$ rpki-client -vvf rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa File: 3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa (raw, json) Hash identifier: NFuKh4QURKhti5ts/RHCyWk9MjNgIHs/zpDCkdJPOO8= Subject key identifier: 01:E1:09:64:8B:B6:58:8E:8D:4A:4A:0D:37:D9:56:4B:CC:94:49:F8 Certificate issuer: /CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Certificate serial: 5EC71576C298BB4374DD1CE47CD598C9A9A960DC Authority key identifier: C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa Signing time: Sun 03 May 2026 03:11:49 +0000 ROA not before: Sun 03 May 2026 03:06:49 +0000 ROA not after: Sun 02 May 2027 03:11:49 +0000 asID: 153105 IP address blocks: 160.25.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c7:15:76:c2:98:bb:43:74:dd:1c:e4:7c:d5:98:c9:a9:a9:60:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1 Validity Not Before: May 3 03:06:49 2026 GMT Not After : May 2 03:11:49 2027 GMT Subject: CN=01E109648BB6588E8D4A4A0D37D9564BCC9449F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:8b:1f:0b:55:b7:06:b2:f8:de:35:b6:d1: 16:5f:38:55:f0:22:7e:ed:5e:07:1a:91:c7:26:ef: f9:e3:2f:cb:99:d3:23:a9:81:b3:91:12:51:4e:d8: b9:96:3c:fa:cb:e5:2d:5f:4f:1c:d9:a8:09:70:8f: b5:21:fa:fc:c0:18:b7:92:dc:8d:dc:c2:b9:2c:df: 6d:30:61:19:f4:8d:18:c1:c1:e7:f6:db:a2:a1:a7: 19:42:25:09:e2:d8:93:d9:87:0d:90:76:a3:f2:bf: 09:f3:88:70:ed:3b:a2:8b:c2:39:09:6f:ec:2a:b6: 06:81:ed:e0:fe:97:67:e7:44:2b:b5:06:2e:2b:ef: 5e:db:52:3e:86:50:06:e9:ca:aa:f6:0d:9d:c2:f8: 00:10:b9:94:4f:84:17:d1:2d:43:49:57:d7:65:3a: 2b:44:e8:1b:0e:c1:57:44:3e:c6:b6:89:a9:3d:5a: c1:87:72:e5:4b:c7:56:f3:5a:42:98:a7:88:70:d8: 33:4f:ad:b2:19:44:c6:87:6f:82:b4:60:8f:60:8a: dd:ca:56:4f:4a:0c:8e:1b:97:ca:45:78:b7:ff:43: 5d:cc:f2:09:90:48:30:2c:b1:c0:79:59:8e:39:4a: 53:0e:5d:54:06:f3:5a:32:e4:93:14:62:b2:ff:7b: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E1:09:64:8B:B6:58:8E:8D:4A:4A:0D:37:D9:56:4B:CC:94:49:F8 X509v3 Authority Key Identifier: keyid:C0:FD:03:30:B0:66:5A:32:4B:ED:EF:57:93:F7:3F:D4:FA:6F:30:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C0FD0330B0665A324BEDEF5793F73FD4FA6F30C1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dec2a1ac-5ae4-47ad-8db1-652c7f3f7e8f/0/3136302e32352e3233362e302f32332d3234203d3e20313533313035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.236.0/23 Signature Algorithm: sha256WithRSAEncryption 67:eb:33:aa:1a:5e:90:22:37:33:d0:7f:27:a9:63:52:bc:97: