$ rpki-client -vvf rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa File: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (raw, json) Hash identifier: Ms5lVpCR+d3KiqA+8+cluXhFQb/KgXQqPnflZyEWwJA= Subject key identifier: 8F:AB:FD:CE:FE:BC:0B:E9:4E:6D:8A:73:8F:5D:D9:01:25:6D:3C:D0 Certificate issuer: /CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Certificate serial: 2F5B9E51FC6A03DB184AF763321F2CB69D7CA304 Authority key identifier: A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa Signing time: Sun 03 May 2026 03:02:20 +0000 ROA not before: Sun 03 May 2026 02:57:20 +0000 ROA not after: Sun 02 May 2027 03:02:20 +0000 asID: 153107 IP address blocks: 160.25.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5b:9e:51:fc:6a:03:db:18:4a:f7:63:32:1f:2c:b6:9d:7c:a3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2E9BBA810962C7C303F74052ADA8F8AE90FCB03 Validity Not Before: May 3 02:57:20 2026 GMT Not After : May 2 03:02:20 2027 GMT Subject: CN=8FABFDCEFEBC0BE94E6D8A738F5DD901256D3CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:f1:e3:8f:c8:0f:5c:c9:5e:65:db:52:59: a3:e2:e9:e0:34:83:d1:0c:a0:b2:85:62:d8:bf:ed: d7:b1:27:a5:af:64:3b:f6:11:15:05:95:b4:28:8c: d4:77:36:fd:b2:1d:ad:56:3b:07:33:6b:34:2a:b7: f5:2e:0d:f4:88:16:c0:4e:f5:af:ec:8f:76:00:6a: f3:7c:f8:1a:83:da:71:bc:fd:43:67:3b:22:93:1d: c8:dc:48:65:91:04:d3:a9:7f:b5:2f:53:8d:ce:de: 3c:94:55:d4:62:a1:46:47:48:dd:e8:aa:c4:d4:1c: 43:17:ef:11:cd:85:16:4b:af:4e:a0:50:24:c3:58: 0a:c8:20:1c:e9:de:de:db:da:5f:d3:64:3f:c8:b7: d1:fa:d5:39:36:1a:b6:7d:b7:64:91:25:d8:76:6c: 3b:49:09:0d:bd:3b:39:4e:68:8a:2a:84:a6:89:2d: 6d:25:81:46:e7:0b:e8:30:de:ee:53:34:ca:00:b1: 71:92:dc:64:e6:f9:50:c1:89:af:a9:b2:9c:36:c0: 9a:db:81:c8:70:34:c0:28:4e:28:f5:88:e3:8e:a6: 7b:ce:7d:5b:68:5e:96:20:20:c4:48:4d:ce:f4:49: a5:90:6c:dd:bc:70:a4:b7:9b:74:df:b9:cd:7e:4c: b6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:FD:CE:FE:BC:0B:E9:4E:6D:8A:73:8F:5D:D9:01:25:6D:3C:D0 X509v3 Authority Key Identifier: keyid:A2:E9:BB:A8:10:96:2C:7C:30:3F:74:05:2A:DA:8F:8A:E9:0F:CB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A2E9BBA810962C7C303F74052ADA8F8AE90FCB03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.196.0/24 Signature Algorithm: sha256WithRSAEncryption 00:a3:e7:df:15:fa:cf:e8:b8:2e:69:ae:6d:cd:77:15:ec:be: 9e:23:e2:e0:f4:6e:4e:76:10:29:54:ff:2a:1c:fa:4c:06:35: d7:dc:10:9c:66:0f:06:34:a8:b6:2d:69:7d:e0:08:e6:f6:83: