$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa File: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (raw, json) Hash identifier: amU48sQbi+LRqkY71oQ6cmRVSwjPyvBjn6rWsjlImsA= Subject key identifier: 19:A4:6F:B9:43:06:5B:E8:2B:4D:95:28:62:45:0E:E7:74:76:7D:74 Certificate issuer: /CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Certificate serial: 09981110C68544659EB97E30C3FB4DEAC22DEA06 Authority key identifier: 23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa Signing time: Sun 03 May 2026 03:04:41 +0000 ROA not before: Sun 03 May 2026 02:59:41 +0000 ROA not after: Sun 02 May 2027 03:04:41 +0000 asID: 153085 IP address blocks: 160.25.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:98:11:10:c6:85:44:65:9e:b9:7e:30:c3:fb:4d:ea:c2:2d:ea:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237EA4FB723B72856AF78DF37AE555E9EBA4EF79 Validity Not Before: May 3 02:59:41 2026 GMT Not After : May 2 03:04:41 2027 GMT Subject: CN=19A46FB943065BE82B4D952862450EE774767D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:da:57:e5:f5:48:8d:2b:1a:24:c5:48:dd: a2:87:53:3a:ef:00:29:08:c6:bc:a1:bd:a9:14:8f: ef:c1:82:c9:d0:fa:a9:67:a8:9b:af:5f:d9:a3:41: 14:c1:e8:99:db:60:c3:a5:31:dc:2b:04:b0:cf:e6: 69:22:87:50:32:8f:ad:cc:ee:59:e9:b7:38:fb:05: 8f:67:48:23:40:2d:c5:57:a2:f9:a9:66:26:f4:51: 35:05:3c:50:f7:f5:00:07:0d:3a:6e:86:f8:e7:59: 10:86:ea:e7:7e:6d:a4:ed:0c:18:1c:74:fb:14:69: 67:d0:08:e2:d1:44:2b:64:cc:d1:d8:0d:ea:61:8e: 81:a2:55:a2:05:6b:60:8e:4e:ec:a7:f1:b1:ff:12: d8:29:7f:ca:b1:80:22:14:a3:17:ff:04:3e:bc:1f: 98:1d:07:1e:17:fd:cd:f4:b5:17:8a:78:d6:f0:18: 3d:57:a4:bf:5d:3a:8e:48:e7:3d:66:e5:49:6e:c7: 52:f4:b6:d2:06:6b:b9:20:68:37:61:0d:1c:a3:2a: 2e:a5:7c:72:e3:e7:24:e2:bf:01:14:7e:3d:8f:cc: 03:46:8b:9f:a6:dc:fb:fc:b5:45:3c:28:dd:e8:ae: 8b:7b:2e:e8:66:e1:e2:55:95:ee:50:5f:3c:76:67: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A4:6F:B9:43:06:5B:E8:2B:4D:95:28:62:45:0E:E7:74:76:7D:74 X509v3 Authority Key Identifier: keyid:23:7E:A4:FB:72:3B:72:85:6A:F7:8D:F3:7A:E5:55:E9:EB:A4:EF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/237EA4FB723B72856AF78DF37AE555E9EBA4EF79.