$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa File: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (raw, json) Hash identifier: 2H9ugvO1mqNF5HVzGPvvJyo9xLTxDYsuZlPEZxpIFQg= Subject key identifier: 50:7B:BA:1F:D2:2D:E2:6A:A3:B6:F4:F5:FD:55:DD:F7:24:5E:20:F6 Certificate issuer: /CN=69FEA3D523BC4635AE385A6D91412834159FF34B Certificate serial: 0905CA632F0E255A7BB91168CCBEB4BA22A135F3 Authority key identifier: 69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa Signing time: Wed 25 Jun 2025 01:00:00 +0000 ROA not before: Wed 25 Jun 2025 00:55:00 +0000 ROA not after: Wed 24 Jun 2026 01:00:00 +0000 asID: 152841 IP address blocks: 160.22.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:05:ca:63:2f:0e:25:5a:7b:b9:11:68:cc:be:b4:ba:22:a1:35:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69FEA3D523BC4635AE385A6D91412834159FF34B Validity Not Before: Jun 25 00:55:00 2025 GMT Not After : Jun 24 01:00:00 2026 GMT Subject: CN=507BBA1FD22DE26AA3B6F4F5FD55DDF7245E20F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:64:d6:63:92:b6:ac:99:95:f2:46:01:f0: fb:2b:27:0f:78:c3:ae:9a:fe:ac:a0:0a:14:f1:f8: 12:36:d0:2b:e2:1c:37:a4:4f:7e:51:fd:0a:96:b5: a6:46:32:82:5b:d9:62:bb:2e:ff:c2:91:5e:8c:34: 89:15:3f:45:92:8f:27:bd:fe:4a:ae:62:98:3c:66: 05:70:87:34:52:55:b8:d8:d5:6e:e5:e7:52:3b:09: 91:8c:9f:0f:bd:b5:1a:f4:54:8b:e5:e7:3c:0d:aa: fd:53:ba:88:34:c7:fb:55:e4:65:99:2b:50:1d:8f: ca:43:d0:6f:79:22:c1:d1:0c:78:28:c3:ce:19:46: 80:c0:2e:0d:4c:07:76:bb:92:3c:3e:71:d9:91:bd: 4c:7b:18:09:3b:df:78:43:cb:ee:b3:02:63:17:95: a6:87:53:2e:64:89:c9:db:f2:13:11:9b:83:60:b9: 80:88:cf:fa:6d:ac:e9:c9:cc:01:8f:38:ed:dd:2e: 28:11:01:7c:f4:93:f4:3c:42:f7:e7:9a:a8:db:ca: 12:e0:35:bc:4f:35:26:31:36:b4:c3:e3:8f:cb:6c: 89:7f:10:bf:a0:30:73:d6:f0:95:96:a4:03:2b:fe: 21:48:57:2a:2c:aa:fe:d8:c1:32:95:78:74:52:cf: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7B:BA:1F:D2:2D:E2:6A:A3:B6:F4:F5:FD:55:DD:F7:24:5E:20:F6 X509v3 Authority Key Identifier: keyid:69:FE:A3:D5:23:BC:46:35:AE:38:5A:6D:91:41:28:34:15:9F:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/69FEA3D523BC4635AE385A6D91412834159FF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/69FEA3D523BC4635AE385A6D91412834159FF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.217.