$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313439373230.roa File: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (raw, json) Hash identifier: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao= Subject key identifier: 2E:6E:31:8A:6B:B9:2D:5A:FA:32:3B:52:B2:04:95:AD:BC:35:D8:E5 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 34C860A1E28D9DF043228EDD554FAA6F4C18E0A9 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313439373230.roa Signing time: Fri 11 Jul 2025 04:56:31 +0000 ROA not before: Fri 11 Jul 2025 04:51:31 +0000 ROA not after: Fri 10 Jul 2026 04:56:31 +0000 asID: 149720 IP address blocks: 160.22.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c8:60:a1:e2:8d:9d:f0:43:22:8e:dd:55:4f:aa:6f:4c:18:e0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Jul 11 04:51:31 2025 GMT Not After : Jul 10 04:56:31 2026 GMT Subject: CN=2E6E318A6BB92D5AFA323B52B20495ADBC35D8E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:ba:f7:32:47:41:54:bc:33:a9:79:c5:9f: fd:67:a9:21:43:07:4c:a0:17:98:79:d4:7a:73:43: 88:14:f5:2c:5c:b1:59:a2:fb:0c:cf:24:b6:02:7a: ed:30:85:2c:45:56:ed:03:61:15:83:77:23:d2:c4: bc:2f:f9:f6:0a:30:f1:dc:e2:73:2b:b0:1d:9f:7b: c1:25:07:d1:56:4a:68:6a:0f:0e:bd:10:84:18:aa: ba:d5:7e:60:10:cc:b6:0f:46:e4:c7:11:d6:90:90: 07:6b:ab:f6:dc:e2:cc:eb:57:13:17:1c:49:a3:c0: 8d:b3:f9:bb:44:06:95:f4:b3:82:31:43:34:9d:4e: c1:87:b0:f8:7f:70:19:b7:8b:6d:2f:8e:de:13:ae: c0:78:bc:d0:17:c7:9d:b7:7f:26:5a:b9:77:6f:49: fc:3e:10:8c:07:b3:e5:c9:4a:58:34:c0:88:25:f8: eb:13:3f:c5:fb:05:38:b9:7e:70:28:5c:a9:4b:49: 3a:4a:d3:e8:11:d7:a0:4d:28:ac:3d:47:79:35:ce: 1c:a6:3d:15:2b:96:16:cc:a0:c7:fb:1f:cf:32:76: c5:cc:6c:46:a9:69:30:ea:3d:a3:16:76:ba:d2:3b: 35:c5:b3:6f:3a:f5:8a:b8:67:82:f0:f4:db:26:32: dc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6E:31:8A:6B:B9:2D:5A:FA:32:3B:52:B2:04:95:AD:BC:35:D8:E5 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/3136302e32322e36322e302f32342d3234203d3e20313439373230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.62.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:49:c8:60:a2:79:68:9c:2c:73:c0:c5:8d:f6:6e:49:d0:70: 03:0b:b5:01:4e:38:56:38:82:c9:09:0e:b2:7b:86:7e:08:a1: 85:ba:00:5f:e7:76:b2:17:79:04:84:88:bc:da:c4:6d:fc:5c: a3:20:8c:a5:6b:85:24:b5:54:4c:20:0f:02:83:73:02:57:8e: 1d:a2:fb:01:fb:d5:c8:37:2a:dd:fe:43:75:f7:eb:a3:f3:20: 53:9a:c9:e3:4b:19:10:f5:67:1e:f7:10:99:f3:32:1e:94:6e: 48:ae:28:ea:e8:6a:04:48:3d:c4:fa:dc:85:97:2c:1e:61:fd: ac:82:e5:fe:a6:c3:8e:8a:cf:77:f0:c3:5b:2a:a1:16:bf:74: 3a:bb:be:9f:89:bd:0c:59:0f:a3:e8:ed:98:fd:7a:ed:d1:68: ab:f3:a2:2c:16:9f:e2:c1:ac:e0:6f:9d:94:95:3b:cd:30:0e: f5:3e:76:91:7f:6e:8c:0b:e3:ae:f9:7c:f1:1d:c1:e3:04:37: 2d:a3:0e:28:39:bc:98:ed:87:17:38:98:7a:ce:c8:74:85:d4: 67:f0:e2:f8:35:96:06:ca:af:e2:2e:f7:ed:49:57:fd:b0:42: 20:6d:9a:64:07:e9:5b:61:1d:de:55:01:57:3d:9f:f3:a1:c2: bb:18:73:0c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNMhgoeKNnfBDIo7dVU+qb0wY4KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTA3MTEwNDUxMzFaFw0yNjA3MTAwNDU2MzFaMDMxMTAvBgNV BAMTKDJFNkUzMThBNkJCOTJENUFGQTMyM0I1MkIyMDQ5NUFEQkMzNUQ4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ALr3MkdBVLwzqXnFn/1nqSFD B0ygF5h51HpzQ4gU9SxcsVmi+wzPJLYCeu0whSxFVu0DYRWDdyPSxLwv+fYKMPHc 4nMrsB2fe8ElB9FWSmhqDw69EIQYqrrVfmAQzLYPRuTHEdaQkAdrq/bc4szrVxMX HEmjwI2z+btEBpX0s4IxQzSdTsGHsPh/cBm3i20vjt4TrsB4vNAXx523fyZauXdv Sfw+EIwHs+XJSlg0wIgl+OsTP8X7BTi5fnAoXKlLSTpK0+gR16BNKKw9R3k1zhym PRUrlhbMoMf7H88ydsXMbEapaTDqPaMWdrrSOzXFs2869Yq4Z4Lw9NsmMtwNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULm4ximu5LVr6MjtSsgSVrbw12OUwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYzY3N2ZkLWQ1NjktNGNjNS1h NTYzLTliMGYyNDhiMWFmMS8wLzMxMzYzMDJlMzIzMjJlMzYzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM3MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWPjANBgkqhkiG 9w0BAQsFAAOCAQEAXUnIYKJ5aJwsc8DFjfZuSdBwAwu1AU44VjiCyQkOsnuGfgih hboAX+d2shd5BISIvNrEbfxcoyCMpWuFJLVUTCAPAoNzAleOHaL7AfvVyDcq3f5D dffro/MgU5rJ40sZEPVnHvcQmfMyHpRuSK4o6uhqBEg9xPrchZcsHmH9rILl/qbD jorPd/DDWyqhFr90Oru+n4m9DFkPo+jtmP167dFoq/OiLBaf4sGs4G+dlJU7zTAO 9T52kX9ujAvjrvl88R3B4wQ3LaMOKDm8mO2HFziYes7IdIXUZ/Di+DWWBsqv4i73 7UlX/bBCIG2aZAfpW2Ed3lUBVz2f86HCuxhzDA== -----END CERTIFICATE-----Generated at Wed Jul 23 13:49:38 2025 by rpki-client