$ rpki-client -vvf repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa File: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (raw, json) Hash identifier: fefCWKXr30YVqWiq342VlH8lfhnIRdZEARC93/LTaB0= Subject key identifier: 2F:2E:3C:80:4C:1A:08:FA:A5:88:5A:CF:07:97:41:48:96:29:9A:77 Certificate issuer: /CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Certificate serial: 4360FF69E932F0F37F0E2102527E2AFA3B8CDA6F Authority key identifier: 27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa Signing time: Mon 23 Jun 2025 06:02:21 +0000 ROA not before: Mon 23 Jun 2025 05:57:21 +0000 ROA not after: Mon 22 Jun 2026 06:02:21 +0000 asID: 153079 IP address blocks: 160.25.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:60:ff:69:e9:32:f0:f3:7f:0e:21:02:52:7e:2a:fa:3b:8c:da:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=277D3C0811B597BC22847329E543CCEE7E2449A0 Validity Not Before: Jun 23 05:57:21 2025 GMT Not After : Jun 22 06:02:21 2026 GMT Subject: CN=2F2E3C804C1A08FAA5885ACF0797414896299A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:22:32:31:f4:b7:93:8d:01:d6:fc:9d:94:70: f8:9f:e6:08:22:5b:76:98:02:23:91:ec:99:65:c1: bf:67:ca:fd:03:11:3d:67:2d:97:d4:5e:99:f0:75: 50:4a:99:40:18:b6:d6:03:24:77:7c:f1:cd:07:fe: e4:e4:5f:87:d8:34:22:f1:fc:bb:7e:35:3f:fa:15: cf:9a:16:9d:30:a1:32:5b:5b:de:1b:53:f0:bc:3c: 7a:41:f7:ef:91:c2:14:27:94:26:d0:f2:7c:22:ab: ad:b2:1c:ea:6e:81:d1:fd:45:48:e7:b0:e0:85:ff: 68:42:fe:6e:a5:12:d3:75:62:9b:71:43:89:77:5a: 0b:a7:12:a7:0d:f0:e8:ec:27:22:77:32:aa:30:3c: aa:e3:0c:2c:b9:b3:a9:b6:20:ad:22:2a:fd:d1:8d: 99:fe:25:d7:d2:26:01:a3:35:39:2e:91:c9:61:7e: 7c:b3:c9:a0:80:b2:2f:6b:32:0f:17:e6:df:15:04: e7:75:c4:df:cb:c2:d8:74:3f:43:ca:c2:7f:e2:5f: 85:25:fd:53:d5:43:d9:17:3f:4c:27:da:79:cb:dd: 4e:0d:fd:be:65:07:cd:c7:46:73:3b:36:02:43:28: 30:4a:a3:44:16:f6:91:a8:75:d7:d0:15:4a:bf:0e: 09:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2E:3C:80:4C:1A:08:FA:A5:88:5A:CF:07:97:41:48:96:29:9A:77 X509v3 Authority Key Identifier: keyid:27:7D:3C:08:11:B5:97:BC:22:84:73:29:E5:43:CC:EE:7E:24:49:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/277D3C0811B597BC22847329E543CCEE7E2449A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/277D3C0811B597BC22847329E543CCEE7E2449A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.116.0/24 Signature Algorithm: sha256WithRSAEncryption 42:3c:1c:a1:82:95:13:85:a0:41:e8:55:81:05:b8:79:c3:0b: