$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa File: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (raw, json) Hash identifier: aKd9F4ACmgNItMgz+uXKOhQG73PpNtSpdGFc0rlMBFo= Subject key identifier: 86:25:71:84:BB:03:93:BC:BC:47:E7:8E:43:F4:39:46:E4:CC:39:89 Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 78E1D383E65157B3A335F9F2249A587586077DF5 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa Signing time: Sun 09 Feb 2025 21:56:28 +0000 ROA not before: Sun 09 Feb 2025 21:51:28 +0000 ROA not after: Sun 08 Feb 2026 21:56:28 +0000 asID: 153085 IP address blocks: 160.25.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e1:d3:83:e6:51:57:b3:a3:35:f9:f2:24:9a:58:75:86:07:7d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Feb 9 21:51:28 2025 GMT Not After : Feb 8 21:56:28 2026 GMT Subject: CN=86257184BB0393BCBC47E78E43F43946E4CC3989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:d7:84:f4:0a:d1:d8:ad:75:91:db:67:7e:a8: aa:42:10:3d:01:53:51:5b:41:df:4c:f2:f6:89:7e: aa:13:34:d6:54:47:e8:37:7c:bb:8a:f5:80:7a:60: 24:47:d7:f6:c9:8e:cf:5e:2a:22:50:be:08:5b:f8: f9:65:e4:35:7b:c8:92:69:fe:97:03:4f:96:13:0d: 15:e9:17:09:1a:20:70:ac:4d:cd:9f:03:2e:da:61: 65:7b:46:13:c0:28:de:09:27:1f:d6:ca:a2:0e:1f: e1:4e:41:cb:fd:04:a4:eb:32:fa:3b:5d:05:55:55: 79:4a:85:44:0f:92:4f:ab:2d:60:88:2c:a2:dd:0d: f6:fa:e6:e2:24:7a:b7:8e:31:ca:9a:fa:1c:b4:3a: 29:f4:fb:cc:29:52:98:04:6e:46:b4:4b:56:c5:07: 91:94:c3:a2:a4:42:ca:14:be:4a:87:a3:13:22:bd: 0a:d8:6d:56:df:5b:c3:3a:f6:27:ac:f7:81:2e:3e: e7:53:99:1a:68:a5:10:07:a4:f2:f8:69:b7:15:2c: 09:73:22:e3:5d:ff:6d:85:53:08:32:6b:43:a3:06: 40:c5:65:7f:da:e4:62:d8:21:07:7d:e0:91:da:29: a4:56:1a:3f:31:26:6d:0d:65:1a:8f:e4:65:28:42: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:25:71:84:BB:03:93:BC:BC:47:E7:8E:43:F4:39:46:E4:CC:39:89 X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.157.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:4a:6a:37:53:61:5d:d5:62:1d:6b:03:af:1b:7c:6a:51:b0: b7:40:62:15:24:69:ed:ea:13:32:0b:46:ac:1a:30:bf:f7:7c: c6:8f:d5:70:47:e6:fd:c2:7e:59:23:44:8d:fd:0b:4f:47:76: e6:f4:54:61:a6:16:42:30:98:4f:ac:17:6d:1c:ab:81:b8:ff: 3f:be:3f:6c:fd:9c:3d:96:6a:4e:3e:d6:30:63:60:87:75:cb: dc:59:1b:fa:de:d5:ab:1e:95:24:60:d8:32:5e:26:08:b5:48: 67:6f:9c:91:a3:9f:b1:63:14:9c:a8:73:9f:00:b1:9d:49:07: 2b:1e:31:05:ff:fb:3c:c2:54:98:68:cb:96:43:66:59:de:18: 24:6c:44:71:89:2d:29:d9:40:5b:e1:3a:53:6a:f6:5f:83:3a: 86:46:64:5d:33:e9:6f:b8:27:1c:6d:fb:69:e0:3b:82:18:8e: 31:f8:f6:f4:0d:d8:55:c1:38:2f:20:50:c2:2e:9e:bb:6c:fb: bc:55:99:ca:ee:7a:e5:e0:2a:d2:68:03:fb:6f:74:af:37:25: 1b:97:99:cd:6f:cc:0b:d7:00:be:b2:c1:93:a0:ee:a7:75:f0: 1c:e5:e6:6c:97:45:a7:78:6d:40:09:7f:ee:8d:43:ca:ae:59: 0f:d3:a6:97 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeOHTg+ZRV7OjNfnyJJpYdYYHffUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNTAyMDkyMTUxMjhaFw0yNjAyMDgyMTU2MjhaMDMxMTAvBgNV BAMTKDg2MjU3MTg0QkIwMzkzQkNCQzQ3RTc4RTQzRjQzOTQ2RTRDQzM5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD214T0CtHYrXWR22d+qKpCED0B U1FbQd9M8vaJfqoTNNZUR+g3fLuK9YB6YCRH1/bJjs9eKiJQvghb+Pll5DV7yJJp /pcDT5YTDRXpFwkaIHCsTc2fAy7aYWV7RhPAKN4JJx/WyqIOH+FOQcv9BKTrMvo7 XQVVVXlKhUQPkk+rLWCILKLdDfb65uIkereOMcqa+hy0Oin0+8wpUpgEbka0S1bF B5GUw6KkQsoUvkqHoxMivQrYbVbfW8M69ies94EuPudTmRpopRAHpPL4abcVLAlz IuNd/22FUwgya0OjBkDFZX/a5GLYIQd94JHaKaRWGj8xJm0NZRqP5GUoQmg3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhiVxhLsDk7y8R+eOQ/Q5RuTMOYkwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzYTlkNzg4LWJjZjctNDZmMC04 YjViLTBkN2QxZmNiNmRhMy8wLzMxMzYzMDJlMzIzNTJlMzEzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmdMA0GCSqG SIb3DQEBCwUAA4IBAQAuSmo3U2Fd1WIdawOvG3xqUbC3QGIVJGnt6hMyC0asGjC/ 93zGj9VwR+b9wn5ZI0SN/QtPR3bm9FRhphZCMJhPrBdtHKuBuP8/vj9s/Zw9lmpO PtYwY2CHdcvcWRv63tWrHpUkYNgyXiYItUhnb5yRo5+xYxScqHOfALGdSQcrHjEF //s8wlSYaMuWQ2ZZ3hgkbERxiS0p2UBb4TpTavZfgzqGRmRdM+lvuCccbftp4DuC GI4x+Pb0DdhVwTgvIFDCLp67bPu8VZnK7nrl4CrSaAP7b3SvNyUbl5nNb8wL1wC+ ssGToO6ndfAc5eZsl0WneG1ACX/ujUPKrlkP06aX -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:26 2025 by rpki-client on console.sobornost.net