$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/3136302e32352e35382e302f32332d3234203d3e20313532383333.roa File: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (raw, json) Hash identifier: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI= Subject key identifier: 3D:23:3E:75:C7:B6:07:F2:9B:C5:30:94:0D:0A:43:B2:DE:28:6A:81 Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 6D53EECC5D940FD8595FB548993C6AFC94C6F670 Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/3136302e32352e35382e302f32332d3234203d3e20313532383333.roa Signing time: Fri 20 Jun 2025 05:00:02 +0000 ROA not before: Fri 20 Jun 2025 04:55:02 +0000 ROA not after: Fri 19 Jun 2026 05:00:02 +0000 asID: 152833 IP address blocks: 160.25.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:53:ee:cc:5d:94:0f:d8:59:5f:b5:48:99:3c:6a:fc:94:c6:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Jun 20 04:55:02 2025 GMT Not After : Jun 19 05:00:02 2026 GMT Subject: CN=3D233E75C7B607F29BC530940D0A43B2DE286A81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:bf:99:75:bf:b6:2c:d8:d4:c4:bb:a2:e5: b9:a0:d2:4a:40:82:0c:91:6b:f3:36:c5:5f:9d:37: 9c:f7:b3:61:52:a5:29:3e:23:38:0c:02:c6:95:2f: 1c:f5:04:e8:b7:a1:fb:8a:b8:49:9f:3a:1c:66:c8: 00:4d:ff:dd:74:38:71:71:e6:cd:7b:06:98:32:ae: 42:bb:83:5c:17:a7:80:97:87:64:3b:08:b2:04:c6: 55:50:46:e4:5b:94:8a:66:1f:c6:12:28:95:fa:2f: 30:b8:31:83:c8:9e:a7:30:50:63:33:d6:75:ef:5c: d8:45:e3:32:4d:d1:bd:8e:27:3d:0b:70:69:ce:cc: ce:bb:58:26:21:c4:92:8a:de:99:ec:70:3d:1e:d3: 10:0a:4d:2c:37:27:fb:ce:7d:0a:71:56:c1:84:c0: 93:bc:26:fa:90:67:f5:09:62:62:c4:ac:9a:c1:0e: a3:49:7d:17:62:2e:3c:18:98:0e:ba:b0:19:30:c7: 78:75:fd:39:a9:76:83:69:3a:1b:71:33:de:af:fe: 3d:f3:d6:ef:84:4e:99:35:3d:31:83:d9:d1:08:85: 3d:21:aa:9e:9f:53:17:d6:36:fb:9e:0f:13:39:66: ae:1e:d4:68:4e:8c:ea:ad:2a:f8:52:19:34:14:e8: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:23:3E:75:C7:B6:07:F2:9B:C5:30:94:0D:0A:43:B2:DE:28:6A:81 X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/3136302e32352e35382e302f32332d3234203d3e20313532383333.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.58.0/23 Signature Algorithm: sha256WithRSAEncryption a7:d4:21:45:2b:e7:a9:72:10:76:cf:e8:84:d2:89:df:57:aa: 1c:5d:42:da:eb:1e:28:f7:66:5e:23:fb:b1:d7:96:e0:79:0e: 51:e0:2d:de:89:3e:53:05:29:cb:2f:9f:81:3b:6b:2c:87:81: 0a:38:f3:f0:99:a9:8a:b2:22:d5:c6:41:04:96:bd:4f:6d:69: 21:3c:b6:f6:f4:d3:09:08:70:16:20:10:04:d1:db:f3:e5:ba: 56:16:36:0b:65:e4:80:be:8b:ec:74:aa:e0:54:02:6a:5e:07: 92:c2:99:97:93:bf:7c:3d:e5:de:3c:9f:33:fb:7e:91:f2:a9: b0:00:3f:41:a1:6a:23:7d:5b:a7:c1:e3:ce:b7:d8:da:aa:4f: aa:3f:72:d7:d3:12:10:5a:92:c1:4d:be:de:ca:49:c3:ed:87: f2:74:d2:54:1d:8c:9c:87:82:99:61:0b:74:7a:13:40:2c:95: 79:d0:53:a1:46:75:03:b3:aa:9d:b2:16:8e:a4:d7:9b:1b:fc: 55:e3:51:c0:1a:2f:05:d9:3c:36:8a:ee:d8:a2:39:91:9c:8b: 2a:c1:bf:3c:57:19:47:ec:41:b8:13:e1:51:31:3d:6f:7a:b0: cc:51:c4:fb:2b:3a:69:0b:29:77:a8:c5:95:b6:c4:0c:1d:69: 7a:1c:43:e4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbVPuzF2UD9hZX7VImTxq/JTG9nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNTA2MjAwNDU1MDJaFw0yNjA2MTkwNTAwMDJaMDMxMTAvBgNV BAMTKDNEMjMzRTc1QzdCNjA3RjI5QkM1MzA5NDBEMEE0M0IyREUyODZBODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Eb+Zdb+2LNjUxLui5bmg0kpA ggyRa/M2xV+dN5z3s2FSpSk+IzgMAsaVLxz1BOi3ofuKuEmfOhxmyABN/910OHFx 5s17BpgyrkK7g1wXp4CXh2Q7CLIExlVQRuRblIpmH8YSKJX6LzC4MYPInqcwUGMz 1nXvXNhF4zJN0b2OJz0LcGnOzM67WCYhxJKK3pnscD0e0xAKTSw3J/vOfQpxVsGE wJO8JvqQZ/UJYmLErJrBDqNJfRdiLjwYmA66sBkwx3h1/TmpdoNpOhtxM96v/j3z 1u+ETpk1PTGD2dEIhT0hqp6fUxfWNvueDxM5Zq4e1GhOjOqtKvhSGTQU6A//AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUPSM+dce2B/KbxTCUDQpDst4oaoEwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyZGFiNDZhLTA4NWUtNDQzMi05 ODMzLTcxYjhkYjE0NGQ5NC8wLzMxMzYzMDJlMzIzNTJlMzUzODJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZOjANBgkqhkiG 9w0BAQsFAAOCAQEAp9QhRSvnqXIQds/ohNKJ31eqHF1C2useKPdmXiP7sdeW4HkO UeAt3ok+UwUpyy+fgTtrLIeBCjjz8JmpirIi1cZBBJa9T21pITy29vTTCQhwFiAQ BNHb8+W6VhY2C2XkgL6L7HSq4FQCal4HksKZl5O/fD3l3jyfM/t+kfKpsAA/QaFq I31bp8HjzrfY2qpPqj9y19MSEFqSwU2+3spJw+2H8nTSVB2MnIeCmWELdHoTQCyV edBToUZ1A7OqnbIWjqTXmxv8VeNRwBovBdk8Noru2KI5kZyLKsG/PFcZR+xBuBPh UTE9b3qwzFHE+ys6aQspd6jFlbbEDB1pehxD5A== -----END CERTIFICATE-----Generated at Wed Nov 5 14:42:48 2025 by rpki-client