$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa File: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (raw, json) Hash identifier: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY= Subject key identifier: 00:B8:D3:86:70:55:50:A6:A9:55:1C:37:26:72:39:D9:2D:C7:D9:81 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 30DF714EA4B928A163C2A5F809E8E1C7B8381386 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa Signing time: Mon 09 Jun 2025 10:00:01 +0000 ROA not before: Mon 09 Jun 2025 09:55:01 +0000 ROA not after: Mon 08 Jun 2026 10:00:01 +0000 asID: 152780 IP address blocks: 160.20.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 04:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:df:71:4e:a4:b9:28:a1:63:c2:a5:f8:09:e8:e1:c7:b8:38:13:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Jun 9 09:55:01 2025 GMT Not After : Jun 8 10:00:01 2026 GMT Subject: CN=00B8D386705550A6A9551C37267239D92DC7D981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:cc:a5:94:81:48:f4:60:c8:c3:64:61:31: 1b:88:cc:ec:c3:e1:4f:b3:ac:95:d2:19:82:f0:79: 65:7b:90:23:48:2f:98:f1:11:a1:53:fd:a0:28:c7: 0f:f7:ad:f8:f4:99:34:62:27:df:e7:79:47:48:eb: 51:f9:07:ce:7e:44:67:2a:a8:03:62:40:f7:1c:6c: af:8b:b3:22:23:08:8b:29:6b:5b:fa:1f:dc:1f:b1: 98:29:91:5d:24:a4:43:63:18:64:a5:46:70:cd:62: 88:10:7d:dd:ac:1c:b9:4b:ee:2f:18:fb:98:70:f9: 40:e3:de:bd:15:5c:67:61:66:80:3f:ae:b3:56:d5: bd:09:ed:5f:f2:60:41:e5:03:74:61:e3:15:63:72: e6:4c:82:a7:f5:5b:ec:59:d5:3f:68:4d:17:fe:db: ec:6c:d4:4a:8b:ee:d0:30:f4:84:f1:f8:05:67:c1: b4:25:43:0a:0c:da:2f:3c:50:5f:a7:d8:d1:27:c4: e1:57:fc:15:85:4d:ce:64:da:ca:d9:f6:88:c1:bc: be:3e:c1:5a:cb:c5:51:af:29:69:e8:10:a0:57:5e: 07:e3:80:79:cc:fe:fe:7a:c9:16:12:a4:06:d0:b7: d1:c5:de:46:03:a4:e9:c3:c7:07:e7:3a:5f:7a:75: 6d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B8:D3:86:70:55:50:A6:A9:55:1C:37:26:72:39:D9:2D:C7:D9:81 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.124.0/24 Signature Algorithm: sha256WithRSAEncryption 94:0d:c8:8d:a0:e4:ed:2a:a5:88:83:96:c8:c5:46:83:a6:e4: 4c:07:33:7e:e3:24:00:19:f5:27:fe:df:44:d3:99:07:d3:ac: 91:fc:88:b8:b1:99:e6:16:a7:65:0f:99:84:ea:c8:ee:bf:c4: 96:c6:1e:db:3d:ae:6f:cd:88:69:19:26:0a:be:ef:25:38:0f: 2a:e3:32:1f:37:1b:8f:b6:0d:c9:13:cf:b1:0a:11:ef:07:e5: 29:66:07:59:66:f3:5c:69:71:bc:a2:61:13:55:91:aa:41:34: 69:d0:d9:8c:49:9e:5f:7e:bf:0b:d5:92:fd:36:bf:b3:a1:03: d3:f0:8e:89:5d:e5:da:53:7f:b9:7c:76:98:75:c1:a5:26:5f: 17:cf:e4:de:95:2a:83:77:74:42:7a:97:c7:83:46:da:56:ad: 51:0b:0c:bf:18:62:4e:3d:f8:2a:90:fb:27:ad:06:60:8e:59: 8b:76:4f:52:af:78:ca:71:0c:eb:f9:6b:3c:d4:f5:da:b8:0d: 60:f5:f6:0b:b7:7d:5f:f0:76:81:bf:0d:8d:36:35:97:70:d6: 0d:93:6e:cd:43:36:a8:69:9e:6b:f5:5d:35:74:e9:19:5c:6e: 98:3f:84:03:5a:b5:d5:3f:c5:20:1a:66:ce:59:4a:1c:5d:77: 3e:2b:25:56 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMN9xTqS5KKFjwqX4Cejhx7g4E4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTA2MDkwOTU1MDFaFw0yNjA2MDgxMDAwMDFaMDMxMTAvBgNV BAMTKDAwQjhEMzg2NzA1NTUwQTZBOTU1MUMzNzI2NzIzOUQ5MkRDN0Q5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXf8yllIFI9GDIw2RhMRuIzOzD 4U+zrJXSGYLweWV7kCNIL5jxEaFT/aAoxw/3rfj0mTRiJ9/neUdI61H5B85+RGcq qANiQPccbK+LsyIjCIspa1v6H9wfsZgpkV0kpENjGGSlRnDNYogQfd2sHLlL7i8Y +5hw+UDj3r0VXGdhZoA/rrNW1b0J7V/yYEHlA3Rh4xVjcuZMgqf1W+xZ1T9oTRf+ 2+xs1EqL7tAw9ITx+AVnwbQlQwoM2i88UF+n2NEnxOFX/BWFTc5k2srZ9ojBvL4+ wVrLxVGvKWnoEKBXXgfjgHnM/v56yRYSpAbQt9HF3kYDpOnDxwfnOl96dW2dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUALjThnBVUKapVRw3JnI52S3H2YEwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFkLWVlMTgtNDM1Yy04 YjZlLWViYTIyNDFiODNhYi8wLzMxMzYzMDJlMzIzMDJlMzEzMjM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBR8MA0GCSqG SIb3DQEBCwUAA4IBAQCUDciNoOTtKqWIg5bIxUaDpuRMBzN+4yQAGfUn/t9E05kH 06yR/Ii4sZnmFqdlD5mE6sjuv8SWxh7bPa5vzYhpGSYKvu8lOA8q4zIfNxuPtg3J E8+xChHvB+UpZgdZZvNcaXG8omETVZGqQTRp0NmMSZ5ffr8L1ZL9Nr+zoQPT8I6J XeXaU3+5fHaYdcGlJl8Xz+TelSqDd3RCepfHg0baVq1RCwy/GGJOPfgqkPsnrQZg jlmLdk9Sr3jKcQzr+Ws81PXauA1g9fYLt31f8HaBvw2NNjWXcNYNk27NQzaoaZ5r 9V01dOkZXG6YP4QDWrXVP8UgGmbOWUocXXc+KyVW -----END CERTIFICATE-----Generated at Thu Jul 3 09:59:31 2025 by rpki-client