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.157.0/24 Signature Algorithm: sha256WithRSAEncryption 85:ae:e9:19:e4:5e:dd:38:35:d3:6b:9b:17:80:8b:aa:e3:b6: c1:79:8b:9a:ae:d8:d2:20:d9:e6:6e:ac:12:b2:fb:d7:a2:c0: 5e:dc:89:d0:d3:28:d7:c1:14:02:54:a3:6f:61:b4:b8:6d:7f: 6c:11:c3:78:8b:07:d5:d4:b7:f7:50:37:94:fe:10:e2:67:c5: ee:e0:40:c2:0a:e3:d4:e4:26:02:09:0a:b4:38:2c:79:03:b3: 20:36:a9:22:70:e2:7c:c2:11:6b:78:a2:28:a0:51:eb:ca:6a: 03:c0:58:cc:cd:f8:d2:8b:91:86:50:ba:b3:fd:11:c5:af:75: 14:53:9a:d8:8e:ef:29:87:30:ab:23:60:b3:30:f2:1c:35:f8: 73:6c:e9:8f:77:21:56:84:25:3b:82:e6:7f:b8:14:8f:81:03: 20:40:77:89:01:0f:7e:49:53:72:43:fd:e5:f5:a8:ea:e6:e4: bb:e3:d0:3e:7b:ff:de:18:de:d0:32:fa:68:e3:75:c8:14:17: a1:33:2f:32:c6:39:94:0c:2c:82:c8:6f:48:82:6d:27:b4:ae: 1e:12:f0:c2:8f:c3:f0:27:6b:5c:c2:3e:e2:45:72:76:85:dd: 95:2e:90:26:97:14:38:22:d5:93:7b:ed:e1:61:52:23:59:d5: 5d:07:04:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCZgREMaFRGWeuX4ww/tN6sIt6gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3RUE0RkI3MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlF QkE0RUY3OTAeFw0yNjA1MDMwMjU5NDFaFw0yNzA1MDIwMzA0NDFaMDMxMTAvBgNV BAMTKDE5QTQ2RkI5NDMwNjVCRTgyQjREOTUyODYyNDUwRUU3NzQ3NjdENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUdpX5fVIjSsaJMVI3aKHUzrv ACkIxryhvakUj+/BgsnQ+qlnqJuvX9mjQRTB6JnbYMOlMdwrBLDP5mkih1Ayj63M 7lnptzj7BY9nSCNALcVXovmpZib0UTUFPFD39QAHDTpuhvjnWRCG6ud+baTtDBgc dPsUaWfQCOLRRCtkzNHYDephjoGiVaIFa2COTuyn8bH/Etgpf8qxgCIUoxf/BD68 H5gdBx4X/c30tReKeNbwGD1XpL9dOo5I5z1m5Ulux1L0ttIGa7kgaDdhDRyjKi6l fHLj5yTivwEUfj2PzANGi5+m3Pv8tUU8KN3orot7Luhm4eJVle5QXzx2ZxYBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUGaRvuUMGW+grTZUoYkUO53R2fXQwHwYDVR0j BBgwFoAUI36k+3I7coVq943zeuVV6euk73kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNhOWQ3ODgtYmNmNy00NmYwLThiNWItMGQ3ZDFmY2I2ZGEzLzAvMjM3RUE0RkI3 MjNCNzI4NTZBRjc4REYzN0FFNTU1RTlFQkE0RUY3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMzdFQTRGQjcyM0I3Mjg1NkFGNzhERjM3QUU1NTVFOUVCQTRF Rjc5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzYTlkNzg4LWJjZjctNDZmMC04 YjViLTBkN2QxZmNiNmRhMy8wLzMxMzYzMDJlMzIzNTJlMzEzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmdMA0GCSqG SIb3DQEBCwUAA4IBAQCFrukZ5F7dODXTa5sXgIuq47bBeYuartjSINnmbqwSsvvX osBe3InQ0yjXwRQCVKNvYbS4bX9sEcN4iwfV1Lf3UDeU/hDiZ8Xu4EDCCuPU5CYC CQq0OCx5A7MgNqkicOJ8whFreKIooFHrymoDwFjMzfjSi5GGULqz/RHFr3UUU5rY ju8phzCrI2CzMPIcNfhzbOmPdyFWhCU7guZ/uBSPgQMgQHeJAQ9+SVNyQ/3l9ajq 5uS749A+e//eGN7QMvpo43XIFBehMy8yxjmUDCyCyG9Igm0ntK4eEvDCj8PwJ2tc wj7iRXJ2hd2VLpAmlxQ4ItWTe+3hYVIjWdVdBwQy -----END CERTIFICATE-----Generated at Wed May 13 02:36:37 2026 by rpki-client