:2f:27: 56:d5:aa:b5:cb:9d:32:5a:70:8c:54:ee:df:c0:0c: 79:ec:e9:e2:19:7c:04:bd:7f:40:4d:fc:92:0a:ca: 81:93:ed:d3:2e:76:0d:c2:6c:b4:90:4a:39:23:f5: c1:6a:c4:b2:57:26:d7:2f:79:fc:c1:9f:db:1e:42: 9b:7a:8e:ba:2f:85:a2:d4:e1:c8:3b:fc:7f:5e:c5: 43:4a:32:cd:b3:1a:a6:ab:6f:34:72:a9:87:d1:14: 4e:f6:59:06:27:21:3f:dd:e7:fa:cf:27:72:35:5c: a5:c7:dd:f8:ea:59:a7:64:80:55:4b:33:3d:25:03: 94:28:ea:f6:91:ab:a5:68:d8:7e:73:5f:af:db:7c: 9e:39:72:a1:1e:59:b3:75:8e:b1:de:fd:06:44:c5: dc:90:53:18:2e:7e:ff:ad:5c:3a:07:d3:5d:f5:68: 48:26:85:23:9c:cf:e3:67:85:bc:99:35:96:80:21: fd:31:99:15:f8:80:4f:35:22:ad:18:ae:e6:a2:24: 65:45:ee:ef:9f:34:3a:8a:9f:89:ed:8a:5f:b2:36: cc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C7:D3:0F:6D:ED:49:3F:F1:FB:EC:6F:DD:A8:B2:CF:37:35:68:FF X509v3 Authority Key Identifier: keyid:06:A0:35:96:D6:FA:10:E3:F5:08:10:F5:86:E3:F6:3A:EE:96:F9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/06A03596D6FA10E3F50810F586E3F63AEE96F98E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/06A03596D6FA10E3F50810F586E3F63AEE96F98E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0f7c790-76b5-4967-b6ff-12dc756bbf7d/0/3135372e31352e3231362e302f32332d3234203d3e20313532333839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.216.0/23 Signature Algorithm: sha256WithRSAEncryption 84:65:e9:b3:19:b7:20:21:34:35:9f:26:14:6c:a4:cd:d8:ba: 14:e5:10:c9:f4:93:3b:d6:bc:01:7b:92:2c:2e:69:8a:0a:09: 0e:d0:ae:82:81:4b:06:a9:1f:c0:17:40:dc:3a:9a:f9:24:9a: f8:e8:95:d0:9b:a5:61:f5:13:94:b0:35:b5:47:c7:dc:72:26: 00:a3:0b:73:25:6d:31:a3:f2:08:2a:ba:7f:00:9a:f5:ba:50: 00:9c:2c:52:22:a9:73:81:57:80:00:57:7b:d7:59:01:6d:f1: 4c:0c:54:90:9e:93:0b:86:90:2c:f4:c3:38:d2:5f:b4:51:b3: 43:a6:99:cf:55:ca:03:45:e9:df:ee:9f:d9:35:93:43:ad:5d: f0:b6:29:2c:34:30:e5:a3:f3:a7:f9:a6:74:5b:bf:18:2a:9f: 26:44:22:9a:13:78:1b:0b:c9:98:89:11:fa:f6:b4:c3:92:f5: b7:f0:40:9c:fc:f2:d0:26:75:37:8e:31:0f:46:e5:6d:95:34: 29:4d:86:03:34:03:22:27:a9:03:42:48:60:ee:a1:7c:73:3d: f1:fd:a3:f8:80:44:a7:7d:46:fb:97:9a:85:77:44:d3:c4:3e: 37:0a:d5:69:eb:b4:df:dc:67:44:26:90:01:53:9c:5c:74:1e: b9:ac:00:63 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQIxWd9vUqX37A5YoNB2sOYC66pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FF RTk2Rjk4RTAeFw0yNTAzMDcwNDU4MjNaFw0yNjAzMDYwNTAzMjNaMDMxMTAvBgNV BAMTKDE2QzdEMzBGNkRFRDQ5M0ZGMUZCRUM2RkREQThCMkNGMzczNTY4RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDihG66xikxQUh8X5QgRRms3v5T L4Fgt3sBpu5hshQgHx1/suxAbo7rq0AvJ1bVqrXLnTJacIxU7t/ADHns6eIZfAS9 f0BN/JIKyoGT7dMudg3CbLSQSjkj9cFqxLJXJtcvefzBn9seQpt6jrovhaLU4cg7 /H9exUNKMs2zGqarbzRyqYfRFE72WQYnIT/d5/rPJ3I1XKXH3fjqWadkgFVLMz0l A5Qo6vaRq6Vo2H5zX6/bfJ45cqEeWbN1jrHe/QZExdyQUxgufv+tXDoH0131aEgm hSOcz+NnhbyZNZaAIf0xmRX4gE81Iq0YruaiJGVF7u+fNDqKn4ntil+yNsy9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUFsfTD23tST/x++xv3aiyzzc1aP8wHwYDVR0j BBgwFoAUBqA1ltb6EOP1CBD1huP2Ou6W+Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGY3Yzc5MC03NmI1LTQ5NjctYjZmZi0xMmRjNzU2YmJmN2QvMC8wNkEwMzU5NkQ2 RkExMEUzRjUwODEwRjU4NkUzRjYzQUVFOTZGOThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDZBMDM1OTZENkZBMTBFM0Y1MDgxMEY1ODZFM0Y2M0FFRTk2 Rjk4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZjdjNzkwLTc2YjUtNDk2Ny1i NmZmLTEyZGM3NTZiYmY3ZC8wLzMxMzUzNzJlMzEzNTJlMzIzMTM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnQ/YMA0GCSqG SIb3DQEBCwUAA4IBAQCEZemzGbcgITQ1nyYUbKTN2LoU5RDJ9JM71rwBe5IsLmmK CgkO0K6CgUsGqR/AF0DcOpr5JJr46JXQm6Vh9ROUsDW1R8fcciYAowtzJW0xo/II Krp/AJr1ulAAnCxSIqlzgVeAAFd711kBbfFMDFSQnpMLhpAs9MM40l+0UbNDppnP VcoDRenf7p/ZNZNDrV3wtiksNDDlo/On+aZ0W78YKp8mRCKaE3gbC8mYiRH69rTD kvW38ECc/PLQJnU3jjEPRuVtlTQpTYYDNAMiJ6kDQkhg7qF8cz3x/aP4gESnfUb7 l5qFd0TTxD43CtVp67Tf3GdEJpABU5xcdB65rABj -----END CERTIFICATE-----Generated at Wed Nov 5 07:19:01 2025 by rpki-client