$ rpki-client -vvf repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa File: 3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa (raw, json) Hash identifier: CBPCTuW4uKPxxEE9QGSNjj0GucS15m9G4eSEL4aq2A0= Subject key identifier: 6E:55:DB:0A:DE:3B:C2:46:5E:F1:64:3B:5F:F1:75:A5:0E:A9:35:4E Certificate issuer: /CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Certificate serial: 6AA58D6EA181BBCA82C51AD51454FA1A626F3E7E Authority key identifier: 97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa Signing time: Wed 30 Jul 2025 18:00:00 +0000 ROA not before: Wed 30 Jul 2025 17:55:00 +0000 ROA not after: Wed 29 Jul 2026 18:00:00 +0000 asID: 152822 IP address blocks: 160.22.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a5:8d:6e:a1:81:bb:ca:82:c5:1a:d5:14:54:fa:1a:62:6f:3e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9789A84AF43285D8FD7ED7A3B9667B682B770585 Validity Not Before: Jul 30 17:55:00 2025 GMT Not After : Jul 29 18:00:00 2026 GMT Subject: CN=6E55DB0ADE3BC2465EF1643B5FF175A50EA9354E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:70:c7:0c:50:05:3b:8c:e2:fe:63:86:ba: a7:0c:de:b7:cb:9c:ec:16:0e:8b:ef:82:eb:fa:e8: 48:d1:9c:ca:ec:df:a4:d6:c7:c9:37:f3:b7:5a:77: d8:70:01:c9:10:ed:f1:29:5f:a3:c4:c5:68:de:07: 22:2d:0f:4e:1c:db:37:7a:06:67:90:09:be:da:f7: 98:73:ee:64:52:a0:e1:b7:52:a3:4b:86:fd:96:14: 32:d9:4d:4a:15:73:e5:1e:18:f2:b1:2b:e8:7a:e5: a8:92:7e:e5:a3:e8:15:5f:19:97:7a:58:54:95:16: 32:56:73:93:36:09:91:ac:22:ff:1f:65:96:1a:cc: c9:b0:34:51:3e:64:c1:8e:de:1c:80:1f:74:90:b5: de:30:32:69:2f:5c:c6:25:af:30:ee:f9:04:b6:a4: d2:e1:c5:92:c9:cc:77:ba:b0:d8:09:7c:3f:de:b5: 5a:ee:14:c9:53:41:87:d8:8b:81:1e:ee:2f:44:c0: 7f:21:b8:bf:a9:bf:e0:04:d0:de:fc:4a:de:aa:25: 3c:f6:f6:0d:83:fa:3a:cd:0f:b1:f1:97:6b:78:c8: a5:65:b3:52:fd:4f:54:70:32:6d:c6:ca:20:fe:1a: 61:69:42:b9:64:28:0f:d5:a0:83:ee:8b:94:fa:2d: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:55:DB:0A:DE:3B:C2:46:5E:F1:64:3B:5F:F1:75:A5:0E:A9:35:4E X509v3 Authority Key Identifier: keyid:97:89:A8:4A:F4:32:85:D8:FD:7E:D7:A3:B9:66:7B:68:2B:77:05:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/9789A84AF43285D8FD7ED7A3B9667B682B770585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9789A84AF43285D8FD7ED7A3B9667B682B770585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139372e302f32342d3234203d3e20313532383232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.197.