$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa File: 3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa (raw, json) Hash identifier: fCOFQpy4x/crI+WC5jvfSD6t0+AQC6KYZU58O4qsuz0= Subject key identifier: 2D:02:04:BA:A2:2A:E6:5A:28:13:E1:72:04:F5:33:BE:29:1E:77:86 Certificate issuer: /CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Certificate serial: 56C987BB3730FC2A795728063306AF50EC1F83CC Authority key identifier: 24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa Signing time: Sun 03 May 2026 02:45:03 +0000 ROA not before: Sun 03 May 2026 02:40:03 +0000 ROA not after: Sun 02 May 2027 02:45:03 +0000 asID: 153089 IP address blocks: 160.25.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c9:87:bb:37:30:fc:2a:79:57:28:06:33:06:af:50:ec:1f:83:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24D75498B485AA5962AD8C3A00548ECA63BC6B48 Validity Not Before: May 3 02:40:03 2026 GMT Not After : May 2 02:45:03 2027 GMT Subject: CN=2D0204BAA22AE65A2813E17204F533BE291E7786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:2e:e4:40:66:c2:a0:70:63:24:e5:82:a6: 79:7d:a8:53:cf:3b:7c:0a:4a:4d:a5:dd:96:90:27: 73:83:88:15:1e:e4:02:37:b6:a6:45:11:6c:d8:b2: 74:f3:28:20:06:34:94:66:ec:a6:58:84:8f:72:bc: ba:e9:18:fb:1a:ca:8f:de:a8:44:69:94:70:31:65: 4c:e6:69:ae:f0:b8:69:b9:3c:88:d7:9d:98:cd:7c: a2:15:16:4b:b2:a0:ea:92:b7:8a:e5:5c:65:85:60: d5:8a:74:a7:5f:07:af:78:59:19:8e:71:f6:9b:0f: 4e:53:9b:06:0b:c4:e3:db:6a:8a:d7:0a:94:63:e1: e7:5f:0d:e8:9a:08:6e:af:27:33:81:f2:de:c3:25: 2a:13:1b:2b:c7:f9:88:b3:df:99:ac:9d:b1:66:69: b3:6c:55:f4:44:f9:a9:c9:1a:a6:a2:61:c8:85:d1: 98:5a:29:8b:f2:e4:57:1a:4d:28:ad:31:39:5c:5f: ea:a4:04:4c:74:39:34:d6:d0:9d:13:c3:b4:16:ce: 38:3b:db:ff:5e:73:98:8f:bb:80:c8:47:39:fe:f5: 19:54:94:45:89:52:ff:d1:c1:48:2a:be:6c:54:da: 6f:0e:ce:ba:1c:8e:87:e6:d6:7e:e3:eb:54:c1:bf: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:02:04:BA:A2:2A:E6:5A:28:13:E1:72:04:F5:33:BE:29:1E:77:86 X509v3 Authority Key Identifier: keyid:24:D7:54:98:B4:85:AA:59:62:AD:8C:3A:00:54:8E:CA:63:BC:6B:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/24D75498B485AA5962AD8C3A00548ECA63BC6B48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b411b05-c58a-4206-b7ab-c250c1465550/0/3136302e32352e3135332e302f32342d3234203d3e20313533303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.153.0/24 Signature Algorithm: sha256WithRSAEncryption 56:18:0f:a8:87:99:73:84:9a:2b:34:d3:ef:15:aa:9b:6c:50: 