$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa File: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (raw, json) Hash identifier: uNx5iwyz6x880NzmuCneSj6IVO81E/uFr4QeiksRPNA= Subject key identifier: 51:B4:55:2D:52:B6:72:69:7C:11:83:BC:35:39:85:19:18:61:8E:9E Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 031BD18F0B6AB01433C61BDF4664A5D95539E619 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa Signing time: Tue 29 Jul 2025 05:00:01 +0000 ROA not before: Tue 29 Jul 2025 04:55:01 +0000 ROA not after: Tue 28 Jul 2026 05:00:01 +0000 asID: 152369 IP address blocks: 157.15.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 Aug 2025 00:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1b:d1:8f:0b:6a:b0:14:33:c6:1b:df:46:64:a5:d9:55:39:e6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: Jul 29 04:55:01 2025 GMT Not After : Jul 28 05:00:01 2026 GMT Subject: CN=51B4552D52B672697C1183BC3539851918618E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:9a:ed:ab:49:d4:28:de:f7:15:aa:69:a9: c3:e8:1b:e1:9e:99:97:57:e8:25:d2:5a:7a:2c:31: c3:2f:60:cb:b9:c4:ee:ec:1f:43:4d:4b:54:22:a6: e1:e7:9c:39:01:42:1a:fe:31:3e:0a:c9:56:be:0c: 10:87:a7:2c:b5:8d:16:f8:41:1f:78:f3:b9:4f:b1: 29:e1:79:47:a7:0b:43:3d:a4:d8:66:e7:91:c4:b5: cd:1e:c3:93:34:52:27:b4:7a:8d:0d:14:82:24:84: be:59:a5:43:db:3e:f8:e8:fd:7d:c0:81:2b:f3:31: e5:fe:9b:4a:9a:28:29:e6:65:46:2e:3c:fc:b7:47: 93:01:9a:bd:b1:26:d7:09:1f:64:e2:9b:26:e5:9d: da:43:ea:71:dd:88:6b:c9:a3:2f:da:6b:1a:1d:d4: c4:9e:7e:d9:66:cf:1e:df:f8:42:39:e1:80:49:68: 45:f4:3a:d7:6c:da:b7:34:3d:53:56:25:e1:c4:70: 79:37:4c:a7:58:37:8e:ee:03:eb:8b:4b:cd:f5:4e: 9b:1c:b8:b2:77:8f:33:02:93:05:78:53:e3:8d:1b: f8:cb:cf:48:e2:0a:b6:57:c7:fb:42:69:e6:19:cf: b4:c0:89:55:75:67:6a:0d:28:22:89:ab:9c:e2:af: af:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:55:2D:52:B6:72:69:7C:11:83:BC:35:39:85:19:18:61:8E:9E X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.113.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:5d:77:34:ea:54:8f:f7:23:e4:2a:56:11:54:57:9d:9c:cf: a0:38:35:b6:c3:df:5a:21:77:fb:8a:b6:b1:5a:b4:73:f5:2f: f0:f3:1f:ae:5e:9f:92:ae:74:37:8a:f9:b0:49:b7:2b:64:e6: 83:a2:1e:76:b5:35:54:09:98:33:23:99:13:77:eb:49:1e:cd: 03:83:1f:8d:0c:e7:d1:fa:24:e1:d9:a0:df:23:07:4b:88:21: bf:0f:f9:52:0c:c1:29:aa:b2:17:75:6d:2e:12:f9:2f:00:6f: 43:66:0e:d2:8b:e5:65:e9:37:fe:06:dd:c8:c3:36:f2:6c:05: 0c:aa:83:fd:ee:72:21:a8:2b:3e:58:c6:eb:4f:7a:a3:91:19: 16:36:55:b3:86:4b:65:4b:ca:96:04:ae:e0:08:f5:64:0a:b2: 97:44:19:2a:1f:29:89:2e:f8:ce:0e:02:cc:2a:be:c9:0c:73: 13:40:35:41:dc:30:e5:5f:b3:82:c8:3f:61:33:a8:65:64:6c: 68:72:ed:ba:a3:ef:d5:d6:7a:0a:6f:5b:6e:a7:98:32:a0:0d: 3f:ca:87:4b:94:00:0f:5f:26:5a:9c:79:74:f3:a4:bd:23:b4: a0:21:6a:5b:b0:c0:ea:37:e8:e5:f3:37:52:25:bb:12:a3:6c: b0:a5:83:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUAxvRjwtqsBQzxhvfRmSl2VU55hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTA3MjkwNDU1MDFaFw0yNjA3MjgwNTAwMDFaMDMxMTAvBgNV BAMTKDUxQjQ1NTJENTJCNjcyNjk3QzExODNCQzM1Mzk4NTE5MTg2MThFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrT5rtq0nUKN73FappqcPoG+Ge mZdX6CXSWnosMcMvYMu5xO7sH0NNS1QipuHnnDkBQhr+MT4KyVa+DBCHpyy1jRb4 QR9487lPsSnheUenC0M9pNhm55HEtc0ew5M0Uie0eo0NFIIkhL5ZpUPbPvjo/X3A gSvzMeX+m0qaKCnmZUYuPPy3R5MBmr2xJtcJH2TimyblndpD6nHdiGvJoy/aaxod 1MSeftlmzx7f+EI54YBJaEX0Otds2rc0PVNWJeHEcHk3TKdYN47uA+uLS831Tpsc uLJ3jzMCkwV4U+ONG/jLz0jiCrZXx/tCaeYZz7TAiVV1Z2oNKCKJq5zir68XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUbRVLVK2cml8EYO8NTmFGRhhjp4wHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxOTFmNTVkLWUzODItNDU4My05 OWNmLTcxYTQ3MTdlN2YwOS8wLzMxMzUzNzJlMzEzNTJlMzEzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ9xMA0GCSqG SIb3DQEBCwUAA4IBAQCKXXc06lSP9yPkKlYRVFednM+gODW2w99aIXf7iraxWrRz 9S/w8x+uXp+SrnQ3ivmwSbcrZOaDoh52tTVUCZgzI5kTd+tJHs0Dgx+NDOfR+iTh 2aDfIwdLiCG/D/lSDMEpqrIXdW0uEvkvAG9DZg7Si+Vl6Tf+Bt3IwzbybAUMqoP9 7nIhqCs+WMbrT3qjkRkWNlWzhktlS8qWBK7gCPVkCrKXRBkqHymJLvjODgLMKr7J DHMTQDVB3DDlX7OCyD9hM6hlZGxocu26o+/V1noKb1tup5gyoA0/yodLlAAPXyZa nHl086S9I7SgIWpbsMDqN+jl8zdSJbsSo2ywpYPu -----END CERTIFICATE-----Generated at Wed Aug 13 14:51:19 2025 by rpki-client