$ rpki-client -vvf rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa File: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (raw, json) Hash identifier: E1+7D4tNcCRDkcP3qmZK/bR+JhJZ6mmoU1gs2WuZdOo= Subject key identifier: 72:93:20:4D:41:21:BB:6F:B0:37:08:DD:41:AB:A7:A5:6D:73:6E:86 Certificate issuer: /CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Certificate serial: 6BD75DE5A8BBB27BE4A17FDA9F26DDF1CAF3F1AA Authority key identifier: 51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa Signing time: Sun 03 May 2026 02:52:28 +0000 ROA not before: Sun 03 May 2026 02:47:28 +0000 ROA not after: Sun 02 May 2027 02:52:28 +0000 asID: 152780 IP address blocks: 160.20.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d7:5d:e5:a8:bb:b2:7b:e4:a1:7f:da:9f:26:dd:f1:ca:f3:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511F1AA1B492F6794EF165F62B075919F2B16E44 Validity Not Before: May 3 02:47:28 2026 GMT Not After : May 2 02:52:28 2027 GMT Subject: CN=7293204D4121BB6FB03708DD41ABA7A56D736E86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c9:80:9d:9f:4d:f8:5a:85:78:de:7d:b3:7f: c4:ee:4d:bc:c6:72:93:a6:56:1b:0c:65:31:3c:f8: fa:37:78:16:4f:5e:e7:b2:33:26:9b:af:8d:2e:4e: e9:99:fa:1d:41:90:93:05:7d:7d:fb:d6:2f:b7:87: 89:61:64:5f:28:8e:f2:a1:6f:a5:91:7e:dc:89:2f: b5:ad:b9:c5:f0:a9:bd:e8:ef:9c:50:2a:43:ee:69: da:dd:d4:6c:0f:28:3a:36:83:7a:a4:65:56:f6:e3: ca:a3:03:4f:07:05:8b:3d:74:75:03:e4:a0:63:a8: 3c:9a:0f:b8:ba:fa:6e:d9:01:4a:fe:1b:17:20:7f: 72:a0:e2:72:18:48:a3:e6:d3:e7:19:07:90:0e:4a: e2:7f:69:7b:c8:7e:3e:62:d3:aa:60:0f:9e:c3:01: 6c:18:f1:a2:f1:08:24:78:81:1d:cb:f6:7a:8f:19: f4:2a:0c:3c:a0:c4:e5:f4:fb:bc:6f:e6:38:59:fa: 85:19:f2:96:4c:a5:c2:dc:69:7e:63:ea:85:53:7f: 79:b0:bd:12:0c:9a:7e:59:e8:3f:69:1b:8b:f8:ad: 4c:b2:28:57:6a:1a:db:a0:ca:fd:3a:ea:c8:6c:04: 21:7a:0a:bd:c5:0c:8d:6c:c0:78:73:ff:af:22:00: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:93:20:4D:41:21:BB:6F:B0:37:08:DD:41:AB:A7:A5:6D:73:6E:86 X509v3 Authority Key Identifier: keyid:51:1F:1A:A1:B4:92:F6:79:4E:F1:65:F6:2B:07:59:19:F2:B1:6E:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/511F1AA1B492F6794EF165F62B075919F2B16E44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/511F1AA1B492F6794EF165F62B075919F2B16E44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.125.0/24 Signature Algorithm: sha256WithRSAEncryption 25:29:cf:d6:2c:49:ed:b1:b0:8e:d6:86:a1:be:7b:68:c3:50: ca:05:54:83:27:0f:08:7f:71:91:f3:06:2b:c7:a5:ea:96:3b: 