$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa File: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (raw, json) Hash identifier: OJeztSNPa6Ny2Jrl9pv1yxSSkQT/t6rbcjh/ieoX/VA= Subject key identifier: B5:4F:C6:BD:AB:AD:3C:2A:64:CA:2C:0D:8A:AB:8C:76:2B:5C:1D:23 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 39E9E4D1147BAB772C154BC2049C57806BFFBD63 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa Signing time: Fri 03 Oct 2025 07:02:58 +0000 ROA not before: Fri 03 Oct 2025 06:57:58 +0000 ROA not after: Fri 02 Oct 2026 07:02:58 +0000 asID: 140456 IP address blocks: 160.22.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e9:e4:d1:14:7b:ab:77:2c:15:4b:c2:04:9c:57:80:6b:ff:bd:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Oct 3 06:57:58 2025 GMT Not After : Oct 2 07:02:58 2026 GMT Subject: CN=B54FC6BDABAD3C2A64CA2C0D8AAB8C762B5C1D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:c1:f2:81:56:d4:d5:b3:2c:99:66:9f:6c: 5d:ca:06:0c:73:9f:79:8f:be:d4:8b:53:bf:f3:0f: 82:a4:ed:82:81:92:88:1b:3a:25:c3:1e:43:9c:14: 10:fe:2b:a5:88:d4:a2:49:7f:90:9a:25:1d:4b:6c: 3c:69:a8:96:e1:f1:15:23:25:ff:83:56:78:5f:49: ca:e6:45:e3:23:15:7b:fa:73:12:89:4e:8b:5d:e9: 49:c0:69:a4:fe:d6:a6:26:27:df:79:b8:59:a6:a9: dd:31:bc:96:de:9f:7f:b1:8d:53:3b:6b:7c:af:a0: 43:1f:1e:c3:f2:0d:27:c2:08:bc:e9:ba:03:69:80: c8:4d:8f:58:54:34:8f:bf:42:af:0f:bc:fa:90:1f: e4:24:be:79:46:99:07:4f:a6:03:af:96:8b:b6:88: 12:1e:ea:5e:85:71:81:d9:4b:2c:89:f0:48:d2:00: d2:d7:ac:1f:ae:42:80:24:6c:34:1f:a8:74:dd:87: 0b:61:26:ab:2d:d4:72:04:54:3f:72:b1:8a:e9:8e: 1e:fc:32:cf:59:fa:6a:9e:78:fe:c5:e0:58:e5:4d: 1a:4c:db:96:36:aa:ba:6f:f1:29:30:65:94:f0:5e: a7:9d:64:df:6a:aa:a0:bf:36:0c:34:29:69:0e:a4: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4F:C6:BD:AB:AD:3C:2A:64:CA:2C:0D:8A:AB:8C:76:2B:5C:1D:23 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.250.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:71:17:1c:f4:20:37:51:f2:ac:3f:b5:fd:1f:6a:8d:8e:7c: 3b:09:ef:12:28:e3:0c:81:3b:3d:2e:13:9c:06:06:fc:28:45: d1:2d:44:53:1c:7c:9a:f7:c3:24:c4:45:a2:f7:27:e5:f3:77: c1:32:fb:ad:72:31:f5:d0:25:fc:77:65:53:58:47:95:34:5f: 5e:1c:91:7e:f3:92:ce:69:7f:47:7a:9d:1f:04:b8:ed:9c:85: 2e:c3:f5:6f:4e:81:33:22:63:e7:cc:6c:15:d0:b4:5a:6b:10: 5e:a6:67:da:e6:d3:76:0a:72:11:5a:f2:81:cc:f1:79:25:42: 9c:4e:6e:d6:39:54:95:78:e6:48:2c:14:9f:33:f8:42:21:62: 84:12:77:6b:9a:06:58:bb:e1:ab:4d:08:d7:33:7c:9f:88:14: 56:6b:cc:8f:d2:95:8d:33:3d:6b:ac:3a:2a:0c:b7:53:52:6d: c3:a3:26:26:ef:10:d4:5b:90:8f:46:0d:8d:e8:fc:33:6d:e5: cb:d6:a6:0a:a1:25:13:4e:71:8b:72:97:88:39:40:89:78:4c: 54:fc:25:38:b1:cc:ae:23:b1:6f:52:f0:62:9e:9f:76:ee:6c: fe:ad:e8:5f:d6:7b:09:73:f9:67:48:68:9c:c0:11:b0:2e:c7: 58:ba:81:4f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOenk0RR7q3csFUvCBJxXgGv/vWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNTEwMDMwNjU3NThaFw0yNjEwMDIwNzAyNThaMDMxMTAvBgNV BAMTKEI1NEZDNkJEQUJBRDNDMkE2NENBMkMwRDhBQUI4Qzc2MkI1QzFEMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUsHygVbU1bMsmWafbF3KBgxz n3mPvtSLU7/zD4Kk7YKBkogbOiXDHkOcFBD+K6WI1KJJf5CaJR1LbDxpqJbh8RUj Jf+DVnhfScrmReMjFXv6cxKJTotd6UnAaaT+1qYmJ995uFmmqd0xvJben3+xjVM7 a3yvoEMfHsPyDSfCCLzpugNpgMhNj1hUNI+/Qq8PvPqQH+QkvnlGmQdPpgOvlou2 iBIe6l6FcYHZSyyJ8EjSANLXrB+uQoAkbDQfqHTdhwthJqst1HIEVD9ysYrpjh78 Ms9Z+mqeeP7F4FjlTRpM25Y2qrpv8SkwZZTwXqedZN9qqqC/Ngw0KWkOpHbfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtU/GvautPCpkyiwNiquMditcHSMwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwOGFiMTU3LWQ4MjctNDlhOC1i Yjg2LTI4YmUxMzFjM2QyNi8wLzMxMzYzMDJlMzIzMjJlMzIzNTMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBb6MA0GCSqG SIb3DQEBCwUAA4IBAQBOcRcc9CA3UfKsP7X9H2qNjnw7Ce8SKOMMgTs9LhOcBgb8 KEXRLURTHHya98MkxEWi9yfl83fBMvutcjH10CX8d2VTWEeVNF9eHJF+85LOaX9H ep0fBLjtnIUuw/VvToEzImPnzGwV0LRaaxBepmfa5tN2CnIRWvKBzPF5JUKcTm7W OVSVeOZILBSfM/hCIWKEEndrmgZYu+GrTQjXM3yfiBRWa8yP0pWNMz1rrDoqDLdT Um3DoyYm7xDUW5CPRg2N6PwzbeXL1qYKoSUTTnGLcpeIOUCJeExU/CU4scyuI7Fv UvBinp927mz+rehf1nsJc/lnSGicwBGwLsdYuoFP -----END CERTIFICATE-----Generated at Mon Oct 20 17:51:03 2025 by rpki-client