$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/3136302e3233362e31382e302f32342d3234203d3e20313534373239.roa File: 3136302e3233362e31382e302f32342d3234203d3e20313534373239.roa (raw, json) Hash identifier: RTtn3uDbhqh04YtiBI7J6fh/WdEd9LCVhLJfwBoo88w= Subject key identifier: 8E:C8:90:DA:34:9D:7A:F7:17:D6:B7:8E:10:B5:47:12:C4:92:03:55 Certificate issuer: /CN=9600C6D40C9726C4902F405B1CB4D124466EEC1C Certificate serial: 2C3C0AF1C650854102509283871B148F8E57F412 Authority key identifier: 96:00:C6:D4:0C:97:26:C4:90:2F:40:5B:1C:B4:D1:24:46:6E:EC:1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/3136302e3233362e31382e302f32342d3234203d3e20313534373239.roa Signing time: Tue 27 Oct 2026 04:47:35 +0000 ROA not before: Tue 27 Oct 2026 04:42:35 +0000 ROA not after: Tue 26 Oct 2027 04:47:35 +0000 asID: 154729 IP address blocks: 160.236.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.crl rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 18:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3c:0a:f1:c6:50:85:41:02:50:92:83:87:1b:14:8f:8e:57:f4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9600C6D40C9726C4902F405B1CB4D124466EEC1C Validity Not Before: Oct 27 04:42:35 2026 GMT Not After : Oct 26 04:47:35 2027 GMT Subject: CN=8EC890DA349D7AF717D6B78E10B54712C4920355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:38:d9:04:ab:c9:07:11:b8:6f:a9:06:8e: fc:a7:2e:3e:a8:8d:ef:bb:3f:44:23:57:25:f1:29: 3e:29:0f:67:2e:52:61:16:ad:b3:e1:31:0c:8d:ec: aa:11:42:f6:9a:e8:09:0a:d6:9d:d2:4a:8b:69:cd: d7:69:59:d7:40:1d:e9:c7:3c:91:42:60:19:5e:1b: 1d:a6:8d:81:38:6b:c8:52:32:59:2b:8e:e3:0e:88: 0d:ad:d0:92:32:e7:dc:db:a9:82:1b:7f:5b:4b:1c: 06:70:1c:72:32:04:9a:36:8e:e6:42:23:fb:7b:df: 0f:2d:aa:bd:54:0e:de:ed:26:e7:98:bf:56:ef:28: 19:05:98:b0:e8:0e:e3:d8:d8:a4:41:e7:54:e4:bb: 16:d9:41:f5:06:07:0a:c8:c8:2a:cc:57:f8:7f:34: f5:2e:91:da:71:19:fe:27:89:ec:5f:93:0e:83:3d: 36:13:2c:9f:2c:0d:dd:1d:15:a1:bb:6b:e3:c6:15: 36:48:b1:96:c6:e4:51:5c:f0:60:3c:21:ab:10:1f: ad:11:8f:d5:33:9f:15:ab:da:04:d0:06:74:8f:2e: 3e:61:61:72:53:5a:ed:7a:54:9a:fb:77:17:0a:a0: ff:f5:70:14:35:42:df:de:0d:00:3a:24:7e:7e:e5: ce:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C8:90:DA:34:9D:7A:F7:17:D6:B7:8E:10:B5:47:12:C4:92:03:55 X509v3 Authority Key Identifier: keyid:96:00:C6:D4:0C:97:26:C4:90:2F:40:5B:1C:B4:D1:24:46:6E:EC:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/9600C6D40C9726C4902F405B1CB4D124466EEC1C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/9600C6D40C9726C4902F405B1CB4D124466EEC1C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f4d45e1-7219-4c32-a202-aba86f4be0da/1/3136302e3233362e31382e302f32342d3234203d3e20313534373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.18.