$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa File: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (raw, json) Hash identifier: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ= Subject key identifier: 26:74:9A:0C:A2:52:0A:F4:EA:B1:43:FC:3A:C2:FB:CB:C9:E3:B4:A3 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 6CC045994C6583C613C3F96E16936F17E4FB6D37 Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa Signing time: Mon 18 Aug 2025 04:00:00 +0000 ROA not before: Mon 18 Aug 2025 03:55:00 +0000 ROA not after: Mon 17 Aug 2026 04:00:00 +0000 asID: 153088 IP address blocks: 160.25.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c0:45:99:4c:65:83:c6:13:c3:f9:6e:16:93:6f:17:e4:fb:6d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Aug 18 03:55:00 2025 GMT Not After : Aug 17 04:00:00 2026 GMT Subject: CN=26749A0CA2520AF4EAB143FC3AC2FBCBC9E3B4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:fa:b3:4d:31:88:f1:e8:27:4f:51:bf:68: 8c:8b:6d:75:f9:ce:fe:8e:c7:e4:a3:e9:17:e0:11: 80:11:e7:89:8c:7a:1a:81:a5:2c:d7:8a:6a:77:c7: c4:17:32:ec:e0:28:89:68:e9:8d:21:ce:c2:9a:1e: 9f:06:42:5c:08:15:23:90:bc:73:43:c5:f4:82:9d: 98:92:ca:25:17:1a:bb:5f:a4:ca:3b:96:50:60:04: eb:8f:5d:bc:ff:9d:9d:6d:32:10:6f:68:17:85:b6: 05:e9:ea:22:8d:4f:0b:18:d2:fe:e1:6d:f4:98:66: e2:98:1c:ca:61:ea:c1:1e:42:70:21:5a:89:46:d5: c5:36:a0:c0:9b:cd:14:36:ea:d5:c9:a9:ee:94:be: be:d9:5e:69:8a:ec:95:dc:08:f6:53:38:be:ac:7f: c6:0f:e2:b9:45:47:35:9b:39:42:2a:97:e5:ea:98: dd:ee:b3:b6:05:bc:f1:39:fe:26:86:ee:5b:5b:a4: 35:ee:54:ad:91:6f:d1:c4:01:3e:ab:d4:5c:44:cb: eb:aa:37:3b:2d:cb:89:c9:ce:b9:db:24:95:83:71: f6:8b:e2:92:b6:02:af:ee:80:1b:a5:01:8f:90:26: a7:8d:8f:5e:8c:f2:d5:11:d3:68:f0:42:3f:76:db: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:74:9A:0C:A2:52:0A:F4:EA:B1:43:FC:3A:C2:FB:CB:C9:E3:B4:A3 X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.156.0/24 Signature Algorithm: sha256WithRSAEncryption 59:7d:49:66:ed:b3:e1:42:5d:ac:89:0b:15:91:2a:8d:69:b5: 84:ab:99:2e:ca:82:69:ea:75:33:a0:83:74:6a:8b:d3:68:29: 36:22:7e:67:a3:1a:28:5b:90:74:85:2f:8f:2d:fb:bb:97:a1: ea:d5:97:24:db:70:9e:58:1d:ab:6b:c3:8a:34:9c:95:ac:87: 33:fc:9e:ae:09:32:bd:fc:5b:2c:83:7b:59:97:e4:98:ad:12: 10:68:95:fa:3c:8a:b6:1f:c5:22:33:e0:12:0f:b8:be:38:7d: 83:3c:78:a9:b7:e3:a6:c8:8d:1d:b5:29:16:ef:3e:47:7f:09: 75:d7:5b:04:a2:f6:d8:68:67:eb:df:3e:57:83:81:e4:12:80: a0:e8:80:73:17:77:1f:ac:b8:b6:4d:f7:6f:07:e5:0b:22:02: 41:95:2a:6c:1f:2b:ef:f3:44:28:0e:87:0a:c1:05:e8:75:7a: 63:21:e7:b2:5a:78:bd:da:58:c3:42:89:37:47:dd:c0:80:e2: fd:b7:d7:31:fd:da:92:3a:21:d7:84:66:d1:9d:d4:c7:d6:4b: 75:e9:e3:02:17:42:99:b8:85:3d:b9:b4:e6:5f:fe:79:6b:73: ca:93:d0:f5:6d:70:69:92:e2:48:58:d9:e8:dd:6e:b8:c4:84: ac:30:67:86 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbMBFmUxlg8YTw/luFpNvF+T7bTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNTA4MTgwMzU1MDBaFw0yNjA4MTcwNDAwMDBaMDMxMTAvBgNV BAMTKDI2NzQ5QTBDQTI1MjBBRjRFQUIxNDNGQzNBQzJGQkNCQzlFM0I0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfD/qzTTGI8egnT1G/aIyLbXX5 zv6Ox+Sj6RfgEYAR54mMehqBpSzXimp3x8QXMuzgKIlo6Y0hzsKaHp8GQlwIFSOQ vHNDxfSCnZiSyiUXGrtfpMo7llBgBOuPXbz/nZ1tMhBvaBeFtgXp6iKNTwsY0v7h bfSYZuKYHMph6sEeQnAhWolG1cU2oMCbzRQ26tXJqe6Uvr7ZXmmK7JXcCPZTOL6s f8YP4rlFRzWbOUIql+XqmN3us7YFvPE5/iaG7ltbpDXuVK2Rb9HEAT6r1FxEy+uq Nzsty4nJzrnbJJWDcfaL4pK2Aq/ugBulAY+QJqeNj16M8tUR02jwQj9221u7AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJnSaDKJSCvTqsUP8OsL7y8njtKMwHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhZmRkNmY5LWI3OTktNGE5Ni05 ZTJhLTFmZWY2OWJmYTU5Ny8wLzMxMzYzMDJlMzIzNTJlMzEzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmcMA0GCSqG SIb3DQEBCwUAA4IBAQBZfUlm7bPhQl2siQsVkSqNabWEq5kuyoJp6nUzoIN0aovT aCk2In5noxooW5B0hS+PLfu7l6Hq1Zck23CeWB2ra8OKNJyVrIcz/J6uCTK9/Fss g3tZl+SYrRIQaJX6PIq2H8UiM+ASD7i+OH2DPHipt+OmyI0dtSkW7z5Hfwl111sE ovbYaGfr3z5Xg4HkEoCg6IBzF3cfrLi2TfdvB+ULIgJBlSpsHyvv80QoDocKwQXo dXpjIeeyWni92ljDQok3R93AgOL9t9cx/dqSOiHXhGbRndTH1kt16eMCF0KZuIU9 ubTmX/55a3PKk9D1bXBpkuJIWNno3W64xISsMGeG -----END CERTIFICATE-----Generated at Sun Aug 24 07:22:21 2025 by rpki-client