$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/3136302e3138372e3135312e302f32342d3234203d3e20313533313237.roa File: 3136302e3138372e3135312e302f32342d3234203d3e20313533313237.roa (raw, json) Hash identifier: PY2cdm4cDThhK3Nzh3f/7vmBzsiNx5GQah9qgEoI//k= Subject key identifier: B9:F4:F6:67:40:67:C9:5F:35:BE:8A:93:F8:F3:90:25:A1:15:D6:D1 Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 2D49F3858C4921AE98B98E64ADBD57A7F419B337 Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/3136302e3138372e3135312e302f32342d3234203d3e20313533313237.roa Signing time: Thu 15 Oct 2026 13:12:19 +0000 ROA not before: Thu 15 Oct 2026 13:07:19 +0000 ROA not after: Thu 14 Oct 2027 13:12:19 +0000 asID: 153127 IP address blocks: 160.187.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:49:f3:85:8c:49:21:ae:98:b9:8e:64:ad:bd:57:a7:f4:19:b3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Oct 15 13:07:19 2026 GMT Not After : Oct 14 13:12:19 2027 GMT Subject: CN=B9F4F6674067C95F35BE8A93F8F39025A115D6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:1b:3d:9b:8c:9c:9d:69:b0:03:9b:05:aa: 35:aa:14:c0:3a:85:c5:f3:5f:89:de:cb:35:d3:de: e1:df:9f:de:b4:97:5a:b8:0f:d4:34:da:96:4c:a7: 28:16:2e:17:14:62:01:71:bf:31:e0:63:86:ec:5c: db:19:f7:3d:9c:c3:5a:1e:ef:5f:91:7c:49:63:ae: 83:0b:66:b2:28:ca:b7:8f:6a:26:e3:f3:c7:84:45: 2a:c1:73:93:f3:6f:c3:40:e3:79:19:63:91:ad:1b: ea:17:ae:3a:bc:cf:e3:d5:f9:21:bf:6f:38:a0:be: 3c:e8:f6:c2:a6:85:d5:7d:a4:2a:5b:69:bd:7c:d0: 43:47:f0:16:28:20:a7:96:2e:e3:f0:48:ae:da:73: 48:a1:4d:3c:f9:86:c6:27:6c:00:be:ad:f5:70:eb: 7d:d9:fd:bf:ae:c0:55:9d:75:4d:7b:5a:07:8f:55: 20:5c:e2:e5:ab:70:3d:3b:e6:05:94:9a:17:c8:d9: 08:7f:e8:e3:87:b3:ac:bd:b1:a4:a5:9f:cc:a8:44: 3b:49:17:06:b3:38:a0:54:f4:e6:fd:ff:f3:b4:f8: 51:e0:a7:7f:ed:45:9b:8f:2b:61:e1:4f:5d:64:f6: f4:c4:14:fa:ea:f0:ad:27:67:1d:20:e2:90:5a:f3: d1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F4:F6:67:40:67:C9:5F:35:BE:8A:93:F8:F3:90:25:A1:15:D6:D1 X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/3136302e3138372e3135312e302f32342d3234203d3e20313533313237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.151.0/24 Signature Algorithm: sha256WithRSAEncryption ab:c4:b6:df:a5:8a:0a:bc:e0:38:88:fb:6e:45:da:c3:62:c9: c6:b5:65:cf:9e:9d:db:1b:16:3f:ce:9e:91:8d:15:fe:ef:ea: 1d:36:f3:d9:76:47:01:e7:6c:8d:a3:d5:26:9c:eb:ce:b0:97: 46:8c:71:5b:26:69:88:b9:f1:9c:e6:36:15:3f:0e:d5:61:ff: 9a:c0:b0:c9:3f:aa:ca:6f:98:27:d5:a3:38:16:41:8f:97:1f: d4:80:b0:79:2a:83:10:5d:30:7e:5e:a1:f4:e4:6a:43:10:7b: 9d:67:6e:23:00:e2:21:f5:7d:37:a7:34:ec:38:9c:0d:95:64: 3c:e6:02:d5:b8:b8:ea:72:a8:a0:58:7d:39:50:75:c7:34:6a: 16:ea:d9:d9:99:61:67:87:7c:1a:be:fe:1b:28:ed:42:2e:6a: 22:15:3a:39:e9:60:4b:ed:8b:7b:0d:36:12:54:a1:01:c1:e6: 05:78:51:da:4c:9d:49:b1:15:b7:96:1a:ee:a9:23:7f:c8:ec: 1a:70:66:69:7b:69:fa:a2:8e:b4:61:eb:79:cb:b6:6f:a1:70: f0:24:ba:83:1a:a3:86:2a:6b:7b:20:3f:22:8b:80:76:17:f7: cc:aa:26:5f:3d:17:ba:86:a9:b6:4d:06:fb:81:53:05:fa:e4: 9a:e7:5c:ae -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULUnzhYxJIa6YuY5krb1Xp/QZszcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjEwMTUxMzA3MTlaFw0yNzEwMTQxMzEyMTlaMDMxMTAvBgNV BAMTKEI5RjRGNjY3NDA2N0M5NUYzNUJFOEE5M0Y4RjM5MDI1QTExNUQ2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Pxs9m4ycnWmwA5sFqjWqFMA6 hcXzX4neyzXT3uHfn960l1q4D9Q02pZMpygWLhcUYgFxvzHgY4bsXNsZ9z2cw1oe 71+RfEljroMLZrIoyrePaibj88eERSrBc5Pzb8NA43kZY5GtG+oXrjq8z+PV+SG/ bzigvjzo9sKmhdV9pCpbab180ENH8BYoIKeWLuPwSK7ac0ihTTz5hsYnbAC+rfVw 633Z/b+uwFWddU17WgePVSBc4uWrcD075gWUmhfI2Qh/6OOHs6y9saSln8yoRDtJ FwazOKBU9Ob9//O0+FHgp3/tRZuPK2HhT11k9vTEFPrq8K0nZx0g4pBa89GjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUufT2Z0BnyV81voqT+POQJaEV1tEwHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIxZDk3YjQwLWMwMzEtNGU1Yi05 YjQyLWQyYWUxYzljZjk4Ny8wLzMxMzYzMDJlMzEzODM3MmUzMTM1MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu5cwDQYJ KoZIhvcNAQELBQADggEBAKvEtt+ligq84DiI+25F2sNiyca1Zc+endsbFj/OnpGN Ff7v6h0289l2RwHnbI2j1Sac686wl0aMcVsmaYi58ZzmNhU/DtVh/5rAsMk/qspv mCfVozgWQY+XH9SAsHkqgxBdMH5eofTkakMQe51nbiMA4iH1fTenNOw4nA2VZDzm AtW4uOpyqKBYfTlQdcc0ahbq2dmZYWeHfBq+/hso7UIuaiIVOjnpYEvti3sNNhJU oQHB5gV4UdpMnUmxFbeWGu6pI3/I7BpwZml7afqijrRh63nLtm+hcPAkuoMao4Yq a3sgPyKLgHYX98yqJl89F7qGqbZNBvuBUwX65JrnXK4= -----END CERTIFICATE-----Generated at Wed Nov 4 14:36:46 2026 by rpki-client