$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa File: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (raw, json) Hash identifier: keCWY/HyA5TAQamwBAFQ0o5iuI4Y22LQjLkc+XtXxOI= Subject key identifier: 92:2A:19:E6:77:E2:D0:D1:81:C9:F3:7F:0C:AE:EB:C0:33:A0:05:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 5578C81DD30EAD9FD8B3CC023020A9891ABC2F19 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa Signing time: Tue 17 Mar 2026 06:03:30 +0000 ROA not before: Tue 17 Mar 2026 05:58:30 +0000 ROA not after: Tue 16 Mar 2027 06:03:30 +0000 asID: 152754 IP address blocks: 160.19.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:78:c8:1d:d3:0e:ad:9f:d8:b3:cc:02:30:20:a9:89:1a:bc:2f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Mar 17 05:58:30 2026 GMT Not After : Mar 16 06:03:30 2027 GMT Subject: CN=922A19E677E2D0D181C9F37F0CAEEBC033A005DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c5:f1:e6:3e:09:a6:82:c5:41:bd:0a:6d:32: 9c:9b:22:05:ad:cd:2f:c1:db:ba:7f:33:5a:e9:f4: d8:25:de:06:22:0e:51:71:90:e3:5e:9a:67:10:e5: f0:26:d9:49:4a:ba:b3:3c:b1:02:40:c3:7e:63:ce: 8b:66:21:b6:06:c4:51:d5:67:c7:9c:09:80:7d:00: e9:0a:58:a9:af:84:68:9d:cd:71:ca:84:5e:fd:99: 59:a2:95:9d:c1:dd:3b:81:d2:de:2a:1d:22:7f:53: a8:c9:c8:3e:75:b9:c2:0c:e5:4d:13:ae:e7:19:ea: 29:fd:24:78:f3:89:da:62:7a:34:6d:15:68:74:42: 8c:28:0c:69:45:a4:21:69:12:a5:75:b0:34:d8:99: 55:12:f1:99:08:ee:85:f0:aa:4d:8f:3e:76:2c:49: 7c:2c:4d:8f:5b:6a:62:72:cc:07:d8:44:72:6c:5f: 80:83:02:a7:f6:f5:59:eb:d4:4b:d9:ce:80:cf:d4: 18:44:b3:94:35:23:52:bb:0e:4a:da:aa:36:a7:f7: 56:1f:81:0a:a2:32:4c:f0:bf:83:6d:61:8f:7f:93: 73:39:b8:03:8f:ca:73:65:78:1e:a5:6d:1a:8b:24: 85:54:02:37:3f:a3:c6:b5:10:51:23:ea:a3:ca:1c: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2A:19:E6:77:E2:D0:D1:81:C9:F3:7F:0C:AE:EB:C0:33:A0:05:DD X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.85.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:d2:1e:d3:3a:12:44:21:ed:1e:f5:5c:98:5c:93:35:ce:44: 91:ae:e4:68:68:a2:f9:79:59:0d:5b:09:dc:50:97:94:8d:ca: bc:02:15:34:de:5d:95:e1:88:06:66:e0:32:12:22:03:d7:85: 08:3f:7b:7f:fd:bc:d6:a7:5b:47:7a:53:2b:75:04:1d:14:04: 95:d0:3d:a6:5c:15:b5:d2:01:57:4a:a0:66:8e:f0:f8:97:89: ed:fd:2d:00:01:7a:7f:e0:4d:1e:66:97:10:15:e6:b2:c1:e5: 84:a1:a5:70:7b:44:12:b1:2b:17:e8:a6:26:d5:79:2a:e6:ca: 7f:c8:4f:fc:c0:32:3e:b8:c7:f1:da:ee:4d:82:03:21:39:c9: 6e:bb:61:42:f9:88:9c:07:67:75:25:35:a5:80:c4:0b:d6:2f: 25:59:89:19:98:8c:ac:41:3f:84:64:60:b4:99:eb:0a:b4:7c: f5:f7:85:04:cf:97:8e:c7:5e:22:b2:13:d2:81:f6:3a:44:cd: 6b:20:1d:30:5e:5a:77:7e:df:a2:bf:06:2c:5a:a2:92:3d:9f: ee:d4:44:25:79:65:9a:b8:f1:c2:a0:4d:e2:b5:b6:00:6f:15: ff:5d:10:6d:fb:86:d2:cd:0b:3f:5b:2c:fd:8e:f4:9f:b6:9a: ca:d7:4b:93 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVXjIHdMOrZ/Ys8wCMCCpiRq8LxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNjAzMTcwNTU4MzBaFw0yNzAzMTYwNjAzMzBaMDMxMTAvBgNV BAMTKDkyMkExOUU2NzdFMkQwRDE4MUM5RjM3RjBDQUVFQkMwMzNBMDA1REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxxfHmPgmmgsVBvQptMpybIgWt zS/B27p/M1rp9Ngl3gYiDlFxkONemmcQ5fAm2UlKurM8sQJAw35jzotmIbYGxFHV Z8ecCYB9AOkKWKmvhGidzXHKhF79mVmilZ3B3TuB0t4qHSJ/U6jJyD51ucIM5U0T rucZ6in9JHjzidpiejRtFWh0QowoDGlFpCFpEqV1sDTYmVUS8ZkI7oXwqk2PPnYs SXwsTY9bamJyzAfYRHJsX4CDAqf29Vnr1EvZzoDP1BhEs5Q1I1K7Dkraqjan91Yf gQqiMkzwv4NtYY9/k3M5uAOPynNleB6lbRqLJIVUAjc/o8a1EFEj6qPKHE79AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUkioZ5nfi0NGByfN/DK7rwDOgBd0wHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlMzc0ZDQ4LTVhNzAtNGM3Zi1i ZGZkLWQ4MDUyZWJhZjBhYi8wLzMxMzYzMDJlMzEzOTJlMzgzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATVTANBgkqhkiG 9w0BAQsFAAOCAQEAC9Ie0zoSRCHtHvVcmFyTNc5Eka7kaGii+XlZDVsJ3FCXlI3K vAIVNN5dleGIBmbgMhIiA9eFCD97f/281qdbR3pTK3UEHRQEldA9plwVtdIBV0qg Zo7w+JeJ7f0tAAF6f+BNHmaXEBXmssHlhKGlcHtEErErF+imJtV5KubKf8hP/MAy PrjH8druTYIDITnJbrthQvmInAdndSU1pYDEC9YvJVmJGZiMrEE/hGRgtJnrCrR8 9feFBM+XjsdeIrIT0oH2OkTNayAdMF5ad37for8GLFqikj2f7tREJXllmrjxwqBN 4rW2AG8V/10QbfuG0s0LP1ss/Y70n7aaytdLkw== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:15 2026 by rpki-client