$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa File: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (raw, json) Hash identifier: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs= Subject key identifier: E7:A0:1D:00:F0:0B:34:06:EE:90:5F:38:EA:14:CF:C1:0E:BD:B0:4A Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 68B004DA48FEF9C5BDFF75C8D4C31FD1C5B3E522 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa Signing time: Thu 02 Oct 2025 04:02:26 +0000 ROA not before: Thu 02 Oct 2025 03:57:26 +0000 ROA not after: Thu 01 Oct 2026 04:02:26 +0000 asID: 153132 IP address blocks: 160.187.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b0:04:da:48:fe:f9:c5:bd:ff:75:c8:d4:c3:1f:d1:c5:b3:e5:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Oct 2 03:57:26 2025 GMT Not After : Oct 1 04:02:26 2026 GMT Subject: CN=E7A01D00F00B3406EE905F38EA14CFC10EBDB04A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:d4:ff:da:7f:3b:d7:1e:60:bc:43:fe:78: 45:37:33:72:a0:db:b8:0c:db:af:36:24:06:63:ad: 2e:a2:b5:14:dc:97:d7:16:8b:c0:f8:4b:48:03:3b: 0c:fb:d1:a9:fb:1e:68:5a:3b:9a:e3:6d:74:05:ca: aa:fe:06:32:95:dd:84:6a:ae:a5:4b:29:21:5a:10: 59:88:fc:7e:56:40:0c:85:84:b3:ab:09:fc:7e:41: 28:04:89:e2:11:ac:80:f0:2f:c6:3c:ba:7d:1d:27: 9b:c7:54:91:d4:59:f9:66:88:24:15:cd:d6:90:ba: 5c:fa:5b:d6:d5:9f:d8:ab:d7:e6:e3:a0:4f:72:0d: d4:42:ec:a6:31:15:00:43:7c:f6:ed:92:88:4b:b3: 66:58:6e:80:89:f1:9c:ff:f3:6c:18:18:bf:52:93: 24:ca:6f:7b:c4:a7:c9:67:38:c2:20:6c:93:99:dd: 86:49:dd:c1:e3:80:48:29:c5:4c:f1:78:7e:94:79: 8a:02:29:30:1b:c3:90:b1:2c:72:0e:ad:c7:21:63: 91:cd:80:15:6c:ef:93:cd:32:fe:a4:57:6e:5b:c6: 04:83:b6:ba:6b:95:55:fd:5d:7c:6f:fa:1c:03:ca: 36:3b:9d:bc:96:ff:57:82:cf:05:0d:bf:ee:f8:bc: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:1D:00:F0:0B:34:06:EE:90:5F:38:EA:14:CF:C1:0E:BD:B0:4A X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.218.0/23 Signature Algorithm: sha256WithRSAEncryption c7:a2:f0:38:bd:f5:1e:25:3c:a1:85:07:a5:49:9c:f5:98:83: cf:1d:ee:ed:61:75:3b:2c:cc:c3:04:01:95:c3:e1:cd:a9:3f: f7:90:25:52:ea:20:07:12:4b:e0:34:4e:57:f3:aa:75:be:75: 4e:a3:18:dd:9d:d7:9e:39:d1:79:df:2d:56:b1:7a:9e:ab:16: b7:ef:af:21:e9:15:36:7b:33:51:7b:eb:47:df:56:a6:fa:dd: 44:93:1b:76:92:56:9a:56:f3:7f:a7:e8:8f:c0:6d:df:29:d8: 7b:7a:2b:06:ef:08:4e:d3:1d:4c:63:05:35:07:9b:c1:0c:76: ad:ca:34:be:26:cc:b0:6e:fb:21:67:1a:fd:9e:45:fd:21:8a: f0:cd:49:69:05:27:7b:19:e0:d7:bf:2e:40:67:0c:40:10:49: 4a:00:2f:46:71:dc:ed:00:88:c7:92:71:ce:96:5a:4c:f1:b5: ac:e2:30:81:c0:fd:0a:df:38:c4:e9:90:43:6d:2c:6a:cf:0c: b4:97:77:71:ff:d2:26:45:62:4b:4f:06:06:64:60:88:0d:70: bf:6c:a1:f0:1b:c9:be:74:9c:7b:d0:45:5c:2b:12:97:ce:7b: 5b:03:06:93:04:a4:7d:8a:e0:10:42:a6:73:a2:87:d8:de:66: 98:db:90:25 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUaLAE2kj++cW9/3XI1MMf0cWz5SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTEwMDIwMzU3MjZaFw0yNjEwMDEwNDAyMjZaMDMxMTAvBgNV BAMTKEU3QTAxRDAwRjAwQjM0MDZFRTkwNUYzOEVBMTRDRkMxMEVCREIwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pNT/2n871x5gvEP+eEU3M3Kg 27gM2682JAZjrS6itRTcl9cWi8D4S0gDOwz70an7HmhaO5rjbXQFyqr+BjKV3YRq rqVLKSFaEFmI/H5WQAyFhLOrCfx+QSgEieIRrIDwL8Y8un0dJ5vHVJHUWflmiCQV zdaQulz6W9bVn9ir1+bjoE9yDdRC7KYxFQBDfPbtkohLs2ZYboCJ8Zz/82wYGL9S kyTKb3vEp8lnOMIgbJOZ3YZJ3cHjgEgpxUzxeH6UeYoCKTAbw5CxLHIOrcchY5HN gBVs75PNMv6kV25bxgSDtrprlVX9XXxv+hwDyjY7nbyW/1eCzwUNv+74vPUfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU56AdAPALNAbukF846hTPwQ69sEowHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4MWQ1NGNiLTU3YTktNGExNi1h NzBlLWM1ZjYwMjRlMTM5ZC8wLzMxMzYzMDJlMzEzODM3MmUzMjMxMzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzMzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgu9owDQYJ KoZIhvcNAQELBQADggEBAMei8Di99R4lPKGFB6VJnPWYg88d7u1hdTsszMMEAZXD 4c2pP/eQJVLqIAcSS+A0TlfzqnW+dU6jGN2d15450XnfLVaxep6rFrfvryHpFTZ7 M1F760ffVqb63USTG3aSVppW83+n6I/Abd8p2Ht6KwbvCE7THUxjBTUHm8EMdq3K NL4mzLBu+yFnGv2eRf0hivDNSWkFJ3sZ4Ne/LkBnDEAQSUoAL0Zx3O0AiMeScc6W WkzxtaziMIHA/QrfOMTpkENtLGrPDLSXd3H/0iZFYktPBgZkYIgNcL9sofAbyb50 nHvQRVwrEpfOe1sDBpMEpH2K4BBCpnOih9jeZpjbkCU= -----END CERTIFICATE-----Generated at Wed Nov 5 02:30:50 2025 by rpki-client