$ rpki-client -vvf repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa File: 3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa (raw, json) Hash identifier: 6NYs/G1xdGsUC1/WqjKklC2SAb8XsfqjqDKSyuRji20= Subject key identifier: 64:C2:84:19:5C:81:E7:40:90:FD:B8:88:DC:54:00:43:94:08:A0:6A Certificate issuer: /CN=1E40BE2B668DAE3E7271E835148386D785E3724C Certificate serial: 0B385691263A9848410461844C09A4CD7BF4D966 Authority key identifier: 1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa Signing time: Wed 08 Oct 2025 06:00:01 +0000 ROA not before: Wed 08 Oct 2025 05:55:01 +0000 ROA not after: Wed 07 Oct 2026 06:00:01 +0000 asID: 152810 IP address blocks: 160.22.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:38:56:91:26:3a:98:48:41:04:61:84:4c:09:a4:cd:7b:f4:d9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E40BE2B668DAE3E7271E835148386D785E3724C Validity Not Before: Oct 8 05:55:01 2025 GMT Not After : Oct 7 06:00:01 2026 GMT Subject: CN=64C284195C81E74090FDB888DC5400439408A06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:97:92:da:fa:e3:cd:e4:33:a9:e4:54:b6:b8: af:80:be:15:3e:d7:08:99:42:c3:8c:23:63:6f:57: 8b:29:40:58:84:b4:75:19:25:a1:9b:5e:73:6a:fb: 1d:5b:3a:e0:c9:fe:03:c7:14:fa:9e:ab:ff:d3:21: 9b:44:09:7c:62:73:16:78:d4:94:0b:37:35:74:5a: 6f:b9:d9:6b:b6:5c:77:16:31:d8:64:64:94:7f:39: e7:e3:96:7e:9c:f8:79:31:40:cc:27:91:80:37:b3: 20:8c:92:a3:4e:3a:1b:0c:68:60:b2:50:7f:5a:8a: 90:e3:4b:2a:ac:7e:e5:dd:4b:f5:44:4a:72:1d:52: d9:a5:f9:5d:2d:36:85:18:78:4a:f3:c1:9b:0f:9c: d0:cc:ae:3d:ed:1e:23:7c:7f:c0:95:31:5d:4b:c0: 16:7c:65:d7:f6:61:f1:0e:b0:7b:c8:22:45:8f:a4: 5a:26:cb:3c:f4:19:34:14:56:5e:c6:a7:1e:16:89: 2c:27:b9:51:8b:45:0b:47:56:5a:d3:62:b2:64:72: 4e:43:f6:10:38:f3:7c:a7:89:12:c8:4f:42:d1:cf: 0f:80:39:f7:f9:4e:0e:f6:b4:e4:97:5d:e9:ba:f8: c9:a8:b1:cf:3e:5f:31:7a:27:e9:d5:ab:9d:05:10: f0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C2:84:19:5C:81:E7:40:90:FD:B8:88:DC:54:00:43:94:08:A0:6A X509v3 Authority Key Identifier: keyid:1E:40:BE:2B:66:8D:AE:3E:72:71:E8:35:14:83:86:D7:85:E3:72:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/1E40BE2B668DAE3E7271E835148386D785E3724C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1E40BE2B668DAE3E7271E835148386D785E3724C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8475338d-7acb-4aa7-bedc-d6459fd13504/0/3136302e32322e3133342e302f32332d3234203d3e20313532383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.134.0/23 Signature Algorithm: