$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa File: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (raw, json) Hash identifier: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ= Subject key identifier: 58:3C:F1:5F:E2:2E:46:37:CC:5D:52:D7:98:BD:E5:C7:69:2A:A0:D7 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 72DF766A29CCC8283FE7DC964793E27A57513251 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa Signing time: Fri 22 Aug 2025 12:00:00 +0000 ROA not before: Fri 22 Aug 2025 11:55:00 +0000 ROA not after: Fri 21 Aug 2026 12:00:00 +0000 asID: 152787 IP address blocks: 160.19.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:df:76:6a:29:cc:c8:28:3f:e7:dc:96:47:93:e2:7a:57:51:32:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Aug 22 11:55:00 2025 GMT Not After : Aug 21 12:00:00 2026 GMT Subject: CN=583CF15FE22E4637CC5D52D798BDE5C7692AA0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:77:24:cb:2f:45:d7:c3:17:5d:70:fc:55: e0:e2:b2:99:63:be:a8:28:c8:04:d8:c8:77:f9:9b: 55:ab:a1:42:4f:83:78:37:cc:fb:ce:67:5e:a1:24: 0c:72:a0:c8:4c:a7:62:fa:95:1f:41:d6:75:f7:31: 15:d9:0d:27:74:bd:11:0d:fa:26:f9:6e:87:94:91: d9:7a:59:64:88:c0:e4:04:e5:9f:88:29:74:c9:02: 4a:f7:96:59:53:1d:a3:77:8e:de:41:a2:7d:37:75: 67:d0:91:2c:6b:0f:d6:fb:b5:1a:e9:48:94:5f:d2: a3:0e:64:4f:e1:46:26:d2:f9:c0:99:5e:ef:9e:ea: 9f:17:8c:3b:1c:99:dd:29:cd:44:e2:d8:e1:2d:8c: ed:f9:f5:bc:da:c6:e2:ce:15:52:d5:32:a9:dd:d3: 78:ec:1f:fc:db:6f:6a:4c:19:6a:0b:14:3c:e4:65: 74:ba:80:36:2c:df:c2:40:aa:e7:66:ef:a3:d7:02: 13:bb:ec:de:f4:12:bd:14:7d:18:a0:1f:30:28:66: b8:b2:dc:b4:6a:de:6f:e3:8f:0e:09:10:70:15:50: 69:08:0a:68:48:ae:59:36:23:8e:a0:a8:23:b2:0c: 7b:82:2a:0d:2b:f2:3f:53:d0:bd:fb:32:5a:f3:51: b2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:3C:F1:5F:E2:2E:46:37:CC:5D:52:D7:98:BD:E5:C7:69:2A:A0:D7 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.178.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:c2:2b:d9:6f:29:1e:ed:b1:f2:b6:08:6e:af:d9:28:db:25: 86:23:55:4b:6a:97:b1:ef:b8:21:f1:12:97:48:fa:4e:a3:4d: 62:b8:98:a0:1b:91:c4:3f:c0:aa:b6:c1:71:85:ad:c2:a2:4f: ad:39:52:7d:31:aa:10:bd:5b:51:38:49:4b:96:77:5d:a2:5f: 98:43:ff:42:4a:e7:4e:7d:76:fb:7f:b3:83:32:14:21:df:23: 41:7c:a3:c4:9b:68:53:47:21:08:5b:00:b2:47:0e:9c:c8:f7: bb:a7:6f:fd:49:72:59:d8:3d:14:a9:08:b4:c2:d2:cf:a4:97: 68:69:8d:91:9d:27:be:c6:6c:17:d5:05:11:92:cf:40:f9:1f: 4c:2f:30:77:8b:51:8d:bb:ff:54:de:8f:1a:a9:5b:62:c8:f5: 5f:2e:35:f0:2d:68:13:fa:9c:d7:15:1c:99:23:bc:b4:c2:b6: e7:f0:6c:29:c4:17:02:c0:c8:1d:a6:b6:b4:7f:68:e8:47:96: 9f:5e:ac:cb:b6:b1:c3:a2:fb:a6:b7:5f:01:bd:cc:0b:5d:b4: 83:4a:65:7a:55:fd:58:18:01:d2:0e:2b:00:dc:98:e1:e6:e8: 04:12:57:54:ef:8f:49:34:3e:5e:ba:b6:ae:29:df:66:9b:0c: df:13:76:e4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUct92ainMyCg/59yWR5PieldRMlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNTA4MjIxMTU1MDBaFw0yNjA4MjExMjAwMDBaMDMxMTAvBgNV BAMTKDU4M0NGMTVGRTIyRTQ2MzdDQzVENTJENzk4QkRFNUM3NjkyQUEwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwXckyy9F18MXXXD8VeDisplj vqgoyATYyHf5m1WroUJPg3g3zPvOZ16hJAxyoMhMp2L6lR9B1nX3MRXZDSd0vREN +ib5boeUkdl6WWSIwOQE5Z+IKXTJAkr3lllTHaN3jt5Bon03dWfQkSxrD9b7tRrp SJRf0qMOZE/hRibS+cCZXu+e6p8XjDscmd0pzUTi2OEtjO359bzaxuLOFVLVMqnd 03jsH/zbb2pMGWoLFDzkZXS6gDYs38JAqudm76PXAhO77N70Er0UfRigHzAoZriy 3LRq3m/jjw4JEHAVUGkICmhIrlk2I46gqCOyDHuCKg0r8j9T0L37MlrzUbJrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWDzxX+IuRjfMXVLXmL3lx2kqoNcwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkYjAxMzBkLWNhYTMtNDc2Zi1h ZjgxLWJhNzIyMzMwYmUyYy8wLzMxMzYzMDJlMzEzOTJlMzEzNzM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBOyMA0GCSqG SIb3DQEBCwUAA4IBAQAMwivZbyke7bHytghur9ko2yWGI1VLapex77gh8RKXSPpO o01iuJigG5HEP8CqtsFxha3Cok+tOVJ9MaoQvVtROElLlnddol+YQ/9CSudOfXb7 f7ODMhQh3yNBfKPEm2hTRyEIWwCyRw6cyPe7p2/9SXJZ2D0UqQi0wtLPpJdoaY2R nSe+xmwX1QURks9A+R9MLzB3i1GNu/9U3o8aqVtiyPVfLjXwLWgT+pzXFRyZI7y0 wrbn8GwpxBcCwMgdpra0f2joR5afXqzLtrHDovumt18BvcwLXbSDSmV6Vf1YGAHS DisA3Jjh5ugEEldU749JND5eurauKd9mmwzfE3bk -----END CERTIFICATE-----Generated at Sun Aug 24 08:20:14 2025 by rpki-client