$ rpki-client -vvf repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa File: 3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa (raw, json) Hash identifier: nPtUGKaHPiIgcmd7zVYYYWB0FNbLMK1i/rlw7h+2X4I= Subject key identifier: 88:29:EF:4D:B4:B3:1F:6B:9F:83:B4:FF:93:CD:E2:FE:15:DA:43:8E Certificate issuer: /CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Certificate serial: 5C07ED7988B17BB7B1326D1ECDEAF716E8F0AA86 Authority key identifier: 6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa Signing time: Wed 05 Feb 2025 06:42:40 +0000 ROA not before: Wed 05 Feb 2025 06:37:40 +0000 ROA not after: Wed 04 Feb 2026 06:42:40 +0000 asID: 152764 IP address blocks: 160.19.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:07:ed:79:88:b1:7b:b7:b1:32:6d:1e:cd:ea:f7:16:e8:f0:aa:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2CC9D3C73148E265E99661929C1AE9E3D18D31 Validity Not Before: Feb 5 06:37:40 2025 GMT Not After : Feb 4 06:42:40 2026 GMT Subject: CN=8829EF4DB4B31F6B9F83B4FF93CDE2FE15DA438E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:2a:f5:a3:3b:bb:7c:90:a1:33:ea:1c:4a: bc:c7:5a:49:33:10:c7:c9:4b:e3:be:94:9f:42:cd: 8b:c9:a6:6d:71:49:39:81:80:31:42:4d:82:47:d9: d9:54:dd:6f:e4:72:4b:3d:f4:f7:07:1b:e9:07:03: 27:2c:cf:98:81:12:82:9f:47:03:d9:d1:4f:aa:6e: 11:1a:36:68:fa:ae:e1:de:c7:82:5e:73:67:3b:e9: d9:b5:9b:fd:b6:28:f6:e1:c0:05:b5:11:32:9f:8c: 6d:d5:4d:32:3b:aa:bb:13:93:af:12:48:91:b0:f2: 97:00:9f:84:0b:fd:1e:05:90:dd:6f:0d:0b:6f:68: b3:48:8c:d5:06:ca:15:20:f2:e6:cc:7b:96:48:2a: 19:ad:82:69:71:8f:cb:21:67:56:c0:6a:4e:a5:22: f9:22:bf:da:bf:fb:50:e0:ca:05:9d:a3:18:dc:eb: a9:09:e4:42:f0:64:1f:ef:4f:09:a5:87:9b:ce:67: ee:86:df:e7:86:6a:ae:56:65:34:75:da:6a:72:29: 01:87:7a:45:d9:d6:bf:a7:83:82:d3:dd:05:fe:f7: 5d:38:43:0f:25:cf:0a:df:76:21:37:ed:16:cf:87: ef:ee:ec:3a:10:6c:80:e1:41:88:f4:1e:99:b3:5b: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:29:EF:4D:B4:B3:1F:6B:9F:83:B4:FF:93:CD:E2:FE:15:DA:43:8E X509v3 Authority Key Identifier: keyid:6A:2C:C9:D3:C7:31:48:E2:65:E9:96:61:92:9C:1A:E9:E3:D1:8D:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6A2CC9D3C73148E265E99661929C1AE9E3D18D31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb2a916a-ad22-4979-be43-951c76f2f920/0/3136302e31392e3230372e302f32342d3234203d3e20313532373634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.207.0/24 Signature Algorithm: sha256WithRSAEncryption 