$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa File: 3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa (raw, json) Hash identifier: 6JhReV09R/tziXlQqKrU1QTNK6tqA0cKgyJJfsNVlow= Subject key identifier: F3:33:E3:D1:F0:7E:A2:61:8C:CB:18:D1:98:AD:F0:9C:43:B8:21:63 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 0D82D5B27E2BD3C696A0FFE7AC75650982EE95A3 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa Signing time: Thu 12 Jun 2025 08:38:46 +0000 ROA not before: Thu 12 Jun 2025 08:33:46 +0000 ROA not after: Thu 11 Jun 2026 08:38:46 +0000 asID: 153131 IP address blocks: 160.191.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:82:d5:b2:7e:2b:d3:c6:96:a0:ff:e7:ac:75:65:09:82:ee:95:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Jun 12 08:33:46 2025 GMT Not After : Jun 11 08:38:46 2026 GMT Subject: CN=F333E3D1F07EA2618CCB18D198ADF09C43B82163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:6c:03:47:36:a8:85:4d:51:e8:84:08:57: 40:1b:b2:f6:fb:92:9c:02:be:4f:4c:a4:31:49:53: ce:5d:50:a3:96:00:d4:f1:3a:6f:ec:0f:c9:ce:df: 89:c2:e6:af:13:4b:ff:c2:01:58:e6:74:d8:20:ea: b6:8b:82:50:9a:7b:12:78:6e:84:16:65:04:66:14: 12:5b:20:34:59:18:96:95:99:3b:79:8a:e0:a9:88: 08:81:82:76:8b:4e:0d:75:d7:0c:b1:dc:3c:4d:82: ce:da:b3:6b:25:e4:42:46:59:67:58:be:b0:5f:2c: 34:16:47:99:76:72:dc:c7:dd:fb:53:5d:b1:34:07: 5f:6f:27:27:f6:ec:40:12:31:15:63:39:1c:74:40: d5:f3:4c:7b:e3:df:cd:59:8f:f3:79:28:d2:2b:2a: c7:2c:bb:0f:a9:7e:0e:81:bb:f2:7d:cc:d3:9e:9b: 0d:12:e9:c4:d7:35:b0:d3:e8:18:1a:8d:1b:95:d7: 97:b9:56:d1:37:f3:e8:1a:4b:8d:55:a4:71:2a:98: 88:39:8f:d3:3e:62:0f:7c:29:5a:db:be:cb:74:81: bb:46:fc:21:cf:ad:26:99:38:20:96:5b:88:4f:88: 3f:7a:32:7f:63:64:13:12:79:27:b9:5d:f0:df:31: a3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:33:E3:D1:F0:7E:A2:61:8C:CB:18:D1:98:AD:F0:9C:43:B8:21:63 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31332e302f32342d3234203d3e20313533313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.13.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:5e:b1:6d:fc:70:c4:97:a0:3a:9b:ff:25:8e:15:00:74:08: 1c:c7:fe:e7:25:ad:8c:13:34:3f:3d:f7:e6:cb:f6:a2:5f:ea: 61:32:ef:51:2c:70:1c:2c:87:09:cd:7c:30:b9:e8:88:f6:22: fe:87:bc:32:b1:84:79:ae:33:09:de:af:a8:0c:ac:71:a0:f1: 35:1f:f4:cc:91:c8:d5:dc:b0:77:45:b9:56:44:d8:93:f9:54: d4:8e:76:47:5e:6e:f5:c3:97:8c:87:8b:5b:71:17:e2:c4:ae: 1f:5f:7a:f5:25:40:99:1d:0b:b9:19:54:e3:90:63:c1:66:8b: 36:2b:8a:29:3f:27:bc:eb:82:9f:ef:aa:0f:ff:51:1a:53:53: d0:9c:ba:72:11:32:70:5d:22:a8:8f:7e:c7:77:d9:a4:7f:fa: f0:22:e8:8f:fa:3e:54:e3:0f:61:81:2e:c9:5d:1f:ff:6a:4d: 2e:5a:9e:d1:cd:36:67:78:7d:1e:3f:66:59:17:75:30:24:a1: 43:4d:07:6f:76:bd:fd:91:a1:1c:9b:1d:51:34:3c:36:05:6d: 0a:99:9d:09:b9:c8:80:c1:83:02:95:91:0b:a2:d9:6d:39:7f: ef:82:8b:44:1a:d6:0b:76:06:2f:7f:5a:86:74:e3:b1:19:49: 50:80:b9:36 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDYLVsn4r08aWoP/nrHVlCYLulaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTA2MTIwODMzNDZaFw0yNjA2MTEwODM4NDZaMDMxMTAvBgNV BAMTKEYzMzNFM0QxRjA3RUEyNjE4Q0NCMThEMTk4QURGMDlDNDNCODIxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwwWwDRzaohU1R6IQIV0Absvb7 kpwCvk9MpDFJU85dUKOWANTxOm/sD8nO34nC5q8TS//CAVjmdNgg6raLglCaexJ4 boQWZQRmFBJbIDRZGJaVmTt5iuCpiAiBgnaLTg111wyx3DxNgs7as2sl5EJGWWdY vrBfLDQWR5l2ctzH3ftTXbE0B19vJyf27EASMRVjORx0QNXzTHvj381Zj/N5KNIr Kscsuw+pfg6Bu/J9zNOemw0S6cTXNbDT6BgajRuV15e5VtE38+gaS41VpHEqmIg5 j9M+Yg98KVrbvst0gbtG/CHPrSaZOCCWW4hPiD96Mn9jZBMSeSe5XfDfMaONAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU8zPj0fB+omGMyxjRmK3wnEO4IWMwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyMTFmMzQ3LWExZTctNDcxZC1h ZDIwLWRhNzZhYWJmMzg0Yy8wLzMxMzYzMDJlMzEzOTMxMmUzMTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoL8NMA0GCSqG SIb3DQEBCwUAA4IBAQBsXrFt/HDEl6A6m/8ljhUAdAgcx/7nJa2MEzQ/Pffmy/ai X+phMu9RLHAcLIcJzXwwueiI9iL+h7wysYR5rjMJ3q+oDKxxoPE1H/TMkcjV3LB3 RblWRNiT+VTUjnZHXm71w5eMh4tbcRfixK4fX3r1JUCZHQu5GVTjkGPBZos2K4op Pye864Kf76oP/1EaU1PQnLpyETJwXSKoj37Hd9mkf/rwIuiP+j5U4w9hgS7JXR// ak0uWp7RzTZneH0eP2ZZF3UwJKFDTQdvdr39kaEcmx1RNDw2BW0KmZ0JuciAwYMC lZELotltOX/vgotEGtYLdgYvf1qGdOOxGUlQgLk2 -----END CERTIFICATE-----Generated at Mon Jun 30 10:15:02 2025 by rpki-client