$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa File: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (raw, json) Hash identifier: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk= Subject key identifier: 3A:6D:26:F8:FF:DA:9D:87:DF:E4:4D:BF:45:AA:07:19:6B:81:5E:2E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 6A50800C129C9386C69D31DA1F880F5D44698139 Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa Signing time: Mon 23 Jun 2025 15:00:02 +0000 ROA not before: Mon 23 Jun 2025 14:55:02 +0000 ROA not after: Mon 22 Jun 2026 15:00:02 +0000 asID: 153064 IP address blocks: 160.25.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 11:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:50:80:0c:12:9c:93:86:c6:9d:31:da:1f:88:0f:5d:44:69:81:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Jun 23 14:55:02 2025 GMT Not After : Jun 22 15:00:02 2026 GMT Subject: CN=3A6D26F8FFDA9D87DFE44DBF45AA07196B815E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8f:90:bd:10:29:8a:45:19:0e:2b:58:3b:dd: 2b:41:b8:9e:01:38:a7:41:c8:6c:96:f4:53:0d:93: b4:41:4b:96:c2:56:6c:00:e6:e4:f2:7f:6f:4b:72: 7c:06:3d:fa:55:be:94:60:d3:72:7c:21:ea:72:75: 76:2e:d8:44:0c:f5:b6:01:bf:24:4f:20:d1:c6:80: 1d:54:fc:55:49:5c:52:8f:18:3f:71:f8:48:8e:14: 6f:38:4f:15:3b:e0:1c:6e:d3:ef:06:4e:64:03:51: fe:04:7e:5d:99:cb:32:0f:20:c5:fa:2c:4c:c8:0b: 3e:02:84:5f:52:e6:5a:b4:a9:bc:e9:39:7b:bb:9a: e9:d5:b0:41:5f:4f:3b:2c:a0:a0:33:80:77:18:70: 66:6c:7e:31:00:76:04:49:b3:5a:64:c1:52:2e:be: c9:8b:01:ef:09:48:0e:a9:0e:db:6f:f9:8a:91:26: ad:79:97:69:1a:c2:8d:9b:08:f7:ff:af:cb:75:7a: d6:d3:15:a2:5b:35:f9:af:91:91:67:a3:e3:1b:52: 02:52:20:d7:5b:77:68:5b:2a:03:e9:52:49:ad:68: f4:44:dc:40:ff:41:15:49:f7:97:d8:5a:3f:7f:fd: 18:fd:20:37:98:06:85:cf:c7:38:75:31:92:a0:a7: fd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6D:26:F8:FF:DA:9D:87:DF:E4:4D:BF:45:AA:07:19:6B:81:5E:2E X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/3136302e32352e34392e302f32342d3234203d3e20313533303634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.49.0/24 Signature Algorithm: sha256WithRSAEncryption b3:14:09:e8:72:54:31:0b:71:2b:da:54:1e:20:55:0d:f1:d1: 38:96:c4:d1:c7:f5:12:65:87:85:04:6f:b1:65:f3:e6:b6:e3: b0:38:c4:b8:a1:ba:81:8a:3b:0a:55:03:c9:ed:2a:4a:0e:5c: 68:58:28:44:a0:de:5e:c6:fb:1e:e4:7c:79:7a:71:17:09:39: 86:59:97:fd:48:b8:70:ac:a3:30:a8:ee:74:00:f5:dd:ff:42: 13:41:35:07:b6:d4:00:a9:24:d1:e1:18:28:3a:0b:3a:49:6f: 48:9f:ac:dc:58:a0:17:18:26:ac:b3:47:2c:14:27:41:5b:dd: 4e:11:2e:3f:8d:02:31:c8:4f:5e:ab:aa:47:c0:c0:77:75:bf: 38:05:db:6d:d5:31:c0:75:e8:42:dc:5e:77:2d:21:fb:10:3e: af:0b:b1:a2:d3:17:ac:29:a1:fe:77:f6:19:72:95:5c:27:01: e8:f3:9f:2b:d9:cb:ba:e4:c9:b6:b5:37:d4:ae:cb:29:bf:ae: b6:d0:ba:90:33:ea:e0:6d:d2:c7:27:08:60:61:c2:d7:a3:de: 71:7b:a6:69:01:44:c7:f2:0b:9a:50:4d:de:18:33:0a:ea:c3: 43:48:41:a5:68:66:77:70:45:6c:83:7d:11:a2:a7:b4:90:de: f6:8e:2c:f1 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUalCADBKck4bGnTHaH4gPXURpgTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNTA2MjMxNDU1MDJaFw0yNjA2MjIxNTAwMDJaMDMxMTAvBgNV BAMTKDNBNkQyNkY4RkZEQTlEODdERkU0NERCRjQ1QUEwNzE5NkI4MTVFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmj5C9ECmKRRkOK1g73StBuJ4B OKdByGyW9FMNk7RBS5bCVmwA5uTyf29LcnwGPfpVvpRg03J8IepydXYu2EQM9bYB vyRPINHGgB1U/FVJXFKPGD9x+EiOFG84TxU74Bxu0+8GTmQDUf4Efl2ZyzIPIMX6 LEzICz4ChF9S5lq0qbzpOXu7munVsEFfTzssoKAzgHcYcGZsfjEAdgRJs1pkwVIu vsmLAe8JSA6pDttv+YqRJq15l2kawo2bCPf/r8t1etbTFaJbNfmvkZFno+MbUgJS INdbd2hbKgPpUkmtaPRE3ED/QRVJ95fYWj9//Rj9IDeYBoXPxzh1MZKgp/3ZAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUOm0m+P/anYff5E2/RaoHGWuBXi4wHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NjgyYmYyLTA2MzQtNDc4Mi1h NWFmLWVlYjkxOWYxOTE0My8wLzMxMzYzMDJlMzIzNTJlMzQzOTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMzMwMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAZMTANBgkqhkiG 9w0BAQsFAAOCAQEAsxQJ6HJUMQtxK9pUHiBVDfHROJbE0cf1EmWHhQRvsWXz5rbj sDjEuKG6gYo7ClUDye0qSg5caFgoRKDeXsb7HuR8eXpxFwk5hlmX/Ui4cKyjMKju dAD13f9CE0E1B7bUAKkk0eEYKDoLOklvSJ+s3FigFxgmrLNHLBQnQVvdThEuP40C MchPXquqR8DAd3W/OAXbbdUxwHXoQtxedy0h+xA+rwuxotMXrCmh/nf2GXKVXCcB 6POfK9nLuuTJtrU31K7LKb+uttC6kDPq4G3SxycIYGHC16PecXumaQFEx/ILmlBN 3hgzCurDQ0hBpWhmd3BFbIN9EaKntJDe9o4s8Q== -----END CERTIFICATE-----Generated at Fri Jul 4 06:07:54 2025 by rpki-client