d6:bf:29:37:ce:d8:0c:ff:e6:fd:a1:f2:01:dc:15:08:24:1d: 73:36:6c:9d:e9:c7:95:e5:0c:43:9b:c1:e1:f3:49:46:7b:fc: e2:c1:65:47:e2:f0:c6:cc:5a:e3:bd:9b:96:08:55:b7:a3:64: 43:13:35:b5:35:c0:67:4b:29:04:aa:9a:8b:4b:54:75:56:d5: a1:45:1e:65:bb:a7:65:37:18:c6:30:0e:b0:6d:5e:96:31:97: 42:cf:1d:40:9a:e0:27:a3:db:64:05:f6:43:a1:60:72:25:4f: 52:cb:84:06:7a:8b:7f:15:7e:c7:ba:66:4a:79:c6:38:d2:52: 83:8f:79:7d:e3:e4:ce:26:03:5d:f3:83:95:2b:d7:00:02:27: 5d:54:8a:62:d2:8d:bf:87:95:43:04:76:35:d1:3c:ad:ce:42: 16:90:4f:dd:84:37:ae:1f:3f:95:4b:53:27:5d:81:cc:d8:cc: 60:5c:86:de:fe:32:36:36:ea:5e:78:4e:54:53:90:96:cf:3e: 76:74:57:36:ed:49:98:17:74:fa:14:2c:09:2f:a7:ff:d5:9a: cf:8a:86:4f:0e:58:22:5b:95:16:4f:73:f2:ef:6b:5c:22:82: 48:fa:eb:57 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUXscVdsKYu0N03RzkfNWYyampYNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBGRDAzMzBCMDY2NUEzMjRCRURFRjU3OTNGNzNGRDRG QTZGMzBDMTAeFw0yNjA1MDMwMzA2NDlaFw0yNzA1MDIwMzExNDlaMDMxMTAvBgNV BAMTKDAxRTEwOTY0OEJCNjU4OEU4RDRBNEEwRDM3RDk1NjRCQ0M5NDQ5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPYsfC1W3BrL43jW20RZfOFXw In7tXgcakccm7/njL8uZ0yOpgbORElFO2LmWPPrL5S1fTxzZqAlwj7Uh+vzAGLeS 3I3cwrks320wYRn0jRjBwef226KhpxlCJQni2JPZhw2QdqPyvwnziHDtO6KLwjkJ b+wqtgaB7eD+l2fnRCu1Bi4r717bUj6GUAbpyqr2DZ3C+AAQuZRPhBfRLUNJV9dl OitE6BsOwVdEPsa2iak9WsGHcuVLx1bzWkKYp4hw2DNPrbIZRMaHb4K0YI9git3K Vk9KDI4bl8pFeLf/Q13M8gmQSDAsscB5WY45SlMOXVQG81oy5JMUYrL/e997AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAeEJZIu2WI6NSkoNN9lWS8yUSfgwHwYDVR0j BBgwFoAUwP0DMLBmWjJL7e9Xk/c/1PpvMMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGVjMmExYWMtNWFlNC00N2FkLThkYjEtNjUyYzdmM2Y3ZThmLzAvQzBGRDAzMzBC MDY2NUEzMjRCRURFRjU3OTNGNzNGRDRGQTZGMzBDMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMEZEMDMzMEIwNjY1QTMyNEJFREVGNTc5M0Y3M0ZENEZBNkYz MEMxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RlYzJhMWFjLTVhZTQtNDdhZC04 ZGIxLTY1MmM3ZjNmN2U4Zi8wLzMxMzYzMDJlMzIzNTJlMzIzMzM2MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBnsMA0GCSqG SIb3DQEBCwUAA4IBAQBn6zOqGl6QIjcz0H8nqWNSvJfWvyk3ztgM/+b9ofIB3BUI JB1zNmyd6ceV5QxDm8Hh80lGe/ziwWVH4vDGzFrjvZuWCFW3o2RDEzW1NcBnSykE qpqLS1R1VtWhRR5lu6dlNxjGMA6wbV6WMZdCzx1AmuAno9tkBfZDoWByJU9Sy4QG eot/FX7HumZKecY40lKDj3l94+TOJgNd84OVK9cAAiddVIpi0o2/h5VDBHY10Tyt zkIWkE/dhDeuHz+VS1MnXYHM2MxgXIbe/jI2NupeeE5UU5CWzz52dFc27UmYF3T6 FCwJL6f/1ZrPioZPDlgiW5UWT3Py72tcIoJI+utX -----END CERTIFICATE-----Generated at Wed May 13 02:26:30 2026 by rpki-client