$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa File: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (raw, json) Hash identifier: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA= Subject key identifier: 03:45:D7:20:5A:84:7B:75:59:96:43:05:30:DF:55:EA:01:33:8D:50 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 7F2DBDE9B33317B70C79E7A14AAA73E8C50F7E6C Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa Signing time: Tue 01 Jul 2025 02:01:41 +0000 ROA not before: Tue 01 Jul 2025 01:56:41 +0000 ROA not after: Tue 30 Jun 2026 02:01:41 +0000 asID: 152805 IP address blocks: 160.20.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2d:bd:e9:b3:33:17:b7:0c:79:e7:a1:4a:aa:73:e8:c5:0f:7e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Jul 1 01:56:41 2025 GMT Not After : Jun 30 02:01:41 2026 GMT Subject: CN=0345D7205A847B755996430530DF55EA01338D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:5c:bb:a4:51:8c:fa:a3:fa:53:76:a0:ba: b0:e5:20:7b:2c:36:6a:91:b1:88:0b:8b:83:6c:9e: 06:75:a4:79:9e:99:ea:d6:c3:03:2a:c8:5d:5b:19: 5f:b5:75:73:72:86:f4:70:81:19:21:52:f5:78:a1: b7:24:ae:21:35:c2:ff:1c:ba:cc:e6:29:3b:6c:9e: 77:68:39:22:22:22:89:4d:17:83:93:22:60:81:7f: 89:c9:37:06:fa:2b:7b:68:87:8a:4e:09:a3:53:05: a8:99:50:92:be:8f:80:31:e3:61:b4:5c:91:ba:a6: b6:8d:c4:24:81:e8:8d:c8:e0:57:14:49:43:eb:4a: ac:69:80:44:bd:41:89:7f:40:2d:09:f1:30:48:e1: 35:13:9e:b0:8c:91:c4:79:f3:a6:d1:50:99:69:e3: 94:f4:ff:ce:da:04:e5:eb:a9:d8:70:21:cd:2f:97: 65:83:56:0a:c8:06:4f:46:fb:83:75:5d:79:14:d3: 34:5e:d2:95:38:5c:e4:25:cf:55:24:9f:9c:84:ca: a8:1b:fa:4a:e2:96:a2:7d:02:30:0b:7f:c7:70:11: b5:44:4b:0f:12:a2:77:90:86:c5:1a:b4:22:b2:4e: bd:8f:6f:c6:16:46:21:83:f7:0e:2d:ff:40:d0:ae: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:45:D7:20:5A:84:7B:75:59:96:43:05:30:DF:55:EA:01:33:8D:50 X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.240.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:a4:8d:2f:d4:e2:35:a0:d4:a3:f8:be:b6:f9:66:9d:56:3c: 55:4a:f2:9d:5d:43:d8:e4:8e:20:08:05:61:8e:d0:de:4e:9a: 4b:06:07:2a:18:dc:1a:13:3b:13:45:97:2d:22:c6:40:14:36: 3a:28:7a:40:ac:fa:56:75:6a:c7:93:df:ca:5b:99:9f:19:7f: 85:fc:6f:aa:74:18:84:a3:65:a3:2f:db:b9:e5:7a:b3:25:52: 80:33:a7:fe:35:e3:8f:db:59:69:de:38:26:85:7b:1d:f7:13: d8:9b:48:8e:b6:dd:58:5b:d6:77:f8:de:47:c9:47:0b:81:98: 7c:78:f9:a4:74:98:f1:00:61:f1:5a:0f:62:38:36:db:c8:c1: 80:db:05:f5:3e:c5:2a:98:80:4a:11:ea:fd:a9:be:85:c1:5d: 5f:10:29:b9:d2:e0:16:cf:52:f1:56:ac:fa:65:16:f6:31:53: 50:9b:42:63:e4:01:12:d8:40:54:af:96:fb:b8:d3:88:72:c0: 97:6d:69:69:f1:a0:03:e4:75:e2:d2:70:52:41:e7:f6:c0:6d: 58:a9:f7:23:53:12:72:35:95:2d:df:2e:33:d8:ad:d8:2e:66: d0:bb:8a:67:26:eb:ff:f4:49:30:21:0c:c4:4c:09:0d:56:84: 14:eb:d9:b0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUfy296bMzF7cMeeehSqpz6MUPfmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNTA3MDEwMTU2NDFaFw0yNjA2MzAwMjAxNDFaMDMxMTAvBgNV BAMTKDAzNDVENzIwNUE4NDdCNzU1OTk2NDMwNTMwREY1NUVBMDEzMzhENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZNly7pFGM+qP6U3agurDlIHss NmqRsYgLi4NsngZ1pHmemerWwwMqyF1bGV+1dXNyhvRwgRkhUvV4obckriE1wv8c uszmKTtsnndoOSIiIolNF4OTImCBf4nJNwb6K3toh4pOCaNTBaiZUJK+j4Ax42G0 XJG6praNxCSB6I3I4FcUSUPrSqxpgES9QYl/QC0J8TBI4TUTnrCMkcR586bRUJlp 45T0/87aBOXrqdhwIc0vl2WDVgrIBk9G+4N1XXkU0zRe0pU4XOQlz1Ukn5yEyqgb +krilqJ9AjALf8dwEbVESw8SoneQhsUatCKyTr2Pb8YWRiGD9w4t/0DQrkzRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUA0XXIFqEe3VZlkMFMN9V6gEzjVAwHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmYzVhMWNjLWNjNWUtNGU1OC04 ZGY0LWY4ODY3MTgzMTNhYS8wLzMxMzYzMDJlMzIzMDJlMzIzNDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBTwMA0GCSqG SIb3DQEBCwUAA4IBAQBLpI0v1OI1oNSj+L62+WadVjxVSvKdXUPY5I4gCAVhjtDe TppLBgcqGNwaEzsTRZctIsZAFDY6KHpArPpWdWrHk9/KW5mfGX+F/G+qdBiEo2Wj L9u55XqzJVKAM6f+NeOP21lp3jgmhXsd9xPYm0iOtt1YW9Z3+N5HyUcLgZh8ePmk dJjxAGHxWg9iODbbyMGA2wX1PsUqmIBKEer9qb6FwV1fECm50uAWz1LxVqz6ZRb2 MVNQm0Jj5AES2EBUr5b7uNOIcsCXbWlp8aAD5HXi0nBSQef2wG1YqfcjUxJyNZUt 3y4z2K3YLmbQu4pnJuv/9EkwIQzETAkNVoQU69mw -----END CERTIFICATE-----Generated at Sun Jul 6 03:14:37 2025 by rpki-client