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ff:81:0c:63:62:25:02:89:7f:9c:72:b5:66:8f:87:12:58: fa:58:86:79:b9:4f:0f:f0:11:57:84:f7:88:dc:2e:02:26:78: d6:33:38:05:43:2c:a1:45:16:bc:73:b0:97:9e:bb:99:a7:48: 42:33:45:72:08:d5:47:00:48:38:36:14:85:77:37:b0:c5:04: 2a:8d:5f:4f:60:96:d9:db:5f:c0:32:87:d6:78:4f:8b:8a:0f: 29:16:e3:7a:02:ea:30:ea:05:2e:1d:e0:30:95:aa:cd:78:bd: d2:83:69:67:4c:86:73:c7:08:ef:d7:2b:76:e6:a0:c2:4f:f9: b7:15:80:e3:be:e7:c1:66:c3:c5:93:77:23:48:53:d2:71:fe: 14:a4:20:b5:eb:33:39:27:bc:96:de:b7:8b:4d:2d:39:ca:ca: dd:4a:7b:bf:c5:65:c3:c7:f1:50:61:2c:04:23:b2:77:d5:03: 50:27:e2:34:61:db:57:bb:8e:c6:bf:63:b0:c0:f1:88:49:15: 9c:27:d8:0a:a4:ec:31:1f:e9:ed:8c:d6:88:98:c8:8a:32:86: 7d:f7:62:ef:ea:41:02:7b:b4:f9:6f:38:d7:b3:9c:76:6d:50: 59:f4:3a:a6:1a:34:05:eb:73:2b:66:6a:ae:ae:9b:cb:bf:81: e9:0e:a4:7b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCQXKYy8OJVp7uRFozL60uiKhNfMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQx NTlGRjM0QjAeFw0yNTA2MjUwMDU1MDBaFw0yNjA2MjQwMTAwMDBaMDMxMTAvBgNV BAMTKDUwN0JCQTFGRDIyREUyNkFBM0I2RjRGNUZENTVEREY3MjQ1RTIwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpGTWY5K2rJmV8kYB8PsrJw94 w66a/qygChTx+BI20CviHDekT35R/QqWtaZGMoJb2WK7Lv/CkV6MNIkVP0WSjye9 /kquYpg8ZgVwhzRSVbjY1W7l51I7CZGMnw+9tRr0VIvl5zwNqv1Tuog0x/tV5GWZ K1Adj8pD0G95IsHRDHgow84ZRoDALg1MB3a7kjw+cdmRvUx7GAk733hDy+6zAmMX laaHUy5kicnb8hMRm4NguYCIz/ptrOnJzAGPOO3dLigRAXz0k/Q8QvfnmqjbyhLg NbxPNSYxNrTD44/LbIl/EL+gMHPW8JWWpAMr/iFIVyosqv7YwTKVeHRSz9rjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUHu6H9It4mqjtvT1/VXd9yReIPYwHwYDVR0j BBgwFoAUaf6j1SO8RjWuOFptkUEoNBWf80swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMC82OUZFQTNENTIz QkM0NjM1QUUzODVBNkQ5MTQxMjgzNDE1OUZGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjlGRUEzRDUyM0JDNDYzNUFFMzg1QTZEOTE0MTI4MzQxNTlG RjM0Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NlN2Q3MzhlLTJjYzctNGJkMi1i YjI4LTkxNDJlMWJhYTBiYS8wLzMxMzYzMDJlMzIzMjJlMzIzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbZMA0GCSqG SIb3DQEBCwUAA4IBAQA5/4EMY2IlAol/nHK1Zo+HElj6WIZ5uU8P8BFXhPeI3C4C JnjWMzgFQyyhRRa8c7CXnruZp0hCM0VyCNVHAEg4NhSFdzewxQQqjV9PYJbZ21/A MofWeE+Lig8pFuN6Auow6gUuHeAwlarNeL3Sg2lnTIZzxwjv1yt25qDCT/m3FYDj vufBZsPFk3cjSFPScf4UpCC16zM5J7yW3reLTS05ysrdSnu/xWXDx/FQYSwEI7J3 1QNQJ+I0YdtXu47Gv2OwwPGISRWcJ9gKpOwxH+ntjNaImMiKMoZ992Lv6kECe7T5 bzjXs5x2bVBZ9DqmGjQF63MrZmqurpvLv4HpDqR7 -----END CERTIFICATE-----Generated at Mon Jun 30 18:58:49 2025 by rpki-client