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:a5:af:53:ac:4e:1a:29:2e:ce:22:03:9c:71:4c:d1:82:02: e1:aa:cb:91:66:6b:1a:4c:4e:a1:d8:41:5f:b1:2b:7e:f0:bb: 77:c6:c6:d2:0f:26:79:74:1c:24:91:b1:45:3a:02:11:27:4d: f5:11:c3:86:fc:90:8d:00:1f:30:49:54:6a:db:a5:19:ac:2b: c9:a4:f8:c0:76:ec:6d:ff:75:c6:23:84:04:c9:ce:82:4f:2f: 78:d6:eb:8e:94:a8:47:e0:6e:15:59:0e:c8:2e:ce:9d:bf:01: b2:39:52:eb:f0:ce:9a:eb:9a:68:df:91:e5:6b:13:ac:9e:68: 9e:96:92:b5:fb:e7:1e:92:73:92:a5:15:de:d6:65:20:f5:b4: 2a:bd:81:b9:12:50:6e:07:ad:5e:d1:8b:fb:fd:97:24:ed:85: 14:12:32:3d:7d:16:2e:1a:f8:83:26:f7:3e:af:01:be:ff:c9: f6:87:94:36:6e:7f:3a:08:57:6e:16:80:a1:98:5c:d1:d4:d8: 2a:f3:b0:87:f6:4d:5a:c3:b9:a0:e6:0e:a3:72:ae:c4:93:19: fa:ee:02:aa:e9:b6:35:2b:8f:3a:14:0f:68:8c:e7:b3:29:7e: 5b:09:ba:2e:6a:98:ef:d3:d7:7a:0f:77:ad:fb:85:ab:e3:26: ef:76:b8:29 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULDwK8cZQhUECUJKDhxsUj45X9BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTYwMEM2RDQwQzk3MjZDNDkwMkY0MDVCMUNCNEQxMjQ0 NjZFRUMxQzAeFw0yNjEwMjcwNDQyMzVaFw0yNzEwMjYwNDQ3MzVaMDMxMTAvBgNV BAMTKDhFQzg5MERBMzQ5RDdBRjcxN0Q2Qjc4RTEwQjU0NzEyQzQ5MjAzNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPNTjZBKvJBxG4b6kGjvynLj6o je+7P0QjVyXxKT4pD2cuUmEWrbPhMQyN7KoRQvaa6AkK1p3SSotpzddpWddAHenH PJFCYBleGx2mjYE4a8hSMlkrjuMOiA2t0JIy59zbqYIbf1tLHAZwHHIyBJo2juZC I/t73w8tqr1UDt7tJueYv1bvKBkFmLDoDuPY2KRB51TkuxbZQfUGBwrIyCrMV/h/ NPUukdpxGf4niexfkw6DPTYTLJ8sDd0dFaG7a+PGFTZIsZbG5FFc8GA8IasQH60R j9UznxWr2gTQBnSPLj5hYXJTWu16VJr7dxcKoP/1cBQ1Qt/eDQA6JH5+5c7DAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUjsiQ2jSdevcX1reOELVHEsSSA1UwHwYDVR0j BBgwFoAUlgDG1AyXJsSQL0BbHLTRJEZu7BwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY0ZDQ1ZTEtNzIxOS00YzMyLWEyMDItYWJhODZmNGJlMGRhLzEvOTYwMEM2RDQw Qzk3MjZDNDkwMkY0MDVCMUNCNEQxMjQ0NjZFRUMxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NjAwQzZENDBDOTcyNkM0OTAyRjQwNUIxQ0I0RDEyNDQ2NkVF QzFDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBmNGQ0NWUxLTcyMTktNGMzMi1h MjAyLWFiYTg2ZjRiZTBkYS8xLzMxMzYzMDJlMzIzMzM2MmUzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTM0MzczMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoOwSMA0GCSqG SIb3DQEBCwUAA4IBAQB/pa9TrE4aKS7OIgOccUzRggLhqsuRZmsaTE6h2EFfsSt+ 8Lt3xsbSDyZ5dBwkkbFFOgIRJ031EcOG/JCNAB8wSVRq26UZrCvJpPjAduxt/3XG I4QEyc6CTy941uuOlKhH4G4VWQ7ILs6dvwGyOVLr8M6a65po35HlaxOsnmielpK1 ++ceknOSpRXe1mUg9bQqvYG5ElBuB61e0Yv7/Zck7YUUEjI9fRYuGviDJvc+rwG+ /8n2h5Q2bn86CFduFoChmFzR1Ngq87CH9k1aw7mg5g6jcq7Ekxn67gKq6bY1K486 FA9ojOezKX5bCbouapjv09d6D3et+4Wr4ybvdrgp -----END CERTIFICATE-----Generated at Thu Nov 5 03:09:11 2026 by rpki-client