$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa File: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (raw, json) Hash identifier: UlKfFD3Jx7idatTOHjtFDcw+Wj0A2uPP8QvwywC4jKg= Subject key identifier: A9:1B:D5:A3:BC:FA:78:9C:CF:B3:1A:5B:A2:C3:38:22:DB:79:98:93 Certificate issuer: /CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Certificate serial: 1552D3DED6008263FB392AE9097191FAEC583F9D Authority key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa Signing time: Fri 15 Aug 2025 09:02:57 +0000 ROA not before: Fri 15 Aug 2025 08:57:57 +0000 ROA not after: Fri 14 Aug 2026 09:02:57 +0000 asID: 153112 IP address blocks: 160.30.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:52:d3:de:d6:00:82:63:fb:39:2a:e9:09:71:91:fa:ec:58:3f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Validity Not Before: Aug 15 08:57:57 2025 GMT Not After : Aug 14 09:02:57 2026 GMT Subject: CN=A91BD5A3BCFA789CCFB31A5BA2C33822DB799893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:07:c0:01:ba:8d:12:55:5c:b4:42:4e:d0: 88:3b:02:27:9b:b6:5b:29:84:55:49:f0:cc:91:44: da:cb:11:8c:92:cb:f2:c2:bf:b9:74:b2:b2:9a:a3: 47:5b:9b:b9:e7:c0:ac:f3:a9:24:e4:5d:1d:3c:05: 52:78:1d:33:16:e0:73:ec:95:9c:9a:c4:34:13:79: 02:5a:43:ce:8f:7a:12:d6:3d:20:ed:95:2b:ad:8c: 45:38:81:da:68:1a:86:6c:ce:63:6a:4e:e8:5b:28: 18:63:a6:2d:a0:bc:03:29:26:ff:df:bb:b2:f4:f3: 24:ec:78:f8:91:23:fd:62:5b:09:b1:98:bf:ea:f0: 30:d7:78:c5:f5:45:a9:b7:16:fd:b5:af:de:c4:34: 86:d5:4a:0a:4a:c4:5f:83:db:32:dd:a8:b6:ec:2d: 34:d6:ce:63:77:d1:0a:14:ed:19:ef:b0:b9:97:b2: 8e:9b:9d:13:ff:25:c6:a1:aa:d3:77:66:05:88:6a: 39:6a:b7:40:aa:60:23:05:6e:a8:dd:7f:f4:60:eb: 72:e9:99:e6:f4:29:1e:a7:f6:59:5e:01:ed:73:7b: be:e6:6b:29:39:d3:c2:cc:fc:c4:3f:ef:f6:9e:bf: 33:ca:e6:9c:1a:07:a1:e9:42:bd:06:6e:d9:8b:c0: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1B:D5:A3:BC:FA:78:9C:CF:B3:1A:5B:A2:C3:38:22:DB:79:98:93 X509v3 Authority Key Identifier: keyid:19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.224.0/23 Signature Algorithm: sha256WithRSAEncryption 10:df:0d:c6:f0:19:6a:87:17:7b:18:4b:1f:66:02:13:65:88: 97:67:70:b2:f1:1e:78:62:a2:82:89:34:af:66:ea:06:d0:e7: 8b:47:41:a3:54:51:88:3b:06:01:12:6e:e6:8e:c0:0f:b5:fb: 9a:e7:97:de:c7:03:6a:34:22:d8:0e:5b:fd:24:6b:a0:15:f2: 34:d9:cb:80:27:96:31:3e:12:d5:1f:18:c8:f5:9c:86:26:9a: 7e:0a:f6:c6:3f:b0:e5:c0:e8:af:75:90:54:77:1a:a3:e5:b4: 36:9b:a1:b8:a9:05:c3:ea:29:d1:ea:4c:59:fb:ac:75:ac:50: 77:01:b0:b1:5a:f4:82:90:50:8c:1d:98:2e:07:9d:fe:94:1e: c9:dd:68:a5:51:94:e5:98:23:88:46:1c:75:59:88:f5:1b:3e: 85:b6:35:32:01:a6:52:e2:8d:19:65:ff:75:82:e0:6a:f7:76: 3c:15:05:4b:34:60:28:f3:3c:a8:6a:eb:94:b6:ac:95:f0:14: 5f:18:c4:9a:69:a2:fd:ee:d4:94:4a:57:c6:7a:93:f2:bb:2e: b7:80:6c:13:3d:96:10:55:85:7f:7f:88:3d:7b:4c:50:b6:1d: dc:54:60:30:04:3a:56:70:5d:5a:b8:e8:c6:05:ca:3f:95:f6: 82:af:a0:40 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFVLT3tYAgmP7OSrpCXGR+uxYP50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJG QkIxMzJEMzAeFw0yNTA4MTUwODU3NTdaFw0yNjA4MTQwOTAyNTdaMDMxMTAvBgNV BAMTKEE5MUJENUEzQkNGQTc4OUNDRkIzMUE1QkEyQzMzODIyREI3OTk4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rAfAAbqNElVctEJO0Ig7Aieb tlsphFVJ8MyRRNrLEYySy/LCv7l0srKao0dbm7nnwKzzqSTkXR08BVJ4HTMW4HPs lZyaxDQTeQJaQ86PehLWPSDtlSutjEU4gdpoGoZszmNqTuhbKBhjpi2gvAMpJv/f u7L08yTsePiRI/1iWwmxmL/q8DDXeMX1Ram3Fv21r97ENIbVSgpKxF+D2zLdqLbs LTTWzmN30QoU7RnvsLmXso6bnRP/JcahqtN3ZgWIajlqt0CqYCMFbqjdf/Rg63Lp meb0KR6n9lleAe1ze77mayk508LM/MQ/7/aevzPK5pwaB6HpQr0GbtmLwInxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUqRvVo7z6eJzPsxpbosM4Itt5mJMwHwYDVR0j BBgwFoAUGbBcRNnG64AmtsZQZYnkwvuxMtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMC8xOUIwNUM0NEQ5 QzZFQjgwMjZCNkM2NTA2NTg5RTRDMkZCQjEzMkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJGQkIx MzJEMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTY1MTllLWFiNjEtNDk0My1i M2U4LTEwYmRkNjA4MGZkYS8wLzMxMzYzMDJlMzMzMDJlMzIzMjM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoB7gMA0GCSqG SIb3DQEBCwUAA4IBAQAQ3w3G8Blqhxd7GEsfZgITZYiXZ3Cy8R54YqKCiTSvZuoG 0OeLR0GjVFGIOwYBEm7mjsAPtfua55fexwNqNCLYDlv9JGugFfI02cuAJ5YxPhLV HxjI9ZyGJpp+CvbGP7DlwOivdZBUdxqj5bQ2m6G4qQXD6inR6kxZ+6x1rFB3AbCx WvSCkFCMHZguB53+lB7J3WilUZTlmCOIRhx1WYj1Gz6FtjUyAaZS4o0ZZf91guBq 93Y8FQVLNGAo8zyoauuUtqyV8BRfGMSaaaL97tSUSlfGepPyuy63gGwTPZYQVYV/ f4g9e0xQth3cVGAwBDpWcF1auOjGBco/lfaCr6BA -----END CERTIFICATE-----Generated at Sun Aug 24 04:16:38 2025 by rpki-client