$ rpki-client -vvf rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa File: 3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa (raw, json) Hash identifier: odcITqAToT5yF34xeI2KwLrnQspjZLjDq5idgZAGEkU= Subject key identifier: F8:0D:F5:B4:84:F4:71:D8:34:F2:BD:CE:79:01:AF:F9:D3:F0:48:1E Certificate issuer: /CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Certificate serial: 67239155658D0B0023CACEA6118635B9B882E0C7 Authority key identifier: AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa Signing time: Sun 03 May 2026 03:05:39 +0000 ROA not before: Sun 03 May 2026 03:00:39 +0000 ROA not after: Sun 02 May 2027 03:05:39 +0000 asID: 153071 IP address blocks: 160.25.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:23:91:55:65:8d:0b:00:23:ca:ce:a6:11:86:35:b9:b8:82:e0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3D1EB6F3B74B12606797C31C2353B780FDFDFD Validity Not Before: May 3 03:00:39 2026 GMT Not After : May 2 03:05:39 2027 GMT Subject: CN=F80DF5B484F471D834F2BDCE7901AFF9D3F0481E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:6a:67:5f:a5:d0:b1:ba:04:c5:e9:a7:36: 53:9b:4e:bf:cf:8e:7b:0c:bb:42:92:1e:4a:50:42: 12:3a:9f:96:b5:68:d9:83:75:4b:19:6f:0f:51:d2: 99:8a:51:cc:d0:4e:4d:5e:07:29:89:94:80:f9:27: b3:c1:7e:4d:4e:38:78:e5:aa:49:ff:5b:82:04:8b: 7e:df:ea:30:77:33:2f:b7:eb:86:d3:47:9f:7f:da: 8e:8b:f3:53:e8:89:f6:9a:26:be:29:9c:b9:be:23: 31:d1:e8:f0:86:77:eb:32:da:35:b1:3a:24:f8:82: 01:e8:42:d3:d0:25:46:42:f3:b5:89:7f:ed:ff:18: 89:24:d0:d7:e7:89:b3:6d:2f:58:d1:0d:bb:dc:03: 37:1a:80:60:54:70:01:16:d0:f1:3c:2c:07:fc:b0: 26:ef:1a:91:2a:9d:58:79:27:0f:f4:a2:86:88:70: c7:08:47:63:9f:8a:08:68:18:3a:39:c6:1a:ab:4b: a3:e2:10:dc:af:a8:72:9e:ea:f0:06:33:d2:fd:9a: f2:1b:0d:e4:05:f9:45:24:fb:85:fe:9f:9f:fb:97: 44:12:11:70:cf:dd:fa:79:42:6a:34:d3:27:bc:bc: e7:f2:3f:1e:f8:54:a7:49:2b:9a:36:6a:ba:1b:62: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0D:F5:B4:84:F4:71:D8:34:F2:BD:CE:79:01:AF:F9:D3:F0:48:1E X509v3 Authority Key Identifier: keyid:AF:3D:1E:B6:F3:B7:4B:12:60:67:97:C3:1C:23:53:B7:80:FD:FD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AF3D1EB6F3B74B12606797C31C2353B780FDFDFD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c67860e3-6ad8-47a5-94c0-93ffd2472865/0/3136302e32352e3131352e302f32342d3234203d3e20313533303731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.115.0/24 Signature Algorithm: sha256WithRSAEncryption 44:07:5c:fb:bf:86:42:d0:fc:04:ad:c0:23:22:a4:2b:15:9d: 