$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa File: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (raw, json) Hash identifier: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A= Subject key identifier: 42:8C:07:13:33:8B:78:17:9F:88:53:C6:7B:C9:E9:53:EC:DF:8B:EB Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 2097E0692DCA023766F9DE831633A758A417A228 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa Signing time: Thu 02 Oct 2025 04:02:26 +0000 ROA not before: Thu 02 Oct 2025 03:57:26 +0000 ROA not after: Thu 01 Oct 2026 04:02:26 +0000 asID: 153132 IP address blocks: 160.187.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:97:e0:69:2d:ca:02:37:66:f9:de:83:16:33:a7:58:a4:17:a2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Oct 2 03:57:26 2025 GMT Not After : Oct 1 04:02:26 2026 GMT Subject: CN=428C0713338B78179F8853C67BC9E953ECDF8BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d0:5a:90:70:e9:12:7b:f7:78:56:b7:40:73: 8f:a6:25:ce:55:c4:f7:52:52:20:2a:de:bb:a3:3a: 23:33:7f:6b:15:9c:a9:23:80:92:49:08:85:c3:f0: 9a:6d:e2:b1:b6:ae:dc:36:38:86:bb:e2:c7:01:19: 40:63:0c:81:19:8b:46:de:02:ff:d5:ea:02:64:d5: d5:c1:46:f5:4f:b3:7d:29:0d:a8:a8:2c:ba:9c:f6: e1:60:4f:78:1e:c4:1f:17:c3:5f:d1:35:3c:db:06: e0:2d:b6:b0:e8:e3:05:f5:f5:06:53:c3:a0:e5:7a: fe:39:e6:58:26:00:de:bc:65:70:27:3c:52:1d:7a: 28:bd:37:91:c6:eb:d9:dc:ba:68:50:f3:7d:f9:b6: 3c:ba:fe:eb:ad:0c:2f:1f:40:14:23:f8:2b:ee:46: 4d:e6:b5:a0:4d:ee:35:cc:33:ec:e6:70:51:a8:9f: a0:d0:a2:d3:c9:e8:e3:d6:c8:cb:68:13:1f:22:3d: da:e9:f0:da:68:71:f6:2e:85:c2:4a:05:43:a2:91: 1e:45:2b:1c:84:ea:9a:bd:5e:55:c0:d8:26:cf:e1: e5:24:46:1f:41:5c:2a:30:31:53:0d:76:2e:f8:05: b2:9c:d8:c3:be:eb:38:6f:67:30:2d:f7:d5:a5:11: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:07:13:33:8B:78:17:9F:88:53:C6:7B:C9:E9:53:EC:DF:8B:EB X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.218.0/24 Signature Algorithm: sha256WithRSAEncryption 35:e9:e6:b0:86:c3:cc:82:a3:e6:66:bd:f0:cb:99:f8:cf:76: e8:93:b1:4e:dc:8a:a1:e3:c5:75:c7:03:8c:69:fe:cf:3f:1d: 9d:bf:98:75:d8:2b:fa:81:53:ba:28:cd:63:24:84:b0:64:82: 8f:b5:9b:40:ec:ed:7b:d9:7e:33:69:23:6a:ba:71:2a:af:04: 4f:22:ae:ab:87:ed:c4:d9:73:3d:6b:1a:07:23:e5:7a:85:99: d9:72:de:48:7e:45:cb:c3:96:59:50:d2:86:58:1f:49:0e:2c: 63:96:3d:d4:12:fb:58:a0:4d:2d:8f:b2:96:35:8a:f4:73:8a: 14:d3:7a:48:ad:77:99:0d:06:52:ce:dc:99:c7:e8:95:ec:3e: 45:be:40:c2:fa:ab:02:14:fe:b4:3f:a5:58:48:82:dc:68:a9: b4:21:1d:89:8a:4d:f8:bf:e2:fd:13:65:81:9e:b6:fe:4a:01: cb:57:e2:7c:18:63:b5:22:c8:e5:a3:b1:a2:32:0a:a3:79:5f: a2:a5:48:84:1c:97:c1:74:92:44:2c:15:95:dd:8f:f9:29:64: b3:7d:54:f0:ea:d2:38:b0:0e:33:1e:f3:11:8a:6e:92:46:40: ef:ee:18:34:a9:dc:34:ab:b3:44:bf:2b:88:70:0f:de:54:75: d1:d9:c1:ef -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUIJfgaS3KAjdm+d6DFjOnWKQXoigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTEwMDIwMzU3MjZaFw0yNjEwMDEwNDAyMjZaMDMxMTAvBgNV BAMTKDQyOEMwNzEzMzM4Qjc4MTc5Rjg4NTNDNjdCQzlFOTUzRUNERjhCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0FqQcOkSe/d4VrdAc4+mJc5V xPdSUiAq3rujOiMzf2sVnKkjgJJJCIXD8Jpt4rG2rtw2OIa74scBGUBjDIEZi0be Av/V6gJk1dXBRvVPs30pDaioLLqc9uFgT3gexB8Xw1/RNTzbBuAttrDo4wX19QZT w6Dlev455lgmAN68ZXAnPFIdeii9N5HG69ncumhQ8335tjy6/uutDC8fQBQj+Cvu Rk3mtaBN7jXMM+zmcFGon6DQotPJ6OPWyMtoEx8iPdrp8NpocfYuhcJKBUOikR5F KxyE6pq9XlXA2CbP4eUkRh9BXCowMVMNdi74BbKc2MO+6zhvZzAt99WlEbWNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUQowHEzOLeBefiFPGe8npU+zfi+swHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ4MWQ1NGNiLTU3YTktNGExNi1h NzBlLWM1ZjYwMjRlMTM5ZC8wLzMxMzYzMDJlMzEzODM3MmUzMjMxMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu9owDQYJ KoZIhvcNAQELBQADggEBADXp5rCGw8yCo+ZmvfDLmfjPduiTsU7ciqHjxXXHA4xp /s8/HZ2/mHXYK/qBU7oozWMkhLBkgo+1m0Ds7XvZfjNpI2q6cSqvBE8irquH7cTZ cz1rGgcj5XqFmdly3kh+RcvDlllQ0oZYH0kOLGOWPdQS+1igTS2PspY1ivRzihTT ekitd5kNBlLO3JnH6JXsPkW+QML6qwIU/rQ/pVhIgtxoqbQhHYmKTfi/4v0TZYGe tv5KActX4nwYY7UiyOWjsaIyCqN5X6KlSIQcl8F0kkQsFZXdj/kpZLN9VPDq0jiw DjMe8xGKbpJGQO/uGDSp3DSrs0S/K4hwD95UddHZwe8= -----END CERTIFICATE-----Generated at Wed Nov 5 04:21:05 2025 by rpki-client