$ rpki-client -vvf repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa File: 3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa (raw, json) Hash identifier: e8ZJYzkvKx8Yk6VtEAAoJxN88Qmgg4lnk8IMQAGn/JE= Subject key identifier: D5:BD:B6:82:99:68:FD:36:80:88:14:E3:83:4A:AC:2D:C6:5C:14:D7 Certificate issuer: /CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Certificate serial: 0A5A4C0C35EC4710C01408E680A3D832F3416984 Authority key identifier: 6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa Signing time: Wed 01 Oct 2025 13:00:01 +0000 ROA not before: Wed 01 Oct 2025 12:55:01 +0000 ROA not after: Wed 30 Sep 2026 13:00:01 +0000 asID: 153111 IP address blocks: 160.25.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5a:4c:0c:35:ec:47:10:c0:14:08:e6:80:a3:d8:32:f3:41:69:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A755F0ECD114936B4C154BE153030E6BFE42025 Validity Not Before: Oct 1 12:55:01 2025 GMT Not After : Sep 30 13:00:01 2026 GMT Subject: CN=D5BDB6829968FD36808814E3834AAC2DC65C14D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:50:fc:c9:89:7e:a0:86:26:49:8b:64:24: f0:b3:87:2f:80:d3:ef:f1:42:ec:46:fa:a0:ef:51: bf:c8:90:5c:a7:8b:75:ca:06:0f:ff:d6:7f:89:dc: 26:f1:23:15:87:b2:28:5b:b5:cc:25:96:12:ae:db: a3:ac:75:4d:86:e6:9c:77:82:bb:26:8f:44:6f:a3: c1:b7:a1:fd:37:3c:79:19:0f:1a:8e:32:9c:b8:3b: 36:ee:23:c9:c0:a9:52:53:4e:67:a2:ef:44:bd:1c: 19:f9:0b:5c:60:33:20:86:dc:74:24:b1:d1:8e:53: c3:13:1c:bb:f7:4c:02:4b:2b:24:56:6e:1e:3e:b1: 12:bc:d9:a0:b5:f7:c5:d3:ef:b8:92:b2:1b:28:34: 89:3d:2d:f7:c4:ba:05:69:26:80:e8:41:45:85:c3: 1c:67:c9:2f:7b:84:be:e0:6e:de:4e:46:d9:7c:7a: e5:53:44:f2:af:ae:a1:61:d3:73:07:c0:77:18:a0: 09:21:8d:07:9b:0d:6a:47:e4:de:30:1b:3b:f6:7d: 14:b4:28:6f:5c:bc:43:df:9d:94:91:e1:83:59:bc: 32:2b:79:02:ca:7f:65:bf:ec:55:19:4c:4d:3a:42: 55:ed:3d:04:b3:08:b5:c2:85:a7:18:ef:c4:0b:59: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BD:B6:82:99:68:FD:36:80:88:14:E3:83:4A:AC:2D:C6:5C:14:D7 X509v3 Authority Key Identifier: keyid:6A:75:5F:0E:CD:11:49:36:B4:C1:54:BE:15:30:30:E6:BF:E4:20:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/6A755F0ECD114936B4C154BE153030E6BFE42025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A755F0ECD114936B4C154BE153030E6BFE42025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8cc1c7e-da74-4b11-b67a-d5f27d981757/0/3136302e32352e3234352e302f32342d3234203d3e20313533313131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.245.0/24 Signature Algorithm: