$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa File: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (raw, json) Hash identifier: 9NuukBIDDZ7f6DuKuIwjkGDhtnMzcPyVVkUYuDF3dPM= Subject key identifier: B7:74:66:F0:B6:81:85:46:C8:03:AA:03:43:CE:5B:5B:6C:AA:4A:D9 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 372607FDA9617547CE8DD58C184A4179A7F8B917 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa Signing time: Fri 03 Oct 2025 07:02:58 +0000 ROA not before: Fri 03 Oct 2025 06:57:58 +0000 ROA not after: Fri 02 Oct 2026 07:02:58 +0000 asID: 140456 IP address blocks: 160.22.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:26:07:fd:a9:61:75:47:ce:8d:d5:8c:18:4a:41:79:a7:f8:b9:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Oct 3 06:57:58 2025 GMT Not After : Oct 2 07:02:58 2026 GMT Subject: CN=B77466F0B6818546C803AA0343CE5B5B6CAA4AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:3d:cf:3f:06:ef:1a:43:21:34:ad:ee:1f: 68:6f:a9:95:54:a8:a1:dc:32:65:d6:a9:0a:3c:21: 05:a6:33:bb:85:da:30:36:b5:e4:8a:7d:2a:05:34: 22:6a:2e:69:8b:f4:19:d3:d2:01:33:f5:4e:77:6a: 45:6c:aa:d8:aa:0a:a5:2b:13:8a:e6:de:d1:65:32: dc:40:61:91:7c:37:b6:90:74:92:2b:e7:8b:db:96: 8e:82:c8:e7:ea:37:75:fe:ac:dc:e5:1f:af:d8:7e: 93:96:2d:38:29:4a:70:a9:ef:38:61:53:b1:be:bb: 2e:e9:18:1a:0e:13:ae:43:ac:9a:dc:97:5f:06:35: 06:3c:4c:19:54:25:eb:c1:41:c1:45:51:1c:89:3f: 4b:1f:71:fd:f5:ce:35:62:7b:36:59:c6:59:98:20: f3:f3:42:ab:65:ae:40:9f:c3:d5:3e:e8:d0:7c:e3: cf:17:5d:ac:c0:4b:ae:80:e8:5b:37:42:be:3c:ea: f3:07:50:59:62:2b:c6:7c:11:3c:89:3e:b7:a3:f8: 5e:2a:5a:8a:cc:36:f5:6a:f6:4f:68:bc:c4:52:34: 27:cf:bc:75:e5:aa:d1:a0:51:bc:8e:4c:49:eb:a3: 96:d6:53:4a:65:fc:58:90:61:c1:25:72:2b:8b:a0: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:74:66:F0:B6:81:85:46:C8:03:AA:03:43:CE:5B:5B:6C:AA:4A:D9 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.251.0/24 Signature Algorithm: sha256WithRSAEncryption 69:09:ff:52:d5:5a:fa:18:5f:ad:4f:6e:86:35:3c:8c:f2:ff: d9:37:8c:6d:c0:da:c0:46:48:7f:81:ab:45:52:74:87:dc:1a: d7:8a:5b:4e:88:ea:c1:60:6f:4b:1a:d2:50:ff:ad:ff:e5:06: d4:a9:6b:4c:94:07:8b:62:cf:83:fd:90:6b:fe:c0:a7:78:b7: 85:d2:45:c3:2b:52:2e:97:ee:dc:a4:a3:03:87:4b:8b:4a:7b: ec:8a:75:4d:18:06:06:bb:79:1f:3e:9c:58:2b:0c:e1:65:5f: 83:4b:a1:79:a0:c3:f8:f7:9f:bf:36:00:48:df:32:2c:8b:a5: bf:bd:18:9d:59:56:58:48:ef:ce:8a:b6:cc:ff:87:f7:d5:50: 08:7a:8d:4a:b4:61:4a:5d:a9:03:35:e0:a0:5f:a8:c9:36:1b: af:22:e0:a7:bf:f8:2c:b8:df:28:e2:de:68:81:2a:7e:3f:7d: 9e:e1:73:e6:38:8e:86:00:6f:1f:49:c1:de:d1:18:72:64:89: 42:f1:00:52:bc:e1:9b:0c:c0:68:f5:4a:c7:ab:7e:9f:82:e4: de:fe:43:61:75:ee:6a:78:a8:20:a8:0d:e1:b2:a7:ed:01:f7: 92:9e:67:d8:cf:ca:8c:2e:ac:4b:e2:68:30:dc:c7:78:b3:5c: 7b:5a:61:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNyYH/alhdUfOjdWMGEpBeaf4uRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNTEwMDMwNjU3NThaFw0yNjEwMDIwNzAyNThaMDMxMTAvBgNV BAMTKEI3NzQ2NkYwQjY4MTg1NDZDODAzQUEwMzQzQ0U1QjVCNkNBQTRBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsz3PPwbvGkMhNK3uH2hvqZVU qKHcMmXWqQo8IQWmM7uF2jA2teSKfSoFNCJqLmmL9BnT0gEz9U53akVsqtiqCqUr E4rm3tFlMtxAYZF8N7aQdJIr54vblo6CyOfqN3X+rNzlH6/YfpOWLTgpSnCp7zhh U7G+uy7pGBoOE65DrJrcl18GNQY8TBlUJevBQcFFURyJP0sfcf31zjViezZZxlmY IPPzQqtlrkCfw9U+6NB8488XXazAS66A6Fs3Qr486vMHUFliK8Z8ETyJPrej+F4q WorMNvVq9k9ovMRSNCfPvHXlqtGgUbyOTEnro5bWU0pl/FiQYcElciuLoJ1NAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUt3Rm8LaBhUbIA6oDQ85bW2yqStkwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwOGFiMTU3LWQ4MjctNDlhOC1i Yjg2LTI4YmUxMzFjM2QyNi8wLzMxMzYzMDJlMzIzMjJlMzIzNTMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBb7MA0GCSqG SIb3DQEBCwUAA4IBAQBpCf9S1Vr6GF+tT26GNTyM8v/ZN4xtwNrARkh/gatFUnSH 3BrXiltOiOrBYG9LGtJQ/63/5QbUqWtMlAeLYs+D/ZBr/sCneLeF0kXDK1Iul+7c pKMDh0uLSnvsinVNGAYGu3kfPpxYKwzhZV+DS6F5oMP495+/NgBI3zIsi6W/vRid WVZYSO/OirbM/4f31VAIeo1KtGFKXakDNeCgX6jJNhuvIuCnv/gsuN8o4t5ogSp+ P32e4XPmOI6GAG8fScHe0RhyZIlC8QBSvOGbDMBo9UrHq36fguTe/kNhde5qeKgg qA3hsqftAfeSnmfYz8qMLqxL4mgw3Md4s1x7WmHH -----END CERTIFICATE-----Generated at Mon Oct 20 15:07:07 2025 by rpki-client