$ rpki-client -vvf repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/3136302e32322e36342e302f32332d3234203d3e203435333035.roa File: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (raw, json) Hash identifier: gDEeaK4MqvoH1/Rybnd4HP4RdLEQVc8gkFhCRcLn6ys= Subject key identifier: 64:86:C0:4C:7A:27:8B:FF:0F:69:C2:D4:C8:93:DE:C8:AB:DF:63:50 Certificate issuer: /CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Certificate serial: 449038D9B60FC70A9EBB484EFC6D24F1A7C8A8A2 Authority key identifier: C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/3136302e32322e36342e302f32332d3234203d3e203435333035.roa Signing time: Tue 17 Jun 2025 05:01:28 +0000 ROA not before: Tue 17 Jun 2025 04:56:28 +0000 ROA not after: Tue 16 Jun 2026 05:01:28 +0000 asID: 45305 IP address blocks: 160.22.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:90:38:d9:b6:0f:c7:0a:9e:bb:48:4e:fc:6d:24:f1:a7:c8:a8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4632299E016D269164FA40AEF99CC8602E2B7C1 Validity Not Before: Jun 17 04:56:28 2025 GMT Not After : Jun 16 05:01:28 2026 GMT Subject: CN=6486C04C7A278BFF0F69C2D4C893DEC8ABDF6350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:85:ed:b9:b2:4f:ec:1d:d3:b1:82:94:2c: 64:db:40:73:aa:00:08:0c:00:a2:27:c7:d5:80:1e: b2:7c:05:2b:c0:c5:a8:af:ef:d7:57:01:ae:e4:d5: ab:16:de:76:57:40:3e:70:fc:af:48:15:39:0e:49: f8:aa:6e:55:bd:3e:f8:9e:ae:55:5f:f1:a4:94:bb: ef:39:86:33:f9:04:62:5b:6f:c6:6a:df:69:13:9b: 5b:d5:db:99:37:d4:86:ff:89:e0:75:93:f1:f1:70: 32:fe:6e:47:e5:29:cc:6f:4f:97:52:98:18:a7:51: dc:91:de:ea:ac:d7:c4:86:c1:b0:80:0e:19:87:d6: ab:e1:5e:dc:21:d7:a1:38:ad:dd:73:a4:65:19:8d: 8b:67:b9:5e:11:16:70:71:e6:b7:07:ea:36:ab:ad: c7:2a:da:02:e1:9a:51:b8:2c:65:09:2e:f8:e9:85: 12:b5:d2:c4:5a:16:20:d6:27:50:ed:08:af:d9:ef: 6a:47:4e:93:ed:d7:e2:a1:32:78:05:2b:a8:b1:a7: 75:a7:48:9f:66:e6:b7:0b:68:ee:7d:6f:5e:3c:c2: ce:41:f9:2f:ec:40:b3:84:bb:28:ff:fd:4a:c7:5b: 29:27:6b:e0:34:d6:7b:cb:24:63:0a:3f:c2:ee:dc: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:86:C0:4C:7A:27:8B:FF:0F:69:C2:D4:C8:93:DE:C8:AB:DF:63:50 X509v3 Authority Key Identifier: keyid:C4:63:22:99:E0:16:D2:69:16:4F:A4:0A:EF:99:CC:86:02:E2:B7:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/C4632299E016D269164FA40AEF99CC8602E2B7C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4632299E016D269164FA40AEF99CC8602E2B7C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/3136302e32322e36342e302f32332d3234203d3e203435333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.64.