$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa File: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (raw, json) Hash identifier: VIqb9pZUOIk/h56HmOabKL1kmQSF75KeAohVGz1gmTo= Subject key identifier: D6:12:55:40:93:DD:8B:1A:59:67:3C:53:AC:9F:A5:E0:BA:FB:43:84 Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 564589B20C92C4319F8E0D89425D1218352EE544 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa Signing time: Tue 17 Mar 2026 06:03:30 +0000 ROA not before: Tue 17 Mar 2026 05:58:30 +0000 ROA not after: Tue 16 Mar 2027 06:03:30 +0000 asID: 152754 IP address blocks: 160.19.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:45:89:b2:0c:92:c4:31:9f:8e:0d:89:42:5d:12:18:35:2e:e5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Mar 17 05:58:30 2026 GMT Not After : Mar 16 06:03:30 2027 GMT Subject: CN=D612554093DD8B1A59673C53AC9FA5E0BAFB4384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:e7:ab:8a:98:e9:f5:64:9d:83:a0:97:de: 8e:31:80:2e:c5:dd:19:f7:8c:e4:6d:33:e6:27:5d: 06:7a:20:2a:9f:64:2f:59:c1:f1:d3:df:33:26:cf: 4f:34:25:98:33:0f:81:23:63:76:93:b8:2e:ba:61: 17:06:57:d8:24:76:01:65:49:4b:d0:6e:fe:21:fb: b2:a1:45:b1:e3:fc:63:ca:12:c6:8c:b6:9a:f9:6c: bb:85:f5:d5:30:1d:2c:2b:21:1c:f7:54:6d:51:33: 59:89:77:89:3d:0a:40:1a:09:1e:52:ec:df:ba:5e: 4e:4e:3e:1d:62:32:b6:ab:2f:5b:9b:db:26:d4:40: 54:3f:39:a2:13:fb:67:52:4e:ce:1b:35:df:71:89: 1f:66:30:69:ad:ab:ed:82:9c:98:64:dc:a2:2c:47: 51:df:95:76:39:90:34:f4:31:7f:54:e1:80:b7:5b: e8:6d:4c:83:18:fc:f8:1d:97:04:ea:75:75:48:ba: e4:ed:e2:50:5c:f6:f1:31:9e:51:73:b8:29:d2:3a: 66:c8:5d:85:c4:25:a5:43:12:2f:5c:c0:24:c4:04: c8:e5:7f:59:47:4b:a0:71:73:fc:76:01:19:12:1c: 39:5b:43:cc:6a:85:d5:3f:97:c3:22:6b:67:65:11: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:12:55:40:93:DD:8B:1A:59:67:3C:53:AC:9F:A5:E0:BA:FB:43:84 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/24 Signature Algorithm: sha256WithRSAEncryption 20:b3:dc:42:b7:e8:a5:67:87:44:73:b9:d1:78:2c:dd:7a:70: 39:c9:35:f8:d6:f5:ae:0c:f8:aa:80:b4:a2:3a:c7:d2:eb:4d: a9:d0:50:4c:ec:51:bd:eb:86:81:c5:3f:cb:f0:8a:78:02:ac: eb:fb:be:99:ff:bf:90:c6:88:92:8f:88:35:82:0d:37:9c:f9: 87:f2:4c:1e:fa:f7:b8:3a:f3:d5:20:40:8c:98:92:81:e9:88: 37:fe:b6:0e:34:cb:ec:3c:a9:b5:01:bc:8c:17:a8:d8:db:d8: f4:04:92:73:e4:fb:fd:a9:8c:7b:14:c7:d2:9e:e9:97:3c:40: df:5c:2d:f7:ac:95:c2:eb:67:89:f2:e5:09:45:0f:46:d6:d3: f8:e9:e6:32:85:f5:7f:e8:fe:29:e5:ac:a0:de:da:77:83:63: a1:cb:5c:d7:e9:40:4d:c4:04:77:db:c9:a5:a9:90:21:28:be: d1:dc:c5:09:6f:fa:57:8a:ee:f1:65:3b:84:6a:1a:06:28:9c: 2c:af:01:b7:e1:96:18:86:f5:d6:f7:f0:69:c4:43:a2:1d:04: 29:29:79:2b:2e:6a:c8:99:d6:f1:40:81:e1:05:7d:3a:f4:c2: 96:a5:48:c3:9e:f7:4a:b5:75:e3:c2:ab:8e:5b:03:2a:8c:42: 4b:17:99:81 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVkWJsgySxDGfjg2JQl0SGDUu5UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNjAzMTcwNTU4MzBaFw0yNzAzMTYwNjAzMzBaMDMxMTAvBgNV BAMTKEQ2MTI1NTQwOTNERDhCMUE1OTY3M0M1M0FDOUZBNUUwQkFGQjQzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5Oeripjp9WSdg6CX3o4xgC7F 3Rn3jORtM+YnXQZ6ICqfZC9ZwfHT3zMmz080JZgzD4EjY3aTuC66YRcGV9gkdgFl SUvQbv4h+7KhRbHj/GPKEsaMtpr5bLuF9dUwHSwrIRz3VG1RM1mJd4k9CkAaCR5S 7N+6Xk5OPh1iMrarL1ub2ybUQFQ/OaIT+2dSTs4bNd9xiR9mMGmtq+2CnJhk3KIs R1HflXY5kDT0MX9U4YC3W+htTIMY/PgdlwTqdXVIuuTt4lBc9vExnlFzuCnSOmbI XYXEJaVDEi9cwCTEBMjlf1lHS6Bxc/x2ARkSHDlbQ8xqhdU/l8Mia2dlEVp3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1hJVQJPdixpZZzxTrJ+l4Lr7Q4QwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlMzc0ZDQ4LTVhNzAtNGM3Zi1i ZGZkLWQ4MDUyZWJhZjBhYi8wLzMxMzYzMDJlMzEzOTJlMzgzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATVDANBgkqhkiG 9w0BAQsFAAOCAQEAILPcQrfopWeHRHO50Xgs3XpwOck1+Nb1rgz4qoC0ojrH0utN qdBQTOxRveuGgcU/y/CKeAKs6/u+mf+/kMaIko+INYINN5z5h/JMHvr3uDrz1SBA jJiSgemIN/62DjTL7DyptQG8jBeo2NvY9ASSc+T7/amMexTH0p7plzxA31wt96yV wutnifLlCUUPRtbT+OnmMoX1f+j+KeWsoN7ad4Njoctc1+lATcQEd9vJpamQISi+ 0dzFCW/6V4ru8WU7hGoaBiicLK8Bt+GWGIb11vfwacRDoh0EKSl5Ky5qyJnW8UCB 4QV9OvTClqVIw573SrV148KrjlsDKoxCSxeZgQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:52 2026 by rpki-client