$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa File: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (raw, json) Hash identifier: fAL9MfqpRcilmiK6cDbN2CreeawZppTYa6tvP1zgN7Y= Subject key identifier: C0:92:A9:83:36:00:AE:E1:8D:3B:16:39:8A:ED:1F:7D:5B:42:D3:99 Certificate issuer: /CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Certificate serial: 6CFBCB01A2A0DB10169A326723E6AC6A6C5BD296 Authority key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa Signing time: Thu 27 Feb 2025 05:38:53 +0000 ROA not before: Thu 27 Feb 2025 05:33:53 +0000 ROA not after: Thu 26 Feb 2026 05:38:53 +0000 asID: 136099 IP address blocks: 160.25.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 03:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:fb:cb:01:a2:a0:db:10:16:9a:32:67:23:e6:ac:6a:6c:5b:d2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Validity Not Before: Feb 27 05:33:53 2025 GMT Not After : Feb 26 05:38:53 2026 GMT Subject: CN=C092A9833600AEE18D3B16398AED1F7D5B42D399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:40:70:05:38:13:69:83:2c:08:be:ac:50:2b: 59:0a:81:e8:30:7a:dc:cf:10:26:e2:50:b8:43:86: 32:83:2d:b4:dc:55:9a:f3:e6:c7:1d:cd:4a:e5:84: 65:6c:4f:c7:ad:f3:7a:84:b9:13:86:1c:3b:bb:57: b3:4b:8e:87:bf:a9:a8:c6:61:7b:35:ea:06:02:8d: 2f:e5:85:24:bb:a5:32:73:2b:92:37:b1:84:32:4a: 8c:cc:dd:5b:0c:7a:de:7a:a8:07:b2:61:ea:14:1b: b0:f6:82:c3:42:07:92:d5:29:3d:95:8f:f8:12:0a: 29:32:f1:52:3a:3c:41:b3:fe:64:c7:38:56:da:90: ec:dd:c1:38:e3:46:8e:09:89:ff:62:94:88:2e:34: be:23:50:f5:95:e9:c4:37:29:44:c9:a7:6f:86:26: ea:c3:99:56:8b:ba:65:13:74:83:7c:58:98:00:9c: d6:40:d3:bc:47:5d:17:e7:40:59:ea:57:fa:fc:ae: 15:d9:c7:11:da:ce:d5:b6:8f:83:39:ec:25:b5:0c: 3d:03:e3:b3:3b:0c:b0:77:10:3a:f8:cf:51:af:29: 76:01:15:f4:10:73:21:d2:c0:6c:c0:ba:fe:8f:27: c8:d3:f6:25:bc:6e:d7:21:d9:a7:67:8a:8e:fe:79: 86:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:A9:83:36:00:AE:E1:8D:3B:16:39:8A:ED:1F:7D:5B:42:D3:99 X509v3 Authority Key Identifier: keyid:A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.249.0/24 Signature Algorithm: sha256WithRSAEncryption 57:59:9f:ae:2c:93:1a:bf:f0:cb:09:14:cb:3a:58:cc:e4:96: d0:9b:15:77:ed:c9:7c:03:38:35:9f:dd:44:03:ad:e8:1a:3e: 65:18:52:e7:83:7d:d3:97:97:7b:7b:3e:35:61:a3:41:85:3f: 8b:d0:43:84:e9:60:92:83:9b:b4:eb:ee:0a:39:dc:3d:2e:4a: 02:f0:52:dd:38:ae:bb:b3:35:9b:2b:d0:25:82:4e:7d:bb:b3: 77:95:9d:34:be:79:e8:e9:f0:78:c5:b5:8b:0b:9f:78:88:63: 95:69:da:12:58:f5:0d:46:f2:3d:85:cc:e8:46:72:49:72:5f: ab:2b:41:f8:17:f4:1e:bc:35:59:6a:f1:38:e8:e8:3e:bb:dd: 49:a1:aa:62:61:1c:15:92:aa:99:ed:29:02:f2:97:de:65:d2: 86:11:87:ba:eb:13:d0:f1:7e:5f:3d:00:ce:0f:be:42:bc:fa: d5:7a:fd:0a:79:76:2f:72:34:3d:e4:b1:0a:f6:95:a3:f6:f2: 80:5e:94:98:cf:f0:ad:30:c6:0a:13:e4:24:24:24:9c:8c:08: 9e:1a:e9:e5:6b:69:e8:e2:71:21:12:42:e2:57:82:4c:db:97: f0:8c:a2:b3:8b:2c:45:24:a4:12:3b:79:d6:fa:68:7f:d8:cd: ac:16:ae:17 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbPvLAaKg2xAWmjJnI+asamxb0pYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1 NzBFRDNBNDAeFw0yNTAyMjcwNTMzNTNaFw0yNjAyMjYwNTM4NTNaMDMxMTAvBgNV BAMTKEMwOTJBOTgzMzYwMEFFRTE4RDNCMTYzOThBRUQxRjdENUI0MkQzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQHAFOBNpgywIvqxQK1kKgegw etzPECbiULhDhjKDLbTcVZrz5scdzUrlhGVsT8et83qEuROGHDu7V7NLjoe/qajG YXs16gYCjS/lhSS7pTJzK5I3sYQySozM3VsMet56qAeyYeoUG7D2gsNCB5LVKT2V j/gSCiky8VI6PEGz/mTHOFbakOzdwTjjRo4Jif9ilIguNL4jUPWV6cQ3KUTJp2+G JurDmVaLumUTdIN8WJgAnNZA07xHXRfnQFnqV/r8rhXZxxHaztW2j4M57CW1DD0D 47M7DLB3EDr4z1GvKXYBFfQQcyHSwGzAuv6PJ8jT9iW8btch2adnio7+eYbTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUwJKpgzYAruGNOxY5iu0ffVtC05kwHwYDVR0j BBgwFoAUohunDfjuRw/npgOFtmU4QlcO06QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMS9BMjFCQTcwREY4 RUU0NzBGRTdBNjAzODVCNjY1Mzg0MjU3MEVEM0E0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1NzBF RDNBNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQxNDA1NTQ1LWMzNWQtNGRlMS05 NjE4LTQ0YjVmNDE3YTMwMy8xLzMxMzYzMDJlMzIzNTJlMzIzNDM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBn5MA0GCSqG SIb3DQEBCwUAA4IBAQBXWZ+uLJMav/DLCRTLOljM5JbQmxV37cl8Azg1n91EA63o Gj5lGFLng33Tl5d7ez41YaNBhT+L0EOE6WCSg5u06+4KOdw9LkoC8FLdOK67szWb K9Algk59u7N3lZ00vnno6fB4xbWLC594iGOVadoSWPUNRvI9hczoRnJJcl+rK0H4 F/QevDVZavE46Og+u91JoapiYRwVkqqZ7SkC8pfeZdKGEYe66xPQ8X5fPQDOD75C vPrVev0KeXYvcjQ95LEK9pWj9vKAXpSYz/CtMMYKE+QkJCScjAieGunla2no4nEh EkLiV4JM25fwjKKziyxFJKQSO3nW+mh/2M2sFq4X -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:03 2025 by rpki-client