$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa File: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (raw, json) Hash identifier: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc= Subject key identifier: 6E:BE:23:51:4D:72:F4:17:E5:08:E2:7B:0A:A5:78:CF:40:9D:59:3B Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 1768E3AD3B2BE8EE95DDA5BF3FBB0017C23DE5F4 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa Signing time: Sat 19 Jul 2025 06:01:34 +0000 ROA not before: Sat 19 Jul 2025 05:56:34 +0000 ROA not after: Sat 18 Jul 2026 06:01:34 +0000 asID: 153096 IP address blocks: 160.25.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:68:e3:ad:3b:2b:e8:ee:95:dd:a5:bf:3f:bb:00:17:c2:3d:e5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Jul 19 05:56:34 2025 GMT Not After : Jul 18 06:01:34 2026 GMT Subject: CN=6EBE23514D72F417E508E27B0AA578CF409D593B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:4d:f4:a8:b0:36:10:5a:d4:2b:58:ef:c9: 8c:8a:84:5a:53:82:da:e1:0a:9f:16:72:4b:84:77: 55:02:77:e0:4b:0a:3f:29:e5:36:c2:01:04:2e:c1: 80:24:3c:09:8b:d9:d8:44:12:d4:f2:82:94:9a:dd: 56:5d:d3:a5:43:6b:ca:e9:fe:bf:02:2b:1c:5f:b8: 83:97:7b:9d:22:36:6d:64:d2:e3:c8:29:b7:9d:fb: 13:97:14:60:fb:c3:a4:09:3e:63:0a:45:77:8e:db: ef:3e:92:76:35:4c:40:9b:2c:44:61:93:08:d0:03: be:e0:31:3e:23:6e:ab:ec:6e:72:4f:e9:44:0c:f3: e5:ab:92:e7:d8:22:d3:0f:b9:5f:14:b4:31:b2:72: de:a3:94:52:db:8c:15:40:31:b4:33:05:28:73:b6: 67:c5:27:a7:e0:7f:ea:00:34:9b:16:80:86:89:6e: 17:be:19:41:be:a6:0f:a2:cf:c6:2b:2b:0e:6e:57: c2:b1:48:c0:25:6e:00:d8:0e:10:16:8b:07:d7:df: 1f:ec:7c:54:f4:27:79:00:a3:17:99:57:ea:2e:72: ea:bc:82:41:01:44:7b:a0:0f:3a:2b:20:da:16:3e: 6d:2c:8d:c2:e3:4e:5f:a2:c0:1f:e2:83:1a:5f:77: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BE:23:51:4D:72:F4:17:E5:08:E2:7B:0A:A5:78:CF:40:9D:59:3B X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.119.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:67:49:3d:75:e3:3a:e1:c4:1f:44:9e:6d:77:d2:3b:e1:0d: 49:34:2e:48:3d:7d:fc:90:51:7f:5f:83:d8:d5:0f:9f:c2:ca: 87:89:07:83:08:9e:99:c4:81:54:37:8b:48:fd:d2:00:10:d5: 96:fc:6c:a1:40:d5:6c:12:b2:ff:ab:ac:14:61:63:8b:7f:dc: 01:8a:80:06:9f:01:4c:01:e7:bd:86:21:b8:71:83:6b:80:cd: cd:01:1f:e7:db:dd:60:0e:c2:8e:5f:b5:28:12:35:ae:d2:5d: 0c:70:ba:d7:6d:54:80:47:91:c0:8a:8a:e7:da:29:e2:a4:b5: 94:63:f8:ec:e5:5b:fd:6a:9a:29:89:e8:ac:60:c5:38:85:a9: 5d:6f:81:bc:24:70:2f:64:c8:d6:84:77:9c:18:5f:32:41:86: 36:96:62:53:d0:62:a7:01:d5:a1:f4:96:b2:95:2d:5d:f9:1f: 84:ee:d1:37:30:d2:9b:82:b4:2c:d5:13:48:63:74:60:d7:d7: de:c7:49:10:1f:01:c9:52:15:43:89:29:cf:02:e8:a4:3d:87: e8:d2:46:1e:18:e4:4b:79:1e:dc:15:18:80:72:1e:01:e1:70: b1:d5:04:8d:16:d0:0f:41:3c:9f:09:82:ad:f8:5e:82:e9:a5: fa:69:c4:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUF2jjrTsr6O6V3aW/P7sAF8I95fQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNTA3MTkwNTU2MzRaFw0yNjA3MTgwNjAxMzRaMDMxMTAvBgNV BAMTKDZFQkUyMzUxNEQ3MkY0MTdFNTA4RTI3QjBBQTU3OENGNDA5RDU5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6a030qLA2EFrUK1jvyYyKhFpT gtrhCp8WckuEd1UCd+BLCj8p5TbCAQQuwYAkPAmL2dhEEtTygpSa3VZd06VDa8rp /r8CKxxfuIOXe50iNm1k0uPIKbed+xOXFGD7w6QJPmMKRXeO2+8+knY1TECbLERh kwjQA77gMT4jbqvsbnJP6UQM8+WrkufYItMPuV8UtDGyct6jlFLbjBVAMbQzBShz tmfFJ6fgf+oANJsWgIaJbhe+GUG+pg+iz8YrKw5uV8KxSMAlbgDYDhAWiwfX3x/s fFT0J3kAoxeZV+oucuq8gkEBRHugDzorINoWPm0sjcLjTl+iwB/igxpfd9uTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbr4jUU1y9BflCOJ7CqV4z0CdWTswHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZTQ0NjY1LWU4NDYtNDU1Yi1h YTFhLWQ1YWIwN2RlZWRmMy8wLzMxMzYzMDJlMzIzNTJlMzEzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBl3MA0GCSqG SIb3DQEBCwUAA4IBAQAqZ0k9deM64cQfRJ5td9I74Q1JNC5IPX38kFF/X4PY1Q+f wsqHiQeDCJ6ZxIFUN4tI/dIAENWW/GyhQNVsErL/q6wUYWOLf9wBioAGnwFMAee9 hiG4cYNrgM3NAR/n291gDsKOX7UoEjWu0l0McLrXbVSAR5HAiorn2inipLWUY/js 5Vv9apopieisYMU4haldb4G8JHAvZMjWhHecGF8yQYY2lmJT0GKnAdWh9JaylS1d +R+E7tE3MNKbgrQs1RNIY3Rg19fex0kQHwHJUhVDiSnPAuikPYfo0kYeGORLeR7c FRiAch4B4XCx1QSNFtAPQTyfCYKt+F6C6aX6acTb -----END CERTIFICATE-----Generated at Wed Jul 23 12:00:24 2025 by rpki-client