$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa File: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (raw, json) Hash identifier: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU= Subject key identifier: 7C:D7:3D:4D:7B:D0:85:40:25:7D:21:F4:83:D1:D9:76:25:B2:8D:F9 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 40E7AD55C07C4E1F1224D70D5648BE5147240C8E Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa Signing time: Sun 03 May 2026 02:28:26 +0000 ROA not before: Sun 03 May 2026 02:23:26 +0000 ROA not after: Sun 02 May 2027 02:28:26 +0000 asID: 153091 IP address blocks: 160.25.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e7:ad:55:c0:7c:4e:1f:12:24:d7:0d:56:48:be:51:47:24:0c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: May 3 02:23:26 2026 GMT Not After : May 2 02:28:26 2027 GMT Subject: CN=7CD73D4D7BD08540257D21F483D1D97625B28DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3c:a6:dd:b0:5d:21:34:53:f1:54:6b:c0:db: ac:9b:98:ca:a2:1a:b3:d5:cb:c1:84:00:22:e1:bb: 8f:20:fb:5d:03:da:f5:2b:bb:7e:7f:7d:0d:1f:88: 50:51:1d:49:9e:d0:78:b1:0e:f5:00:de:73:36:2e: 43:a2:07:73:88:d7:68:8b:e9:14:fc:aa:6d:7f:7b: 06:0e:93:0a:33:e7:86:4d:3b:fa:24:68:14:33:aa: 66:b2:a7:5e:2a:31:92:21:7c:4b:bb:5f:7a:76:77: eb:15:76:92:7d:ce:89:c1:1e:39:4d:7d:bf:36:75: 7e:8d:63:81:e0:19:0c:c5:79:e0:81:b9:bd:07:86: a5:c8:fa:2d:05:e0:f1:1d:2a:8c:e5:16:bd:c5:59: a0:ec:d9:55:f0:c9:5e:24:f4:d7:7b:64:ae:7f:90: 55:2a:5d:0a:73:36:a6:88:a4:c7:ec:c0:e7:6c:18: 51:8f:c0:f9:71:94:e1:ea:d0:d6:a8:78:ce:7f:88: 56:c0:5d:1a:9e:bd:5a:a5:e3:ec:fa:2a:71:6f:19: de:85:fd:37:a3:56:f2:61:1d:76:59:87:d2:99:d4: 50:05:c1:63:19:9b:57:2f:cb:99:18:23:72:25:3f: 3e:c0:21:6e:91:1c:e2:61:42:7c:1c:76:29:f0:3b: 33:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D7:3D:4D:7B:D0:85:40:25:7D:21:F4:83:D1:D9:76:25:B2:8D:F9 X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.248.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:f5:7a:88:a7:7a:cf:de:c9:39:0d:cf:b5:17:42:3c:09:cb: d4:72:72:4a:c6:ab:8e:04:e3:43:ee:d3:cf:2b:b2:16:a6:58: 85:77:33:ae:58:6d:de:26:35:b7:f2:00:f6:af:69:ac:41:d8: 9d:18:fc:d3:aa:7e:98:57:6f:74:08:f6:2c:1d:87:33:39:82: 59:b6:81:07:9a:bc:a3:8c:ce:54:0b:91:4d:4c:48:4c:be:5c: eb:74:45:0c:59:83:96:42:1f:d0:c0:2f:a3:60:c7:d2:c3:80: 5c:12:55:a1:25:bb:8f:3a:e4:37:11:dc:2a:34:2e:3c:67:9e: 82:7f:c1:4d:e4:b7:7d:a4:70:35:35:13:5e:ab:4b:8b:ac:f7: f0:e3:a9:57:31:45:de:4e:d2:1f:29:50:e0:2b:6b:09:d3:d1: ba:c2:aa:4b:6e:60:9f:c9:b1:8b:2f:34:cd:b0:2b:bc:ad:4f: 39:26:29:8d:0f:a0:a5:28:6f:d3:7e:8b:35:19:34:35:11:48: 45:4c:15:29:fd:f6:e2:0f:b5:d9:73:fa:9e:ad:a7:2e:92:5e: ba:93:14:af:47:7b:28:6e:63:37:e1:f2:57:4a:22:35:24:35: 2f:1b:d6:c3:39:66:ff:84:25:1a:d0:a1:ef:22:0f:aa:78:bc: 6e:61:a8:06 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQOetVcB8Th8SJNcNVki+UUckDI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA1MDMwMjIzMjZaFw0yNzA1MDIwMjI4MjZaMDMxMTAvBgNV BAMTKDdDRDczRDREN0JEMDg1NDAyNTdEMjFGNDgzRDFEOTc2MjVCMjhERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoPKbdsF0hNFPxVGvA26ybmMqi GrPVy8GEACLhu48g+10D2vUru35/fQ0fiFBRHUme0HixDvUA3nM2LkOiB3OI12iL 6RT8qm1/ewYOkwoz54ZNO/okaBQzqmayp14qMZIhfEu7X3p2d+sVdpJ9zonBHjlN fb82dX6NY4HgGQzFeeCBub0HhqXI+i0F4PEdKozlFr3FWaDs2VXwyV4k9Nd7ZK5/ kFUqXQpzNqaIpMfswOdsGFGPwPlxlOHq0NaoeM5/iFbAXRqevVql4+z6KnFvGd6F /TejVvJhHXZZh9KZ1FAFwWMZm1cvy5kYI3IlPz7AIW6RHOJhQnwcdinwOzM5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfNc9TXvQhUAlfSH0g9HZdiWyjfkwHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNlNGM1NzBhLTQ0NzQtNGNiZi1i OGY5LWZmOTc5MTc4MTU0OS8wLzMxMzYzMDJlMzIzNTJlMzIzNDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBn4MA0GCSqG SIb3DQEBCwUAA4IBAQCM9XqIp3rP3sk5Dc+1F0I8CcvUcnJKxquOBOND7tPPK7IW pliFdzOuWG3eJjW38gD2r2msQdidGPzTqn6YV290CPYsHYczOYJZtoEHmryjjM5U C5FNTEhMvlzrdEUMWYOWQh/QwC+jYMfSw4BcElWhJbuPOuQ3EdwqNC48Z56Cf8FN 5Ld9pHA1NRNeq0uLrPfw46lXMUXeTtIfKVDgK2sJ09G6wqpLbmCfybGLLzTNsCu8 rU85JimND6ClKG/Tfos1GTQ1EUhFTBUp/fbiD7XZc/qeracukl66kxSvR3sobmM3 4fJXSiI1JDUvG9bDOWb/hCUa0KHvIg+qeLxuYagG -----END CERTIFICATE-----Generated at Wed May 13 08:24:14 2026 by rpki-client