$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa File: 3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa (raw, json) Hash identifier: S2w92LJoQia5t/tsWZGfIg0MD/8f0hveKgJc7kTc/Lk= Subject key identifier: 63:F4:4B:17:03:8F:49:03:FC:19:F0:4D:AC:08:A9:3E:B6:CF:78:B1 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 648B175ECDA7902CB7371753D116E9C0C91EB75B Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa Signing time: Thu 12 Jun 2025 08:38:29 +0000 ROA not before: Thu 12 Jun 2025 08:33:29 +0000 ROA not after: Thu 11 Jun 2026 08:38:29 +0000 asID: 153131 IP address blocks: 160.191.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8b:17:5e:cd:a7:90:2c:b7:37:17:53:d1:16:e9:c0:c9:1e:b7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: Jun 12 08:33:29 2025 GMT Not After : Jun 11 08:38:29 2026 GMT Subject: CN=63F44B17038F4903FC19F04DAC08A93EB6CF78B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:5d:82:44:d9:ac:cd:cd:95:85:30:69:2d: 2a:68:54:b2:cc:ec:43:c2:37:9f:d6:3d:2e:f8:5e: 59:14:87:f6:e2:8b:45:7c:4b:a1:61:98:89:ee:b6: 39:60:85:fd:15:be:d1:89:2f:ed:28:56:f2:66:e8: 7b:66:d1:22:29:b6:99:30:fb:44:d3:93:7f:11:7d: 04:bb:e2:bd:1d:7e:79:d6:df:56:3a:29:aa:94:55: b7:f4:d8:55:6a:ae:ce:59:0b:cd:3d:5c:e6:f4:dd: 92:87:f5:0b:42:a9:9d:51:09:08:10:c4:0b:99:de: 21:2a:c7:79:60:59:3b:61:06:fc:c1:83:4d:91:3f: 59:b9:d4:38:c3:e4:88:d4:53:f2:cc:d2:12:55:06: 74:d3:12:3f:d8:1c:37:cc:aa:8e:02:9e:8f:b3:fc: af:1b:cd:72:d9:4c:07:6a:09:0e:42:ac:a8:dd:d7: 6e:ea:7a:7f:f3:04:13:3c:d7:25:ab:21:d3:1e:5b: 22:85:ff:8b:a2:cd:9b:d1:85:2e:d8:03:13:dd:51: c3:21:bd:35:1f:9c:18:47:f1:84:a6:72:1e:30:43: 76:29:3f:2d:bb:9f:18:bb:c0:f0:35:61:68:42:fd: a5:5a:61:47:b4:0c:9d:a7:de:11:ac:95:91:16:e8: ac:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F4:4B:17:03:8F:49:03:FC:19:F0:4D:AC:08:A9:3E:B6:CF:78:B1 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/3136302e3139312e31322e302f32342d3234203d3e20313533313331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.12.0/24 Signature Algorithm: sha256WithRSAEncryption 49:36:bb:21:b9:30:23:bf:7c:75:4f:a8:73:f3:dc:f7:d8:ac: 35:44:11:e9:c7:64:7a:2d:5b:e2:93:75:04:37:70:11:b5:60: cd:84:35:6a:9b:6c:cd:eb:39:97:52:68:fd:9b:a9:49:d4:19: 06:f9:98:71:ad:5d:c8:40:66:90:76:5f:41:56:18:e5:14:d8: 43:59:06:66:13:4e:9e:21:32:f7:d1:88:eb:b5:5d:a9:3c:25: a5:d8:fe:ca:ba:9c:8f:dd:0f:36:81:ad:52:b9:d1:86:71:b4: dd:85:b2:f9:4f:e7:af:5e:68:d8:1e:4f:7d:67:26:5e:45:ef: d4:cf:73:c4:fa:10:98:43:1f:0b:86:89:72:ed:83:9b:27:c4: 6e:c8:cd:50:cf:40:b6:6b:86:70:c9:95:75:75:46:11:60:84: b4:73:b3:57:08:18:e6:4d:ca:30:3f:27:d6:53:db:c2:2d:f5: ad:3c:f4:a7:98:1a:1f:cf:42:ea:75:0a:b2:64:48:dd:08:ca: d3:6c:d7:b7:12:dd:a6:b1:7b:f5:53:72:ee:63:f5:28:b8:b1: 70:5f:a0:eb:f2:00:73:ca:0d:60:da:69:8d:d9:7f:f2:c0:c0: 6f:12:da:d3:39:4b:83:40:b3:76:a3:56:0c:2e:33:e9:e5:9a: c2:77:90:1a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZIsXXs2nkCy3NxdT0RbpwMket1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTA2MTIwODMzMjlaFw0yNjA2MTEwODM4MjlaMDMxMTAvBgNV BAMTKDYzRjQ0QjE3MDM4RjQ5MDNGQzE5RjA0REFDMDhBOTNFQjZDRjc4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Vl2CRNmszc2VhTBpLSpoVLLM 7EPCN5/WPS74XlkUh/bii0V8S6FhmInutjlghf0VvtGJL+0oVvJm6Htm0SIptpkw +0TTk38RfQS74r0dfnnW31Y6KaqUVbf02FVqrs5ZC809XOb03ZKH9QtCqZ1RCQgQ xAuZ3iEqx3lgWTthBvzBg02RP1m51DjD5IjUU/LM0hJVBnTTEj/YHDfMqo4Cno+z /K8bzXLZTAdqCQ5CrKjd127qen/zBBM81yWrIdMeWyKF/4uizZvRhS7YAxPdUcMh vTUfnBhH8YSmch4wQ3YpPy27nxi7wPA1YWhC/aVaYUe0DJ2n3hGslZEW6KyVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUY/RLFwOPSQP8GfBNrAipPrbPeLEwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyMTFmMzQ3LWExZTctNDcxZC1h ZDIwLWRhNzZhYWJmMzg0Yy8wLzMxMzYzMDJlMzEzOTMxMmUzMTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoL8MMA0GCSqG SIb3DQEBCwUAA4IBAQBJNrshuTAjv3x1T6hz89z32Kw1RBHpx2R6LVvik3UEN3AR tWDNhDVqm2zN6zmXUmj9m6lJ1BkG+ZhxrV3IQGaQdl9BVhjlFNhDWQZmE06eITL3 0YjrtV2pPCWl2P7KupyP3Q82ga1SudGGcbTdhbL5T+evXmjYHk99ZyZeRe/Uz3PE +hCYQx8Lholy7YObJ8RuyM1Qz0C2a4ZwyZV1dUYRYIS0c7NXCBjmTcowPyfWU9vC LfWtPPSnmBofz0LqdQqyZEjdCMrTbNe3Et2msXv1U3LuY/UouLFwX6Dr8gBzyg1g 2mmN2X/ywMBvEtrTOUuDQLN2o1YMLjPp5ZrCd5Aa -----END CERTIFICATE-----Generated at Wed Nov 5 13:21:04 2025 by rpki-client