1d:8a:83:03:61:b7:86:f1:63:1b:6c:d1:67:12:1c:b4:5c:7c: cf:db:42:89:72:ac:b1:17:fa:57:67:6e:26:20:bc:94:f5:df: 48:b1:8a:f3:4f:ef:06:97:da:f5:39:37:28:ff:19:82:00:96: d4:25:00:d3:77:e1:f5:35:0a:1e:97:d2:41:a0:c4:e6:dc:c9: 65:ae:49:6b:8b:c7:25:b0:6c:fa:df:21:33:08:1b:a8:e7:37: 83:ee:be:b3:78:aa:41:a2:b0:cb:33:16:30:10:65:8f:8d:c3: 61:99:2f:d7:c3:0b:2f:54:5a:df:1c:ba:5c:0d:c9:60:79:d1: 96:0f:fa:f2:6e:fd:04:6e:7a:7a:c6:af:c6:86:c9:f6:82:b2: 5e:19:7f:30:53:ba:bf:e4:8a:c2:5e:fe:fc:5d:4f:ad:3f:c0: 57:1a:a4:fb:b1:4f:85:44:9e:4e:5b:f2:3b:55:90:3e:a8:65: 61:05:ed:e7:fc:f2:2c:2b:cb:68:08:8b:9d:7c:44:b1:1f:94: b4:67:4d:a4:79:10:11:f9:5c:61:59:be:cb:f1:0f:29:95:17: b4:d6:9b:31 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUa9dd5ai7snvkoX/anybd8crz8aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExRjFBQTFCNDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlG MkIxNkU0NDAeFw0yNjA1MDMwMjQ3MjhaFw0yNzA1MDIwMjUyMjhaMDMxMTAvBgNV BAMTKDcyOTMyMDRENDEyMUJCNkZCMDM3MDhERDQxQUJBN0E1NkQ3MzZFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiyYCdn034WoV43n2zf8TuTbzG cpOmVhsMZTE8+Po3eBZPXueyMyabr40uTumZ+h1BkJMFfX371i+3h4lhZF8ojvKh b6WRftyJL7WtucXwqb3o75xQKkPuadrd1GwPKDo2g3qkZVb248qjA08HBYs9dHUD 5KBjqDyaD7i6+m7ZAUr+Gxcgf3Kg4nIYSKPm0+cZB5AOSuJ/aXvIfj5i06pgD57D AWwY8aLxCCR4gR3L9nqPGfQqDDygxOX0+7xv5jhZ+oUZ8pZMpcLcaX5j6oVTf3mw vRIMmn5Z6D9pG4v4rUyyKFdqGtugyv066shsBCF6Cr3FDI1swHhz/68iAFiTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUcpMgTUEhu2+wNwjdQaunpW1zboYwHwYDVR0j BBgwFoAUUR8aobSS9nlO8WX2KwdZGfKxbkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTM1NzkyMWQtZWUxOC00MzVjLThiNmUtZWJhMjI0MWI4M2FiLzAvNTExRjFBQTFC NDkyRjY3OTRFRjE2NUY2MkIwNzU5MTlGMkIxNkU0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81MTFGMUFBMUI0OTJGNjc5NEVGMTY1RjYyQjA3NTkxOUYyQjE2 RTQ0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkzNTc5MjFkLWVlMTgtNDM1Yy04 YjZlLWViYTIyNDFiODNhYi8wLzMxMzYzMDJlMzIzMDJlMzEzMjM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBR9MA0GCSqG SIb3DQEBCwUAA4IBAQAlKc/WLEntsbCO1oahvntow1DKBVSDJw8If3GR8wYrx6Xq ljsdioMDYbeG8WMbbNFnEhy0XHzP20KJcqyxF/pXZ24mILyU9d9IsYrzT+8Gl9r1 OTco/xmCAJbUJQDTd+H1NQoel9JBoMTm3Mllrklri8clsGz63yEzCBuo5zeD7r6z eKpBorDLMxYwEGWPjcNhmS/XwwsvVFrfHLpcDclgedGWD/rybv0Ebnp6xq/Ghsn2 grJeGX8wU7q/5IrCXv78XU+tP8BXGqT7sU+FRJ5OW/I7VZA+qGVhBe3n/PIsK8to CIudfESxH5S0Z02keRAR+VxhWb7L8Q8plRe01psx -----END CERTIFICATE-----Generated at Wed May 13 05:43:10 2026 by rpki-client