$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa File: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (raw, json) Hash identifier: BLy2IIO/t25gzHYkfmO4RMXFqI37JzfK6VfmCeQNaI4= Subject key identifier: 24:AF:13:9D:0D:C2:CD:FE:5D:11:B8:46:C6:2F:CF:99:71:32:88:5C Certificate issuer: /CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Certificate serial: 71F78C300E4E23D803139D933DE87A6E058E1D84 Authority key identifier: 16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa Signing time: Sun 11 Jan 2026 22:00:02 +0000 ROA not before: Sun 11 Jan 2026 21:55:02 +0000 ROA not after: Sun 10 Jan 2027 22:00:02 +0000 asID: 153085 IP address blocks: 160.25.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f7:8c:30:0e:4e:23:d8:03:13:9d:93:3d:e8:7a:6e:05:8e:1d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16F8223FA3342ACE31ED864C538E59E22A52BC89 Validity Not Before: Jan 11 21:55:02 2026 GMT Not After : Jan 10 22:00:02 2027 GMT Subject: CN=24AF139D0DC2CDFE5D11B846C62FCF997132885C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:17:b6:78:b8:55:d4:68:2b:09:e8:c3:fc: 9e:df:cd:2f:25:6d:5b:60:7a:f3:de:35:e4:40:a5: 31:15:fe:ae:89:4a:63:1c:29:96:3f:28:c7:9e:3f: 77:cc:3a:78:ed:20:93:66:cf:1d:a7:2a:c4:8b:9d: 67:2c:5e:7d:64:4f:c4:19:d5:93:4f:19:6e:ee:51: ea:8c:bb:7b:f7:d1:42:56:d0:64:34:31:46:72:c8: c9:47:7d:c1:3c:7f:e8:e2:c7:7f:58:3d:6b:59:ab: 68:d6:66:d2:1b:21:ea:75:f3:c3:bc:8b:7b:93:ff: 88:fe:17:6b:2f:ba:ef:cc:88:31:e4:07:b6:7e:08: 5a:61:96:4b:a4:b7:25:f3:9b:79:53:29:c0:17:0e: e8:02:b8:6b:d2:77:87:cb:1b:e2:57:d2:7d:35:17: 41:7e:7a:ff:29:b9:72:95:bb:8a:a9:45:8e:01:55: a6:c8:1f:8c:6b:ee:cf:f5:e0:51:c9:4f:aa:37:e9: 98:8c:9d:5d:df:28:c8:31:8a:5b:50:f9:69:03:2b: 16:73:af:97:97:54:36:46:f2:90:2d:d0:35:a8:43: 61:92:f2:a1:38:cc:84:92:34:dc:2b:7d:86:25:85: 9b:a3:32:2c:21:30:3f:2d:21:20:af:3d:69:4d:29: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AF:13:9D:0D:C2:CD:FE:5D:11:B8:46:C6:2F:CF:99:71:32:88:5C X509v3 Authority Key Identifier: keyid:16:F8:22:3F:A3:34:2A:CE:31:ED:86:4C:53:8E:59:E2:2A:52:BC:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/16F8223FA3342ACE31ED864C538E59E22A52BC89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/16F8223FA3342ACE31ED864C538E59E22A52BC89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a9d788-bcf7-46f0-8b5b-0d7d1fcb6da3/0/3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.157.0/24 Signature Algorithm: sha256WithRSAEncryption 