sha256WithRSAEncryption d0:42:7a:8d:7a:9e:35:6a:56:17:17:2c:7f:21:d6:38:f2:5c: 69:71:fe:9c:69:8b:d1:0d:c2:32:01:37:c7:b1:d0:83:3e:82: 7f:4e:d6:09:55:a0:1b:b4:21:81:7d:b5:84:ec:59:b2:5b:12: 5f:3c:6a:21:de:f3:8a:38:f6:c9:fc:21:c5:75:c1:63:52:55: 08:87:8a:1a:a2:ad:31:5d:34:5f:cb:ce:52:c9:68:21:62:70: 3c:79:73:1b:79:4f:a1:f7:3d:3a:c2:f7:60:ce:84:53:a2:8e: bd:88:3d:ce:14:1b:04:6f:95:a4:38:59:d8:24:d4:b5:b9:32: 20:74:ef:7c:da:3b:b5:4e:eb:fb:82:ba:ea:4b:4e:c0:55:29: ae:f5:b2:a1:a2:0e:6b:23:96:ae:80:93:ff:dd:a3:53:24:ca: 68:af:72:16:e5:fe:cb:e7:90:71:97:b3:22:38:b3:4f:74:dd: a8:d1:5f:fd:e3:02:99:dd:4a:e3:51:4e:39:d5:96:67:36:5e: 6c:34:6f:e1:25:ce:ba:bd:b9:cb:67:81:4d:5d:d4:61:07:45: 01:3e:48:41:d1:98:2c:73:47:c6:74:45:fd:6f:ff:4d:9b:c8: 7b:00:29:df:dd:af:76:26:66:fe:6c:7b:b9:97:fd:cc:cf:64: 09:bc:81:e8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCzhWkSY6mEhBBGGETAmkzXv02WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4 NUUzNzI0QzAeFw0yNTEwMDgwNTU1MDFaFw0yNjEwMDcwNjAwMDFaMDMxMTAvBgNV BAMTKDY0QzI4NDE5NUM4MUU3NDA5MEZEQjg4OERDNTQwMDQzOTQwOEEwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgl5La+uPN5DOp5FS2uK+AvhU+ 1wiZQsOMI2NvV4spQFiEtHUZJaGbXnNq+x1bOuDJ/gPHFPqeq//TIZtECXxicxZ4 1JQLNzV0Wm+52Wu2XHcWMdhkZJR/Oefjln6c+HkxQMwnkYA3syCMkqNOOhsMaGCy UH9aipDjSyqsfuXdS/VESnIdUtml+V0tNoUYeErzwZsPnNDMrj3tHiN8f8CVMV1L wBZ8Zdf2YfEOsHvIIkWPpFomyzz0GTQUVl7Gpx4WiSwnuVGLRQtHVlrTYrJkck5D 9hA483yniRLIT0LRzw+AOff5Tg72tOSXXem6+Mmosc8+XzF6J+nVq50FEPDlAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUZMKEGVyB50CQ/biI3FQAQ5QIoGowHwYDVR0j BBgwFoAUHkC+K2aNrj5yceg1FIOG14XjckwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NDc1MzM4ZC03YWNiLTRhYTctYmVkYy1kNjQ1OWZkMTM1MDQvMC8xRTQwQkUyQjY2 OERBRTNFNzI3MUU4MzUxNDgzODZENzg1RTM3MjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUU0MEJFMkI2NjhEQUUzRTcyNzFFODM1MTQ4Mzg2RDc4NUUz NzI0Qy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0NzUzMzhkLTdhY2ItNGFhNy1i ZWRjLWQ2NDU5ZmQxMzUwNC8wLzMxMzYzMDJlMzIzMjJlMzEzMzM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBaGMA0GCSqG SIb3DQEBCwUAA4IBAQDQQnqNep41alYXFyx/IdY48lxpcf6caYvRDcIyATfHsdCD PoJ/TtYJVaAbtCGBfbWE7FmyWxJfPGoh3vOKOPbJ/CHFdcFjUlUIh4oaoq0xXTRf y85SyWghYnA8eXMbeU+h9z06wvdgzoRToo69iD3OFBsEb5WkOFnYJNS1uTIgdO98 2ju1Tuv7grrqS07AVSmu9bKhog5rI5augJP/3aNTJMpor3IW5f7L55Bxl7MiOLNP dN2o0V/94wKZ3UrjUU451ZZnNl5sNG/hJc66vbnLZ4FNXdRhB0UBPkhB0Zgsc0fG dEX9b/9Nm8h7ACnf3a92Jmb+bHu5l/3Mz2QJvIHo -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:46 2025 by rpki-client