30:74:3e:3b:42:8c:a4:40:9f:a1:4e:aa:5c:b3:a8:43:77:61: cc:68:2e:6f:52:6d:90:81:c6:94:69:75:c6:27:03:e3:03:0a: 13:c6:4c:2e:8b:7d:f6:c3:90:ed:f7:ba:87:81:0f:b9:a6:d2: 98:aa:ae:07:f3:79:c8:d5:70:18:02:27:d6:69:f2:6a:42:65: ac:56:22:98:10:b4:30:1d:b0:fb:cd:35:a1:5b:2d:0f:29:f3: 12:2d:04:5d:2b:f2:7f:98:11:3c:ae:6e:b4:c9:c4:a9:ea:77: a9:aa:bf:c8:8f:f7:58:fa:1f:61:72:ba:d9:21:fe:ef:69:2e: 96:36:8f:67:40:94:d2:31:a5:1b:7d:84:ea:68:25:61:75:c8: 5c:34:23:1e:e1:b4:e8:70:fe:c9:90:e4:c3:1d:1f:bc:93:a4: 9d:c6:b3:9f:e0:4b:29:94:38:c0:e1:d5:75:9a:b8:24:2d:e2: c1:c9:41:f7:e9:7f:29:51:84:04:27:0b:03:16:21:6a:3b:c4: ab:36:cf:b5:3b:9e:67:5f:4c:2c:2a:42:ac:a1:23:db:78:95: f7:fb:d6:b3:05:77:7b:f9:81:f6:06:6a:c4:ae:2f:e4:f5:1b: a5:40:28:e8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZyORVWWNCwAjys6mEYY1ubiC4McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzRDFFQjZGM0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4 MEZERkRGRDAeFw0yNjA1MDMwMzAwMzlaFw0yNzA1MDIwMzA1MzlaMDMxMTAvBgNV BAMTKEY4MERGNUI0ODRGNDcxRDgzNEYyQkRDRTc5MDFBRkY5RDNGMDQ4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZ2pnX6XQsboExemnNlObTr/P jnsMu0KSHkpQQhI6n5a1aNmDdUsZbw9R0pmKUczQTk1eBymJlID5J7PBfk1OOHjl qkn/W4IEi37f6jB3My+364bTR59/2o6L81PoifaaJr4pnLm+IzHR6PCGd+sy2jWx OiT4ggHoQtPQJUZC87WJf+3/GIkk0NfnibNtL1jRDbvcAzcagGBUcAEW0PE8LAf8 sCbvGpEqnVh5Jw/0ooaIcMcIR2OfighoGDo5xhqrS6PiENyvqHKe6vAGM9L9mvIb DeQF+UUk+4X+n5/7l0QSEXDP3fp5Qmo00ye8vOfyPx74VKdJK5o2arobYoNtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+A31tIT0cdg08r3OeQGv+dPwSB4wHwYDVR0j BBgwFoAUrz0etvO3SxJgZ5fDHCNTt4D9/f0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY3ODYwZTMtNmFkOC00N2E1LTk0YzAtOTNmZmQyNDcyODY1LzAvQUYzRDFFQjZG M0I3NEIxMjYwNjc5N0MzMUMyMzUzQjc4MEZERkRGRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BRjNEMUVCNkYzQjc0QjEyNjA2Nzk3QzMxQzIzNTNCNzgwRkRG REZELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M2Nzg2MGUzLTZhZDgtNDdhNS05 NGMwLTkzZmZkMjQ3Mjg2NS8wLzMxMzYzMDJlMzIzNTJlMzEzMTM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBlzMA0GCSqG SIb3DQEBCwUAA4IBAQBEB1z7v4ZC0PwErcAjIqQrFZ0wdD47QoykQJ+hTqpcs6hD d2HMaC5vUm2QgcaUaXXGJwPjAwoTxkwui332w5Dt97qHgQ+5ptKYqq4H83nI1XAY AifWafJqQmWsViKYELQwHbD7zTWhWy0PKfMSLQRdK/J/mBE8rm60ycSp6nepqr/I j/dY+h9hcrrZIf7vaS6WNo9nQJTSMaUbfYTqaCVhdchcNCMe4bTocP7JkOTDHR+8 k6SdxrOf4EsplDjA4dV1mrgkLeLByUH36X8pUYQEJwsDFiFqO8SrNs+1O55nX0ws KkKsoSPbeJX3+9azBXd7+YH2BmrEri/k9RulQCjo -----END CERTIFICATE-----Generated at Wed May 13 12:18:54 2026 by rpki-client