da:7f:35:7b:92:17:71:cc:d5:1a:67:72:39:66:3e:83:9b:33: fb:49:df:74:4f:87:8e:cc:a6:2f:fe:6e:39:8b:c4:0d:30:14: d8:a9:9a:fd:0f:2d:46:3d:43:c8:4d:3d:28:ee:6a:fb:16:a3: 3d:1b:1d:7d:38:e0:3c:85:d0:c5:94:ec:b1:3a:6a:83:2a:0f: ee:e4:7e:0c:53:55:80:91:87:d5:80:6e:d5:60:10:2f:1e:77: fd:69:9b:e8:cb:08:e3:ae:2b:a5:4e:64:ce:7b:0b:cd:71:22: cc:56:11:dc:6f:4c:49:ea:34:96:db:7c:92:58:c2:58:d4:f5: b9:74:6b:f9:43:ca:33:25:7a:ec:23:3b:98:cf:ea:6a:30:20: 22:8b:86:2f:f1:57:f0:58:7e:e3:63:20:9d:16:37:67:23:93: 97:dd:83:d8:31:21:8a:0c:47:3e:fa:9e:e3:18:3a:bc:a0:a1: 3e:66:0c:00:ba:bb:84:c9:ae:81:ff:75:c6:59:4e:6a:35:7d: 5c:9a:b2:d0:7c:59:a2:cc:92:ee:ed:95:10:bd:c0:20:75:41: b9:32:f9:43:f9:99:38:ed:f1:81:63:8d:68:f7:81:ba:9f:cf: 11:63:45:8f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQ2D/aeky8PN/DiECUn4q+juM2m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3 RTI0NDlBMDAeFw0yNTA2MjMwNTU3MjFaFw0yNjA2MjIwNjAyMjFaMDMxMTAvBgNV BAMTKDJGMkUzQzgwNEMxQTA4RkFBNTg4NUFDRjA3OTc0MTQ4OTYyOTlBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiIjIx9LeTjQHW/J2UcPif5ggi W3aYAiOR7Jllwb9nyv0DET1nLZfUXpnwdVBKmUAYttYDJHd88c0H/uTkX4fYNCLx /Lt+NT/6Fc+aFp0woTJbW94bU/C8PHpB9++RwhQnlCbQ8nwiq62yHOpugdH9RUjn sOCF/2hC/m6lEtN1YptxQ4l3WgunEqcN8OjsJyJ3MqowPKrjDCy5s6m2IK0iKv3R jZn+JdfSJgGjNTkukclhfnyzyaCAsi9rMg8X5t8VBOd1xN/Lwth0P0PKwn/iX4Ul /VPVQ9kXP0wn2nnL3U4N/b5lB83HRnM7NgJDKDBKo0QW9pGoddfQFUq/DgntAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULy48gEwaCPqliFrPB5dBSJYpmncwHwYDVR0j BBgwFoAUJ308CBG1l7wihHMp5UPM7n4kSaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzgyNTlkNi0yNjU1LTQ0MTctYmVjNC04M2VmNjY0NGY1N2UvMC8yNzdEM0MwODEx QjU5N0JDMjI4NDczMjlFNTQzQ0NFRTdFMjQ0OUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjc3RDNDMDgxMUI1OTdCQzIyODQ3MzI5RTU0M0NDRUU3RTI0 NDlBMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3ODI1OWQ2LTI2NTUtNDQxNy1i ZWM0LTgzZWY2NjQ0ZjU3ZS8wLzMxMzYzMDJlMzIzNTJlMzEzMTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBl0MA0GCSqG SIb3DQEBCwUAA4IBAQBCPByhgpUThaBB6FWBBbh5wwvafzV7khdxzNUaZ3I5Zj6D mzP7Sd90T4eOzKYv/m45i8QNMBTYqZr9Dy1GPUPITT0o7mr7FqM9Gx19OOA8hdDF lOyxOmqDKg/u5H4MU1WAkYfVgG7VYBAvHnf9aZvoywjjriulTmTOewvNcSLMVhHc b0xJ6jSW23ySWMJY1PW5dGv5Q8ozJXrsIzuYz+pqMCAii4Yv8VfwWH7jYyCdFjdn I5OX3YPYMSGKDEc++p7jGDq8oKE+ZgwAuruEya6B/3XGWU5qNX1cmrLQfFmizJLu 7ZUQvcAgdUG5MvlD+Zk47fGBY41o94G6n88RY0WP -----END CERTIFICATE-----Generated at Tue Jul 1 21:04:08 2025 by rpki-client