$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa File: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (raw, json) Hash identifier: 5aPZi9EHvbfyOxIPMTjzibe1Bxih6lwkA1KW+hUQT4E= Subject key identifier: EB:2E:8C:A8:39:58:69:10:F3:68:96:43:C0:E2:91:5F:BE:1B:50:B8 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 6BD000E7E152F1501B507A18FC597FDAF73461B7 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa Signing time: Thu 18 Sep 2025 09:02:55 +0000 ROA not before: Thu 18 Sep 2025 08:57:55 +0000 ROA not after: Thu 17 Sep 2026 09:02:55 +0000 asID: 152798 IP address blocks: 160.22.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d0:00:e7:e1:52:f1:50:1b:50:7a:18:fc:59:7f:da:f7:34:61:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: Sep 18 08:57:55 2025 GMT Not After : Sep 17 09:02:55 2026 GMT Subject: CN=EB2E8CA839586910F3689643C0E2915FBE1B50B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:c9:8c:ff:f0:48:b9:bf:50:e7:63:37:b1: 67:6a:00:d2:c7:d0:a8:2e:77:4d:16:b3:35:16:a7: c1:8c:f3:21:2e:a7:90:0d:46:67:b3:01:8a:88:8b: 76:30:83:97:35:00:1d:c4:20:cb:85:31:44:4e:b1: 88:74:76:3f:71:26:8a:bf:90:ad:8e:17:b6:fe:24: c6:a6:e4:d2:8a:b1:8c:ce:af:cc:d1:77:c1:ff:78: a4:5b:49:9d:c1:f8:40:29:f6:84:2f:5a:e3:3b:f5: 0c:b3:f4:bf:d4:f5:05:4f:53:9f:a8:be:20:0d:aa: 30:32:22:f0:40:b2:29:42:ab:e1:b9:cc:0c:04:d6: a5:53:4d:6b:b2:a1:9a:90:b4:15:89:63:a9:80:11: 19:01:bb:b1:aa:8a:33:05:fd:bf:fc:7f:54:2e:ad: 4c:b6:43:a5:b3:ba:68:c3:a4:7e:0d:dd:be:47:c9: 9c:60:39:96:76:65:d7:cb:8a:a0:fa:22:fb:d8:5c: e5:08:79:cd:8c:86:e1:5a:0e:69:b3:6f:ee:00:11: a0:cc:ef:05:f8:f9:79:7f:9d:c2:39:5a:f6:8d:8f: 33:d9:1f:cd:3c:ef:53:cb:90:bd:af:67:e2:cc:e7: 6f:14:b9:c3:7f:92:20:82:50:17:13:5e:a9:b6:f2: 40:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:8C:A8:39:58:69:10:F3:68:96:43:C0:E2:91:5F:BE:1B:50:B8 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.31.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:59:0d:f1:3a:e1:8e:61:e4:ce:c7:24:87:c5:ad:a1:d6:0c: 69:b2:69:ee:b7:f5:3a:c2:2a:44:04:ff:e8:8f:89:e5:03:7d: 3b:85:d0:3d:25:9d:88:57:c2:9c:24:1b:b6:d5:27:a2:52:2c: 4a:67:64:09:d3:9d:cd:bb:48:43:6a:e9:f8:91:cb:c6:d3:9a: 52:ef:74:23:06:2f:63:2c:8b:90:6b:1d:59:b3:f0:f6:26:c4: 5b:f0:31:b4:20:a6:ec:0c:ba:e4:60:65:f4:d5:80:e9:ba:65: 50:76:30:b4:a3:69:3a:c8:74:fa:11:bf:a2:05:00:66:0e:90: 5e:11:2a:ca:92:35:21:f7:62:8f:9b:e7:df:a0:d8:2c:fb:c6: e4:4f:7e:b1:b0:dd:27:52:9b:2c:0f:f4:ff:99:7f:99:67:ea: 3d:8b:49:55:e4:ef:50:2e:61:db:9b:84:57:d2:62:d7:11:0f: 71:3c:fa:cf:40:67:c3:42:6d:08:73:e1:a7:d2:92:3e:42:d2: 7a:66:c9:7f:ca:32:56:4e:77:3e:72:a9:31:8e:86:10:dc:f7: 1f:d9:c2:34:52:0a:e7:fc:d0:32:cf:3f:54:96:e2:44:c3:d3: b5:b1:18:7f:94:eb:a8:07:38:dc:fa:20:87:c6:ec:0d:c8:ea: 49:c4:ee:1e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUa9AA5+FS8VAbUHoY/Fl/2vc0YbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA5MTgwODU3NTVaFw0yNjA5MTcwOTAyNTVaMDMxMTAvBgNV BAMTKEVCMkU4Q0E4Mzk1ODY5MTBGMzY4OTY0M0MwRTI5MTVGQkUxQjUwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuMmM//BIub9Q52M3sWdqANLH 0Kgud00WszUWp8GM8yEup5ANRmezAYqIi3Ywg5c1AB3EIMuFMUROsYh0dj9xJoq/ kK2OF7b+JMam5NKKsYzOr8zRd8H/eKRbSZ3B+EAp9oQvWuM79Qyz9L/U9QVPU5+o viANqjAyIvBAsilCq+G5zAwE1qVTTWuyoZqQtBWJY6mAERkBu7GqijMF/b/8f1Qu rUy2Q6WzumjDpH4N3b5HyZxgOZZ2ZdfLiqD6IvvYXOUIec2MhuFaDmmzb+4AEaDM 7wX4+Xl/ncI5WvaNjzPZH80871PLkL2vZ+LM528UucN/kiCCUBcTXqm28kAVAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU6y6MqDlYaRDzaJZDwOKRX74bULgwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1ZWZjNDEzLTI3MDktNDgzZS1h MzE0LWM1ZDA2NjNkZjkzMi8wLzMxMzYzMDJlMzIzMjJlMzMzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWHzANBgkqhkiG 9w0BAQsFAAOCAQEALlkN8TrhjmHkzsckh8WtodYMabJp7rf1OsIqRAT/6I+J5QN9 O4XQPSWdiFfCnCQbttUnolIsSmdkCdOdzbtIQ2rp+JHLxtOaUu90IwYvYyyLkGsd WbPw9ibEW/AxtCCm7Ay65GBl9NWA6bplUHYwtKNpOsh0+hG/ogUAZg6QXhEqypI1 Ifdij5vn36DYLPvG5E9+sbDdJ1KbLA/0/5l/mWfqPYtJVeTvUC5h25uEV9Ji1xEP cTz6z0Bnw0JtCHPhp9KSPkLSembJf8oyVk53PnKpMY6GENz3H9nCNFIK5/zQMs8/ VJbiRMPTtbEYf5TrqAc43Pogh8bsDcjqScTuHg== -----END CERTIFICATE-----Generated at Tue Oct 21 12:01:06 2025 by rpki-client