$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313439373436.roa File: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (raw, json) Hash identifier: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8= Subject key identifier: 53:05:31:F9:9D:81:46:70:1E:8D:63:CB:B3:D4:13:60:C6:23:7C:57 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 3AE181F2642F3E4C2047E242AFDAFC45AB838145 Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313439373436.roa Signing time: Wed 03 Sep 2025 07:00:00 +0000 ROA not before: Wed 03 Sep 2025 06:55:00 +0000 ROA not after: Wed 02 Sep 2026 07:00:00 +0000 asID: 149746 IP address blocks: 160.25.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 01:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e1:81:f2:64:2f:3e:4c:20:47:e2:42:af:da:fc:45:ab:83:81:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Sep 3 06:55:00 2025 GMT Not After : Sep 2 07:00:00 2026 GMT Subject: CN=530531F99D8146701E8D63CBB3D41360C6237C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:18:58:90:7b:15:75:97:ad:e5:ed:02:24:bc: 41:0d:3a:5e:01:7d:13:56:52:36:dc:d1:50:d5:b0: 8d:61:aa:fe:0d:f7:38:4b:13:db:8c:c8:8b:de:93: e9:6d:e8:d6:0a:88:8c:7c:09:a6:01:bf:e2:cd:e0: ec:c7:57:1d:43:14:1b:bd:67:37:05:6e:1e:b7:ca: 0a:36:90:8e:3b:15:82:e3:f1:ac:6d:ee:99:c8:28: a2:45:02:7d:60:52:aa:cf:c0:57:39:12:4b:61:29: 41:8a:19:e7:74:55:57:69:0c:05:b8:48:87:12:ea: d4:9c:ba:81:42:18:32:ad:b8:96:2a:b8:b8:69:0b: 5b:da:16:89:f1:a3:93:f1:67:99:8e:16:27:33:13: e8:a5:47:8e:7c:6e:f5:2f:67:22:e1:9f:3e:c1:96: 49:db:3c:8a:7d:79:3d:2d:31:ff:dd:17:4a:0c:e3: dd:50:cb:af:42:8e:0e:19:64:4f:0f:94:32:de:cf: 95:eb:54:b0:d8:fe:e5:7f:ac:07:77:ec:70:39:c0: d1:96:a0:48:8f:c8:3d:09:44:1b:34:06:da:db:53: e6:0d:1f:30:cf:dc:bd:6b:22:fc:87:ff:3f:42:23: 8a:c4:6e:eb:9e:82:19:be:92:8f:1a:57:c5:62:ac: b4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:31:F9:9D:81:46:70:1E:8D:63:CB:B3:D4:13:60:C6:23:7C:57 X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/3136302e32352e35312e302f32342d3234203d3e20313439373436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.51.0/24 Signature Algorithm: sha256WithRSAEncryption a7:e6:8d:a4:80:a2:b0:1e:88:0e:0a:61:e9:79:91:a4:94:ac: 7d:21:7d:8c:0a:e9:38:76:08:f7:6b:81:46:8e:e5:82:23:30: d3:7d:d4:3e:3b:fe:2f:4d:0e:50:e4:99:5e:68:1a:76:18:7a: 01:1d:17:8e:3f:0c:66:23:b7:e7:f9:7d:32:4e:f8:31:e8:af: 10:24:37:27:5b:1d:28:1f:22:8c:34:a1:79:32:44:a4:1d:d0: 47:c2:a0:2d:bc:aa:30:aa:c9:c4:25:92:43:b4:e3:6c:f4:39: 50:6e:73:b8:7a:60:32:44:c7:1d:c7:41:f5:65:2c:c1:56:1e: 9b:18:26:c3:ab:7c:11:7a:9c:f9:76:c1:72:ee:41:ae:ea:3c: 2d:f4:c9:04:87:f8:19:27:18:60:24:1c:de:c8:e4:f9:f0:3d: 59:3e:03:25:4d:82:fe:10:48:ac:ba:0b:10:74:02:a5:72:ef: e6:e4:47:ab:da:9d:4d:24:24:21:60:ff:c6:2f:1e:cc:b9:4b: b2:c4:64:f2:b4:0e:ed:1c:a0:1d:5b:71:30:ef:a0:66:c5:5d: 7a:86:0c:a9:b0:3f:ed:da:b6:8a:f2:ff:1a:a6:ac:24:48:3e: 62:25:eb:31:02:83:98:8b:fb:ff:6a:f1:bb:93:07:fc:29:5c: cd:6b:d9:71 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUOuGB8mQvPkwgR+JCr9r8RauDgUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNTA5MDMwNjU1MDBaFw0yNjA5MDIwNzAwMDBaMDMxMTAvBgNV BAMTKDUzMDUzMUY5OUQ4MTQ2NzAxRThENjNDQkIzRDQxMzYwQzYyMzdDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLGFiQexV1l63l7QIkvEENOl4B fRNWUjbc0VDVsI1hqv4N9zhLE9uMyIvek+lt6NYKiIx8CaYBv+LN4OzHVx1DFBu9 ZzcFbh63ygo2kI47FYLj8axt7pnIKKJFAn1gUqrPwFc5EkthKUGKGed0VVdpDAW4 SIcS6tScuoFCGDKtuJYquLhpC1vaFonxo5PxZ5mOFiczE+ilR458bvUvZyLhnz7B lknbPIp9eT0tMf/dF0oM491Qy69Cjg4ZZE8PlDLez5XrVLDY/uV/rAd37HA5wNGW oEiPyD0JRBs0BtrbU+YNHzDP3L1rIvyH/z9CI4rEbuueghm+ko8aV8VirLRrAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUUwUx+Z2BRnAejWPLs9QTYMYjfFcwHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ5ZWNhNTBiLTU3MjItNDkxOC04 MzE0LTg1OWQzYzFmNTVhMi8wLzMxMzYzMDJlMzIzNTJlMzUzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzOTM3MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAZMzANBgkqhkiG 9w0BAQsFAAOCAQEAp+aNpICisB6IDgph6XmRpJSsfSF9jArpOHYI92uBRo7lgiMw 033UPjv+L00OUOSZXmgadhh6AR0Xjj8MZiO35/l9Mk74MeivECQ3J1sdKB8ijDSh eTJEpB3QR8KgLbyqMKrJxCWSQ7TjbPQ5UG5zuHpgMkTHHcdB9WUswVYemxgmw6t8 EXqc+XbBcu5Bruo8LfTJBIf4GScYYCQc3sjk+fA9WT4DJU2C/hBIrLoLEHQCpXLv 5uRHq9qdTSQkIWD/xi8ezLlLssRk8rQO7RygHVtxMO+gZsVdeoYMqbA/7dq2ivL/ GqasJEg+YiXrMQKDmIv7/2rxu5MH/ClczWvZcQ== -----END CERTIFICATE-----Generated at Mon Sep 8 12:15:41 2025 by rpki-client