$ rpki-client -vvf repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa File: 3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa (raw, json) Hash identifier: 6ESo4EJBYW+TZiA7AQCDdrC7W+O2u7DLGxOGwrnalLc= Subject key identifier: A0:07:9F:5D:52:BC:76:7F:D9:9E:2A:B3:1D:DD:0E:6E:C4:CE:6E:09 Certificate issuer: /CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Certificate serial: 06C44B80192C146215FBD65C7EE48DA23FF4F1FF Authority key identifier: 73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa Signing time: Sun 22 Jun 2025 12:00:01 +0000 ROA not before: Sun 22 Jun 2025 11:55:01 +0000 ROA not after: Sun 21 Jun 2026 12:00:01 +0000 asID: 152808 IP address blocks: 160.22.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c4:4b:80:19:2c:14:62:15:fb:d6:5c:7e:e4:8d:a2:3f:f4:f1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73238FE50473DF8F457921BE1B0C04764209BBF1 Validity Not Before: Jun 22 11:55:01 2025 GMT Not After : Jun 21 12:00:01 2026 GMT Subject: CN=A0079F5D52BC767FD99E2AB31DDD0E6EC4CE6E09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:c3:c1:aa:16:7b:8d:08:7e:89:5c:90:8a: 99:e3:38:8e:9e:be:b6:14:8d:56:91:2a:c6:b2:f6: 95:05:88:d3:a9:72:05:17:35:87:2a:69:c0:8a:f2: 9b:2b:a7:5e:6f:0c:93:4b:38:93:b8:e0:6d:87:89: 1a:ce:0c:a8:58:6b:fe:67:c7:9f:b5:09:27:e8:91: ba:86:3a:92:e4:fd:85:2b:aa:2f:fc:88:73:0d:e1: 6a:92:fa:cd:9f:e4:18:00:de:13:e0:f2:05:4c:96: e9:9f:14:93:6e:cb:7d:27:4c:26:9b:0e:7d:cd:86: aa:4a:3e:9a:95:11:64:8a:ee:fb:36:c4:a8:28:8b: 3e:e1:5b:8a:e9:9e:68:84:00:11:50:c5:ff:68:54: 1c:3f:2c:1a:5f:ab:81:1d:9f:76:26:bf:ec:3c:9d: f5:2d:4b:0c:7e:fd:79:c6:41:b1:90:8d:2c:c8:66: 2e:03:05:7b:35:51:5e:7e:ec:a1:2a:61:f1:69:d4: 7a:a8:64:8b:30:e2:3f:c8:cf:c1:f7:e9:33:73:90: f9:5d:e6:4b:3d:db:b3:70:ed:66:00:d5:aa:fc:cb: ce:ed:d6:f6:c5:3e:ac:1b:8e:b7:03:51:e5:7a:d1: e6:89:82:fe:e5:c0:28:b4:b7:ca:f5:5a:1b:41:14: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:07:9F:5D:52:BC:76:7F:D9:9E:2A:B3:1D:DD:0E:6E:C4:CE:6E:09 X509v3 Authority Key Identifier: keyid:73:23:8F:E5:04:73:DF:8F:45:79:21:BE:1B:0C:04:76:42:09:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/73238FE50473DF8F457921BE1B0C04764209BBF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/73238FE50473DF8F457921BE1B0C04764209BBF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0a8ce6c-8290-4b9d-9aed-0754d3fd8d32/0/3136302e32322e3130302e302f32342d3234203d3e20313532383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.100.0/24 Signature Algorithm: