$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa File: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (raw, json) Hash identifier: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc= Subject key identifier: C0:08:6C:36:48:9F:32:C2:F8:AA:21:2B:7F:7D:55:9B:D4:4A:D0:99 Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 61328946859B0034009F606717BBAECD600B5437 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa Signing time: Tue 15 Apr 2025 06:02:24 +0000 ROA not before: Tue 15 Apr 2025 05:57:24 +0000 ROA not after: Tue 14 Apr 2026 06:02:24 +0000 asID: 152754 IP address blocks: 160.19.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 14:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:32:89:46:85:9b:00:34:00:9f:60:67:17:bb:ae:cd:60:0b:54:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Apr 15 05:57:24 2025 GMT Not After : Apr 14 06:02:24 2026 GMT Subject: CN=C0086C36489F32C2F8AA212B7F7D559BD44AD099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d6:30:98:b3:af:8a:b1:4c:44:aa:e4:84:b7: 21:e1:bb:76:8f:aa:7d:92:cc:fe:6f:00:e2:0d:c3: 86:3c:b0:f6:3d:cd:27:26:a1:dd:c4:8c:0f:1f:51: 3d:3e:b6:bb:3f:61:c3:11:a4:83:eb:ec:72:1e:d3: fa:e4:ac:ce:dd:85:81:ea:39:b4:00:f8:0f:0f:71: 16:88:93:52:bf:53:c4:ab:9b:6a:41:f1:6a:ca:e6: d5:6e:a1:fc:4e:01:e1:82:cd:c2:fe:51:fa:66:b7: 6b:f6:36:62:85:bd:2f:d9:f1:76:e8:f5:55:a4:c9: a2:42:71:a1:56:9f:3d:e8:c2:2f:bc:06:d7:59:d1: 3a:da:fb:94:9b:e9:d4:74:de:05:c7:40:b2:d9:47: 3e:af:76:3f:97:85:75:6d:96:64:00:ea:31:6e:74: 96:bc:58:8f:da:2b:72:09:28:62:f7:ae:0b:16:02: bf:22:5c:8c:71:44:e0:87:de:66:fc:b6:5a:4a:0f: 59:03:55:75:cf:da:04:b1:13:22:47:12:61:f2:58: 41:16:25:31:96:66:cb:5f:5a:4c:d4:2b:0a:c5:9c: 70:a1:3b:04:d8:04:57:c7:97:bb:a0:17:e7:e1:1d: e7:4f:a4:0b:33:a4:ee:51:5d:1a:24:5c:18:11:ae: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:6C:36:48:9F:32:C2:F8:AA:21:2B:7F:7D:55:9B:D4:4A:D0:99 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/24 Signature Algorithm: sha256WithRSAEncryption 99:88:60:0b:67:1c:a4:05:44:13:a6:92:69:f6:e8:7e:14:15: 2f:92:c7:7f:c9:52:08:9a:82:f6:d1:87:4e:06:b5:47:17:74: 4e:41:db:c3:cc:8f:0e:84:f1:ab:4d:2a:62:75:e1:d9:cd:30: 74:58:22:18:66:64:71:bd:cc:1d:29:84:a2:b1:01:78:a3:63: 1c:16:68:ac:e8:d2:01:1f:1d:27:02:36:76:23:99:6b:a6:33: 51:c7:f6:54:92:86:15:dc:96:73:33:4f:7e:f8:96:62:10:3d: 51:f0:07:5e:3b:eb:b2:1c:18:2d:fb:f0:ed:86:eb:90:e4:c7: b7:5c:b5:0d:66:a2:5f:0e:63:62:db:0d:7d:29:aa:2e:3a:5d: c3:82:5b:03:2a:c9:33:69:54:10:f2:72:98:77:b9:0e:dc:8f: 2b:6d:3a:6d:43:45:6d:cd:d1:e1:da:97:13:e9:63:34:fa:35: a1:92:d3:a5:87:15:b5:9f:c2:5b:c3:04:bf:0e:e0:3f:d1:80: 31:79:8e:7e:6e:53:ec:20:7c:c9:fa:07:10:93:db:90:e5:dc: 19:74:e0:45:9c:19:ea:00:94:2e:e1:15:bb:d9:12:38:c7:30: ec:42:8c:91:ae:c9:af:e0:34:17:88:13:2b:12:ae:06:82:47: 1f:02:93:6e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYTKJRoWbADQAn2BnF7uuzWALVDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA0MTUwNTU3MjRaFw0yNjA0MTQwNjAyMjRaMDMxMTAvBgNV BAMTKEMwMDg2QzM2NDg5RjMyQzJGOEFBMjEyQjdGN0Q1NTlCRDQ0QUQwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm1jCYs6+KsUxEquSEtyHhu3aP qn2SzP5vAOINw4Y8sPY9zScmod3EjA8fUT0+trs/YcMRpIPr7HIe0/rkrM7dhYHq ObQA+A8PcRaIk1K/U8Srm2pB8WrK5tVuofxOAeGCzcL+Ufpmt2v2NmKFvS/Z8Xbo 9VWkyaJCcaFWnz3owi+8BtdZ0Tra+5Sb6dR03gXHQLLZRz6vdj+XhXVtlmQA6jFu dJa8WI/aK3IJKGL3rgsWAr8iXIxxROCH3mb8tlpKD1kDVXXP2gSxEyJHEmHyWEEW JTGWZstfWkzUKwrFnHChOwTYBFfHl7ugF+fhHedPpAszpO5RXRokXBgRrvDHAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUwAhsNkifMsL4qiErf31Vm9RK0JkwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlMzc0ZDQ4LTVhNzAtNGM3Zi1i ZGZkLWQ4MDUyZWJhZjBhYi8wLzMxMzYzMDJlMzEzOTJlMzgzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATVDANBgkqhkiG 9w0BAQsFAAOCAQEAmYhgC2ccpAVEE6aSafbofhQVL5LHf8lSCJqC9tGHTga1Rxd0 TkHbw8yPDoTxq00qYnXh2c0wdFgiGGZkcb3MHSmEorEBeKNjHBZorOjSAR8dJwI2 diOZa6YzUcf2VJKGFdyWczNPfviWYhA9UfAHXjvrshwYLfvw7YbrkOTHt1y1DWai Xw5jYtsNfSmqLjpdw4JbAyrJM2lUEPJymHe5DtyPK206bUNFbc3R4dqXE+ljNPo1 oZLTpYcVtZ/CW8MEvw7gP9GAMXmOfm5T7CB8yfoHEJPbkOXcGXTgRZwZ6gCULuEV u9kSOMcw7EKMka7Jr+A0F4gTKxKuBoJHHwKTbg== -----END CERTIFICATE-----Generated at Sun Apr 20 00:13:47 2025 by rpki-client