$ rpki-client -vvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa File: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (raw, json) Hash identifier: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y= Subject key identifier: C8:71:F3:44:06:54:83:2C:03:1A:4E:A0:18:A0:B3:DC:2A:E8:79:D5 Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 595613B87E41A14BEEF23A2E9CF50A6B3ED76C54 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa Signing time: Sun 03 May 2026 02:48:38 +0000 ROA not before: Sun 03 May 2026 02:43:38 +0000 ROA not after: Sun 02 May 2027 02:48:38 +0000 asID: 153075 IP address blocks: 160.25.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:56:13:b8:7e:41:a1:4b:ee:f2:3a:2e:9c:f5:0a:6b:3e:d7:6c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: May 3 02:43:38 2026 GMT Not After : May 2 02:48:38 2027 GMT Subject: CN=C871F3440654832C031A4EA018A0B3DC2AE879D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:39:46:bd:4b:f7:9a:06:95:7f:23:cc:95: 53:21:e2:65:90:0b:1d:35:fb:77:70:32:98:0c:0e: da:f4:bb:d4:2e:da:fc:ed:d1:cf:40:e3:3d:f5:3f: 90:38:07:d2:53:8b:c7:b7:ef:28:e0:0b:d3:13:58: 2c:c8:6c:ed:e7:61:4e:39:e9:76:07:b0:25:53:4f: 58:78:a5:c3:bc:49:52:09:5d:c9:07:8f:20:b3:49: 22:4a:d6:3b:1a:3d:8d:3e:85:1e:67:21:73:8c:56: 33:8b:41:96:8b:7e:07:25:ed:a1:56:d5:2b:d3:a3: 8e:07:91:34:6d:d0:ab:58:21:dc:d9:bc:d3:d6:58: e4:89:d0:22:0d:4d:55:d0:06:12:6f:b9:68:41:64: ad:99:2b:76:62:31:e0:a8:88:e7:db:ea:78:c0:9c: 6d:93:55:38:c2:60:51:1b:fb:1f:4c:d9:d3:c3:87: 20:55:b3:ce:84:01:0e:fe:1d:38:67:e8:d1:6a:22: f0:16:7b:fd:94:b6:dd:00:e8:47:71:2f:16:f1:e1: 9e:40:14:af:d3:f0:4d:d4:84:53:01:e5:8d:cb:ff: a8:54:ca:e4:e9:af:74:b5:d5:29:34:c6:4c:32:18: c0:23:bc:6c:80:44:db:b7:8b:5f:a9:3e:56:1a:91: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:71:F3:44:06:54:83:2C:03:1A:4E:A0:18:A0:B3:DC:2A:E8:79:D5 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.178.0/23 Signature Algorithm: sha256WithRSAEncryption 26:4f:34:fd:a7:7f:3a:8a:17:3b:d5:ec:2b:c2:6a:02:7f:5f: cb:be:16:ac:da:d5:7a:79:ca:32:7f:04:8d:a3:c2:77:54:ca: e6:a1:78:36:4a:a5:ce:72:9d:66:cf:e5:2d:f5:81:d6:64:07: ab:80:1d:52:80:d9:e6:b2:54:18:e1:84:08:bc:87:ce:04:77: 7c:0e:0c:80:99:ce:c0:4d:32:84:5b:b7:8b:e0:0a:7d:7a:71: 7a:76:14:a9:c1:e1:4f:3e:8a:f2:cf:52:aa:58:9d:1d:5e:9b: 63:22:e4:99:95:0d:c0:50:97:da:ca:df:80:14:01:ca:9c:94: a2:3c:a0:4a:6e:52:8b:35:48:86:18:91:7a:72:ed:be:39:00: 90:6a:2c:ca:d1:7c:99:d7:1c:fa:83:75:c1:9f:be:bd:e3:53: 6d:88:26:ab:e4:5d:7a:ed:77:c6:80:36:19:a6:d8:b5:61:7a: d1:d9:27:68:00:9b:dd:14:cf:15:cb:49:86:4b:f1:85:d1:0b: 96:0f:5c:25:d8:69:8b:e5:3b:b3:77:95:db:da:1e:fd:96:5b: d8:8a:b3:9b:9d:cc:81:a1:78:03:2a:3a:a5:03:48:c8:d9:a7: 6b:a2:e9:89:85:bc:48:0a:0d:c0:74:03:90:49:48:b6:a4:c1: 34:05:3e:5e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWVYTuH5BoUvu8jounPUKaz7XbFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA1MDMwMjQzMzhaFw0yNzA1MDIwMjQ4MzhaMDMxMTAvBgNV BAMTKEM4NzFGMzQ0MDY1NDgzMkMwMzFBNEVBMDE4QTBCM0RDMkFFODc5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXDlGvUv3mgaVfyPMlVMh4mWQ Cx01+3dwMpgMDtr0u9Qu2vzt0c9A4z31P5A4B9JTi8e37yjgC9MTWCzIbO3nYU45 6XYHsCVTT1h4pcO8SVIJXckHjyCzSSJK1jsaPY0+hR5nIXOMVjOLQZaLfgcl7aFW 1SvTo44HkTRt0KtYIdzZvNPWWOSJ0CINTVXQBhJvuWhBZK2ZK3ZiMeCoiOfb6njA nG2TVTjCYFEb+x9M2dPDhyBVs86EAQ7+HThn6NFqIvAWe/2Utt0A6EdxLxbx4Z5A FK/T8E3UhFMB5Y3L/6hUyuTpr3S11Sk0xkwyGMAjvGyARNu3i1+pPlYakRHnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyHHzRAZUgywDGk6gGKCz3CroedUwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg3YzQzMmUwLWRjM2UtNDJjYy1i Y2MwLTYyOWIxNjIwNmM5YS8wLzMxMzYzMDJlMzIzNTJlMzEzNzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBmyMA0GCSqG SIb3DQEBCwUAA4IBAQAmTzT9p386ihc71ewrwmoCf1/Lvhas2tV6ecoyfwSNo8J3 VMrmoXg2SqXOcp1mz+Ut9YHWZAergB1SgNnmslQY4YQIvIfOBHd8DgyAmc7ATTKE W7eL4Ap9enF6dhSpweFPPoryz1KqWJ0dXptjIuSZlQ3AUJfayt+AFAHKnJSiPKBK blKLNUiGGJF6cu2+OQCQaizK0XyZ1xz6g3XBn76941NtiCar5F167XfGgDYZpti1 YXrR2SdoAJvdFM8Vy0mGS/GF0QuWD1wl2GmL5Tuzd5Xb2h79llvYirObncyBoXgD KjqlA0jI2adroumJhbxICg3AdAOQSUi2pME0BT5e -----END CERTIFICATE-----Generated at Wed May 13 09:27:17 2026 by rpki-client