$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa File: 3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa (raw, json) Hash identifier: pTegOhD4z3Faaf9uEY5aINqGFpg8v+KgvZMxN268mY4= Subject key identifier: ED:49:68:D3:AB:7A:8A:BC:7E:29:50:16:CA:2B:60:61:90:E0:CC:54 Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 38CCDE0546430F61A8F41C40D7465E74AD8B0EE7 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa Signing time: Wed 07 Jan 2026 07:00:36 +0000 ROA not before: Wed 07 Jan 2026 06:55:36 +0000 ROA not after: Wed 06 Jan 2027 07:00:36 +0000 asID: 152764 IP address blocks: 160.19.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cc:de:05:46:43:0f:61:a8:f4:1c:40:d7:46:5e:74:ad:8b:0e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Jan 7 06:55:36 2026 GMT Not After : Jan 6 07:00:36 2027 GMT Subject: CN=ED4968D3AB7A8ABC7E295016CA2B606190E0CC54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ca:1f:e5:d7:ed:bc:d5:05:dc:c7:5f:26:ac: 8d:57:6e:0b:0e:d3:07:79:22:35:69:19:e4:e1:4a: ba:e5:51:42:91:36:6a:8f:15:71:a4:73:5b:7d:b4: 85:34:34:d6:24:4b:14:2c:5d:cf:19:f0:e4:6a:be: b7:0d:22:ee:f4:dc:00:ee:3a:02:7a:26:07:8a:8d: 86:ff:29:67:2f:23:d4:85:de:14:37:22:2f:2e:1f: 4a:b1:37:eb:4f:82:a8:48:68:b5:f6:ba:c7:b7:0a: 0c:4b:ba:50:0d:84:58:32:e6:0c:70:c9:a3:10:17: ea:0c:9f:89:ad:f8:2a:41:6a:f2:32:75:54:10:5f: 1c:26:9d:ba:fe:fa:58:43:59:c9:c7:aa:2a:47:50: f7:dd:5a:d0:80:eb:c5:ff:0c:f6:72:78:38:10:a0: 4d:d6:99:74:22:9a:c2:8a:0b:59:46:2b:ca:aa:78: a8:c0:45:40:9c:54:3e:fd:53:b4:03:4c:e5:44:b1: 8c:86:60:02:5b:16:f7:11:29:04:bd:c7:d0:14:65: 89:e3:a2:74:07:3d:72:bc:fd:cb:2f:21:ab:39:6e: ab:aa:1f:0b:4c:a5:ea:d0:64:30:47:4e:f1:35:be: 4d:4a:80:3c:9e:a7:f8:f0:b6:c4:81:1f:e1:46:a7: 0d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:49:68:D3:AB:7A:8A:BC:7E:29:50:16:CA:2B:60:61:90:E0:CC:54 X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230362e302f32342d3234203d3e20313532373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.206.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:3f:bf:78:0d:3f:00:0c:c4:92:9a:db:ee:06:ad:15:bd:50: a6:9c:a8:0f:da:5e:95:1f:50:81:33:3f:00:2e:ac:a7:e9:2d: d9:6f:01:96:f9:92:7e:0a:8e:69:e1:16:80:94:f2:8e:c5:a8: ed:38:3c:bb:8c:c5:18:72:f5:62:30:22:2b:58:39:ca:1e:bc: 07:f6:45:8a:8c:70:61:c9:e5:3e:38:31:90:de:03:a7:2d:19: 57:cf:84:59:cb:4b:c2:51:f9:00:7b:72:97:e2:63:aa:64:c5: 70:98:6d:26:e7:fc:f3:a1:e4:c2:f0:71:a2:59:57:c5:13:39: 69:a8:b3:76:a7:e7:d7:0a:97:88:f6:85:fd:0e:56:9b:fc:2b: f1:a3:0c:f7:c9:fb:cf:83:e1:2a:22:54:58:23:20:c5:5b:a8: 88:52:e5:2a:29:cd:aa:21:8b:b7:a2:44:df:50:90:5b:36:63: ae:9a:e8:a4:fc:30:02:ee:86:1a:e5:fa:3a:a0:9d:85:97:ea: 02:00:b3:50:f8:17:62:48:fa:c3:a3:1a:b6:35:4d:ed:54:53: e4:2b:b9:2c:66:22:6b:ea:fd:71:39:f3:5f:d3:9c:f3:76:9c: 57:a7:f2:0f:4b:5d:53:aa:dc:14:8c:12:fa:ab:1c:b8:dc:c4: 28:50:ae:7f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOMzeBUZDD2Go9BxA10ZedK2LDucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNjAxMDcwNjU1MzZaFw0yNzAxMDYwNzAwMzZaMDMxMTAvBgNV BAMTKEVENDk2OEQzQUI3QThBQkM3RTI5NTAxNkNBMkI2MDYxOTBFMENDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyh/l1+281QXcx18mrI1XbgsO 0wd5IjVpGeThSrrlUUKRNmqPFXGkc1t9tIU0NNYkSxQsXc8Z8ORqvrcNIu703ADu OgJ6JgeKjYb/KWcvI9SF3hQ3Ii8uH0qxN+tPgqhIaLX2use3CgxLulANhFgy5gxw yaMQF+oMn4mt+CpBavIydVQQXxwmnbr++lhDWcnHqipHUPfdWtCA68X/DPZyeDgQ oE3WmXQimsKKC1lGK8qqeKjARUCcVD79U7QDTOVEsYyGYAJbFvcRKQS9x9AUZYnj onQHPXK8/csvIas5bquqHwtMperQZDBHTvE1vk1KgDyep/jwtsSBH+FGpw0dAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU7Ulo06t6irx+KVAWyitgYZDgzFQwHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiMmE5MTZhLWFkMjItNDk3OS1i ZTQzLTk1MWM3NmYyZjkyMC8wLzMxMzYzMDJlMzEzOTJlMzIzMDM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBPOMA0GCSqG SIb3DQEBCwUAA4IBAQAaP794DT8ADMSSmtvuBq0VvVCmnKgP2l6VH1CBMz8ALqyn 6S3ZbwGW+ZJ+Co5p4RaAlPKOxajtODy7jMUYcvViMCIrWDnKHrwH9kWKjHBhyeU+ ODGQ3gOnLRlXz4RZy0vCUfkAe3KX4mOqZMVwmG0m5/zzoeTC8HGiWVfFEzlpqLN2 p+fXCpeI9oX9Dlab/Cvxowz3yfvPg+EqIlRYIyDFW6iIUuUqKc2qIYu3okTfUJBb NmOumuik/DAC7oYa5fo6oJ2Fl+oCALNQ+BdiSPrDoxq2NU3tVFPkK7ksZiJr6v1x OfNf05zzdpxXp/IPS11TqtwUjBL6qxy43MQoUK5/ -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:23 2026 by rpki-client