$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa File: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (raw, json) Hash identifier: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg= Subject key identifier: 51:21:7B:C4:00:4E:6C:BD:57:DF:AC:3D:D4:68:26:D8:06:D8:37:BE Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 6B63C99E05EBDB80931A7F750C2D10560A131F3C Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa Signing time: Sun 20 Apr 2025 05:00:02 +0000 ROA not before: Sun 20 Apr 2025 04:55:02 +0000 ROA not after: Sun 19 Apr 2026 05:00:02 +0000 asID: 152754 IP address blocks: 160.19.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:63:c9:9e:05:eb:db:80:93:1a:7f:75:0c:2d:10:56:0a:13:1f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Apr 20 04:55:02 2025 GMT Not After : Apr 19 05:00:02 2026 GMT Subject: CN=51217BC4004E6CBD57DFAC3DD46826D806D837BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4e:f2:3b:3c:d0:b5:ed:80:47:d3:76:19:6a: cb:cf:60:72:5f:41:b4:ac:1a:ef:bc:56:60:5c:5f: 99:7c:35:d0:1a:4e:21:4c:f7:f5:bc:3a:2f:b2:fa: ce:f3:00:fb:9a:b1:46:25:7d:2d:8d:17:4d:bc:31: 25:58:4d:d5:ef:b2:06:41:d5:f2:9d:3a:ca:94:43: 78:49:4c:27:f5:4d:64:a2:e9:be:56:87:94:f1:c5: b8:f2:2d:b7:36:d3:37:d8:69:56:60:73:fe:38:a7: 89:b9:08:43:0e:fe:72:5d:44:03:55:1a:73:15:52: 94:c5:54:76:2f:0f:b1:8e:30:04:ab:d7:76:88:2e: 6a:fd:3a:db:35:51:56:71:01:29:38:4d:ab:b5:f0: 7b:ee:41:22:23:b8:c0:5a:5e:8c:9a:3f:7d:91:45: b1:d5:d3:8e:30:83:76:3b:27:7a:f3:28:7e:86:68: 79:06:7f:a1:93:3b:9c:cc:a3:b8:bb:ab:aa:1b:52: f7:03:24:67:e4:27:04:b2:42:38:ef:d1:6c:a9:d6: ca:61:54:9d:a9:8c:7a:4f:ae:e2:53:68:c1:cb:73: a5:2a:2e:8c:1a:70:4e:3a:ba:df:cd:3c:f0:b1:57: c8:ce:75:3b:e5:ef:7b:f6:cd:27:00:de:ae:96:08: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:21:7B:C4:00:4E:6C:BD:57:DF:AC:3D:D4:68:26:D8:06:D8:37:BE X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.85.0/24 Signature Algorithm: sha256WithRSAEncryption b0:69:b0:1c:9d:68:e6:00:fa:76:87:bd:54:f8:d2:0f:76:5a: 4d:df:fb:9a:29:11:89:e8:5e:69:cf:61:76:50:9d:60:42:26: d6:48:6a:e8:45:7e:12:51:b3:24:dc:cb:3c:ba:58:0d:2b:28: 68:2d:61:39:83:77:87:9a:ed:3c:3e:4d:89:a7:fb:ea:79:c9: b2:55:8d:f3:31:17:c1:a3:e6:46:32:f7:d0:ad:7b:9a:b1:52: ff:ec:6e:ee:b4:16:7a:40:18:70:41:c3:68:65:57:2d:22:a9: 68:54:9a:5e:84:2e:c4:7e:83:72:85:9f:6e:4b:9a:cc:e2:69: 1d:79:64:1b:4d:b3:04:bb:1b:b8:32:c3:ed:90:1b:59:fc:34: de:0e:19:6e:50:cc:61:3a:d8:ab:c6:60:36:e5:b4:f1:e6:b6: d1:b6:7c:52:58:a5:f5:31:6c:11:97:7b:76:bc:32:fc:d5:bd: af:67:6a:f5:22:d8:1d:0d:e4:c8:04:17:26:70:6f:f7:5c:d2: 7d:17:b6:54:43:3a:78:8a:3e:5f:75:3f:a5:89:c0:15:9b:93: 7a:62:41:ca:07:2e:74:25:65:bc:cc:22:8e:c8:de:cc:4d:bc: 64:c3:a9:c9:01:86:a8:f5:ce:f5:d3:8d:48:0c:e9:1f:b6:82: ff:23:89:9b -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUa2PJngXr24CTGn91DC0QVgoTHzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNTA0MjAwNDU1MDJaFw0yNjA0MTkwNTAwMDJaMDMxMTAvBgNV BAMTKDUxMjE3QkM0MDA0RTZDQkQ1N0RGQUMzREQ0NjgyNkQ4MDZEODM3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDITvI7PNC17YBH03YZasvPYHJf QbSsGu+8VmBcX5l8NdAaTiFM9/W8Oi+y+s7zAPuasUYlfS2NF028MSVYTdXvsgZB 1fKdOsqUQ3hJTCf1TWSi6b5Wh5TxxbjyLbc20zfYaVZgc/44p4m5CEMO/nJdRANV GnMVUpTFVHYvD7GOMASr13aILmr9Ots1UVZxASk4Tau18HvuQSIjuMBaXoyaP32R RbHV044wg3Y7J3rzKH6GaHkGf6GTO5zMo7i7q6obUvcDJGfkJwSyQjjv0Wyp1sph VJ2pjHpPruJTaMHLc6UqLowacE46ut/NPPCxV8jOdTvl73v2zScA3q6WCC3tAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUSF7xABObL1X36w91Ggm2AbYN74wHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JhMDk4ZjAwLWEwYTAtNGI1Yy05 ZTgzLTYwNjczNzEyOGNiMS8wLzMxMzYzMDJlMzEzOTJlMzgzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATVTANBgkqhkiG 9w0BAQsFAAOCAQEAsGmwHJ1o5gD6doe9VPjSD3ZaTd/7mikRieheac9hdlCdYEIm 1khq6EV+ElGzJNzLPLpYDSsoaC1hOYN3h5rtPD5Niaf76nnJslWN8zEXwaPmRjL3 0K17mrFS/+xu7rQWekAYcEHDaGVXLSKpaFSaXoQuxH6DcoWfbkuazOJpHXlkG02z BLsbuDLD7ZAbWfw03g4ZblDMYTrYq8ZgNuW08ea20bZ8Ulil9TFsEZd7drwy/NW9 r2dq9SLYHQ3kyAQXJnBv91zSfRe2VEM6eIo+X3U/pYnAFZuTemJBygcudCVlvMwi jsjezE28ZMOpyQGGqPXO9dONSAzpH7aC/yOJmw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:51:53 2025 by rpki-client