$ rpki-client -vvf repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa File: 3138322e3235352e302e302f32312d3231203d3e203436303439.roa (raw, json) Hash identifier: I1A638CYsM8J+ynZCPmsBPN7YoHXf4XqHlMcOkLKF2I= Subject key identifier: 91:37:75:3E:88:DF:2B:DE:04:6B:EA:9E:2B:C4:0A:70:25:3E:67:2D Certificate issuer: /CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Certificate serial: 28B0C970E24AD99DDBD877DD54265F854C865C44 Authority key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa Signing time: Thu 19 Jun 2025 10:02:22 +0000 ROA not before: Thu 19 Jun 2025 09:57:22 +0000 ROA not after: Thu 18 Jun 2026 10:02:22 +0000 asID: 46049 IP address blocks: 182.255.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 16:25:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b0:c9:70:e2:4a:d9:9d:db:d8:77:dd:54:26:5f:85:4c:86:5c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Validity Not Before: Jun 19 09:57:22 2025 GMT Not After : Jun 18 10:02:22 2026 GMT Subject: CN=9137753E88DF2BDE046BEA9E2BC40A70253E672D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:43:4e:22:d5:6e:69:1b:b5:05:7c:e1:bd: 76:1a:cf:65:8c:71:c4:3c:0b:b0:ae:ee:5b:09:2b: d4:fd:31:d8:2c:0a:d3:22:1c:b8:15:a0:cc:de:6d: c0:ab:69:05:d4:82:8d:ea:0b:d6:79:cf:07:c8:e4: 3e:33:88:9a:7d:c9:77:ec:5c:67:17:5a:95:e8:df: 94:63:c3:4e:6a:70:e6:99:ec:c4:89:07:af:9a:60: 16:cd:da:08:58:ce:41:48:f1:b9:56:ca:db:ee:93: 23:a7:c6:52:03:56:73:e5:df:a3:80:7b:fd:da:21: 8d:4c:36:e5:ed:c4:ef:d6:1c:af:e3:15:9d:2a:2c: c4:95:db:09:2a:1a:77:54:99:e5:1f:b4:96:30:9f: 9b:86:52:73:07:08:7c:29:65:09:3a:07:83:6d:5b: 6a:56:7a:ee:f8:f3:aa:72:b2:fc:cc:29:05:a0:fa: 68:3b:e5:52:17:89:ba:65:1b:77:f2:50:80:20:eb: b5:88:16:a5:ee:95:19:de:9e:a6:eb:e7:65:fc:2a: 43:d4:e2:c1:68:fd:8d:1c:cc:ed:5f:ac:87:95:93: 02:48:f8:44:26:5b:bb:32:85:4b:eb:6c:0f:a9:df: 1d:ec:f6:e8:e7:d0:4c:66:6e:97:1e:98:fc:54:f9: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:37:75:3E:88:DF:2B:DE:04:6B:EA:9E:2B:C4:0A:70:25:3E:67:2D X509v3 Authority Key Identifier: keyid:F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/3138322e3235352e302e302f32312d3231203d3e203436303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.255.0.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:00:4c:15:43:b2:ca:84:cf:40:e9:7e:e3:7d:59:ab:b4:b1: fa:e4:80:04:33:16:41:1a:74:0a:62:e7:ba:9c:43:8e:f1:54: 07:9e:92:0d:68:da:3e:99:c7:2f:1a:34:1c:26:6a:fa:fa:a1: c8:cd:fd:0c:ef:2f:64:5c:04:c2:66:b4:03:68:71:b5:85:64: 43:64:df:b3:36:76:8e:11:d1:63:93:08:47:77:7c:a1:72:17: c7:df:1d:9f:c4:eb:74:07:09:6c:82:43:e7:e4:4e:f9:3c:89: 4e:92:27:82:e7:fa:27:c7:19:71:e2:03:19:77:1d:c4:59:ca: 11:ab:f2:7d:31:6d:a5:25:01:47:08:6b:60:53:ba:13:3b:57: 79:67:a6:65:87:47:07:56:ee:49:27:dd:0d:b7:c0:d6:96:c1: 45:87:f2:0b:ea:ea:53:d8:07:7c:ed:3d:ed:cc:ed:12:f1:c8: ad:ed:0c:7d:d9:0e:9d:97:81:c6:0f:7b:e1:d1:a2:ae:65:db: 65:38:45:e6:d5:7c:e8:ab:a1:29:93:54:d0:15:d1:66:42:37: 1c:e7:33:73:43:db:6e:f9:3c:ee:78:31:f8:ce:69:6b:a6:ef: de:56:26:eb:6f:a5:ee:f9:fa:ef:d5:e3:47:f6:fc:a4:a5:9c: f0:39:a2:c5 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUKLDJcOJK2Z3b2HfdVCZfhUyGXEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgz MDlCM0YzQjAeFw0yNTA2MTkwOTU3MjJaFw0yNjA2MTgxMDAyMjJaMDMxMTAvBgNV BAMTKDkxMzc3NTNFODhERjJCREUwNDZCRUE5RTJCQzQwQTcwMjUzRTY3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQUNOItVuaRu1BXzhvXYaz2WM ccQ8C7Cu7lsJK9T9MdgsCtMiHLgVoMzebcCraQXUgo3qC9Z5zwfI5D4ziJp9yXfs XGcXWpXo35Rjw05qcOaZ7MSJB6+aYBbN2ghYzkFI8blWytvukyOnxlIDVnPl36OA e/3aIY1MNuXtxO/WHK/jFZ0qLMSV2wkqGndUmeUftJYwn5uGUnMHCHwpZQk6B4Nt W2pWeu7486pysvzMKQWg+mg75VIXibplG3fyUIAg67WIFqXulRnenqbr52X8KkPU 4sFo/Y0czO1frIeVkwJI+EQmW7syhUvrbA+p3x3s9ujn0ExmbpcemPxU+RVDAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUkTd1PojfK94Ea+qeK8QKcCU+Zy0wHwYDVR0j BBgwFoAU9JA0EkHhscfRcKuHLKOaaDCbPzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMC9GNDkwMzQxMjQx RTFCMUM3RDE3MEFCODcyQ0EzOUE2ODMwOUIzRjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQ5MDM0MTI0MUUxQjFDN0QxNzBBQjg3MkNBMzlBNjgzMDlC M0YzQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODZiMDkyLTUyN2QtNDg4Zi1h OWY3LTI0Nzk3ZDk3NzRjYi8wLzMxMzgzMjJlMzIzNTM1MmUzMDJlMzAyZjMyMzEy ZDMyMzEyMDNkM2UyMDM0MzYzMDM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO2/wAwDQYJKoZIhvcN AQELBQADggEBAFwATBVDssqEz0DpfuN9Wau0sfrkgAQzFkEadApi57qcQ47xVAee kg1o2j6Zxy8aNBwmavr6ocjN/QzvL2RcBMJmtANocbWFZENk37M2do4R0WOTCEd3 fKFyF8ffHZ/E63QHCWyCQ+fkTvk8iU6SJ4Ln+ifHGXHiAxl3HcRZyhGr8n0xbaUl AUcIa2BTuhM7V3lnpmWHRwdW7kkn3Q23wNaWwUWH8gvq6lPYB3ztPe3M7RLxyK3t DH3ZDp2XgcYPe+HRoq5l22U4RebVfOiroSmTVNAV0WZCNxznM3ND2275PO54MfjO aWum795WJutvpe75+u/V40f2/KSlnPA5osU= -----END CERTIFICATE-----Generated at Sat Jun 21 17:16:15 2025 by rpki-client