03:1d:dc:77:19:65:3b:1d:a8:62:a8:11:85:86:e5:bb:66:14: 53:f6:6c:18:5f:19:46:50:3b:25:18:04:42:f4:28:09:ec:2d: 1e:f8:a3:36:68:de:5a:20:cc:b3:43:b2:7e:6d:89:34:3a:93: 36:3e:8c:cd:7e:4b:d1:71:73:94:06:88:04:8e:ca:a6:17:ed: 89:43:65:b9:a1:d8:cd:a9:06:47:5b:3c:06:b9:ae:7f:c6:c8: ee:99:b3:e5:90:3f:82:63:02:5e:c9:f7:a9:00:6c:27:09:de: ae:b2:a3:f1:da:0d:7e:88:e2:58:46:04:25:28:cd:95:2d:c9: ad:e1:c7:d8:60:21:93:fb:b0:79:45:31:19:07:6b:16:46:c8: 18:17:1c:34:fd:85:06:84:4d:94:f8:e3:c0:ea:b8:30:48:f9: bc:64:f7:37:eb:20:d7:c3:72:0a:af:9c:25:bf:1b:93:60:2a: 5c:4d:9c:a3:b8:f6:f1:78:54:2a:33:55:6a:e6:81:d5:d0:47: c3:ab:4e:4d:99:bc:88:66:60:fb:46:bc:17:99:67:6d:27:19: bf:b1:9f:0b:55:63:16:11:53:80:f2:47:7c:56:19:d7:58:a7: 4c:a6:2f:4c:78:ce:f9:da:9a:02:d7:50:d5:54:7c:0a:78:c4: 48:53:e9:05 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcfeMMA5OI9gDE52TPeh6bgWOHYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIy QTUyQkM4OTAeFw0yNjAxMTEyMTU1MDJaFw0yNzAxMTAyMjAwMDJaMDMxMTAvBgNV BAMTKDI0QUYxMzlEMERDMkNERkU1RDExQjg0NkM2MkZDRjk5NzEzMjg4NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJhe2eLhV1GgrCejD/J7fzS8l bVtgevPeNeRApTEV/q6JSmMcKZY/KMeeP3fMOnjtIJNmzx2nKsSLnWcsXn1kT8QZ 1ZNPGW7uUeqMu3v30UJW0GQ0MUZyyMlHfcE8f+jix39YPWtZq2jWZtIbIep188O8 i3uT/4j+F2svuu/MiDHkB7Z+CFphlkuktyXzm3lTKcAXDugCuGvSd4fLG+JX0n01 F0F+ev8puXKVu4qpRY4BVabIH4xr7s/14FHJT6o36ZiMnV3fKMgxiltQ+WkDKxZz r5eXVDZG8pAt0DWoQ2GS8qE4zISSNNwrfYYlhZujMiwhMD8tISCvPWlNKUIBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJK8TnQ3Czf5dEbhGxi/PmXEyiFwwHwYDVR0j BBgwFoAUFvgiP6M0Ks4x7YZMU45Z4ipSvIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E5ZDc4OC1iY2Y3LTQ2ZjAtOGI1Yi0wZDdkMWZjYjZkYTMvMC8xNkY4MjIzRkEz MzQyQUNFMzFFRDg2NEM1MzhFNTlFMjJBNTJCQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTZGODIyM0ZBMzM0MkFDRTMxRUQ4NjRDNTM4RTU5RTIyQTUy QkM4OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzYTlkNzg4LWJjZjctNDZmMC04 YjViLTBkN2QxZmNiNmRhMy8wLzMxMzYzMDJlMzIzNTJlMzEzNTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBmdMA0GCSqG SIb3DQEBCwUAA4IBAQADHdx3GWU7HahiqBGFhuW7ZhRT9mwYXxlGUDslGARC9CgJ 7C0e+KM2aN5aIMyzQ7J+bYk0OpM2PozNfkvRcXOUBogEjsqmF+2JQ2W5odjNqQZH WzwGua5/xsjumbPlkD+CYwJeyfepAGwnCd6usqPx2g1+iOJYRgQlKM2VLcmt4cfY YCGT+7B5RTEZB2sWRsgYFxw0/YUGhE2U+OPA6rgwSPm8ZPc36yDXw3IKr5wlvxuT YCpcTZyjuPbxeFQqM1Vq5oHV0EfDq05NmbyIZmD7RrwXmWdtJxm/sZ8LVWMWEVOA 8kd8VhnXWKdMpi9MeM752poC11DVVHwKeMRIU+kF -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:44 2026 by rpki-client