$ rpki-client -vvf repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3234203d3e20313532383136.roa File: 3136302e32322e33342e302f32332d3234203d3e20313532383136.roa (raw, json) Hash identifier: a4xJEDoYakiTMO96ZZKVCyVqliQmIGfucXGPHg4A430= Subject key identifier: 31:DC:4E:8C:72:C0:A1:D6:64:2A:23:A7:FA:A6:E7:19:FD:22:55:3E Certificate issuer: /CN=C6E5FF54770B28DB44FDD655765364797010697B Certificate serial: 72384119AC709A774DB59A19FAF33B5AFAFCB073 Authority key identifier: C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3234203d3e20313532383136.roa Signing time: Tue 27 May 2025 11:12:23 +0000 ROA not before: Tue 27 May 2025 11:07:23 +0000 ROA not after: Tue 26 May 2026 11:12:23 +0000 asID: 152816 IP address blocks: 160.22.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:38:41:19:ac:70:9a:77:4d:b5:9a:19:fa:f3:3b:5a:fa:fc:b0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6E5FF54770B28DB44FDD655765364797010697B Validity Not Before: May 27 11:07:23 2025 GMT Not After : May 26 11:12:23 2026 GMT Subject: CN=31DC4E8C72C0A1D6642A23A7FAA6E719FD22553E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:be:a8:2c:2c:1b:42:a3:fe:68:52:12:08: 85:4e:0b:a4:c9:d1:f7:34:eb:13:49:a7:ed:0c:7f: 68:20:4e:58:8f:f1:94:84:50:47:e4:44:ef:9c:6a: 44:2d:8e:75:f0:e3:c4:0f:fe:8d:b2:8c:1c:ea:e4: 01:ee:12:af:69:98:fc:cc:d5:55:31:77:0e:1b:e2: 1a:30:54:46:05:30:01:14:53:8b:54:c7:64:2c:39: 15:d3:29:de:c1:ae:ff:7e:b1:35:01:eb:36:aa:a7: 34:08:cd:86:07:c2:96:a5:22:fb:99:3d:3c:cb:a6: 41:f9:6e:88:2f:c6:a9:20:84:16:d5:d8:0f:6a:c4: d3:31:33:2f:f0:bb:94:ac:62:90:98:44:e8:18:14: ad:f7:3b:03:e8:b0:08:14:ec:1f:42:b8:8f:ef:bd: c1:25:8f:a3:da:97:d3:1c:02:a7:08:5c:f7:0a:77: 46:cc:ab:c0:df:9b:f0:32:a7:89:c4:f2:2f:a4:e1: 1d:0c:3f:6b:ce:4f:5c:50:ec:b1:2a:84:6b:a8:74: 41:e1:73:fc:33:09:24:9c:1e:13:f3:1f:c7:40:ce: cf:8f:bc:fb:6a:f5:4b:a8:a5:b3:ee:0c:2a:1c:cc: 29:46:f8:bd:45:f3:5f:bb:c4:a3:72:a8:68:7e:f8: 01:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:4E:8C:72:C0:A1:D6:64:2A:23:A7:FA:A6:E7:19:FD:22:55:3E X509v3 Authority Key Identifier: keyid:C6:E5:FF:54:77:0B:28:DB:44:FD:D6:55:76:53:64:79:70:10:69:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/C6E5FF54770B28DB44FDD655765364797010697B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C6E5FF54770B28DB44FDD655765364797010697B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3234203d3e20313532383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.34.0/23 Signature Algorithm: sha256WithRSAEncryption 