$ rpki-client -vvf repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/3136302e31392e38392e302f32342d3234203d3e20313532373839.roa File: 3136302e31392e38392e302f32342d3234203d3e20313532373839.roa (raw, json) Hash identifier: a18oOGl6pVPvZKJuyn1ADVOAC3RXX1wTEnjdHNjeTew= Subject key identifier: ED:3B:63:2B:EF:C1:00:DE:A0:5B:5E:35:01:91:F7:B9:3F:56:05:04 Certificate issuer: /CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Certificate serial: 0F943A024FFE50C254FCA7938B1FE5877C700E07 Authority key identifier: F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/3136302e31392e38392e302f32342d3234203d3e20313532373839.roa Signing time: Mon 09 Jun 2025 07:01:24 +0000 ROA not before: Mon 09 Jun 2025 06:56:24 +0000 ROA not after: Mon 08 Jun 2026 07:01:24 +0000 asID: 152789 IP address blocks: 160.19.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:94:3a:02:4f:fe:50:c2:54:fc:a7:93:8b:1f:e5:87:7c:70:0e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2E8B493535CE192E2A343E44990C2B86B854E0F Validity Not Before: Jun 9 06:56:24 2025 GMT Not After : Jun 8 07:01:24 2026 GMT Subject: CN=ED3B632BEFC100DEA05B5E350191F7B93F560504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:b6:56:4f:dc:7d:79:7e:1a:a6:95:6d:71: 50:6b:60:51:1d:c2:52:ca:91:a2:d1:1e:3f:55:11: a8:ff:64:f2:2f:f5:22:b8:3f:b9:fe:6b:94:6c:29: b9:cd:00:cb:ef:14:07:7b:b9:dc:23:bb:0b:47:11: f4:98:76:41:7a:53:51:e4:03:1c:dc:90:cf:4d:68: ab:a4:02:df:f8:41:fb:34:64:5b:94:ba:b9:bc:83: 91:af:cc:6f:26:d2:ed:db:ec:16:d2:86:89:6c:80: 0b:f5:33:c4:0a:66:4d:f0:87:8f:be:36:a7:15:46: fa:00:ac:b4:f2:3d:41:2a:f9:1d:c1:83:ae:cd:15: 13:78:95:a1:36:6f:d8:77:da:8c:88:77:f9:5a:48: 68:6f:73:09:68:0a:17:29:c3:e4:77:12:de:aa:9a: 74:52:3d:bf:22:09:a1:76:ae:6a:75:dc:ae:a9:4c: 88:70:67:d2:13:37:be:0a:79:99:04:3b:a4:11:f2: 4b:1f:c1:f1:bf:f4:bb:13:8d:49:f3:1a:44:30:c0: f2:66:5d:35:d7:e5:00:9c:e5:f8:69:ab:95:6c:79: 29:7d:bf:d4:6e:c4:64:42:3e:6b:e7:92:df:cc:21: 59:d3:b4:77:36:fe:b2:62:da:ed:1c:3b:67:18:d9: 69:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3B:63:2B:EF:C1:00:DE:A0:5B:5E:35:01:91:F7:B9:3F:56:05:04 X509v3 Authority Key Identifier: keyid:F2:E8:B4:93:53:5C:E1:92:E2:A3:43:E4:49:90:C2:B8:6B:85:4E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/F2E8B493535CE192E2A343E44990C2B86B854E0F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F2E8B493535CE192E2A343E44990C2B86B854E0F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddc1007d-fd61-4543-8f5f-3fdffa4b01e6/0/3136302e31392e38392e302f32342d3234203d3e20313532373839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.89.