$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa File: 3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa (raw, json) Hash identifier: bW6EtF3Vlqjb0ua0UMwhPPX9SMPnrKmlHFzlUxuua+k= Subject key identifier: A0:5B:ED:5A:4C:51:16:8A:26:5A:AB:55:F1:4A:C6:C7:51:38:AD:71 Certificate issuer: /CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Certificate serial: 579C81DB17409FDF4BDF7B9E096C2BD129094483 Authority key identifier: 7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa Signing time: Sun 03 May 2026 03:07:45 +0000 ROA not before: Sun 03 May 2026 03:02:45 +0000 ROA not after: Sun 02 May 2027 03:07:45 +0000 asID: 153062 IP address blocks: 160.25.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9c:81:db:17:40:9f:df:4b:df:7b:9e:09:6c:2b:d1:29:09:44:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BEEB290E9254E766A7D8C3B216F0785206617EF Validity Not Before: May 3 03:02:45 2026 GMT Not After : May 2 03:07:45 2027 GMT Subject: CN=A05BED5A4C51168A265AAB55F14AC6C75138AD71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1e:02:62:5c:9a:73:8f:9d:e5:60:dc:be:5d: f0:c3:1a:98:9a:4b:69:bb:fa:29:31:60:72:6f:1e: 48:96:9b:bd:78:90:60:d0:54:1f:c8:61:83:44:c9: 95:b8:19:f3:de:81:39:3c:22:09:7f:ee:47:91:ae: b0:cc:7c:d1:a2:20:46:f3:04:6b:94:94:ae:18:e0: 3f:21:3e:5e:22:20:a9:1d:31:8f:19:00:96:29:2d: 35:ca:d8:48:f2:1a:2c:2e:89:28:b2:2c:46:1b:e2: 0f:ac:b0:b3:5c:65:9f:4c:83:0e:16:ec:ee:9e:0d: 15:8b:89:97:31:fd:44:e8:e6:d7:fc:1e:d9:64:a0: a2:4f:61:9f:b9:3f:d3:6d:9c:41:38:f2:e1:1b:09: 38:ce:43:b9:5b:60:7d:5d:23:74:43:95:8e:72:33: 7c:81:eb:1c:b1:da:5c:cc:a2:81:3a:dc:b8:71:db: 75:86:92:4f:b9:0f:e5:28:c1:12:e7:77:21:d8:9a: 79:76:a2:0b:5e:5a:23:b1:2b:a5:0b:5d:0f:6b:e6: 3b:0c:36:69:89:99:4c:82:4a:b9:e8:dc:17:cb:c4: c4:5d:ae:f4:9c:ce:d4:26:d0:3a:a0:e4:25:b6:a4: b8:92:3a:27:3d:fe:09:c1:0b:f0:dc:37:09:36:dd: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5B:ED:5A:4C:51:16:8A:26:5A:AB:55:F1:4A:C6:C7:51:38:AD:71 X509v3 Authority Key Identifier: keyid:7B:EE:B2:90:E9:25:4E:76:6A:7D:8C:3B:21:6F:07:85:20:66:17:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7BEEB290E9254E766A7D8C3B216F0785206617EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf72f012-a43a-4fcb-86a9-ab3e9573a8d9/0/3136302e32352e3132312e302f32342d3234203d3e20313533303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.121.0/24 Signature Algorithm: sha256WithRSAEncryption 27:ba:7f:23:a2:3d:12:0c:ac:4a:b8:82:92:85:6d:5a:5d:e4: