$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa File: 3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa (raw, json) Hash identifier: eyJcLgwqfLDN5yf54+8qcXB3Eo84ClH1ySCmSpCcr34= Subject key identifier: A0:53:9B:FA:0C:06:AF:1E:A5:DB:39:CF:1E:8F:B7:D1:DF:9B:22:8D Certificate issuer: /CN=D237DEA20D73B3F216B98336BA8307D913DDB257 Certificate serial: 6763CE6C9323021C7DD2918001AF4C8A75FEC1BE Authority key identifier: D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa Signing time: Fri 03 Oct 2025 07:02:56 +0000 ROA not before: Fri 03 Oct 2025 06:57:56 +0000 ROA not after: Fri 02 Oct 2026 07:02:56 +0000 asID: 152790 IP address blocks: 160.20.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:63:ce:6c:93:23:02:1c:7d:d2:91:80:01:af:4c:8a:75:fe:c1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D237DEA20D73B3F216B98336BA8307D913DDB257 Validity Not Before: Oct 3 06:57:56 2025 GMT Not After : Oct 2 07:02:56 2026 GMT Subject: CN=A0539BFA0C06AF1EA5DB39CF1E8FB7D1DF9B228D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fc:6d:3b:0d:fb:ee:54:0c:01:31:ab:3e:3b: e9:84:7d:c5:31:17:78:a2:19:ae:47:aa:ce:28:18: 08:52:cd:ad:9f:43:d6:3b:63:b0:b0:34:af:96:00: 20:1a:f9:5d:96:11:e9:cf:cd:d5:c3:70:95:cf:06: 9e:9d:eb:04:55:cf:85:f4:f4:c9:b5:18:d3:a1:be: b5:9f:cb:a2:d5:14:23:b7:f2:f7:ee:4c:d0:c7:7a: 3d:fd:20:72:ba:0e:98:dd:eb:42:90:9c:0b:83:3d: ac:eb:4b:5c:e3:4c:71:c9:1e:07:95:dc:19:07:6c: 27:e8:9c:5e:47:f2:ad:0e:36:6b:c4:f6:21:94:03: 28:fa:26:c9:55:9a:41:4f:d8:2b:bd:c8:b3:ba:39: d3:fc:e1:f2:6c:1c:6e:f8:01:eb:9f:4b:8b:a7:99: 19:68:cf:6f:1c:bc:52:c3:5f:cd:a3:32:98:60:e7: ce:7b:36:9d:cc:9b:98:70:2b:e3:9a:6b:cc:43:bd: 88:55:df:c8:14:63:16:43:25:6c:b4:86:2b:9a:c8: 96:22:ec:72:02:c8:98:7e:8a:e1:c5:6f:28:7c:d6: ce:58:11:da:36:3c:e2:56:ed:dd:c1:1b:b9:9a:a7: 0d:24:e6:4b:01:b8:3b:ed:44:00:aa:c0:fd:b3:43: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:53:9B:FA:0C:06:AF:1E:A5:DB:39:CF:1E:8F:B7:D1:DF:9B:22:8D X509v3 Authority Key Identifier: keyid:D2:37:DE:A2:0D:73:B3:F2:16:B9:83:36:BA:83:07:D9:13:DD:B2:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/D237DEA20D73B3F216B98336BA8307D913DDB257.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D237DEA20D73B3F216B98336BA8307D913DDB257.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/0/3136302e32302e3130352e302f32342d3234203d3e20313532373930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.105.