24:a3:4a:57:2a:6e:49:68:8a:1d:2a:69:df:f2:bb:8f:2f:cd: 65:65:1e:6d:f5:20:7a:88:4e:7c:af:5d:a0:22:f8:84:50:4d: c9:e1:3c:ed:12:ef:ba:9c:f1:34:91:10:7c:a3:49:4b:5c:1f: ed:91:2e:8d:d5:b6:e4:7f:a7:15:76:a0:cc:db:1a:90:3b:ff: 66:97:43:60:15:d7:27:dc:9e:9c:15:68:85:99:08:07:81:82: 51:9a:62:65:53:c8:b4:b5:fd:2c:19:e1:89:f4:1e:cc:3e:e1: 83:d1:76:eb:85:83:e5:f3:fe:28:dc:68:05:26:b7:20:d5:8c: c5:ad:5b:d2:3c:e2:56:d3:76:29:be:2c:4c:65:6d:a9:69:50: fd:4d:1b:a4:55:2d:bc:01:23:a9:81:eb:96:f5:0f:e0:48:61: b5:4f:7d:6e:bc:8e:10:a9:37:9b:85:0c:49:a6:bb:6d:8f:78: 4c:13:a8:8d:34:30:77:c4:24:2e:b8:32:3a:8a:60:44:c7:24: 3d:99:bb:c4:1a:1d:df:bb:aa:f8:d4:88:ed:d3:a5:82:21:ed: ac:68:95:f7:ca:5e:9c:c9:1b:03:40:a3:1e:e3:47:9c:ce:47: dc:13:b6:02:0c:96:c1:13:3e:15:6f:dc:85:df:d7:d3:ce:20: 91:7f:79:c4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXAfteYixe7exMm0ezer3FujwqoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlF M0QxOEQzMTAeFw0yNTAyMDUwNjM3NDBaFw0yNjAyMDQwNjQyNDBaMDMxMTAvBgNV BAMTKDg4MjlFRjREQjRCMzFGNkI5RjgzQjRGRjkzQ0RFMkZFMTVEQTQzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUSr1ozu7fJChM+ocSrzHWkkz EMfJS+O+lJ9CzYvJpm1xSTmBgDFCTYJH2dlU3W/kcks99PcHG+kHAycsz5iBEoKf RwPZ0U+qbhEaNmj6ruHex4Jec2c76dm1m/22KPbhwAW1ETKfjG3VTTI7qrsTk68S SJGw8pcAn4QL/R4FkN1vDQtvaLNIjNUGyhUg8ubMe5ZIKhmtgmlxj8shZ1bAak6l Ivkiv9q/+1DgygWdoxjc66kJ5ELwZB/vTwmlh5vOZ+6G3+eGaq5WZTR12mpyKQGH ekXZ1r+ng4LT3QX+9104Qw8lzwrfdiE37RbPh+/u7DoQbIDhQYj0HpmzW/mpAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiCnvTbSzH2ufg7T/k83i/hXaQ44wHwYDVR0j BBgwFoAUaizJ08cxSOJl6ZZhkpwa6ePRjTEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjJhOTE2YS1hZDIyLTQ5NzktYmU0My05NTFjNzZmMmY5MjAvMC82QTJDQzlEM0M3 MzE0OEUyNjVFOTk2NjE5MjlDMUFFOUUzRDE4RDMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNkEyQ0M5RDNDNzMxNDhFMjY1RTk5NjYxOTI5QzFBRTlFM0Qx OEQzMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiMmE5MTZhLWFkMjItNDk3OS1i ZTQzLTk1MWM3NmYyZjkyMC8wLzMxMzYzMDJlMzEzOTJlMzIzMDM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBPPMA0GCSqG SIb3DQEBCwUAA4IBAQAko0pXKm5JaIodKmnf8ruPL81lZR5t9SB6iE58r12gIviE UE3J4TztEu+6nPE0kRB8o0lLXB/tkS6N1bbkf6cVdqDM2xqQO/9ml0NgFdcn3J6c FWiFmQgHgYJRmmJlU8i0tf0sGeGJ9B7MPuGD0XbrhYPl8/4o3GgFJrcg1YzFrVvS POJW03YpvixMZW2paVD9TRukVS28ASOpgeuW9Q/gSGG1T31uvI4QqTebhQxJprtt j3hME6iNNDB3xCQuuDI6imBExyQ9mbvEGh3fu6r41Ijt06WCIe2saJX3yl6cyRsD QKMe40eczkfcE7YCDJbBEz4Vb9yF39fTziCRf3nE -----END CERTIFICATE-----Generated at Wed Nov 5 09:04:14 2025 by rpki-client