$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32342d3234203d3e20313533303634.roa File: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (raw, json) Hash identifier: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc= Subject key identifier: 5F:00:98:0C:42:D9:57:97:BF:46:C7:99:F6:77:33:07:20:65:ED:A3 Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 300559E87616D91B47B1E833D4358BF7CEA82A30 Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32342d3234203d3e20313533303634.roa Signing time: Mon 23 Jun 2025 14:02:22 +0000 ROA not before: Mon 23 Jun 2025 13:57:22 +0000 ROA not after: Mon 22 Jun 2026 14:02:22 +0000 asID: 153064 IP address blocks: 160.25.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:05:59:e8:76:16:d9:1b:47:b1:e8:33:d4:35:8b:f7:ce:a8:2a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Jun 23 13:57:22 2025 GMT Not After : Jun 22 14:02:22 2026 GMT Subject: CN=5F00980C42D95797BF46C799F67733072065EDA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:e8:58:70:ff:19:87:4a:d9:8f:41:47:45: 28:0f:9a:d4:cb:20:ea:60:0d:2b:40:a9:bc:f0:34: c8:4f:6c:bf:95:ea:21:ee:0b:48:d1:91:d3:35:2e: 46:1f:8a:79:2d:88:d8:22:cb:42:2d:d4:50:70:84: ec:2f:ac:ff:17:d6:b6:2c:cc:d5:d1:0b:46:46:6e: 0f:af:00:40:db:d3:7c:aa:00:c4:8a:6d:58:11:dc: 4d:69:7f:10:61:1f:74:0b:a8:5c:64:99:82:c7:5d: fa:60:a6:fe:b4:69:c9:3f:41:bd:30:65:1a:1f:39: 9c:b2:c7:75:b4:4d:56:ad:e0:49:ae:53:97:0e:5f: 1c:6b:07:fc:c7:65:e7:08:a9:71:ab:bd:61:fa:3a: f9:3b:d6:7b:e9:cd:76:ad:1d:4f:1a:66:e8:2c:0a: 78:d4:88:78:9a:48:93:9a:df:91:ac:72:22:af:6a: 78:86:3d:67:de:ca:d4:3c:f6:d7:af:97:a8:d5:48: 4d:28:14:75:a3:29:58:e1:3e:09:4d:dc:8d:30:50: 04:6b:62:1f:26:2e:34:76:ba:f5:88:d3:34:25:f8: 5c:d5:24:b6:b0:14:e6:d8:ff:de:bb:a4:df:2b:b4: 5f:21:41:fa:e3:ac:e8:d4:df:59:b8:9f:a8:26:ed: 69:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:00:98:0C:42:D9:57:97:BF:46:C7:99:F6:77:33:07:20:65:ED:A3 X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34382e302f32342d3234203d3e20313533303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.48.0/24 Signature Algorithm: sha256WithRSAEncryption 36:8b:9b:2b:0a:b4:0d:91:31:49:7c:82:75:50:c5:76:17:00: 23:c5:ef:45:b8:56:80:aa:97:2f:e1:5a:f7:06:32:30:cb:94: 95:dc:3e:ed:d7:73:b9:c4:ef:f5:77:89:9f:22:70:45:7c:3c: ad:a4:79:d0:1c:91:ad:98:c7:9d:76:cb:dc:fb:b5:33:1d:b4: 1d:ff:87:0a:a1:53:29:e7:73:dc:8d:89:72:45:6d:84:05:b6: b6:3f:3b:a5:b3:61:64:26:c9:a1:d4:7e:b2:fb:ca:38:80:ac: ac:67:1d:18:5a:49:3e:4e:5f:f0:29:a2:a1:e8:e7:0a:c5:81: a6:77:78:a0:66:a1:ea:e9:ed:1b:c1:11:96:96:f6:69:33:3d: d8:7a:a6:61:8e:ea:28:9a:e3:8f:95:14:6e:00:94:ba:fd:08: 3b:07:06:87:76:ce:83:5b:5c:c8:a0:1e:06:91:10:72:9f:a7: 5e:d9:96:5b:bc:2e:41:c5:0b:cb:af:40:40:e3:c4:59:7f:fa: 7a:86:b4:a9:04:c9:62:72:e1:c1:f2:7d:4b:79:15:03:3f:bd: 40:5b:cb:a3:ab:cd:ee:c8:4b:c6:12:04:23:18:10:dc:34:76: 33:82:e5:31:b2:3a:c6:e8:9d:f9:60:2b:42:3c:d6:a8:bb:72: 3f:66:78:bb -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMAVZ6HYW2RtHsegz1DWL986oKjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNTA2MjMxMzU3MjJaFw0yNjA2MjIxNDAyMjJaMDMxMTAvBgNV BAMTKDVGMDA5ODBDNDJEOTU3OTdCRjQ2Qzc5OUY2NzczMzA3MjA2NUVEQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46OhYcP8Zh0rZj0FHRSgPmtTL IOpgDStAqbzwNMhPbL+V6iHuC0jRkdM1LkYfinktiNgiy0It1FBwhOwvrP8X1rYs zNXRC0ZGbg+vAEDb03yqAMSKbVgR3E1pfxBhH3QLqFxkmYLHXfpgpv60ack/Qb0w ZRofOZyyx3W0TVat4EmuU5cOXxxrB/zHZecIqXGrvWH6Ovk71nvpzXatHU8aZugs CnjUiHiaSJOa35GsciKvaniGPWfeytQ89tevl6jVSE0oFHWjKVjhPglN3I0wUARr Yh8mLjR2uvWI0zQl+FzVJLawFObY/967pN8rtF8hQfrjrOjU31m4n6gm7WkRAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUXwCYDELZV5e/RseZ9nczByBl7aMwHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NjgyYmYyLTA2MzQtNDc4Mi1h NWFmLWVlYjkxOWYxOTE0My8wLzMxMzYzMDJlMzIzNTJlMzQzODJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMzMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAZMDANBgkqhkiG 9w0BAQsFAAOCAQEANoubKwq0DZExSXyCdVDFdhcAI8XvRbhWgKqXL+Fa9wYyMMuU ldw+7ddzucTv9XeJnyJwRXw8raR50ByRrZjHnXbL3Pu1Mx20Hf+HCqFTKedz3I2J ckVthAW2tj87pbNhZCbJodR+svvKOICsrGcdGFpJPk5f8CmioejnCsWBpnd4oGah 6untG8ERlpb2aTM92HqmYY7qKJrjj5UUbgCUuv0IOwcGh3bOg1tcyKAeBpEQcp+n XtmWW7wuQcULy69AQOPEWX/6eoa0qQTJYnLhwfJ9S3kVAz+9QFvLo6vN7shLxhIE IxgQ3DR2M4LlMbI6xuid+WArQjzWqLtyP2Z4uw== -----END CERTIFICATE-----Generated at Fri Jul 4 06:07:49 2025 by rpki-client