sha256WithRSAEncryption ac:7e:34:3e:a5:f2:2d:98:c8:10:38:02:b8:55:b8:4c:01:1a: 7f:b9:36:9a:c6:3c:66:ec:04:7d:f1:6e:bf:15:08:9f:a3:b9: ac:b5:22:d1:11:0b:26:b3:15:90:be:d0:4b:a0:6c:fa:47:0a: 5e:63:07:d1:9a:3d:a1:e3:ab:0b:aa:eb:fc:80:0f:d4:d3:d5: 7e:16:66:44:ca:cf:e1:01:33:1a:1f:3b:85:8f:77:63:82:77: dd:14:ca:c8:4b:84:46:f6:b4:49:f4:97:ff:d1:c0:1d:f1:a3: 34:a7:b6:7d:58:e3:3e:5d:85:c2:99:d7:37:98:3b:3d:39:54: a0:cf:55:60:83:6b:cb:0e:f4:13:fb:3d:04:82:89:ad:c8:49: b6:fb:96:e0:21:02:94:10:2a:1f:9f:ba:84:76:71:fe:a9:b9: 62:ab:57:0c:a5:5c:8f:9b:ed:54:f6:0b:f8:55:17:d6:ad:df: 41:81:1a:ed:37:3d:a2:47:0a:fe:91:6e:25:d3:0e:81:9f:ce: b3:7f:db:49:9e:b2:69:92:c9:44:eb:0c:a2:4b:7f:b6:a0:17: f4:7e:21:4b:13:88:c1:29:b7:74:47:db:d1:51:4d:b6:74:5d: 8c:a5:37:f8:47:60:bc:71:30:53:70:77:45:a2:19:13:d6:53: b9:99:97:db -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUClpMDDXsRxDAFAjmgKPYMvNBaYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZC RkU0MjAyNTAeFw0yNTEwMDExMjU1MDFaFw0yNjA5MzAxMzAwMDFaMDMxMTAvBgNV BAMTKEQ1QkRCNjgyOTk2OEZEMzY4MDg4MTRFMzgzNEFBQzJEQzY1QzE0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZlD8yYl+oIYmSYtkJPCzhy+A 0+/xQuxG+qDvUb/IkFyni3XKBg//1n+J3CbxIxWHsihbtcwllhKu26OsdU2G5px3 grsmj0Rvo8G3of03PHkZDxqOMpy4OzbuI8nAqVJTTmei70S9HBn5C1xgMyCG3HQk sdGOU8MTHLv3TAJLKyRWbh4+sRK82aC198XT77iSshsoNIk9LffEugVpJoDoQUWF wxxnyS97hL7gbt5ORtl8euVTRPKvrqFh03MHwHcYoAkhjQebDWpH5N4wGzv2fRS0 KG9cvEPfnZSR4YNZvDIreQLKf2W/7FUZTE06QlXtPQSzCLXChacY78QLWbCjAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1b22gplo/TaAiBTjg0qsLcZcFNcwHwYDVR0j BBgwFoAUanVfDs0RSTa0wVS+FTAw5r/kICUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGNjMWM3ZS1kYTc0LTRiMTEtYjY3YS1kNWYyN2Q5ODE3NTcvMC82QTc1NUYwRUNE MTE0OTM2QjRDMTU0QkUxNTMwMzBFNkJGRTQyMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkE3NTVGMEVDRDExNDkzNkI0QzE1NEJFMTUzMDMwRTZCRkU0 MjAyNS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4Y2MxYzdlLWRhNzQtNGIxMS1i NjdhLWQ1ZjI3ZDk4MTc1Ny8wLzMxMzYzMDJlMzIzNTJlMzIzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBn1MA0GCSqG SIb3DQEBCwUAA4IBAQCsfjQ+pfItmMgQOAK4VbhMARp/uTaaxjxm7AR98W6/FQif o7mstSLREQsmsxWQvtBLoGz6RwpeYwfRmj2h46sLquv8gA/U09V+FmZEys/hATMa HzuFj3djgnfdFMrIS4RG9rRJ9Jf/0cAd8aM0p7Z9WOM+XYXCmdc3mDs9OVSgz1Vg g2vLDvQT+z0EgomtyEm2+5bgIQKUECofn7qEdnH+qbliq1cMpVyPm+1U9gv4VRfW rd9BgRrtNz2iRwr+kW4l0w6Bn86zf9tJnrJpkslE6wyiS3+2oBf0fiFLE4jBKbd0 R9vRUU22dF2MpTf4R2C8cTBTcHdFohkT1lO5mZfb -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:44 2025 by rpki-client