$ rpki-client -vvf rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33362e302f32332d3234203d3e20313532383332.roa File: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (raw, json) Hash identifier: 9bTByo6Uq+XJTjxp6h+UyAdxQrw5r9BmwsjxhvbZ91A= Subject key identifier: F1:29:59:B7:A8:4A:E0:AF:09:7F:DD:C7:9C:56:E0:04:97:08:8C:B9 Certificate issuer: /CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Certificate serial: 55211E31EAA3CF736E049732A14E0842A7B56FFF Authority key identifier: AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33362e302f32332d3234203d3e20313532383332.roa Signing time: Sun 03 May 2026 02:46:18 +0000 ROA not before: Sun 03 May 2026 02:41:18 +0000 ROA not after: Sun 02 May 2027 02:46:18 +0000 asID: 152832 IP address blocks: 160.25.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:21:1e:31:ea:a3:cf:73:6e:04:97:32:a1:4e:08:42:a7:b5:6f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB Validity Not Before: May 3 02:41:18 2026 GMT Not After : May 2 02:46:18 2027 GMT Subject: CN=F12959B7A84AE0AF097FDDC79C56E00497088CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:cd:5a:30:dd:50:6d:64:17:16:e0:57:df: fa:c0:be:3c:c4:d5:3b:8d:c2:6f:cb:e5:86:81:64: 89:20:72:07:00:70:f1:4e:46:23:12:45:c1:ad:70: 94:d6:50:e2:f1:0d:c0:97:41:78:2d:b8:42:9d:b3: 4b:b3:73:ea:29:4e:88:24:79:30:d3:ed:84:37:5e: 38:1e:de:fc:c8:b6:fe:91:32:29:ea:23:a8:95:4b: 2e:58:6a:7f:10:ce:8e:12:f1:7f:d5:ac:54:e8:95: 65:ef:d8:c1:98:35:43:5e:78:a2:8f:0d:a3:9c:38: 19:4e:24:10:e6:60:68:62:7b:b1:bf:72:4a:61:54: d9:b6:4c:5a:da:41:10:1f:9c:ae:15:bc:fe:26:06: 11:11:17:23:00:0b:99:6e:34:c9:b1:f9:51:47:cd: 26:52:6c:08:b2:67:78:8c:31:24:a3:a7:26:46:5a: d7:63:5c:c1:4d:f0:d9:66:b1:bb:a1:13:0a:1a:db: 67:d6:8c:57:21:0d:bb:74:4e:5f:00:37:e2:5e:13: eb:7f:91:bb:28:01:8f:4c:2c:0a:cb:7e:ab:47:f1: 26:3b:dc:81:c3:a0:69:6f:2f:29:26:3d:0e:d1:c2: 98:74:2b:4c:e3:52:2a:3f:51:06:4f:f7:d8:be:df: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:29:59:B7:A8:4A:E0:AF:09:7F:DD:C7:9C:56:E0:04:97:08:8C:B9 X509v3 Authority Key Identifier: keyid:AC:96:19:8C:9E:15:9F:FA:EE:BD:01:EE:DB:4D:EC:D2:D1:25:B4:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AC96198C9E159FFAEEBD01EEDB4DECD2D125B4FB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/3136302e32352e33362e302f32332d3234203d3e20313532383332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.36.0/23 Signature Algorithm: sha256WithRSAEncryption 68:9f:95:4d:7d:25:f5:99:52:7f:e4:5a:b3:46:3e:61:f1:77: 