$ rpki-client -vvf rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa File: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (raw, json) Hash identifier: EAY48hYNH/6TUE1xmrb2C7cSV9ZpqN9x7POku5Es1R0= Subject key identifier: 6F:91:2E:30:01:6D:37:7F:FE:E1:D5:BF:12:61:83:78:BF:0E:B2:00 Certificate issuer: /CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Certificate serial: 1B92C1252A8C103DD366386C31605343478E47F1 Authority key identifier: 30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa Signing time: Sun 03 May 2026 02:58:24 +0000 ROA not before: Sun 03 May 2026 02:53:24 +0000 ROA not after: Sun 02 May 2027 02:58:24 +0000 asID: 153088 IP address blocks: 160.25.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:92:c1:25:2a:8c:10:3d:d3:66:38:6c:31:60:53:43:47:8e:47:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3028A8BB1ECF7550222580449D4FA78158DBF42A Validity Not Before: May 3 02:53:24 2026 GMT Not After : May 2 02:58:24 2027 GMT Subject: CN=6F912E30016D377FFEE1D5BF12618378BF0EB200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:a6:bc:d2:36:9b:ce:7e:97:af:f8:ed:75: 0e:9a:f1:80:d8:71:9d:34:cd:0e:e7:1d:7a:73:48: d3:7a:b5:55:d3:44:20:e9:14:eb:10:9c:1f:87:f4: 3a:1a:c7:65:b5:e5:9b:08:7d:a3:23:5c:10:30:c9: a6:47:5a:2a:43:fe:ab:32:86:7e:d7:dd:a5:0c:7f: b0:9a:51:2b:73:1a:bf:4f:fb:e9:f1:fb:a6:37:d1: 52:48:17:74:02:3a:1e:6f:fc:c4:8f:4d:61:48:03: 0d:d5:30:23:25:4b:50:d6:8b:8f:e3:9a:3a:71:87: be:85:73:fa:0f:dc:fa:e3:72:33:a5:58:93:16:cf: 49:18:67:41:da:ff:38:06:d5:62:83:be:be:89:b0: 84:67:84:aa:85:f9:62:83:59:0f:81:cb:bd:07:cd: 00:73:52:0b:56:e8:09:cc:ea:8c:23:6d:66:eb:0f: 25:6a:f8:4f:2f:13:89:be:fb:df:77:d1:38:d3:39: d8:85:ad:80:2b:3b:e9:6c:00:36:c6:c3:41:7f:2a: e4:2c:4a:41:03:6e:e1:fa:55:a5:35:71:60:c6:bf: f7:8a:0f:08:d5:2a:1e:9b:e0:f7:ba:44:77:6e:63: 30:0b:7d:89:f9:26:ef:d0:7e:e5:51:6e:fb:50:8a: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:2E:30:01:6D:37:7F:FE:E1:D5:BF:12:61:83:78:BF:0E:B2:00 X509v3 Authority Key Identifier: keyid:30:28:A8:BB:1E:CF:75:50:22:25:80:44:9D:4F:A7:81:58:DB:F4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3028A8BB1ECF7550222580449D4FA78158DBF42A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.156.