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:4b:43:cd:d1:35:eb:60:4b:c2:13:a8:56:f5:08:4f:ff:76: 88:7d:e2:bf:a9:b0:6d:aa:d6:19:5d:78:b4:54:af:6f:87:89: af:b9:d2:42:d4:cc:15:95:1b:1f:1f:95:7e:9c:67:a8:12:6e: 05:5d:23:0f:ce:dc:4c:fe:80:6e:47:e4:ad:3b:45:ce:51:25: 7a:00:1b:92:de:40:a3:47:6b:ab:e8:75:85:e7:bd:d7:bf:15: 04:dd:6d:9d:34:f9:45:e0:7f:a6:20:0c:44:93:c5:ee:03:57: 0c:2a:e3:97:ee:26:51:10:9b:e7:76:44:a4:e0:bc:b0:d2:d4: b2:af:e7:e0:c9:8b:6a:77:d8:05:28:f5:15:dd:f0:30:51:02: 39:5c:08:9f:54:59:53:2d:b2:a3:cd:87:73:a6:8b:19:88:a9: be:76:52:16:49:c1:4d:2f:b6:e7:e5:54:0e:61:24:da:68:c3: 8f:72:57:75:5f:c8:41:18:3d:ba:5d:2a:6c:aa:96:a9:25:0f: 8b:8a:d9:e2:01:7f:ce:1f:1e:02:46:f0:cb:6c:52:e1:b6:59: 58:c3:11:a5:b9:73:cf:73:11:b2:c9:34:85:00:f7:5d:27:fb: a8:e5:17:6f:a7:d2:d6:59:85:56:46:41:52:fb:43:e4:03:da: 16:2f:ca:d2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZ2PObJMjAhx90pGAAa9MinX+wb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIzN0RFQTIwRDczQjNGMjE2Qjk4MzM2QkE4MzA3RDkx M0REQjI1NzAeFw0yNTEwMDMwNjU3NTZaFw0yNjEwMDIwNzAyNTZaMDMxMTAvBgNV BAMTKEEwNTM5QkZBMEMwNkFGMUVBNURCMzlDRjFFOEZCN0QxREY5QjIyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/G07DfvuVAwBMas+O+mEfcUx F3iiGa5Hqs4oGAhSza2fQ9Y7Y7CwNK+WACAa+V2WEenPzdXDcJXPBp6d6wRVz4X0 9Mm1GNOhvrWfy6LVFCO38vfuTNDHej39IHK6Dpjd60KQnAuDPazrS1zjTHHJHgeV 3BkHbCfonF5H8q0ONmvE9iGUAyj6JslVmkFP2Cu9yLO6OdP84fJsHG74AeufS4un mRloz28cvFLDX82jMphg5857Np3Mm5hwK+Oaa8xDvYhV38gUYxZDJWy0hiuayJYi 7HICyJh+iuHFbyh81s5YEdo2POJW7d3BG7mapw0k5ksBuDvtRACqwP2zQzwVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoFOb+gwGrx6l2znPHo+30d+bIo0wHwYDVR0j BBgwFoAU0jfeog1zs/IWuYM2uoMH2RPdslcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMC9EMjM3REVBMjBE NzNCM0YyMTZCOTgzMzZCQTgzMDdEOTEzRERCMjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDIzN0RFQTIwRDczQjNGMjE2Qjk4MzM2QkE4MzA3RDkxM0RE QjI1Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiYjVmYTRhLWJlYTYtNDY0Zi1i NDA5LTExZDlhMzc2MWE2Yy8wLzMxMzYzMDJlMzIzMDJlMzEzMDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBRpMA0GCSqG SIb3DQEBCwUAA4IBAQCKS0PN0TXrYEvCE6hW9QhP/3aIfeK/qbBtqtYZXXi0VK9v h4mvudJC1MwVlRsfH5V+nGeoEm4FXSMPztxM/oBuR+StO0XOUSV6ABuS3kCjR2ur 6HWF573XvxUE3W2dNPlF4H+mIAxEk8XuA1cMKuOX7iZREJvndkSk4Lyw0tSyr+fg yYtqd9gFKPUV3fAwUQI5XAifVFlTLbKjzYdzposZiKm+dlIWScFNL7bn5VQOYSTa aMOPcld1X8hBGD26XSpsqpapJQ+LitniAX/OHx4CRvDLbFLhtllYwxGluXPPcxGy yTSFAPddJ/uo5Rdvp9LWWYVWRkFS+0PkA9oWL8rS -----END CERTIFICATE-----Generated at Tue Oct 21 00:47:58 2025 by rpki-client