10:05:40:e2:3f:82:64:16:cf:ac:ee:07:47:da:76:37:e7:be: 40:30:04:4f:3a:38:b5:b2:8f:74:9f:9b:9e:51:eb:a4:00:7f: 1d:91:b9:91:44:32:f6:5a:ce:e0:1b:cd:b6:73:d6:23:58:85: 56:e9:50:1d:71:b5:85:08:a6:c4:ad:41:d7:12:2d:b3:05:eb: 9b:95:1d:41:03:06:c7:37:72:fe:84:10:2d:a8:cd:55:63:76: 31:e5:64:a8:17:97:ae:15:c8:5b:40:11:29:fe:a6:9e:a3:31: 50:f6:d1:61:2b:42:25:19:37:96:d5:c0:24:34:a7:7b:58:1d: 4b:43:de:ea:17:8b:1f:a1:74:de:b4:cd:b1:a6:27:35:8d:92: 23:ad:b4:ef:c7:a9:84:c6:df:9f:54:8b:ce:61:3b:09:e1:a4: 34:82:8d:f8:ed:6e:71:ac:cf:a2:65:3a:83:44:63:2b:b7:c1: eb:04:12:16:91:81:56:4f:69:aa:52:86:a6:04:04:56:63:f9: 37:0a:d3:2b:a0:13:21:f7:76:98:83:4d:15:58:aa:1a:8d:8c: 71:c2:89:47:54:b6:eb:2c:ab:a8:7e:87:df:1b:5a:75:33:63: 07:33:af:bf -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVSEeMeqjz3NuBJcyoU4IQqe1b/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM5NjE5OEM5RTE1OUZGQUVFQkQwMUVFREI0REVDRDJE MTI1QjRGQjAeFw0yNjA1MDMwMjQxMThaFw0yNzA1MDIwMjQ2MThaMDMxMTAvBgNV BAMTKEYxMjk1OUI3QTg0QUUwQUYwOTdGRERDNzlDNTZFMDA0OTcwODhDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWkM1aMN1QbWQXFuBX3/rAvjzE 1TuNwm/L5YaBZIkgcgcAcPFORiMSRcGtcJTWUOLxDcCXQXgtuEKds0uzc+opTogk eTDT7YQ3Xjge3vzItv6RMinqI6iVSy5Yan8Qzo4S8X/VrFTolWXv2MGYNUNeeKKP DaOcOBlOJBDmYGhie7G/ckphVNm2TFraQRAfnK4VvP4mBhERFyMAC5luNMmx+VFH zSZSbAiyZ3iMMSSjpyZGWtdjXMFN8NlmsbuhEwoa22fWjFchDbt0Tl8AN+JeE+t/ kbsoAY9MLArLfqtH8SY73IHDoGlvLykmPQ7Rwph0K0zjUio/UQZP99i+396dAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU8SlZt6hK4K8Jf93HnFbgBJcIjLkwHwYDVR0j BBgwFoAUrJYZjJ4Vn/ruvQHu203s0tEltPswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Y0YjUzZDgtYjJmZi00OTczLWIxYWMtNmY4NWZhZWFkYmU1LzAvQUM5NjE5OEM5 RTE1OUZGQUVFQkQwMUVFREI0REVDRDJEMTI1QjRGQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQzk2MTk4QzlFMTU5RkZBRUVCRDAxRUVEQjRERUNEMkQxMjVC NEZCLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzdmNGI1M2Q4LWIyZmYtNDk3My1i MWFjLTZmODVmYWVhZGJlNS8wLzMxMzYzMDJlMzIzNTJlMzMzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZJDANBgkqhkiG 9w0BAQsFAAOCAQEAaJ+VTX0l9ZlSf+Ras0Y+YfF3EAVA4j+CZBbPrO4HR9p2N+e+ QDAETzo4tbKPdJ+bnlHrpAB/HZG5kUQy9lrO4BvNtnPWI1iFVulQHXG1hQimxK1B 1xItswXrm5UdQQMGxzdy/oQQLajNVWN2MeVkqBeXrhXIW0ARKf6mnqMxUPbRYStC JRk3ltXAJDSne1gdS0Pe6heLH6F03rTNsaYnNY2SI62078ephMbfn1SLzmE7CeGk NIKN+O1ucazPomU6g0RjK7fB6wQSFpGBVk9pqlKGpgQEVmP5NwrTK6ATIfd2mINN FViqGo2MccKJR1S26yyrqH6H3xtadTNjBzOvvw== -----END CERTIFICATE-----Generated at Wed May 13 03:51:22 2026 by rpki-client