$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa File: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (raw, json) Hash identifier: X+5UT/GSOBpO30J7mwUdK8TlS1P10P4zZ4ljBd5RqEY= Subject key identifier: 98:13:5B:F6:F5:22:F7:6E:A5:A4:10:95:12:0B:EA:17:8D:F5:B4:09 Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Certificate serial: 63BAC940C93BC1D5F542D8F4C6D3639E1AD4FB25 Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa Signing time: Thu 12 Dec 2024 04:06:10 +0000 ROA not before: Thu 12 Dec 2024 04:01:10 +0000 ROA not after: Thu 11 Dec 2025 04:06:10 +0000 asID: 153157 IP address blocks: 160.191.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ba:c9:40:c9:3b:c1:d5:f5:42:d8:f4:c6:d3:63:9e:1a:d4:fb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414 Validity Not Before: Dec 12 04:01:10 2024 GMT Not After : Dec 11 04:06:10 2025 GMT Subject: CN=98135BF6F522F76EA5A41095120BEA178DF5B409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:28:85:fa:51:3a:e7:3b:b0:13:29:f9:b9: 23:61:5a:32:1d:7a:06:5b:9f:bd:e2:8d:15:d0:f8: 17:90:87:fd:4b:20:28:21:88:2d:b3:2a:b8:c2:b7: 85:9b:97:0b:53:77:c6:7b:fc:b5:6b:b5:80:e7:ec: 76:fc:72:40:72:72:cb:4b:7e:1a:1f:31:0b:0f:4a: 95:b0:08:02:eb:e7:cd:09:38:81:af:6a:8e:7b:77: 37:07:97:8f:39:b6:a3:90:5f:42:32:e7:57:a4:57: 3b:e6:ad:55:2b:d9:dd:94:8f:e2:36:ec:ad:ba:96: 48:13:40:48:07:f3:7f:f7:c3:f3:5b:88:d5:f6:af: ec:d3:b4:9c:c3:30:6c:dd:2d:11:92:7e:34:52:1d: fd:60:6c:1f:1e:54:48:41:c2:53:53:e4:e4:1e:66: e9:a0:00:58:70:49:8e:59:be:a9:6a:7c:46:14:92: eb:0f:5e:f0:77:b7:cb:6c:d6:cb:dd:f9:50:9e:03: a4:54:6a:2f:36:c5:8f:41:67:4d:02:8e:8b:89:be: 46:82:40:8e:63:6d:d0:73:e2:f9:6f:fb:fd:b3:1c: 1f:fa:17:6e:64:94:54:ac:6f:e4:a1:12:39:32:54: b4:50:06:b3:13:8a:da:31:9b:c5:18:6b:45:7f:f8: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:13:5B:F6:F5:22:F7:6E:A5:A4:10:95:12:0B:EA:17:8D:F5:B4:09 X509v3 Authority Key Identifier: keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.198.0/23 Signature Algorithm: sha256WithRSAEncryption b8:fa:16:b1:38:26:62:f0:af:6b:7b:96:1c:e1:d9:fa:6a:07: 47:13:df:98:15:ad:24:20:fd:73:b0:63:b1:11:60:85:dc:5e: 83:ec:a4:7a:24:6c:07:bb:12:89:b6:5c:23:db:bb:87:f6:95: 61:f8:b6:66:26:b5:a2:1a:58:58:c3:da:be:13:d7:ce:ed:9c: c5:9e:10:8c:e7:d8:a7:e7:7e:d6:c8:5e:1e:05:be:0b:4c:04: 8b:4f:40:0f:e8:3c:3a:4a:69:b4:46:48:72:39:cd:50:d5:48: 5b:0c:81:83:ec:ce:fa:bf:85:1a:2f:13:eb:5a:66:9b:a7:af: 20:93:d4:c3:45:5c:b0:69:67:3f:6f:c5:cb:32:b8:bb:76:b2: 92:11:eb:9d:12:b9:c5:da:fd:8d:7b:0f:7b:21:ce:1b:e9:a6: f3:4c:e7:9c:9b:a0:7f:05:ee:46:f7:f8:d5:6f:a3:08:5a:b7: 35:89:b9:b8:88:e1:2b:42:48:2d:1f:47:29:8c:85:16:41:04: 41:14:89:77:fa:2c:df:99:4b:7b:cb:25:50:2c:32:1f:d1:38: be:99:d9:24:33:b7:ec:3e:6f:e1:cf:6e:b9:e9:7b:d1:75:40: 0c:34:e3:83:46:ec:99:91:48:3a:c9:89:1c:44:4b:8b:e8:2f: c3:30:ba:41 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUY7rJQMk7wdX1Qtj0xtNjnhrU+yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0 REY0MTQxNDAeFw0yNDEyMTIwNDAxMTBaFw0yNTEyMTEwNDA2MTBaMDMxMTAvBgNV BAMTKDk4MTM1QkY2RjUyMkY3NkVBNUE0MTA5NTEyMEJFQTE3OERGNUI0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABCiF+lE65zuwEyn5uSNhWjId egZbn73ijRXQ+BeQh/1LICghiC2zKrjCt4WblwtTd8Z7/LVrtYDn7Hb8ckBycstL fhofMQsPSpWwCALr580JOIGvao57dzcHl485tqOQX0Iy51ekVzvmrVUr2d2Uj+I2 7K26lkgTQEgH83/3w/NbiNX2r+zTtJzDMGzdLRGSfjRSHf1gbB8eVEhBwlNT5OQe ZumgAFhwSY5ZvqlqfEYUkusPXvB3t8ts1svd+VCeA6RUai82xY9BZ00CjouJvkaC QI5jbdBz4vlv+/2zHB/6F25klFSsb+ShEjkyVLRQBrMTitoxm8UYa0V/+GhNAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUmBNb9vUi926lpBCVEgvqF431tAkwHwYDVR0j BBgwFoAUeLf6oogav7wRfA+D7NydVU30FBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjlmOGFhOC04OTcxLTRlNTEtOGI1MS04MDNiNDliMzJhNGYvMC83OEI3RkFBMjg4 MUFCRkJDMTE3QzBGODNFQ0RDOUQ1NTRERjQxNDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzhCN0ZBQTI4ODFBQkZCQzExN0MwRjgzRUNEQzlENTU0REY0 MTQxNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2OWY4YWE4LTg5NzEtNGU1MS04 YjUxLTgwM2I0OWIzMmE0Zi8wLzMxMzYzMDJlMzEzOTMxMmUzMTM5MzgyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzMTM1MzMzMTM1Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgv8YwDQYJ KoZIhvcNAQELBQADggEBALj6FrE4JmLwr2t7lhzh2fpqB0cT35gVrSQg/XOwY7ER YIXcXoPspHokbAe7Eom2XCPbu4f2lWH4tmYmtaIaWFjD2r4T187tnMWeEIzn2Kfn ftbIXh4FvgtMBItPQA/oPDpKabRGSHI5zVDVSFsMgYPszvq/hRovE+taZpunryCT 1MNFXLBpZz9vxcsyuLt2spIR650SucXa/Y17D3shzhvppvNM55yboH8F7kb3+NVv owhatzWJubiI4StCSC0fRymMhRZBBEEUiXf6LN+ZS3vLJVAsMh/ROL6Z2SQzt+w+ b+HPbrnpe9F1QAw044NG7JmRSDrJiRxES4voL8MwukE= -----END CERTIFICATE-----Generated at Wed Nov 5 06:49:25 2025 by rpki-client