$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa File: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (raw, json) Hash identifier: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0= Subject key identifier: 85:A4:E8:27:E1:E9:3E:90:D6:65:DA:15:0B:00:E2:64:E4:6E:50:FD Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 609C275D348E4D71F72998F41B0E0999A222F86B Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa Signing time: Mon 11 Aug 2025 08:00:32 +0000 ROA not before: Mon 11 Aug 2025 07:55:32 +0000 ROA not after: Mon 10 Aug 2026 08:00:32 +0000 asID: 153098 IP address blocks: 160.25.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9c:27:5d:34:8e:4d:71:f7:29:98:f4:1b:0e:09:99:a2:22:f8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Aug 11 07:55:32 2025 GMT Not After : Aug 10 08:00:32 2026 GMT Subject: CN=85A4E827E1E93E90D665DA150B00E264E46E50FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:51:3c:4f:d8:ac:15:e2:99:c9:17:6f:d9: 74:c5:2a:f2:e2:ac:60:37:3d:e2:e2:cc:c2:27:d0: d9:0a:55:0b:30:18:79:69:d5:5c:2d:91:2f:51:28: 17:54:23:1f:76:bd:08:38:d4:a7:4d:da:83:b5:c3: e8:53:b3:8a:6d:66:52:14:46:73:e6:8a:6b:ae:ba: e3:21:85:5e:d6:58:d5:a8:75:97:f6:b4:a8:c3:02: ed:10:86:c6:97:38:c3:da:c4:1a:66:e6:be:75:07: 2c:21:12:17:a4:43:2a:7f:dc:08:aa:c6:7a:07:d8: 2d:bc:51:55:3f:fe:cf:48:ab:5a:8c:b9:9e:0f:7c: a1:54:77:77:01:84:17:d4:d0:30:e7:ba:e7:ae:01: c2:7d:d8:69:fb:e2:a4:93:7a:b8:33:ac:e0:3d:69: fe:53:80:b9:73:dd:f5:0e:97:62:ad:6a:79:d6:cd: b2:fa:76:db:68:42:1f:e5:01:9d:f3:45:b4:83:a7: b1:be:9d:8b:14:d1:f9:16:8a:09:c4:39:31:78:84: 36:45:59:be:62:aa:b2:53:75:07:6a:a9:3b:73:9b: 68:e4:c0:0b:07:56:6f:b9:af:f1:68:d2:7c:67:61: ba:d0:33:bf:e8:f0:8e:b9:b8:4b:5a:6b:5f:6d:6a: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A4:E8:27:E1:E9:3E:90:D6:65:DA:15:0B:00:E2:64:E4:6E:50:FD X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.250.0/23 Signature Algorithm: sha256WithRSAEncryption 79:6f:6e:c9:65:6d:17:6e:62:a1:ff:2e:e6:01:28:21:51:44: 1b:d3:b9:15:df:0e:fc:55:24:fd:cf:82:d2:2a:3d:55:6f:fc: e6:2f:d6:b1:7d:20:fc:21:6e:cd:f6:0e:1c:4a:ed:f6:58:36: c1:b1:cc:f3:32:22:13:3d:bc:cf:c7:16:3f:33:38:52:12:6f: 9b:ab:40:a6:38:50:e2:1f:2c:bf:b5:2b:f9:63:f1:76:c0:88: 7a:41:65:c1:e0:c1:b6:9b:f5:c6:52:e3:06:e8:b1:d4:30:65: ad:ef:fc:e1:bb:25:cd:ef:03:6b:5f:06:51:29:94:b7:96:6e: 8b:0b:d2:81:3e:e9:20:ff:d1:60:1d:a3:f1:de:84:0d:24:d6: 2a:1d:e8:c7:1f:50:53:21:f0:c2:d7:dd:2e:78:8d:df:97:96: 0c:55:f3:12:b5:1f:33:82:7a:60:b4:2d:16:99:a5:54:49:8b: 43:1e:67:6b:ed:54:5d:8e:fd:5f:bc:f6:69:89:e2:4b:b9:9a: f9:78:cb:83:db:d5:70:7f:bc:d1:11:01:0e:7d:72:cf:b3:fd: b6:7c:72:66:8c:3c:35:7a:f6:03:a1:6f:b4:d4:53:7a:ee:a0: 26:a1:5d:60:09:fc:ea:66:cd:06:1d:07:67:e6:24:bf:bb:d2: d3:ce:4c:f5 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYJwnXTSOTXH3KZj0Gw4JmaIi+GswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNTA4MTEwNzU1MzJaFw0yNjA4MTAwODAwMzJaMDMxMTAvBgNV BAMTKDg1QTRFODI3RTFFOTNFOTBENjY1REExNTBCMDBFMjY0RTQ2RTUwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYMVE8T9isFeKZyRdv2XTFKvLi rGA3PeLizMIn0NkKVQswGHlp1VwtkS9RKBdUIx92vQg41KdN2oO1w+hTs4ptZlIU RnPmimuuuuMhhV7WWNWodZf2tKjDAu0QhsaXOMPaxBpm5r51BywhEhekQyp/3Aiq xnoH2C28UVU//s9Iq1qMuZ4PfKFUd3cBhBfU0DDnuueuAcJ92Gn74qSTergzrOA9 af5TgLlz3fUOl2KtannWzbL6dttoQh/lAZ3zRbSDp7G+nYsU0fkWignEOTF4hDZF Wb5iqrJTdQdqqTtzm2jkwAsHVm+5r/Fo0nxnYbrQM7/o8I65uEtaa19tahxzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhaToJ+HpPpDWZdoVCwDiZORuUP0wHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3YWQwYTNhLTI2YjgtNDQ5YS04 OGVjLWJmMDM5OGVhNTNhNi8wLzMxMzYzMDJlMzIzNTJlMzIzNTMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMzMzAzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBn6MA0GCSqG SIb3DQEBCwUAA4IBAQB5b27JZW0XbmKh/y7mASghUUQb07kV3w78VST9z4LSKj1V b/zmL9axfSD8IW7N9g4cSu32WDbBsczzMiITPbzPxxY/MzhSEm+bq0CmOFDiHyy/ tSv5Y/F2wIh6QWXB4MG2m/XGUuMG6LHUMGWt7/zhuyXN7wNrXwZRKZS3lm6LC9KB Pukg/9FgHaPx3oQNJNYqHejHH1BTIfDC190ueI3fl5YMVfMStR8zgnpgtC0WmaVU SYtDHmdr7VRdjv1fvPZpieJLuZr5eMuD29Vwf7zREQEOfXLPs/22fHJmjDw1evYD oW+01FN67qAmoV1gCfzqZs0GHQdn5iS/u9LTzkz1 -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:11 2025 by rpki-client