$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/3136302e3138372e3135302e302f32342d3234203d3e20313533313237.roa File: 3136302e3138372e3135302e302f32342d3234203d3e20313533313237.roa (raw, json) Hash identifier: DNx0QLWpr1YneqLawB/18FpPinDAJ9roVaakfpCQ+z0= Subject key identifier: 33:ED:DC:B0:BD:9C:B9:6E:C4:FC:67:8F:81:41:6F:E5:E0:61:28:CF Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 7F4B00AD4BE713341FB332869289C0DA4E2A597D Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/3136302e3138372e3135302e302f32342d3234203d3e20313533313237.roa Signing time: Thu 15 Oct 2026 13:12:00 +0000 ROA not before: Thu 15 Oct 2026 13:07:00 +0000 ROA not after: Thu 14 Oct 2027 13:12:00 +0000 asID: 153127 IP address blocks: 160.187.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4b:00:ad:4b:e7:13:34:1f:b3:32:86:92:89:c0:da:4e:2a:59:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Oct 15 13:07:00 2026 GMT Not After : Oct 14 13:12:00 2027 GMT Subject: CN=33EDDCB0BD9CB96EC4FC678F81416FE5E06128CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:cf:10:f4:e1:b2:2c:31:ee:09:d1:24:31: cf:df:9f:60:b8:0e:e3:0e:40:a9:14:85:5b:7c:7f: 21:88:6f:6a:04:56:9c:7a:6e:cf:42:bf:b0:ae:3c: 55:9b:1b:f3:71:ff:af:9f:64:c0:5a:cb:b5:20:c4: 69:9e:c9:d6:c3:99:1d:40:d6:69:20:a1:6c:a0:7b: 30:2c:c6:db:ed:e0:67:2f:92:94:a5:1a:47:61:a3: 43:77:37:6a:94:5f:b5:80:c8:4e:d5:01:e9:b8:6b: 40:66:64:83:b3:14:66:3e:86:39:a4:37:73:ac:24: 4d:26:ad:82:77:da:07:2e:d5:47:21:73:a4:05:f6: 0c:fe:92:ea:2a:27:5b:a5:65:75:24:cb:d2:87:78: aa:89:74:a5:2b:25:2a:bf:7a:f6:1e:ba:79:07:98: b1:aa:a2:49:8b:1d:a9:9c:8a:98:46:c0:16:25:27: 39:53:5e:71:c1:0d:40:f4:b3:6f:a0:18:3b:74:48: c5:70:f2:a0:6a:65:ee:1f:af:b6:7f:48:8d:62:e5: b5:e5:4c:83:20:85:b7:3f:fa:ef:a6:69:14:06:fc: 2e:53:e2:eb:6f:44:49:d5:cf:a7:48:53:46:32:1a: d8:e2:fd:29:71:60:0e:d1:25:d8:dc:1f:cd:f7:5c: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:ED:DC:B0:BD:9C:B9:6E:C4:FC:67:8F:81:41:6F:E5:E0:61:28:CF X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/3136302e3138372e3135302e302f32342d3234203d3e20313533313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.150.0/24 Signature Algorithm: sha256WithRSAEncryption 73:7d:70:5b:2e:72:ba:fd:0a:a4:fa:0c:b0:93:2e:0e:2b:ba: 30:50:90:3f:61:93:87:03:b3:47:69:a8:c5:bf:51:0d:26:c0: 34:3b:00:3f:85:ec:59:95:da:bc:04:00:1d:64:e5:39:6e:4a: e6:80:75:bc:41:2e:f1:88:e6:7c:8b:af:b5:84:8c:f4:87:41: 5e:f9:7d:bc:36:4d:66:82:b7:e9:15:1f:81:0f:28:24:7f:f7: a0:68:af:98:75:d9:48:5d:e3:b7:12:64:82:f8:a0:36:eb:c9: 21:a2:c7:9a:d0:ca:ba:e7:ed:f4:92:27:8d:a0:98:df:52:49: 1f:f0:e7:ac:34:09:ab:ce:cd:fd:56:de:e2:33:ae:b2:3e:5d: b2:65:42:5e:37:b3:ba:ab:7c:76:67:e1:93:4f:e7:25:e3:ed: c3:1b:03:2b:18:c7:23:47:75:2e:9c:80:b0:4f:d3:7a:21:20: 8d:c5:ba:15:3a:3d:10:72:19:6e:1d:97:7f:75:66:40:77:e4: 48:01:b1:19:41:ce:00:81:4e:47:9a:55:3e:6a:a6:1b:e5:6c: e8:e2:03:67:80:e9:82:f7:dd:bf:1e:1f:d1:f7:26:33:30:0a: 18:cc:95:2a:15:65:d0:0e:30:14:b3:24:6f:5a:dd:ab:90:37: ce:67:ee:4b -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUf0sArUvnEzQfszKGkonA2k4qWX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjEwMTUxMzA3MDBaFw0yNzEwMTQxMzEyMDBaMDMxMTAvBgNV BAMTKDMzRUREQ0IwQkQ5Q0I5NkVDNEZDNjc4RjgxNDE2RkU1RTA2MTI4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyss8Q9OGyLDHuCdEkMc/fn2C4 DuMOQKkUhVt8fyGIb2oEVpx6bs9Cv7CuPFWbG/Nx/6+fZMBay7UgxGmeydbDmR1A 1mkgoWygezAsxtvt4GcvkpSlGkdho0N3N2qUX7WAyE7VAem4a0BmZIOzFGY+hjmk N3OsJE0mrYJ32gcu1Uchc6QF9gz+kuoqJ1ulZXUky9KHeKqJdKUrJSq/evYeunkH mLGqokmLHamciphGwBYlJzlTXnHBDUD0s2+gGDt0SMVw8qBqZe4fr7Z/SI1i5bXl TIMghbc/+u+maRQG/C5T4utvREnVz6dIU0YyGtji/SlxYA7RJdjcH833XCAbAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUM+3csL2cuW7E/GePgUFv5eBhKM8wHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIxZDk3YjQwLWMwMzEtNGU1Yi05 YjQyLWQyYWUxYzljZjk4Ny8wLzMxMzYzMDJlMzEzODM3MmUzMTM1MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu5YwDQYJ KoZIhvcNAQELBQADggEBAHN9cFsucrr9CqT6DLCTLg4rujBQkD9hk4cDs0dpqMW/ UQ0mwDQ7AD+F7FmV2rwEAB1k5TluSuaAdbxBLvGI5nyLr7WEjPSHQV75fbw2TWaC t+kVH4EPKCR/96Bor5h12Uhd47cSZIL4oDbrySGix5rQyrrn7fSSJ42gmN9SSR/w 56w0CavOzf1W3uIzrrI+XbJlQl43s7qrfHZn4ZNP5yXj7cMbAysYxyNHdS6cgLBP 03ohII3FuhU6PRByGW4dl391ZkB35EgBsRlBzgCBTkeaVT5qphvlbOjiA2eA6YL3 3b8eH9H3JjMwChjMlSoVZdAOMBSzJG9a3auQN85n7ks= -----END CERTIFICATE-----Generated at Thu Nov 5 02:28:22 2026 by rpki-client