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:61:1f:1a:c5:8d:93:81:8d:66:46:3d:9d:41:c3:fe:3e:53: e0:16:40:d2:c4:5f:be:49:81:79:2c:0a:ed:df:8a:c4:b8:3d: 93:3a:1a:ab:83:fb:c6:ea:d3:00:6a:9f:39:2b:9d:01:e5:89: cc:a8:9e:d2:63:2f:23:e4:96:a7:8f:8b:7d:d9:a3:0c:ae:d9: 21:55:a9:74:10:ef:cd:10:05:3c:5e:32:bf:75:87:fe:ac:18: 41:57:70:11:96:5c:99:ab:e8:d6:da:ba:ba:af:59:90:d2:52: f7:a6:1f:9c:c2:b7:23:b8:23:18:23:54:1b:fc:cd:91:60:f4: 46:b5:f3:30:ab:8a:96:ad:83:30:a4:75:f4:71:7f:0b:5d:ff: 3c:59:06:c9:68:00:b8:fe:c0:77:ce:6b:6c:cc:37:df:30:3a: dd:a8:00:7c:3e:bb:d2:14:c6:05:0d:29:88:38:62:84:7a:f3: 56:1c:6e:9a:60:1f:88:a1:35:9e:e1:6d:97:2f:05:9d:cc:1a: a8:05:a9:63:63:1e:63:76:12:ea:69:c8:96:d0:e5:7f:77:81: 86:bd:4b:40:ed:17:c4:2c:4b:61:3a:0f:42:d5:dc:78:cd:08: 97:d0:76:4e:91:48:fe:7e:9d:ae:03:95:3e:51:ba:cf:fd:bd: a5:08:86:8f -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIURJA42bYPxwqeu0hO/G0k8afIqKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYw MkUyQjdDMTAeFw0yNTA2MTcwNDU2MjhaFw0yNjA2MTYwNTAxMjhaMDMxMTAvBgNV BAMTKDY0ODZDMDRDN0EyNzhCRkYwRjY5QzJENEM4OTNERUM4QUJERjYzNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eIXtubJP7B3TsYKULGTbQHOq AAgMAKInx9WAHrJ8BSvAxaiv79dXAa7k1asW3nZXQD5w/K9IFTkOSfiqblW9Pvie rlVf8aSUu+85hjP5BGJbb8Zq32kTm1vV25k31Ib/ieB1k/HxcDL+bkflKcxvT5dS mBinUdyR3uqs18SGwbCADhmH1qvhXtwh16E4rd1zpGUZjYtnuV4RFnBx5rcH6jar rccq2gLhmlG4LGUJLvjphRK10sRaFiDWJ1DtCK/Z72pHTpPt1+KhMngFK6ixp3Wn SJ9m5rcLaO59b148ws5B+S/sQLOEuyj//UrHWykna+A01nvLJGMKP8Lu3M7VAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUZIbATHoni/8PacLUyJPeyKvfY1AwHwYDVR0j BBgwFoAUxGMimeAW0mkWT6QK75nMhgLit8EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTRhYmEwYS0xYzJjLTRmOGEtYTRiNC1lYTcyZDliMmE2MGEvMC9DNDYzMjI5OUUw MTZEMjY5MTY0RkE0MEFFRjk5Q0M4NjAyRTJCN0MxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ2MzIyOTlFMDE2RDI2OTE2NEZBNDBBRUY5OUNDODYwMkUy QjdDMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlNGFiYTBhLTFjMmMtNGY4YS1h NGI0LWVhNzJkOWIyYTYwYS8wLzMxMzYzMDJlMzIzMjJlMzYzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDM0MzUzMzMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgFkAwDQYJKoZIhvcN AQELBQADggEBACxhHxrFjZOBjWZGPZ1Bw/4+U+AWQNLEX75JgXksCu3fisS4PZM6 GquD+8bq0wBqnzkrnQHlicyontJjLyPklqePi33Zowyu2SFVqXQQ780QBTxeMr91 h/6sGEFXcBGWXJmr6NbaurqvWZDSUvemH5zCtyO4IxgjVBv8zZFg9Ea18zCripat gzCkdfRxfwtd/zxZBsloALj+wHfOa2zMN98wOt2oAHw+u9IUxgUNKYg4YoR681Yc bppgH4ihNZ7hbZcvBZ3MGqgFqWNjHmN2EuppyJbQ5X93gYa9S0DtF8QsS2E6D0LV 3HjNCJfQdk6RSP5+na4DlT5Rus/9vaUIho8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:40:02 2025 by rpki-client