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:d6:65:dd:1e:31:66:99:38:e7:1d:b5:4a:76:f8:6b:43:22: 74:a7:a1:59:f6:f9:05:3b:59:93:9d:de:30:fe:3e:f6:c3:ec: f2:f1:ec:a1:a7:70:9d:3d:6f:6c:6a:3a:09:26:80:21:e5:c2: 3b:6e:3b:b6:9e:ed:29:cb:23:66:79:f3:8e:0a:aa:f3:80:20: d9:a6:27:a8:a6:0d:dd:aa:6e:e3:42:82:7e:8f:b9:47:bf:79: 5e:84:a5:4e:9a:50:76:8b:ba:8b:11:45:4b:a7:e5:06:4e:68: dc:48:5c:26:32:ea:c1:b7:00:05:de:3b:a1:6e:19:4c:07:33: 7f:a6:e4:08:1e:94:0b:e9:9a:33:b6:74:34:59:dd:2c:df:c9: 4f:5f:85:6c:e4:46:ad:d5:ab:26:28:f7:0b:7f:dd:a3:83:d5: 66:9c:fe:57:e0:59:bf:a5:19:1c:26:12:22:98:2f:b0:fc:6f: 12:f9:f1:f7:af:1d:d1:c3:cc:32:1e:3e:24:ab:67:25:3c:ba: 90:0f:af:77:a7:6e:6f:94:87:cf:d1:8a:7c:8e:f8:a5:9c:71: 4b:80:6e:59:8a:b8:ba:47:b7:c9:05:91:94:b8:6b:4c:03:a0: ba:c9:8b:eb:ab:4e:c6:79:91:1c:3a:9e:e6:38:3f:3f:e2:ef: 06:47:40:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUG5LBJSqMED3TZjhsMWBTQ0eOR/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzAyOEE4QkIxRUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1 OERCRjQyQTAeFw0yNjA1MDMwMjUzMjRaFw0yNzA1MDIwMjU4MjRaMDMxMTAvBgNV BAMTKDZGOTEyRTMwMDE2RDM3N0ZGRUUxRDVCRjEyNjE4Mzc4QkYwRUIyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Zqa80jabzn6Xr/jtdQ6a8YDY cZ00zQ7nHXpzSNN6tVXTRCDpFOsQnB+H9Doax2W15ZsIfaMjXBAwyaZHWipD/qsy hn7X3aUMf7CaUStzGr9P++nx+6Y30VJIF3QCOh5v/MSPTWFIAw3VMCMlS1DWi4/j mjpxh76Fc/oP3PrjcjOlWJMWz0kYZ0Ha/zgG1WKDvr6JsIRnhKqF+WKDWQ+By70H zQBzUgtW6AnM6owjbWbrDyVq+E8vE4m++9930TjTOdiFrYArO+lsADbGw0F/KuQs SkEDbuH6VaU1cWDGv/eKDwjVKh6b4Pe6RHduYzALfYn5Ju/QfuVRbvtQilw9AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUb5EuMAFtN3/+4dW/EmGDeL8OsgAwHwYDVR0j BBgwFoAUMCioux7PdVAiJYBEnU+ngVjb9CowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWFmZGQ2ZjktYjc5OS00YTk2LTllMmEtMWZlZjY5YmZhNTk3LzAvMzAyOEE4QkIx RUNGNzU1MDIyMjU4MDQ0OUQ0RkE3ODE1OERCRjQyQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMDI4QThCQjFFQ0Y3NTUwMjIyNTgwNDQ5RDRGQTc4MTU4REJG NDJBLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FhZmRkNmY5LWI3OTktNGE5Ni05 ZTJhLTFmZWY2OWJmYTU5Ny8wLzMxMzYzMDJlMzIzNTJlMzEzNTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmcMA0GCSqG SIb3DQEBCwUAA4IBAQBv1mXdHjFmmTjnHbVKdvhrQyJ0p6FZ9vkFO1mTnd4w/j72 w+zy8eyhp3CdPW9sajoJJoAh5cI7bju2nu0pyyNmefOOCqrzgCDZpieopg3dqm7j QoJ+j7lHv3lehKVOmlB2i7qLEUVLp+UGTmjcSFwmMurBtwAF3juhbhlMBzN/puQI HpQL6ZoztnQ0Wd0s38lPX4Vs5Eat1asmKPcLf92jg9VmnP5X4Fm/pRkcJhIimC+w /G8S+fH3rx3Rw8wyHj4kq2clPLqQD693p25vlIfP0Yp8jvilnHFLgG5Ziri6R7fJ BZGUuGtMA6C6yYvrq07GeZEcOp7mOD8/4u8GR0BR -----END CERTIFICATE-----Generated at Wed May 13 04:03:38 2026 by rpki-client