$ rpki-client -vvf repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32342d3234203d3e20313532303739.roa File: 3135372e31302e302e302f32342d3234203d3e20313532303739.roa (raw, json) Hash identifier: /rLqhw2hFwRMsfI5zGP3QkMBxOWlLSkauOe3xFxChRo= Subject key identifier: AD:1C:CE:3F:8E:C1:3D:09:16:42:DC:D8:F6:4C:19:83:84:0E:0B:CC Certificate issuer: /CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Certificate serial: 427A6638FB3907EF4475B0C85FEBFD9573F7F534 Authority key identifier: FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32342d3234203d3e20313532303739.roa Signing time: Wed 29 Jan 2025 15:00:01 +0000 ROA not before: Wed 29 Jan 2025 14:55:01 +0000 ROA not after: Wed 28 Jan 2026 15:00:01 +0000 asID: 152079 IP address blocks: 157.10.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 18:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7a:66:38:fb:39:07:ef:44:75:b0:c8:5f:eb:fd:95:73:f7:f5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD Validity Not Before: Jan 29 14:55:01 2025 GMT Not After : Jan 28 15:00:01 2026 GMT Subject: CN=AD1CCE3F8EC13D091642DCD8F64C1983840E0BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:7e:00:ed:48:2f:8a:5a:63:b5:3f:8b:b7: ff:c6:46:7f:7b:40:08:f4:6c:ff:82:71:9a:9c:65: 37:ff:bf:bc:ab:15:05:d4:9a:ca:b9:a5:9a:b0:3e: 46:23:28:b5:d4:a1:b6:03:96:3c:37:9f:4a:e0:d5: 05:82:52:e6:bd:bf:e4:24:ab:2b:9b:ea:2d:4a:60: 8b:b4:2d:1a:90:a6:99:9c:4b:62:ef:36:46:4c:43: bc:f6:4c:c2:d8:15:c0:7a:73:a4:72:47:95:78:e2: 4c:1b:4f:0c:e1:08:42:4b:53:1e:ab:3e:6f:94:e0: 2f:a4:7d:11:88:d3:9c:42:3a:6c:cf:40:6a:36:3f: 15:2b:9d:03:c4:d8:9d:5a:d3:d9:de:c3:68:68:48: 25:f9:79:12:c9:3a:50:ec:30:66:08:07:d3:f0:ed: aa:23:2e:6c:cc:7f:ad:0e:d7:3f:ec:cc:3b:2c:71: 47:86:ba:a9:08:8d:0d:4b:33:d4:67:a5:cb:21:8b: ce:71:ba:ad:fa:fc:64:96:de:88:06:9d:a0:df:63: 77:83:77:24:89:fe:1c:34:13:22:05:03:52:0a:9b: 9f:1c:f4:b3:b1:29:7f:ec:82:a0:ff:fa:b0:f2:06: b7:88:c1:34:82:f4:96:06:f4:41:93:b9:89:55:ab: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1C:CE:3F:8E:C1:3D:09:16:42:DC:D8:F6:4C:19:83:84:0E:0B:CC X509v3 Authority Key Identifier: keyid:FA:B0:81:FC:D8:6A:B0:F8:1D:41:C9:E5:FB:9C:3D:32:22:0F:48:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FAB081FCD86AB0F81D41C9E5FB9C3D32220F48CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994d1f62-8488-4086-8d4c-f2de5c76da3d/0/3135372e31302e302e302f32342d3234203d3e20313532303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.0.0/24 Signature Algorithm: sha256WithRSAEncryption 76:3b:e1:4d:99:6a:32:66:30:9d:da:f5:e4:7e:37:c0:00:9c: 