$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32332d3233203d3e20313532373534.roa File: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (raw, json) Hash identifier: Aa1CIAKAa9rniUhpuaF+1Qn3zV9sEB1p2m7o3WLv1qA= Subject key identifier: F0:8B:08:E8:22:B4:6D:EB:FB:88:35:BB:32:47:E0:F0:38:69:F4:E5 Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 6C2BA4BB25D464BCAE4AF3A8B0888CD16E6E4BCE Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32332d3233203d3e20313532373534.roa Signing time: Tue 17 Mar 2026 06:03:30 +0000 ROA not before: Tue 17 Mar 2026 05:58:30 +0000 ROA not after: Tue 16 Mar 2027 06:03:30 +0000 asID: 152754 IP address blocks: 160.19.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:2b:a4:bb:25:d4:64:bc:ae:4a:f3:a8:b0:88:8c:d1:6e:6e:4b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Mar 17 05:58:30 2026 GMT Not After : Mar 16 06:03:30 2027 GMT Subject: CN=F08B08E822B46DEBFB8835BB3247E0F03869F4E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cd:df:60:77:25:c1:f8:88:37:1f:ea:60:ea: 8e:57:30:dd:73:ae:d7:bf:55:47:42:85:35:6f:d2: ac:f3:cf:e9:f2:67:1f:d5:dc:bb:e0:ab:34:cd:99: 37:33:a0:79:98:2b:da:d7:0d:9e:b1:08:34:b7:f4: 79:8f:e3:a3:68:1d:8e:5f:b9:b2:11:fb:25:df:cf: 7a:08:ee:50:aa:e2:d8:49:70:e1:1f:1a:7f:8b:dd: 25:60:53:fc:a0:9b:7d:1d:46:b5:fd:73:f1:27:3e: 5f:45:05:a3:ee:47:08:7d:5a:67:4c:36:b3:19:58: 17:31:95:9a:f5:f5:bb:6b:c9:94:71:85:9f:9c:32: d5:77:78:88:77:3f:1a:e9:af:b0:b8:f1:b5:08:5e: 17:83:38:eb:93:28:11:c8:b2:e0:f9:75:0b:45:7e: 12:a9:c3:aa:c2:41:05:c1:d8:4d:27:e1:ef:fb:52: 69:1f:95:78:78:00:9a:57:35:8e:8a:5d:cc:03:cb: 24:9a:65:e4:70:b5:10:82:39:29:6a:27:56:c0:dd: 8b:e9:ba:b8:07:49:33:5b:6c:8c:a6:be:97:f1:a0: 5c:cb:d2:3d:66:12:ad:a8:f6:33:1c:97:d1:6c:c6: 07:d8:34:6c:35:3a:08:1a:73:ce:b3:11:52:2b:e9: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:8B:08:E8:22:B4:6D:EB:FB:88:35:BB:32:47:E0:F0:38:69:F4:E5 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32332d3233203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/23 Signature Algorithm: sha256WithRSAEncryption 34:4a:7d:af:65:7d:e8:6d:c9:17:c1:a9:25:8f:0f:ad:0c:b5: e4:d9:1d:2c:ce:b4:bc:1c:3d:c4:3d:aa:1e:d5:d7:47:a2:1e: 8c:fd:af:23:5c:8d:e5:7c:41:66:9c:ee:2e:38:ca:66:22:4b: d7:8a:f6:79:22:1f:50:a0:4d:11:f9:89:dc:53:26:9a:e8:82: 30:51:21:5d:ff:5b:53:52:63:89:ff:dd:98:3b:fb:b2:fc:00: d2:e4:96:98:29:b8:50:fb:76:d7:da:a4:05:32:7b:0e:17:cf: 3e:fc:dc:e0:53:d8:49:7d:2d:28:6f:c5:36:0e:77:47:53:df: 11:bf:41:ee:d2:dd:f5:97:12:b7:4e:71:be:88:43:2f:87:37: aa:08:08:77:85:06:16:2f:fd:0b:0d:f7:55:9c:88:71:71:33: a5:b1:ab:24:f0:28:fc:39:34:0b:d8:4b:39:c1:23:07:c8:ee: 76:82:a6:67:9c:d7:60:99:65:cc:fa:90:4a:91:e9:a0:17:d8: 5f:e7:bf:87:71:28:7c:61:b9:45:b4:b3:c4:f5:26:a5:e0:a3: 1c:03:cc:bb:b5:8c:ae:ee:d6:82:c5:cd:40:75:7e:d6:22:b6: cc:c0:64:17:e1:fa:a3:2a:f9:1d:57:90:f6:d9:b3:4f:96:d7: 30:46:9a:bd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbCukuyXUZLyuSvOosIiM0W5uS84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNjAzMTcwNTU4MzBaFw0yNzAzMTYwNjAzMzBaMDMxMTAvBgNV BAMTKEYwOEIwOEU4MjJCNDZERUJGQjg4MzVCQjMyNDdFMEYwMzg2OUY0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvzd9gdyXB+Ig3H+pg6o5XMN1z rte/VUdChTVv0qzzz+nyZx/V3LvgqzTNmTczoHmYK9rXDZ6xCDS39HmP46NoHY5f ubIR+yXfz3oI7lCq4thJcOEfGn+L3SVgU/ygm30dRrX9c/EnPl9FBaPuRwh9WmdM NrMZWBcxlZr19btryZRxhZ+cMtV3eIh3Pxrpr7C48bUIXheDOOuTKBHIsuD5dQtF fhKpw6rCQQXB2E0n4e/7UmkflXh4AJpXNY6KXcwDyySaZeRwtRCCOSlqJ1bA3Yvp urgHSTNbbIymvpfxoFzL0j1mEq2o9jMcl9FsxgfYNGw1Oggac86zEVIr6WnLAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8IsI6CK0bev7iDW7Mkfg8Dhp9OUwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlMzc0ZDQ4LTVhNzAtNGM3Zi1i ZGZkLWQ4MDUyZWJhZjBhYi8wLzMxMzYzMDJlMzEzOTJlMzgzNDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaATVDANBgkqhkiG 9w0BAQsFAAOCAQEANEp9r2V96G3JF8GpJY8PrQy15NkdLM60vBw9xD2qHtXXR6Ie jP2vI1yN5XxBZpzuLjjKZiJL14r2eSIfUKBNEfmJ3FMmmuiCMFEhXf9bU1Jjif/d mDv7svwA0uSWmCm4UPt219qkBTJ7DhfPPvzc4FPYSX0tKG/FNg53R1PfEb9B7tLd 9ZcSt05xvohDL4c3qggId4UGFi/9Cw33VZyIcXEzpbGrJPAo/Dk0C9hLOcEjB8ju doKmZ5zXYJllzPqQSpHpoBfYX+e/h3EofGG5RbSzxPUmpeCjHAPMu7WMru7WgsXN QHV+1iK2zMBkF+H6oyr5HVeQ9tmzT5bXMEaavQ== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:41 2026 by rpki-client