$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa File: 3133372e35392e31342e302f32342d3234203d3e203338353030.roa (raw, json) Hash identifier: 0fv19luagoO93f5fwpQzyxrCgwGajNrOA8tDwWa++20= Subject key identifier: 78:07:F3:2F:43:9C:C5:30:6E:35:3D:69:74:79:CA:05:82:56:AF:7B Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Certificate serial: 2806EE73D04C47DA4BD4CB666C502F2F2104A834 Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa Signing time: Mon 02 Jun 2025 02:03:47 +0000 ROA not before: Mon 02 Jun 2025 01:58:47 +0000 ROA not after: Mon 01 Jun 2026 02:03:47 +0000 asID: 38500 IP address blocks: 137.59.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:06:ee:73:d0:4c:47:da:4b:d4:cb:66:6c:50:2f:2f:21:04:a8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0 Validity Not Before: Jun 2 01:58:47 2025 GMT Not After : Jun 1 02:03:47 2026 GMT Subject: CN=7807F32F439CC5306E353D697479CA058256AF7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:31:cc:61:2b:2f:95:41:df:cd:e3:ef:0c: 05:17:e9:a2:98:66:3e:8f:af:81:e0:37:a5:3c:92: 3a:26:c4:30:24:34:78:ae:5a:d9:17:11:7e:e4:7e: 8f:cc:af:75:6b:f8:e9:a5:13:21:8a:97:37:b5:2c: b4:ea:94:13:e9:68:9d:16:87:9f:71:7a:a7:be:7a: b2:f9:2a:3d:11:ab:51:2a:b9:65:5c:f9:3b:c8:0a: 5a:67:f5:d4:80:f6:fa:cb:e9:a8:25:92:1a:ce:d5: 93:47:60:2e:df:70:25:05:59:f6:1c:a3:75:9e:77: 4c:eb:95:70:95:14:9e:0b:12:74:1e:36:3b:b1:8c: d5:32:20:d4:27:92:06:a8:62:be:01:9e:b2:17:08: df:d8:9b:d0:b4:e5:70:ff:eb:b1:5a:7a:46:36:44: 1d:9f:5e:6a:d4:f1:02:f2:1e:e0:9b:b3:86:01:52: c5:ff:d8:0a:43:28:d0:1d:09:26:d0:34:2b:4b:03: 23:34:c3:e4:db:4e:11:84:5b:5e:fb:c7:dc:ac:43: 10:f9:58:20:8b:5b:0a:24:df:8a:55:c9:46:13:7d: 11:b6:c2:59:89:ae:a3:f9:0a:19:07:3c:91:cf:43: a3:43:f1:91:f3:95:d0:c5:13:de:13:3f:67:fc:21: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:07:F3:2F:43:9C:C5:30:6E:35:3D:69:74:79:CA:05:82:56:AF:7B X509v3 Authority Key Identifier: keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31342e302f32342d3234203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.59.14.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:1a:de:a0:03:fd:be:2b:af:34:75:3b:18:87:a8:24:27:99: da:8f:19:91:94:28:f6:0c:37:8a:fb:2f:5b:b3:92:c2:1e:db: 04:44:88:a1:2d:7f:a6:d1:47:a7:ec:85:9b:ec:5d:4e:ae:17: bf:18:f1:a5:5d:d9:4f:68:86:47:af:eb:45:97:c8:fd:d8:bf: 10:d9:79:de:68:2d:79:f8:ca:9d:d1:ad:fc:35:2f:34:1b:00: 3d:34:a2:26:c1:de:54:5e:5d:a3:b0:57:e4:97:f4:8f:99:2b: 07:c1:dc:7b:dd:e6:90:49:a1:6d:1d:28:9b:64:27:a0:77:36: cb:56:9b:0d:96:43:28:93:01:47:07:af:51:29:89:2a:4e:49: 0f:0c:13:82:28:08:9f:05:ac:26:03:39:59:a3:48:6c:8a:5e: b4:d0:d1:b2:ad:1a:1d:a2:2f:bb:0e:5b:f9:39:fa:b6:35:64: 26:7c:bb:c2:15:87:51:f8:06:e6:ab:7f:50:0d:25:95:48:17: 89:0b:20:8a:1a:1f:57:e7:69:9c:a1:68:60:5e:c1:be:9b:55: f9:f2:04:0b:ad:5c:3d:12:c1:ba:db:90:09:9d:b1:25:44:89: 7d:dd:f4:3c:ac:73:67:09:f2:7c:85:28:06:44:46:58:1f:28: 9b:5d:c1:23 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUKAbuc9BMR9pL1MtmbFAvLyEEqDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD RTFEQjFEMDAeFw0yNTA2MDIwMTU4NDdaFw0yNjA2MDEwMjAzNDdaMDMxMTAvBgNV BAMTKDc4MDdGMzJGNDM5Q0M1MzA2RTM1M0Q2OTc0NzlDQTA1ODI1NkFGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTDHMYSsvlUHfzePvDAUX6aKY Zj6Pr4HgN6U8kjomxDAkNHiuWtkXEX7kfo/Mr3Vr+OmlEyGKlze1LLTqlBPpaJ0W h59xeqe+erL5Kj0Rq1EquWVc+TvIClpn9dSA9vrL6aglkhrO1ZNHYC7fcCUFWfYc o3Wed0zrlXCVFJ4LEnQeNjuxjNUyINQnkgaoYr4BnrIXCN/Ym9C05XD/67FaekY2 RB2fXmrU8QLyHuCbs4YBUsX/2ApDKNAdCSbQNCtLAyM0w+TbThGEW177x9ysQxD5 WCCLWwok34pVyUYTfRG2wlmJrqP5ChkHPJHPQ6ND8ZHzldDFE94TP2f8IefpAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUeAfzL0OcxTBuNT1pdHnKBYJWr3swHwYDVR0j BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE QjFEMC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzMzNzJlMzUzOTJlMzEzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACJOw4wDQYJKoZIhvcN AQELBQADggEBAD0a3qAD/b4rrzR1OxiHqCQnmdqPGZGUKPYMN4r7L1uzksIe2wRE iKEtf6bRR6fshZvsXU6uF78Y8aVd2U9ohkev60WXyP3YvxDZed5oLXn4yp3Rrfw1 LzQbAD00oibB3lReXaOwV+SX9I+ZKwfB3Hvd5pBJoW0dKJtkJ6B3NstWmw2WQyiT AUcHr1EpiSpOSQ8ME4IoCJ8FrCYDOVmjSGyKXrTQ0bKtGh2iL7sOW/k5+rY1ZCZ8 u8IVh1H4Buarf1ANJZVIF4kLIIoaH1fnaZyhaGBewb6bVfnyBAutXD0SwbrbkAmd sSVEiX3d9Dysc2cJ8nyFKAZERlgfKJtdwSM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:19 2025 by rpki-client