43:0d:7b:2d:dc:44:75:96:29:2e:e2:b7:c8:89:a9:e0:36:5d: b9:89:95:03:9c:fd:6b:f9:7f:6a:cc:f5:c9:c5:9c:4d:80:67: 0b:00:0e:a9:18:4f:13:e6:ad:9a:91:be:25:37:ec:55:1d:d0: 8c:6e:15:ed:ac:49:70:dc:8c:a2:80:94:ff:31:4d:76:9b:4a: dc:c4:a4:be:35:38:3a:4e:20:31:43:a9:d3:b7:cf:75:da:23: a3:93:f5:9d:74:c9:cc:79:ef:ae:61:65:cf:d4:b5:af:f5:e1: 03:a3:c2:a6:58:bb:e3:dc:93:fe:fc:5b:d8:2f:70:ff:48:a5: 87:b5:ee:b8:d1:3c:1a:75:93:7b:3f:a4:c3:7d:2e:32:88:63: e7:e2:f1:31:72:05:ef:b3:23:3b:b5:6d:c0:25:bb:d6:dc:7e: c9:af:84:83:6e:27:4d:e7:0c:79:70:33:db:68:a6:39:ec:64: 98:db:cd:f6:4d:ad:03:dc:1e:c9:d9:d4:2f:7c:a0:0a:37:a5: a1:dd:bc:75:0c:4b:1d:3a:45:8b:12:d5:c3:47:5c:09:38:a2: 8c:f6:24:76:88:d0:1e:4c:0d:de:36:c1:b9:1a:97:47:3b:12: 3b:e7:d2:6c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUQnpmOPs5B+9EdbDIX+v9lXP39TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIy MjBGNDhDRDAeFw0yNTAxMjkxNDU1MDFaFw0yNjAxMjgxNTAwMDFaMDMxMTAvBgNV BAMTKEFEMUNDRTNGOEVDMTNEMDkxNjQyRENEOEY2NEMxOTgzODQwRTBCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRH4A7UgvilpjtT+Lt//GRn97 QAj0bP+CcZqcZTf/v7yrFQXUmsq5pZqwPkYjKLXUobYDljw3n0rg1QWCUua9v+Qk qyub6i1KYIu0LRqQppmcS2LvNkZMQ7z2TMLYFcB6c6RyR5V44kwbTwzhCEJLUx6r Pm+U4C+kfRGI05xCOmzPQGo2PxUrnQPE2J1a09new2hoSCX5eRLJOlDsMGYIB9Pw 7aojLmzMf60O1z/szDsscUeGuqkIjQ1LM9Rnpcshi85xuq36/GSW3ogGnaDfY3eD dySJ/hw0EyIFA1IKm58c9LOxKX/sgqD/+rDyBreIwTSC9JYG9EGTuYlVq5L9AgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUrRzOP47BPQkWQtzY9kwZg4QOC8wwHwYDVR0j BBgwFoAU+rCB/NhqsPgdQcnl+5w9MiIPSM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRkMWY2Mi04NDg4LTQwODYtOGQ0Yy1mMmRlNWM3NmRhM2QvMC9GQUIwODFGQ0Q4 NkFCMEY4MUQ0MUM5RTVGQjlDM0QzMjIyMEY0OENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkFCMDgxRkNEODZBQjBGODFENDFDOUU1RkI5QzNEMzIyMjBG NDhDRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGQxZjYyLTg0ODgtNDA4Ni04 ZDRjLWYyZGU1Yzc2ZGEzZC8wLzMxMzUzNzJlMzEzMDJlMzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM1MzIzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACdCgAwDQYJKoZIhvcN AQELBQADggEBAHY74U2ZajJmMJ3a9eR+N8AAnEMNey3cRHWWKS7it8iJqeA2XbmJ lQOc/Wv5f2rM9cnFnE2AZwsADqkYTxPmrZqRviU37FUd0IxuFe2sSXDcjKKAlP8x TXabStzEpL41ODpOIDFDqdO3z3XaI6OT9Z10ycx5765hZc/Uta/14QOjwqZYu+Pc k/78W9gvcP9IpYe17rjRPBp1k3s/pMN9LjKIY+fi8TFyBe+zIzu1bcAlu9bcfsmv hINuJ03nDHlwM9topjnsZJjbzfZNrQPcHsnZ1C98oAo3paHdvHUMSx06RYsS1cNH XAk4ooz2JHaI0B5MDd42wbkal0c7Ejvn0mw= -----END CERTIFICATE-----Generated at Thu Apr 24 04:31:38 2025 by rpki-client on console.sobornost.net