30:47:a9:50:71:af:21:a5:1d:54:97:67:e3:8d:84:ef:cf:50: 75:95:9d:4d:81:4e:8b:99:23:0d:bc:1a:fc:1d:de:0d:6d:00: 68:3c:18:fb:8b:6e:34:c2:29:e4:28:7d:06:b2:84:11:e3:5c: 4d:52:14:7b:02:48:d6:06:b0:fd:06:6b:a6:b4:80:6e:0f:c3: 7b:21:04:a1:ab:61:57:22:53:88:4d:f7:3c:2e:a3:ca:b2:ac: fd:72:0a:6f:94:24:e4:95:a1:c5:05:d6:2b:54:05:15:89:6e: 9b:4e:6e:24:89:1f:3c:21:83:ed:df:28:88:c3:cc:33:7e:44: c9:5a:1e:e5:38:0f:29:a5:7a:f2:c7:a6:22:a8:0d:5e:90:78: be:16:b9:a5:c2:84:75:22:58:cb:34:59:a0:0c:17:50:ca:f3: d1:4d:a0:0f:46:e8:8f:7f:d5:a5:32:29:d1:1a:dd:af:c5:94: 15:98:3b:af:24:6b:17:b6:67:58:74:03:07:30:3d:a0:a0:d9: 39:6a:2b:cd:24:93:64:4f:72:38:a5:72:6b:e1:aa:35:21:3c: a0:2e:80:06:67:6f:fc:e9:0b:0c:f5:08:f6:90:c3:52:ae:1a: 98:9a:b1:2d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVsmHuzcw/Cp5VygGMwavUOwfg8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRENzU0OThCNDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2 M0JDNkI0ODAeFw0yNjA1MDMwMjQwMDNaFw0yNzA1MDIwMjQ1MDNaMDMxMTAvBgNV BAMTKDJEMDIwNEJBQTIyQUU2NUEyODEzRTE3MjA0RjUzM0JFMjkxRTc3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeS7kQGbCoHBjJOWCpnl9qFPP O3wKSk2l3ZaQJ3ODiBUe5AI3tqZFEWzYsnTzKCAGNJRm7KZYhI9yvLrpGPsayo/e qERplHAxZUzmaa7wuGm5PIjXnZjNfKIVFkuyoOqSt4rlXGWFYNWKdKdfB694WRmO cfabD05TmwYLxOPbaorXCpRj4edfDeiaCG6vJzOB8t7DJSoTGyvH+Yiz35msnbFm abNsVfRE+anJGqaiYciF0ZhaKYvy5FcaTSitMTlcX+qkBEx0OTTW0J0Tw7QWzjg7 2/9ec5iPu4DIRzn+9RlUlEWJUv/RwUgqvmxU2m8Ozrocjofm1n7j61TBv8kPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULQIEuqIq5looE+FyBPUzviked4YwHwYDVR0j BBgwFoAUJNdUmLSFqllirYw6AFSOymO8a0gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2I0MTFiMDUtYzU4YS00MjA2LWI3YWItYzI1MGMxNDY1NTUwLzAvMjRENzU0OThC NDg1QUE1OTYyQUQ4QzNBMDA1NDhFQ0E2M0JDNkI0OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yNEQ3NTQ5OEI0ODVBQTU5NjJBRDhDM0EwMDU0OEVDQTYzQkM2 QjQ4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdiNDExYjA1LWM1OGEtNDIwNi1i N2FiLWMyNTBjMTQ2NTU1MC8wLzMxMzYzMDJlMzIzNTJlMzEzNTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmZMA0GCSqG SIb3DQEBCwUAA4IBAQBWGA+oh5lzhJorNNPvFaqbbFAwR6lQca8hpR1Ul2fjjYTv z1B1lZ1NgU6LmSMNvBr8Hd4NbQBoPBj7i240winkKH0GsoQR41xNUhR7AkjWBrD9 BmumtIBuD8N7IQShq2FXIlOITfc8LqPKsqz9cgpvlCTklaHFBdYrVAUViW6bTm4k iR88IYPt3yiIw8wzfkTJWh7lOA8ppXryx6YiqA1ekHi+FrmlwoR1IljLNFmgDBdQ yvPRTaAPRuiPf9WlMinRGt2vxZQVmDuvJGsXtmdYdAMHMD2goNk5aivNJJNkT3I4 pXJr4ao1ITygLoAGZ2/86QsM9Qj2kMNSrhqYmrEt -----END CERTIFICATE-----Generated at Wed May 13 12:05:27 2026 by rpki-client