$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa File: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (raw, json) Hash identifier: +OevkhB7r44OnQm82LNlP8LRDK9Y7/yxi7S+eG9f5A4= Subject key identifier: B7:0F:AA:07:A2:57:6D:02:A3:A5:94:A4:7C:9E:35:E5:97:BD:E4:A9 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 0AE51B295EEC7B4D9C2BD7DE856C38EDBD45AD35 Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa Signing time: Sun 22 Mar 2026 05:00:03 +0000 ROA not before: Sun 22 Mar 2026 04:55:03 +0000 ROA not after: Sun 21 Mar 2027 05:00:03 +0000 asID: 152754 IP address blocks: 160.19.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e5:1b:29:5e:ec:7b:4d:9c:2b:d7:de:85:6c:38:ed:bd:45:ad:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Mar 22 04:55:03 2026 GMT Not After : Mar 21 05:00:03 2027 GMT Subject: CN=B70FAA07A2576D02A3A594A47C9E35E597BDE4A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3e:c6:66:e2:83:04:ae:55:a4:8b:09:9d:f3: 4e:fe:b1:73:18:eb:42:b2:94:79:f5:98:8c:53:fa: 43:8e:2f:0c:f3:da:5a:b3:8d:7c:79:f0:73:06:3b: c0:9e:1e:36:6f:f4:6e:a4:15:3b:9c:6b:49:c8:26: 48:86:a9:8e:ff:fb:74:d3:c1:ad:55:85:f2:6e:9e: 9e:20:15:42:a5:df:81:83:65:cd:a4:f8:62:06:a2: 23:3c:73:f6:a9:96:5e:9c:b3:54:43:c4:a3:ee:70: fa:c0:31:37:6a:a1:d4:1e:7c:28:44:01:61:6f:71: 55:93:f8:fd:e2:51:55:f4:61:bd:98:53:a3:f3:31: a2:d7:76:e6:30:55:6e:53:95:c2:24:ba:20:77:bb: 4a:1b:91:05:56:03:98:16:df:79:e6:7e:b6:d6:2a: 4c:56:79:49:4d:51:b1:d4:d0:3c:9f:a0:c1:e3:43: 76:e1:0b:ee:eb:90:6d:75:7c:4f:ac:0f:89:5e:cf: e9:ce:12:b5:1d:ec:f7:ee:7f:01:1d:31:98:11:22: e4:10:9f:7c:8b:6b:d1:8a:7a:cf:02:1b:d7:f2:d8: 90:35:82:54:3a:36:6f:17:19:d9:f5:e5:5f:ba:ba: 38:f5:b7:14:dd:1f:36:ba:8f:ca:b6:bc:d5:33:b3: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0F:AA:07:A2:57:6D:02:A3:A5:94:A4:7C:9E:35:E5:97:BD:E4:A9 X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38352e302f32342d3234203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.85.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:1c:03:97:5f:85:f2:a9:35:ac:2d:97:0f:ec:af:1b:c6:90: e4:6a:4c:f5:c9:54:70:7b:95:da:e0:17:6c:8d:ab:d6:10:43: b2:c5:93:4b:d9:09:fc:92:50:5d:67:c0:77:e6:61:48:1c:ae: 08:bf:ec:cb:1a:1b:e0:5f:cc:f5:70:d7:ba:16:58:ba:2f:5f: 59:0e:8f:f9:66:8f:40:79:92:1f:06:52:d2:22:e8:3a:d9:2f: 2f:3a:2f:dd:22:c7:03:1d:56:93:b6:68:63:43:81:f6:2e:db: fc:7b:73:90:ec:63:cf:2b:ca:a9:9a:cf:37:64:88:54:e3:99: 38:0b:d7:65:06:74:4e:d9:af:b0:27:e8:6a:28:55:ad:03:46: ac:c7:bf:2e:d6:63:f7:cd:92:a7:40:bb:66:25:98:c7:32:bf: 4d:fd:ff:19:05:9a:17:ea:13:a5:5a:ac:1c:20:f5:15:d2:7d: d9:2b:00:4d:f1:26:d4:d4:6d:18:f8:6e:b9:3d:a0:90:c7:95: 45:f5:ff:53:fc:50:45:f7:df:c0:39:d1:dd:83:80:b9:5e:17: aa:b4:f7:10:4b:17:85:cb:00:2f:9e:09:10:90:e3:8c:48:38: c5:18:c0:47:bb:36:4a:a6:ee:16:67:08:7b:36:28:a7:70:63: 5c:ea:43:7a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCuUbKV7se02cK9fehWw47b1FrTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNjAzMjIwNDU1MDNaFw0yNzAzMjEwNTAwMDNaMDMxMTAvBgNV BAMTKEI3MEZBQTA3QTI1NzZEMDJBM0E1OTRBNDdDOUUzNUU1OTdCREU0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSPsZm4oMErlWkiwmd807+sXMY 60KylHn1mIxT+kOOLwzz2lqzjXx58HMGO8CeHjZv9G6kFTuca0nIJkiGqY7/+3TT wa1VhfJunp4gFUKl34GDZc2k+GIGoiM8c/apll6cs1RDxKPucPrAMTdqodQefChE AWFvcVWT+P3iUVX0Yb2YU6PzMaLXduYwVW5TlcIkuiB3u0obkQVWA5gW33nmfrbW KkxWeUlNUbHU0DyfoMHjQ3bhC+7rkG11fE+sD4lez+nOErUd7PfufwEdMZgRIuQQ n3yLa9GKes8CG9fy2JA1glQ6Nm8XGdn15V+6ujj1txTdHza6j8q2vNUzsxo5AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUtw+qB6JXbQKjpZSkfJ415Ze95KkwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JhMDk4ZjAwLWEwYTAtNGI1Yy05 ZTgzLTYwNjczNzEyOGNiMS8wLzMxMzYzMDJlMzEzOTJlMzgzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATVTANBgkqhkiG 9w0BAQsFAAOCAQEADBwDl1+F8qk1rC2XD+yvG8aQ5GpM9clUcHuV2uAXbI2r1hBD ssWTS9kJ/JJQXWfAd+ZhSByuCL/syxob4F/M9XDXuhZYui9fWQ6P+WaPQHmSHwZS 0iLoOtkvLzov3SLHAx1Wk7ZoY0OB9i7b/HtzkOxjzyvKqZrPN2SIVOOZOAvXZQZ0 TtmvsCfoaihVrQNGrMe/LtZj982Sp0C7ZiWYxzK/Tf3/GQWaF+oTpVqsHCD1FdJ9 2SsATfEm1NRtGPhuuT2gkMeVRfX/U/xQRfffwDnR3YOAuV4XqrT3EEsXhcsAL54J EJDjjEg4xRjAR7s2SqbuFmcIezYop3BjXOpDeg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:51 2026 by rpki-client