ea:21:0a:e9:71:37:9d:c4:b7:57:b9:1a:6a:fb:13:b9:6c:6a: 19:cb:bd:16:f3:48:2f:c1:6e:21:24:ef:c5:8c:6a:20:54:78: a6:0b:60:37:cc:38:2e:74:35:81:02:c3:ee:26:8d:53:8f:f8: 9c:f8:6f:38:fb:eb:2f:78:19:ad:f5:a9:0a:a1:be:db:77:b9: 74:08:c4:77:7e:24:81:36:05:ff:a6:ae:f5:1d:52:93:87:17: 4e:23:d7:cc:e4:2f:95:d4:c3:12:93:dd:ba:64:63:ab:e5:6b: ae:20:1f:dd:13:93:b2:8a:1f:0d:ae:a6:f8:da:c2:59:3e:4d: b7:53:a1:47:b1:71:f1:8b:36:90:00:3a:e3:9f:d0:49:93:bb: 55:50:92:ad:05:f4:51:1a:f5:6c:57:75:03:ab:fd:0b:fe:be: bf:9e:df:ac:a0:da:9d:8c:99:ee:03:6c:47:43:77:79:4a:3c: d8:5a:8e:cd:1a:70:ae:ac:ce:81:8f:9e:7f:2a:52:9a:bf:a1: 87:18:d6:42 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUL1ueUfxqA9sYSvdjMh8stp18owQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJFOUJCQTgxMDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFF OTBGQ0IwMzAeFw0yNjA1MDMwMjU3MjBaFw0yNzA1MDIwMzAyMjBaMDMxMTAvBgNV BAMTKDhGQUJGRENFRkVCQzBCRTk0RTZEOEE3MzhGNUREOTAxMjU2RDNDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCugvHjj8gPXMleZdtSWaPi6eA0 g9EMoLKFYti/7dexJ6WvZDv2ERUFlbQojNR3Nv2yHa1WOwczazQqt/UuDfSIFsBO 9a/sj3YAavN8+BqD2nG8/UNnOyKTHcjcSGWRBNOpf7UvU43O3jyUVdRioUZHSN3o qsTUHEMX7xHNhRZLr06gUCTDWArIIBzp3t7b2l/TZD/It9H61Tk2GrZ9t2SRJdh2 bDtJCQ29OzlOaIoqhKaJLW0lgUbnC+gw3u5TNMoAsXGS3GTm+VDBia+pspw2wJrb gchwNMAoTij1iOOOpnvOfVtoXpYgIMRITc70SaWQbN28cKS3m3Tfuc1+TLaXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUj6v9zv68C+lObYpzj13ZASVtPNAwHwYDVR0j BBgwFoAUoum7qBCWLHwwP3QFKtqPiukPywMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmI2OWQ2NjctMTdhNC00ZmRkLTljNTctMTEyMjAzM2VmOTk5LzAvQTJFOUJCQTgx MDk2MkM3QzMwM0Y3NDA1MkFEQThGOEFFOTBGQ0IwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMkU5QkJBODEwOTYyQzdDMzAzRjc0MDUyQURBOEY4QUU5MEZD QjAzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JiNjlkNjY3LTE3YTQtNGZkZC05 YzU3LTExMjIwMzNlZjk5OS8wLzMxMzYzMDJlMzIzNTJlMzEzOTM2MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBnEMA0GCSqG SIb3DQEBCwUAA4IBAQAAo+ffFfrP6Lguaa5tzXcV7L6eI+Lg9G5OdhApVP8qHPpM BjXX3BCcZg8GNKi2LWl94Ajm9oPqIQrpcTedxLdXuRpq+xO5bGoZy70W80gvwW4h JO/FjGogVHimC2A3zDgudDWBAsPuJo1Tj/ic+G84++sveBmt9akKob7bd7l0CMR3 fiSBNgX/pq71HVKThxdOI9fM5C+V1MMSk926ZGOr5WuuIB/dE5Oyih8Nrqb42sJZ Pk23U6FHsXHxizaQADrjn9BJk7tVUJKtBfRRGvVsV3UDq/0L/r6/nt+soNqdjJnu A2xHQ3d5SjzYWo7NGnCurM6Bj55/KlKav6GHGNZC -----END CERTIFICATE-----Generated at Wed May 13 11:59:15 2026 by rpki-client