$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa File: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (raw, json) Hash identifier: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc= Subject key identifier: 40:47:8E:3B:BF:18:22:AA:2A:1A:B9:B0:EF:68:F6:7A:69:80:2B:E6 Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 7655E9953EFCEA8CECFB723987477D253A116143 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa Signing time: Thu 21 Aug 2025 04:00:00 +0000 ROA not before: Thu 21 Aug 2025 03:55:00 +0000 ROA not after: Thu 20 Aug 2026 04:00:00 +0000 asID: 153086 IP address blocks: 160.25.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:55:e9:95:3e:fc:ea:8c:ec:fb:72:39:87:47:7d:25:3a:11:61:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Aug 21 03:55:00 2025 GMT Not After : Aug 20 04:00:00 2026 GMT Subject: CN=40478E3BBF1822AA2A1AB9B0EF68F67A69802BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ad:8a:bd:fa:7a:08:cc:34:0a:67:fb:df:86: c9:85:1d:5b:7a:b7:72:b7:8e:8a:37:db:82:fb:ce: 93:1e:fd:a4:bd:5d:54:e4:3f:a4:3e:bf:41:3c:e7: b9:f0:41:cd:60:d4:b9:5a:98:35:4a:45:6c:82:82: 72:ae:3e:09:87:b3:b2:86:62:a3:e6:8e:7a:fa:e6: ff:6a:0d:1f:25:48:25:a2:0e:2f:63:18:9c:75:5f: 74:95:63:39:f1:f4:39:27:1a:1e:f0:16:15:d0:0f: e7:48:a4:90:4b:35:cd:70:d3:e5:21:73:a4:24:ee: 2f:c0:8e:e6:22:fd:22:5f:61:ad:80:c7:de:b4:d5: cf:84:94:ac:94:ba:0d:06:7c:34:9d:60:6c:58:20: dc:43:4a:9c:a5:c8:92:85:c0:2b:8f:24:96:c5:e2: 93:51:e2:c5:e7:10:6b:db:66:e4:b5:b1:62:dc:e9: 78:1a:89:f5:c9:41:92:eb:32:da:cd:40:cb:2e:c8: ca:07:50:4e:a3:27:aa:be:e0:f6:fd:15:ac:74:95: a0:cd:6c:f0:13:b8:d6:1f:92:32:89:d6:fb:19:72: 12:a2:ba:84:70:8b:5d:13:0f:d8:83:79:89:5f:79: 43:61:ef:19:fd:82:c9:f9:6a:37:c1:8d:68:36:51: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:47:8E:3B:BF:18:22:AA:2A:1A:B9:B0:EF:68:F6:7A:69:80:2B:E6 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.219.0/24 Signature Algorithm: sha256WithRSAEncryption 08:40:a7:ff:d3:bf:7b:e0:b6:04:c2:d1:23:85:6c:b4:b2:2d: b5:2c:46:f9:d4:25:c8:97:26:5e:2e:e3:11:0b:2b:db:70:a3: 9b:c5:1d:f7:18:80:d0:2d:d6:95:e0:27:9f:c5:0d:bc:4b:c0: ea:46:cb:0e:fe:57:3a:6d:62:fb:cd:e4:42:a4:5e:26:2d:ff: 2a:c6:e4:0d:f9:d5:90:7f:37:6f:a6:e8:59:ee:3f:70:46:b7: b2:7e:80:c1:e6:4a:09:6f:21:dd:ff:29:47:09:87:bd:70:24: 22:32:5d:4c:22:eb:6a:af:dd:57:24:cd:31:87:c5:06:85:f5: 1e:80:7b:a2:43:0e:e5:8b:53:a8:79:60:dc:09:6c:4b:9e:1b: 46:78:51:64:bd:2d:41:42:98:5f:f7:30:4b:d9:50:51:e1:e2: be:91:fa:74:5d:3b:fa:38:39:71:72:e0:16:4d:a1:73:1a:e7: ab:6f:a2:58:dc:a0:b5:14:96:98:88:79:fa:d3:c5:b1:5c:a9: af:28:40:32:26:0b:42:a6:95:1b:05:16:3e:10:d7:d9:bc:9d: 8f:50:74:57:9c:b8:00:09:5c:f3:58:de:e3:7f:cc:5b:3c:2b: de:58:2e:eb:df:2b:59:91:07:3d:f0:b8:a1:bc:84:fe:dd:bd: 2d:ea:05:e1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdlXplT786ozs+3I5h0d9JToRYUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTA4MjEwMzU1MDBaFw0yNjA4MjAwNDAwMDBaMDMxMTAvBgNV BAMTKDQwNDc4RTNCQkYxODIyQUEyQTFBQjlCMEVGNjhGNjdBNjk4MDJCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrYq9+noIzDQKZ/vfhsmFHVt6 t3K3joo324L7zpMe/aS9XVTkP6Q+v0E857nwQc1g1LlamDVKRWyCgnKuPgmHs7KG YqPmjnr65v9qDR8lSCWiDi9jGJx1X3SVYznx9DknGh7wFhXQD+dIpJBLNc1w0+Uh c6Qk7i/AjuYi/SJfYa2Ax9601c+ElKyUug0GfDSdYGxYINxDSpylyJKFwCuPJJbF 4pNR4sXnEGvbZuS1sWLc6XgaifXJQZLrMtrNQMsuyMoHUE6jJ6q+4Pb9Fax0laDN bPATuNYfkjKJ1vsZchKiuoRwi10TD9iDeYlfeUNh7xn9gsn5ajfBjWg2URihAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQEeOO78YIqoqGrmw72j2emmAK+YwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhZjA3ZjE4LTVjNDktNDEyOS1h YTUzLTcwODVjY2Q1N2I2My8wLzMxMzYzMDJlMzIzNTJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBnbMA0GCSqG SIb3DQEBCwUAA4IBAQAIQKf/07974LYEwtEjhWy0si21LEb51CXIlyZeLuMRCyvb cKObxR33GIDQLdaV4CefxQ28S8DqRssO/lc6bWL7zeRCpF4mLf8qxuQN+dWQfzdv puhZ7j9wRreyfoDB5koJbyHd/ylHCYe9cCQiMl1MIutqr91XJM0xh8UGhfUegHui Qw7li1OoeWDcCWxLnhtGeFFkvS1BQphf9zBL2VBR4eK+kfp0XTv6ODlxcuAWTaFz Guerb6JY3KC1FJaYiHn608WxXKmvKEAyJgtCppUbBRY+ENfZvJ2PUHRXnLgACVzz WN7jf8xbPCveWC7r3ytZkQc98LihvIT+3b0t6gXh -----END CERTIFICATE-----Generated at Sun Aug 24 06:24:58 2025 by rpki-client