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:17:55:8f:35:51:26:4a:6f:cf:27:be:6a:5a:94:72:f2:93: 00:90:59:95:11:0e:82:40:98:52:0e:c7:c8:f8:03:5f:6a:6d: 86:55:d8:c8:88:0c:10:4c:07:7c:ba:d6:9e:60:71:da:61:19: 95:be:5c:55:69:15:ab:8d:2e:60:c2:e2:cb:2e:4b:c8:52:20: 7b:55:f3:43:0d:11:5c:0b:78:59:8a:18:1b:2c:f9:4e:be:36: 1f:82:12:ce:e5:4a:a8:81:ba:de:5c:8c:2f:c9:00:86:3f:03: d2:95:42:b4:5d:5f:96:13:d4:3e:f4:6e:5f:93:02:bf:27:b7: 7d:bb:8b:ec:fa:b8:bd:e5:d1:e5:82:fb:9d:7f:14:b6:6d:a9: 75:ee:3a:33:b1:e8:b2:8b:8c:71:a2:49:5d:ad:2a:c9:d9:0d: 91:1a:3d:a2:1f:62:ec:7e:3a:e2:1c:5e:5e:b1:7c:73:dd:87: 93:fd:a0:12:f3:f6:9f:bf:01:57:fa:a6:05:a9:09:1d:82:b7: 3b:e0:01:0a:09:a7:d7:33:f8:a5:5c:3d:b6:fd:e8:7d:5e:00: 29:53:ab:61:2d:f5:9d:b5:fa:80:9f:4c:88:5b:7d:5c:2a:1f: da:5c:da:05:34:b9:6a:9c:d4:96:66:3b:08:8b:79:bc:14:f2: 60:4e:5e:24 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD5Q6Ak/+UMJU/KeTix/lh3xwDgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2 Qjg1NEUwRjAeFw0yNTA2MDkwNjU2MjRaFw0yNjA2MDgwNzAxMjRaMDMxMTAvBgNV BAMTKEVEM0I2MzJCRUZDMTAwREVBMDVCNUUzNTAxOTFGN0I5M0Y1NjA1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDodbZWT9x9eX4appVtcVBrYFEd wlLKkaLRHj9VEaj/ZPIv9SK4P7n+a5RsKbnNAMvvFAd7udwjuwtHEfSYdkF6U1Hk AxzckM9NaKukAt/4Qfs0ZFuUurm8g5GvzG8m0u3b7BbSholsgAv1M8QKZk3wh4++ NqcVRvoArLTyPUEq+R3Bg67NFRN4laE2b9h32oyId/laSGhvcwloChcpw+R3Et6q mnRSPb8iCaF2rmp13K6pTIhwZ9ITN74KeZkEO6QR8ksfwfG/9LsTjUnzGkQwwPJm XTXX5QCc5fhpq5VseSl9v9RuxGRCPmvnkt/MIVnTtHc2/rJi2u0cO2cY2WlzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU7TtjK+/BAN6gW141AZH3uT9WBQQwHwYDVR0j BBgwFoAU8ui0k1Nc4ZLio0PkSZDCuGuFTg8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGMxMDA3ZC1mZDYxLTQ1NDMtOGY1Zi0zZmRmZmE0YjAxZTYvMC9GMkU4QjQ5MzUz NUNFMTkyRTJBMzQzRTQ0OTkwQzJCODZCODU0RTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjJFOEI0OTM1MzVDRTE5MkUyQTM0M0U0NDk5MEMyQjg2Qjg1 NEUwRi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYzEwMDdkLWZkNjEtNDU0My04 ZjVmLTNmZGZmYTRiMDFlNi8wLzMxMzYzMDJlMzEzOTJlMzgzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATWTANBgkqhkiG 9w0BAQsFAAOCAQEAbRdVjzVRJkpvzye+alqUcvKTAJBZlREOgkCYUg7HyPgDX2pt hlXYyIgMEEwHfLrWnmBx2mEZlb5cVWkVq40uYMLiyy5LyFIge1XzQw0RXAt4WYoY Gyz5Tr42H4ISzuVKqIG63lyML8kAhj8D0pVCtF1flhPUPvRuX5MCvye3fbuL7Pq4 veXR5YL7nX8Utm2pde46M7HosouMcaJJXa0qydkNkRo9oh9i7H464hxeXrF8c92H k/2gEvP2n78BV/qmBakJHYK3O+ABCgmn1zP4pVw9tv3ofV4AKVOrYS31nbX6gJ9M iFt9XCof2lzaBTS5apzUlmY7CIt5vBTyYE5eJA== -----END CERTIFICATE-----Generated at Thu Jul 3 16:10:57 2025 by rpki-client