$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa File: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (raw, json) Hash identifier: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo= Subject key identifier: CE:54:53:68:70:A7:81:17:AA:10:0C:47:86:1C:46:D5:A3:6E:CA:81 Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 72D278B2E9A0E6B3B0C19F7FA9FE9A610E2E9DAA Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa Signing time: Thu 31 Jul 2025 18:00:01 +0000 ROA not before: Thu 31 Jul 2025 17:55:01 +0000 ROA not after: Thu 30 Jul 2026 18:00:01 +0000 asID: 152836 IP address blocks: 160.22.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d2:78:b2:e9:a0:e6:b3:b0:c1:9f:7f:a9:fe:9a:61:0e:2e:9d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Jul 31 17:55:01 2025 GMT Not After : Jul 30 18:00:01 2026 GMT Subject: CN=CE54536870A78117AA100C47861C46D5A36ECA81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:df:d3:ae:e0:a5:da:5d:41:5c:43:73:d6: 4b:ed:1b:79:4c:a0:14:60:02:54:da:51:7d:ee:46: c3:7b:64:bb:00:b5:95:51:4d:0f:86:58:15:a7:4e: 68:7c:40:50:05:fa:78:26:7a:21:18:4a:9d:14:6f: cb:fa:bc:e7:d5:ae:50:b3:4a:a9:25:33:68:c0:c6: ee:02:7e:29:1f:95:d2:e5:c9:f2:c3:ba:90:ba:22: 9c:14:a0:20:00:3e:28:51:a6:be:7b:05:54:4c:2f: 38:38:89:f5:fc:9b:36:3c:ca:03:54:6c:7a:ab:2d: 66:25:ad:2e:eb:49:88:ee:dc:aa:ae:ba:7b:a5:5e: 83:fb:a7:f1:72:a0:c1:8b:9c:69:33:b4:3b:8d:14: 03:53:86:d7:79:30:b1:24:80:3e:d7:3e:d8:bf:ba: e7:71:5d:f7:b1:0a:4f:6b:d3:bb:ce:8c:74:82:71: c5:bc:a3:62:9f:5f:fa:0d:a2:49:1e:a2:e7:5f:6d: 3f:0c:71:c4:07:67:23:a8:58:06:ed:76:fc:23:76: 32:aa:ca:f8:f6:2b:87:77:4d:b3:c2:c2:fa:2f:dd: 83:c2:21:80:7b:c9:4e:bb:88:f7:20:89:20:fa:5a: aa:e3:95:78:02:1d:fb:8d:7f:4a:71:97:72:ba:ec: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:54:53:68:70:A7:81:17:AA:10:0C:47:86:1C:46:D5:A3:6E:CA:81 X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.199.0/24 Signature Algorithm: sha256WithRSAEncryption 75:42:60:cb:f3:36:db:43:fb:ef:86:11:1c:6c:9a:7b:c7:a2: ab:15:b9:06:a5:d8:c1:54:69:de:2a:49:5e:f0:89:8c:6f:4f: 93:47:d3:0f:4e:16:6f:c1:b1:93:9c:7d:5b:5b:24:ed:2b:1d: fe:a5:36:8d:1d:b1:4e:c0:aa:56:45:ab:e5:d0:75:93:7e:5e: 0d:7b:b6:03:21:78:d4:87:8c:c6:2d:5e:44:74:ff:2e:a2:98: 69:a2:fc:ff:e3:83:73:5c:8e:b0:17:d2:ad:01:ad:6c:c6:10: 51:d9:e1:a2:9f:b3:ed:d9:cb:b6:b5:cb:5b:e1:16:96:90:1e: fc:ca:d5:38:31:29:55:6c:9e:76:33:f7:4b:53:a9:37:57:2b: 49:8b:7a:96:2c:d4:39:46:ee:f5:03:b4:3a:13:0c:06:f1:e2: 18:18:e2:d4:0f:94:c0:bf:f2:7d:c9:95:92:5c:e2:ca:a4:77: e2:ad:c3:6b:2c:3f:b1:c7:c2:fb:08:57:88:09:04:6d:b1:eb: 2f:99:60:14:ea:f3:a9:fa:a3:e3:cf:e9:35:31:b0:24:34:b0: 17:84:2c:86:b8:8d:5d:e5:a6:b9:f5:75:58:66:d7:dd:1b:0e: 3d:43:a6:79:da:3c:1f:6f:d3:8c:b5:9b:d3:e3:4f:b7:91:44: f6:18:63:ec -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUctJ4sumg5rOwwZ9/qf6aYQ4unaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTA3MzExNzU1MDFaFw0yNjA3MzAxODAwMDFaMDMxMTAvBgNV BAMTKENFNTQ1MzY4NzBBNzgxMTdBQTEwMEM0Nzg2MUM0NkQ1QTM2RUNBODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yt/TruCl2l1BXENz1kvtG3lM oBRgAlTaUX3uRsN7ZLsAtZVRTQ+GWBWnTmh8QFAF+ngmeiEYSp0Ub8v6vOfVrlCz SqklM2jAxu4CfikfldLlyfLDupC6IpwUoCAAPihRpr57BVRMLzg4ifX8mzY8ygNU bHqrLWYlrS7rSYju3KquunulXoP7p/FyoMGLnGkztDuNFANThtd5MLEkgD7XPti/ uudxXfexCk9r07vOjHSCccW8o2KfX/oNokkeoudfbT8MccQHZyOoWAbtdvwjdjKq yvj2K4d3TbPCwvov3YPCIYB7yU67iPcgiSD6WqrjlXgCHfuNf0pxl3K67LRDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUzlRTaHCngReqEAxHhhxG1aNuyoEwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmMzBlNGFlLTNlNDctNDU0MC04 MjNjLTUzY2FmMjI2N2IzNi8wLzMxMzYzMDJlMzIzMjJlMzEzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbHMA0GCSqG SIb3DQEBCwUAA4IBAQB1QmDL8zbbQ/vvhhEcbJp7x6KrFbkGpdjBVGneKkle8ImM b0+TR9MPThZvwbGTnH1bWyTtKx3+pTaNHbFOwKpWRavl0HWTfl4Ne7YDIXjUh4zG LV5EdP8uophpovz/44NzXI6wF9KtAa1sxhBR2eGin7Pt2cu2tctb4RaWkB78ytU4 MSlVbJ52M/dLU6k3VytJi3qWLNQ5Ru71A7Q6EwwG8eIYGOLUD5TAv/J9yZWSXOLK pHfircNrLD+xx8L7CFeICQRtsesvmWAU6vOp+qPjz+k1MbAkNLAXhCyGuI1d5aa5 9XVYZtfdGw49Q6Z52jwfb9OMtZvT40+3kUT2GGPs -----END CERTIFICATE-----Generated at Thu Aug 7 13:02:38 2025 by rpki-client