b1:cc:08:d3:e6:f6:aa:88:3f:69:82:0f:7c:d2:56:ef:06:2a: f7:e5:46:8d:b0:da:3d:19:31:5d:b2:95:79:50:81:1e:c3:64: c5:e1:97:e1:f0:11:52:92:58:7e:65:a7:3f:41:f4:4d:5f:73: 14:78:42:58:aa:60:e4:d0:e7:53:02:c5:9e:05:81:07:9b:f1: 3e:41:aa:92:02:c0:55:c7:d5:02:40:dd:c5:dd:3c:5a:2a:b3: 5e:58:c8:58:fd:d8:f2:9b:32:6f:e4:21:82:4b:48:bb:d9:45: a0:79:f5:21:e9:0d:40:bc:01:3f:8a:48:d4:36:47:4d:4e:b4: ef:ca:9e:ad:66:48:a0:7e:04:f8:3b:a7:7f:2f:64:03:75:9e: 83:7d:7b:c7:f5:74:2f:cc:43:1e:9a:32:a5:5f:a1:be:0f:a0: de:20:69:ff:95:43:a2:6b:e8:a6:95:21:cd:8e:69:eb:03:95: d0:0f:d9:ca:88:a5:5a:63:f8:88:60:59:56:76:24:7a:a9:33: f1:e3:d9:d0:d7:3a:88:d7:85:a5:f3:29:8e:d5:a6:e7:8a:60: cf:29:eb:8d:3f:78:0c:33:5f:54:d4:a5:27:dd:3f:cf:a4:44: 70:b1:52:a7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUV5yB2xdAn99L33ueCWwr0SkJRIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JFRUIyOTBFOTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUy MDY2MTdFRjAeFw0yNjA1MDMwMzAyNDVaFw0yNzA1MDIwMzA3NDVaMDMxMTAvBgNV BAMTKEEwNUJFRDVBNEM1MTE2OEEyNjVBQUI1NUYxNEFDNkM3NTEzOEFENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHgJiXJpzj53lYNy+XfDDGpia S2m7+ikxYHJvHkiWm714kGDQVB/IYYNEyZW4GfPegTk8Igl/7keRrrDMfNGiIEbz BGuUlK4Y4D8hPl4iIKkdMY8ZAJYpLTXK2EjyGiwuiSiyLEYb4g+ssLNcZZ9Mgw4W 7O6eDRWLiZcx/UTo5tf8HtlkoKJPYZ+5P9NtnEE48uEbCTjOQ7lbYH1dI3RDlY5y M3yB6xyx2lzMooE63Lhx23WGkk+5D+UowRLndyHYmnl2ogteWiOxK6ULXQ9r5jsM NmmJmUyCSrno3BfLxMRdrvScztQm0Dqg5CW2pLiSOic9/gnBC/DcNwk23aylAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoFvtWkxRFoomWqtV8UrGx1E4rXEwHwYDVR0j BBgwFoAUe+6ykOklTnZqfYw7IW8HhSBmF+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2Y3MmYwMTItYTQzYS00ZmNiLTg2YTktYWIzZTk1NzNhOGQ5LzAvN0JFRUIyOTBF OTI1NEU3NjZBN0Q4QzNCMjE2RjA3ODUyMDY2MTdFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83QkVFQjI5MEU5MjU0RTc2NkE3RDhDM0IyMTZGMDc4NTIwNjYx N0VGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NmNzJmMDEyLWE0M2EtNGZjYi04 NmE5LWFiM2U5NTczYThkOS8wLzMxMzYzMDJlMzIzNTJlMzEzMjMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBl5MA0GCSqG SIb3DQEBCwUAA4IBAQAnun8joj0SDKxKuIKShW1aXeSxzAjT5vaqiD9pgg980lbv Bir35UaNsNo9GTFdspV5UIEew2TF4Zfh8BFSklh+Zac/QfRNX3MUeEJYqmDk0OdT AsWeBYEHm/E+QaqSAsBVx9UCQN3F3TxaKrNeWMhY/djymzJv5CGCS0i72UWgefUh 6Q1AvAE/ikjUNkdNTrTvyp6tZkigfgT4O6d/L2QDdZ6DfXvH9XQvzEMemjKlX6G+ D6DeIGn/lUOia+imlSHNjmnrA5XQD9nKiKVaY/iIYFlWdiR6qTPx49nQ1zqI14Wl 8ymO1abnimDPKeuNP3gMM19U1KUn3T/PpERwsVKn -----END CERTIFICATE-----Generated at Wed May 13 02:27:35 2026 by rpki-client