$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33342e302f32332d3234203d3e20313532383331.roa File: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (raw, json) Hash identifier: 0U+NdxzY7vmT7oHxOmUZVL0R1y6tciRJXLTpjbtqaPI= Subject key identifier: 76:BB:AF:56:1E:D3:21:5E:CF:27:38:63:0D:29:D3:F1:08:81:C9:0A Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 6108333C650121BEF23E08609CC261EE86857511 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33342e302f32332d3234203d3e20313532383331.roa Signing time: Thu 29 Jan 2026 18:00:01 +0000 ROA not before: Thu 29 Jan 2026 17:55:01 +0000 ROA not after: Thu 28 Jan 2027 18:00:01 +0000 asID: 152831 IP address blocks: 160.25.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 02:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:08:33:3c:65:01:21:be:f2:3e:08:60:9c:c2:61:ee:86:85:75:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Jan 29 17:55:01 2026 GMT Not After : Jan 28 18:00:01 2027 GMT Subject: CN=76BBAF561ED3215ECF2738630D29D3F10881C90A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:99:e6:f3:e9:f0:d6:bd:8c:5a:c6:2f:e6: f6:c3:5e:83:d8:c0:6c:f3:d3:fb:ba:6f:66:43:ad: 4f:a3:48:dc:8c:10:de:37:4b:46:35:45:de:a1:fb: b7:b2:bd:d2:66:a9:44:a0:a6:6a:c9:3a:c7:3a:ee: 76:af:88:88:43:34:8f:c0:e8:a1:ed:1a:7b:67:93: 08:97:2e:1d:32:5e:19:2d:e8:27:89:17:25:06:21: 5a:e6:02:d9:44:09:b2:fc:4a:92:5b:e4:21:99:93: ca:6b:c0:38:cd:3f:2b:af:0a:a3:ba:4a:ca:cb:d4: 82:61:b5:8c:66:ef:7b:13:35:6d:b4:48:cb:c9:f4: 9b:78:b9:8d:a2:c1:6e:a4:85:84:bb:85:db:a8:6f: fe:d7:33:c4:23:59:35:14:d4:4f:e3:79:82:61:5e: 7a:0f:e2:6e:21:1e:4a:65:be:ff:8c:51:0a:04:6a: 2f:d8:3d:90:1c:ac:44:9c:e2:70:7b:f5:8d:03:89: 09:ba:47:0f:a2:82:97:b7:6c:62:bd:33:85:69:0f: 4b:ab:22:41:50:aa:af:e1:d3:7a:69:5e:fb:ce:3d: 43:de:9a:3c:70:e1:3f:d3:86:d5:54:34:8a:27:df: 13:89:cb:05:cf:b4:6d:dc:0f:b3:b1:1a:23:52:5d: a5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BB:AF:56:1E:D3:21:5E:CF:27:38:63:0D:29:D3:F1:08:81:C9:0A X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/3136302e32352e33342e302f32332d3234203d3e20313532383331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.34.0/23 Signature Algorithm: sha256WithRSAEncryption c0:f0:4e:9b:22:2d:b4:03:2b:3c:97:01:8c:b6:81:a7:5d:43: 47:c4:71:5f:b6:56:d7:0e:3b:52:9a:8a:d7:98:eb:22:41:76: 44:6a:8a:97:d8:57:26:d8:bb:cd:e3:35:71:0f:24:b0:f5:e8: cc:3d:db:1f:6d:02:d7:ef:00:df:91:24:89:7e:bb:60:c8:30: 5a:d6:d5:e2:d8:65:00:ba:12:81:76:86:e1:2c:70:1e:63:2e: 40:b5:5a:19:e5:74:cb:f4:b6:bf:64:f7:14:45:fd:24:e8:2e: 8c:26:c6:e6:4c:ee:14:ce:5f:fc:5c:00:80:df:65:39:f8:4f: 23:a8:66:ab:be:ad:51:78:12:45:8b:da:08:a8:a7:42:87:1b: 96:20:23:f9:84:50:5b:00:bc:d9:ac:bb:6a:67:a3:c9:60:13: ec:27:af:88:7f:9d:90:e3:55:4a:8e:3d:28:db:29:fa:1f:5b: 58:87:f3:4c:f4:4e:74:87:56:e6:4e:f4:bc:3b:51:a0:7b:d3: 63:de:8a:4e:38:30:44:8a:62:1e:42:2a:51:8b:95:5c:34:15: 9a:ff:fc:3f:ea:3e:ad:ec:00:b2:3c:98:8e:37:fd:c9:af:89: 0f:15:2d:a2:7d:aa:32:4c:1a:28:97:0c:87:e5:5b:f0:50:4e: a0:98:97:cf -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYQgzPGUBIb7yPghgnMJh7oaFdREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNjAxMjkxNzU1MDFaFw0yNzAxMjgxODAwMDFaMDMxMTAvBgNV BAMTKDc2QkJBRjU2MUVEMzIxNUVDRjI3Mzg2MzBEMjlEM0YxMDg4MUM5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoJnm8+nw1r2MWsYv5vbDXoPY wGzz0/u6b2ZDrU+jSNyMEN43S0Y1Rd6h+7eyvdJmqUSgpmrJOsc67naviIhDNI/A 6KHtGntnkwiXLh0yXhkt6CeJFyUGIVrmAtlECbL8SpJb5CGZk8prwDjNPyuvCqO6 SsrL1IJhtYxm73sTNW20SMvJ9Jt4uY2iwW6khYS7hduob/7XM8QjWTUU1E/jeYJh XnoP4m4hHkplvv+MUQoEai/YPZAcrESc4nB79Y0DiQm6Rw+igpe3bGK9M4VpD0ur IkFQqq/h03ppXvvOPUPemjxw4T/ThtVUNIon3xOJywXPtG3cD7OxGiNSXaULAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdruvVh7TIV7PJzhjDSnT8QiByQowHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkNmM5YjhjLTNiZTctNGMwMi05 NTUxLWZiYzZmZmM0MDcwZi8wLzMxMzYzMDJlMzIzNTJlMzMzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAZIjANBgkqhkiG 9w0BAQsFAAOCAQEAwPBOmyIttAMrPJcBjLaBp11DR8RxX7ZW1w47UpqK15jrIkF2 RGqKl9hXJti7zeM1cQ8ksPXozD3bH20C1+8A35EkiX67YMgwWtbV4thlALoSgXaG 4SxwHmMuQLVaGeV0y/S2v2T3FEX9JOgujCbG5kzuFM5f/FwAgN9lOfhPI6hmq76t UXgSRYvaCKinQocbliAj+YRQWwC82ay7amejyWAT7CeviH+dkONVSo49KNsp+h9b WIfzTPROdIdW5k70vDtRoHvTY96KTjgwRIpiHkIqUYuVXDQVmv/8P+o+rewAsjyY jjf9ya+JDxUton2qMkwaKJcMh+Vb8FBOoJiXzw== -----END CERTIFICATE-----Generated at Mon Mar 2 23:56:24 2026 by rpki-client