sha256WithRSAEncryption ac:6b:27:88:73:40:26:24:16:1a:cc:2f:d5:23:cc:a4:79:59: e6:48:6c:f9:13:9a:2a:e2:9a:ff:37:4c:b9:83:57:24:2d:de: 2c:df:79:59:bc:af:2f:b8:f1:1b:9d:a2:38:df:11:86:a4:b9: 46:78:cb:71:aa:b9:a0:0a:ce:09:6f:ff:e3:f0:d4:d1:85:48: 52:7b:32:db:9c:6d:8f:2a:f2:8e:90:9f:3f:c6:42:78:d7:c6: 96:07:de:1f:a5:4e:c4:09:73:70:53:50:7d:56:ad:37:10:4e: 88:e4:78:d6:b1:08:69:43:ae:b9:24:0f:c6:ec:ec:36:75:b8: 0c:68:95:18:fc:2f:ff:ec:43:5d:b4:d5:38:67:a1:63:59:25: c4:ca:c1:de:57:51:54:96:5f:1e:ff:4a:e7:c2:4e:56:e0:63: 9d:73:9a:bb:e6:e8:62:0b:8e:e7:44:5d:07:19:cc:fc:e0:72: 5a:83:0e:2f:93:86:90:71:ff:72:f7:63:7f:60:54:f7:a5:ca: 95:23:48:73:0b:e8:85:62:5b:56:b2:d3:20:90:7e:69:0b:ca: b9:70:b1:f1:c2:33:2b:ea:86:53:98:0b:12:05:98:bd:c5:fc: fd:81:3b:3b:a6:d7:b7:0c:c1:97:09:50:56:be:b9:40:0c:13: 7c:66:9f:53 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBsRLgBksFGIV+9ZcfuSNoj/08f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0 MjA5QkJGMTAeFw0yNTA2MjIxMTU1MDFaFw0yNjA2MjExMjAwMDFaMDMxMTAvBgNV BAMTKEEwMDc5RjVENTJCQzc2N0ZEOTlFMkFCMzFEREQwRTZFQzRDRTZFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BMPBqhZ7jQh+iVyQipnjOI6e vrYUjVaRKsay9pUFiNOpcgUXNYcqacCK8psrp15vDJNLOJO44G2HiRrODKhYa/5n x5+1CSfokbqGOpLk/YUrqi/8iHMN4WqS+s2f5BgA3hPg8gVMlumfFJNuy30nTCab Dn3NhqpKPpqVEWSK7vs2xKgoiz7hW4rpnmiEABFQxf9oVBw/LBpfq4Edn3Ymv+w8 nfUtSwx+/XnGQbGQjSzIZi4DBXs1UV5+7KEqYfFp1HqoZIsw4j/Iz8H36TNzkPld 5ks927Nw7WYA1ar8y87t1vbFPqwbjrcDUeV60eaJgv7lwCi0t8r1WhtBFJl1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoAefXVK8dn/ZniqzHd0ObsTObgkwHwYDVR0j BBgwFoAUcyOP5QRz349FeSG+GwwEdkIJu/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MGE4Y2U2Yy04MjkwLTRiOWQtOWFlZC0wNzU0ZDNmZDhkMzIvMC83MzIzOEZFNTA0 NzNERjhGNDU3OTIxQkUxQjBDMDQ3NjQyMDlCQkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzMyMzhGRTUwNDczREY4RjQ1NzkyMUJFMUIwQzA0NzY0MjA5 QkJGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QwYThjZTZjLTgyOTAtNGI5ZC05 YWVkLTA3NTRkM2ZkOGQzMi8wLzMxMzYzMDJlMzIzMjJlMzEzMDMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBZkMA0GCSqG SIb3DQEBCwUAA4IBAQCsayeIc0AmJBYazC/VI8ykeVnmSGz5E5oq4pr/N0y5g1ck Ld4s33lZvK8vuPEbnaI43xGGpLlGeMtxqrmgCs4Jb//j8NTRhUhSezLbnG2PKvKO kJ8/xkJ418aWB94fpU7ECXNwU1B9Vq03EE6I5HjWsQhpQ665JA/G7Ow2dbgMaJUY /C//7ENdtNU4Z6FjWSXEysHeV1FUll8e/0rnwk5W4GOdc5q75uhiC47nRF0HGcz8 4HJagw4vk4aQcf9y92N/YFT3pcqVI0hzC+iFYltWstMgkH5pC8q5cLHxwjMr6oZT mAsSBZi9xfz9gTs7pte3DMGXCVBWvrlADBN8Zp9T -----END CERTIFICATE-----Generated at Mon Jun 30 10:22:35 2025 by rpki-client