67:90:5f:9b:0e:6a:d2:ca:56:6f:77:82:41:00:af:b0:6a:58: ef:f6:b4:71:eb:71:f9:4c:fb:04:de:b8:fe:aa:c9:4f:6c:9c: 40:86:72:8e:c7:ee:e4:e7:01:a4:9e:2d:0d:06:41:8a:74:99: 7e:28:74:f5:5d:cb:6a:d4:ca:84:7d:e1:a5:e3:ff:ee:ef:27: bd:04:2c:82:6d:5c:fb:ba:17:b7:fe:b8:d4:37:c3:30:10:45: 0c:43:37:a7:09:48:f5:f1:05:ab:c7:60:14:e0:a3:5d:b4:85: 63:c8:6e:21:ac:ae:6d:57:ff:3b:ed:de:39:12:4e:2e:3b:e9: 85:7a:38:84:45:88:eb:a4:a8:66:37:3c:bb:56:90:f7:fa:41: 19:3a:9d:a0:86:1b:d3:e4:39:ff:cd:a0:b9:43:b0:c2:b1:b2: 92:a2:ec:09:ab:54:56:9c:93:42:0d:b6:4c:97:a8:3f:2e:c9: 8c:17:63:8d:30:65:6d:73:74:c2:24:8a:9d:2c:94:02:e9:88: c3:5b:d9:eb:45:3e:3a:00:98:c4:00:ed:10:3f:d7:39:11:22: f8:65:57:f6:e2:4f:b0:70:23:3b:8b:63:74:88:19:13:c6:c9: 0f:c8:03:5f:4c:93:ac:c3:f0:76:7e:f1:b1:10:d3:12:51:15: c9:66:fd:00 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcjhBGaxwmndNtZoZ+vM7Wvr8sHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0Nzk3 MDEwNjk3QjAeFw0yNTA1MjcxMTA3MjNaFw0yNjA1MjYxMTEyMjNaMDMxMTAvBgNV BAMTKDMxREM0RThDNzJDMEExRDY2NDJBMjNBN0ZBQTZFNzE5RkQyMjU1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAr6oLCwbQqP+aFISCIVOC6TJ 0fc06xNJp+0Mf2ggTliP8ZSEUEfkRO+cakQtjnXw48QP/o2yjBzq5AHuEq9pmPzM 1VUxdw4b4howVEYFMAEUU4tUx2QsORXTKd7Brv9+sTUB6zaqpzQIzYYHwpalIvuZ PTzLpkH5bogvxqkghBbV2A9qxNMxMy/wu5SsYpCYROgYFK33OwPosAgU7B9CuI/v vcElj6Pal9McAqcIXPcKd0bMq8Dfm/Ayp4nE8i+k4R0MP2vOT1xQ7LEqhGuodEHh c/wzCSScHhPzH8dAzs+PvPtq9UuopbPuDCoczClG+L1F81+7xKNyqGh++AGBAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUMdxOjHLAodZkKiOn+qbnGf0iVT4wHwYDVR0j BBgwFoAUxuX/VHcLKNtE/dZVdlNkeXAQaXswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Yjg4YTUxMy1kZWJmLTRkNWMtOTUxYi1kOTc1OWEwOTJkZTcvMC9DNkU1RkY1NDc3 MEIyOERCNDRGREQ2NTU3NjUzNjQ3OTcwMTA2OTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzZFNUZGNTQ3NzBCMjhEQjQ0RkRENjU1NzY1MzY0Nzk3MDEw Njk3Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiODhhNTEzLWRlYmYtNGQ1Yy05 NTFiLWQ5NzU5YTA5MmRlNy8wLzMxMzYzMDJlMzIzMjJlMzMzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWIjANBgkqhkiG 9w0BAQsFAAOCAQEAZ5Bfmw5q0spWb3eCQQCvsGpY7/a0cetx+Uz7BN64/qrJT2yc QIZyjsfu5OcBpJ4tDQZBinSZfih09V3LatTKhH3hpeP/7u8nvQQsgm1c+7oXt/64 1DfDMBBFDEM3pwlI9fEFq8dgFOCjXbSFY8huIayubVf/O+3eORJOLjvphXo4hEWI 66SoZjc8u1aQ9/pBGTqdoIYb0+Q5/82guUOwwrGykqLsCatUVpyTQg22TJeoPy7J jBdjjTBlbXN0wiSKnSyUAumIw1vZ60U+OgCYxADtED/XOREi+GVX9uJPsHAjO4tj dIgZE8bJD8gDX0yTrMPwdn7xsRDTElEVyWb9AA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:28 2025 by rpki-client