$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32342d3234203d3e20313533303630.roa File: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (raw, json) Hash identifier: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE= Subject key identifier: 99:49:90:49:49:0D:33:FD:CB:EC:81:4E:13:8B:07:9E:61:A9:AB:73 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 1EEEC5AD96E1FEDEDA424DEEF0B057D126DDC30E Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32342d3234203d3e20313533303630.roa Signing time: Mon 23 Jun 2025 14:00:00 +0000 ROA not before: Mon 23 Jun 2025 13:55:00 +0000 ROA not after: Mon 22 Jun 2026 14:00:00 +0000 asID: 153060 IP address blocks: 160.25.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 16:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ee:c5:ad:96:e1:fe:de:da:42:4d:ee:f0:b0:57:d1:26:dd:c3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Jun 23 13:55:00 2025 GMT Not After : Jun 22 14:00:00 2026 GMT Subject: CN=99499049490D33FDCBEC814E138B079E61A9AB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:13:d8:58:d2:c7:cd:a1:e9:5f:c6:3f:82:12: 45:b4:6b:0d:d9:9d:96:75:6d:3b:f0:27:26:96:f6: 57:de:9d:c6:4f:af:6a:59:b8:52:22:2b:05:e4:2b: 73:b9:14:83:fe:cd:15:3c:6a:90:25:fd:fa:f5:8a: 31:a5:7e:3f:1a:d2:38:bd:9f:cb:1b:0f:53:63:bb: e5:54:c3:bc:37:ec:dd:00:a2:35:31:7c:95:d0:32: 0d:f5:3f:ea:e7:50:e6:75:83:ad:6f:25:de:df:d5: 84:c1:d6:63:16:dc:2e:4e:ca:92:38:9d:f0:ff:b5: 66:81:12:ff:82:4a:98:33:6e:3a:be:19:d7:3a:a0: e6:13:b3:fb:0f:66:09:e4:db:6b:43:c6:7c:97:1e: c5:7a:d0:2d:a5:0d:24:b0:0a:8f:ca:b2:33:25:63: e1:11:22:10:4b:d3:d6:9d:f2:68:db:e7:4b:31:8d: bf:b9:7c:09:4e:75:71:21:e6:ba:8e:f2:3f:08:d1: b4:8c:0e:13:ba:eb:91:d0:ff:0c:1e:24:f9:5f:1b: fe:df:80:45:99:37:d5:f2:47:49:21:b4:48:da:3a: 25:87:88:c6:ab:49:e2:34:3f:82:0f:1a:7e:32:66: 7f:a1:63:bc:cf:b9:e7:a5:b5:44:6f:9a:2f:f9:39: ea:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:49:90:49:49:0D:33:FD:CB:EC:81:4E:13:8B:07:9E:61:A9:AB:73 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/3136302e32352e35342e302f32342d3234203d3e20313533303630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.54.0/24 Signature Algorithm: sha256WithRSAEncryption 34:7b:de:60:37:74:a5:e6:74:f4:9a:0d:06:59:6f:94:2e:98: 5e:01:1b:e3:69:38:5d:6d:af:29:8f:c2:eb:ac:4b:77:7a:b1: 51:62:5c:e0:e7:d2:a1:e1:55:1f:ee:2d:8b:96:bf:d9:c9:7f: 6e:8c:0d:36:0b:bb:38:94:f7:d8:a0:aa:74:0c:5b:e5:ae:f2: 15:26:8a:3c:bf:de:6d:3a:dc:7d:d1:a2:84:8a:33:9f:d9:e4: 1c:78:6b:17:06:75:8c:b3:d3:88:47:b7:f2:4b:3a:75:85:43: 98:03:7a:e0:6d:26:7f:e9:6c:60:5f:29:6b:43:96:97:b6:3a: 37:03:5f:8d:ee:a2:77:3e:48:35:f7:ed:5f:01:b8:42:ca:90: e4:94:c3:7b:1a:74:b0:83:18:54:77:8f:41:85:1d:89:ee:f9: 70:e1:a8:58:f6:4e:82:11:c8:39:81:ad:6e:5f:44:06:cc:42: f7:b8:c0:c2:ef:62:c9:61:3d:75:a0:2d:d4:66:04:78:af:50: ff:98:4c:c0:5b:84:8d:dc:9b:94:a5:15:e7:e2:3f:78:77:f0: 05:cb:b3:2c:31:57:b2:fa:4a:49:5a:f6:50:05:cc:6e:66:48: 90:7e:d8:20:66:6b:dd:7d:f0:68:9b:a9:6f:f6:86:e0:79:ad: 53:7c:fa:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUHu7FrZbh/t7aQk3u8LBX0Sbdww4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTA2MjMxMzU1MDBaFw0yNjA2MjIxNDAwMDBaMDMxMTAvBgNV BAMTKDk5NDk5MDQ5NDkwRDMzRkRDQkVDODE0RTEzOEIwNzlFNjFBOUFCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkE9hY0sfNoelfxj+CEkW0aw3Z nZZ1bTvwJyaW9lfencZPr2pZuFIiKwXkK3O5FIP+zRU8apAl/fr1ijGlfj8a0ji9 n8sbD1Nju+VUw7w37N0AojUxfJXQMg31P+rnUOZ1g61vJd7f1YTB1mMW3C5OypI4 nfD/tWaBEv+CSpgzbjq+Gdc6oOYTs/sPZgnk22tDxnyXHsV60C2lDSSwCo/KsjMl Y+ERIhBL09ad8mjb50sxjb+5fAlOdXEh5rqO8j8I0bSMDhO665HQ/wweJPlfG/7f gEWZN9XyR0khtEjaOiWHiMarSeI0P4IPGn4yZn+hY7zPueeltURvmi/5OepJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUmUmQSUkNM/3L7IFOE4sHnmGpq3MwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlYTI2YTEwLTU4ZTgtNDNjNy05 NDdlLTcyMjE3M2Q2NjYxNC8wLzMxMzYzMDJlMzIzNTJlMzUzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMzMwMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAZNjANBgkqhkiG 9w0BAQsFAAOCAQEANHveYDd0peZ09JoNBllvlC6YXgEb42k4XW2vKY/C66xLd3qx UWJc4OfSoeFVH+4ti5a/2cl/bowNNgu7OJT32KCqdAxb5a7yFSaKPL/ebTrcfdGi hIozn9nkHHhrFwZ1jLPTiEe38ks6dYVDmAN64G0mf+lsYF8pa0OWl7Y6NwNfje6i dz5INfftXwG4QsqQ5JTDexp0sIMYVHePQYUdie75cOGoWPZOghHIOYGtbl9EBsxC 97jAwu9iyWE9daAt1GYEeK9Q/5hMwFuEjdyblKUV5+I/eHfwBcuzLDFXsvpKSVr2 UAXMbmZIkH7YIGZr3X3waJupb/aG4HmtU3z6zg== -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:20 2025 by rpki-client