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:13:59:22:c5:58:8e:57:04:6c:83:02:56:80:4e:6a:0c:34: 5e:12:12:6a:0c:cf:39:00:75:48:36:a2:53:15:76:f5:f6:aa: 6f:09:53:e3:13:4a:c3:8f:3e:4b:5a:4c:38:b8:93:ef:e5:95: be:5d:ca:3f:43:4e:3e:39:1d:3e:56:b3:10:f7:7d:f0:02:27: 9a:b4:c2:f8:db:3a:ec:b7:cf:e3:2a:83:80:11:ea:7e:78:d8: 97:42:04:44:46:23:a1:ae:d3:8d:78:7d:a6:5d:39:2c:5f:fe: 85:50:57:ff:fa:78:2c:cb:58:09:a1:2f:db:ea:1b:90:af:ad: 2d:ed:0e:83:69:ac:14:e5:06:30:55:5c:d9:ab:c5:4d:a6:b5: 3b:95:2f:e6:e0:df:88:b5:e4:54:5d:c8:46:24:32:77:2d:35: 6f:92:67:2e:5c:81:e5:37:a7:27:e0:aa:32:65:d5:2c:97:72: 48:5a:d6:d0:d8:2d:36:3e:2c:38:90:66:59:7e:c3:04:39:55: 2b:74:91:f5:45:ef:19:07:b1:0d:a9:7a:88:a2:ce:1c:1e:f9: a9:ff:e2:7a:67:89:4a:d8:88:9e:a2:1b:17:1c:8a:f6:73:c3: 7b:2a:73:cc:14:1b:c7:18:da:bd:08:00:2c:60:35:74:5e:74: 3d:e3:c1:5d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUaqWNbqGBu8qCxRrVFFT6GmJvPn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgy Qjc3MDU4NTAeFw0yNTA3MzAxNzU1MDBaFw0yNjA3MjkxODAwMDBaMDMxMTAvBgNV BAMTKDZFNTVEQjBBREUzQkMyNDY1RUYxNjQzQjVGRjE3NUE1MEVBOTM1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPXDHDFAFO4zi/mOGuqcM3rfL nOwWDovvguv66EjRnMrs36TWx8k387dad9hwAckQ7fEpX6PExWjeByItD04c2zd6 BmeQCb7a95hz7mRSoOG3UqNLhv2WFDLZTUoVc+UeGPKxK+h65aiSfuWj6BVfGZd6 WFSVFjJWc5M2CZGsIv8fZZYazMmwNFE+ZMGO3hyAH3SQtd4wMmkvXMYlrzDu+QS2 pNLhxZLJzHe6sNgJfD/etVruFMlTQYfYi4Ee7i9EwH8huL+pv+AE0N78St6qJTz2 9g2D+jrND7Hxl2t4yKVls1L9T1RwMm3GyiD+GmFpQrlkKA/VoIPui5T6LT9pAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUblXbCt47wkZe8WQ7X/F1pQ6pNU4wHwYDVR0j BBgwFoAUl4moSvQyhdj9ftejuWZ7aCt3BYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjFhMGRmNi0xZDNhLTRiY2MtYjNkMS02NDY5NWY4N2UzN2YvMC85Nzg5QTg0QUY0 MzI4NUQ4RkQ3RUQ3QTNCOTY2N0I2ODJCNzcwNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTc4OUE4NEFGNDMyODVEOEZEN0VEN0EzQjk2NjdCNjgyQjc3 MDU4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMWEwZGY2LTFkM2EtNGJjYy1i M2QxLTY0Njk1Zjg3ZTM3Zi8wLzMxMzYzMDJlMzIzMjJlMzEzOTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbFMA0GCSqG SIb3DQEBCwUAA4IBAQCLE1kixViOVwRsgwJWgE5qDDReEhJqDM85AHVINqJTFXb1 9qpvCVPjE0rDjz5LWkw4uJPv5ZW+Xco/Q04+OR0+VrMQ933wAieatML42zrst8/j KoOAEep+eNiXQgRERiOhrtONeH2mXTksX/6FUFf/+ngsy1gJoS/b6huQr60t7Q6D aawU5QYwVVzZq8VNprU7lS/m4N+IteRUXchGJDJ3LTVvkmcuXIHlN6cn4KoyZdUs l3JIWtbQ2C02Piw4kGZZfsMEOVUrdJH1Re8ZB7ENqXqIos4cHvmp/+J6Z4lK2Iie ohsXHIr2c8N7KnPMFBvHGNq9CAAsYDV0XnQ948Fd -----END CERTIFICATE-----Generated at Fri Aug 8 00:16:37 2025 by rpki-client