$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/3136302e32302e3132382e302f32332d3234203d3e20313532373833.roa File: 3136302e32302e3132382e302f32332d3234203d3e20313532373833.roa (raw, json) Hash identifier: ZVz1K3VmS9pSvR4B6qvtVOc38rvIm8D4hBzA2h5rzlI= Subject key identifier: C7:D2:15:3A:6E:94:FE:4D:BB:58:B3:36:29:74:95:6F:29:DF:37:62 Certificate issuer: /CN=CDA698011D10F436E3BBC31664239B3150C53C19 Certificate serial: 3410DE289397DFABB9D595D95D1D25316F2838D9 Authority key identifier: CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/3136302e32302e3132382e302f32332d3234203d3e20313532373833.roa Signing time: Wed 21 Oct 2026 02:20:15 +0000 ROA not before: Wed 21 Oct 2026 02:15:15 +0000 ROA not after: Wed 20 Oct 2027 02:20:15 +0000 asID: 152783 IP address blocks: 160.20.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 02:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:10:de:28:93:97:df:ab:b9:d5:95:d9:5d:1d:25:31:6f:28:38:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDA698011D10F436E3BBC31664239B3150C53C19 Validity Not Before: Oct 21 02:15:15 2026 GMT Not After : Oct 20 02:20:15 2027 GMT Subject: CN=C7D2153A6E94FE4DBB58B3362974956F29DF3762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:18:65:ba:1b:18:fe:ab:1d:1f:1f:fc:72: db:42:13:af:d7:07:7c:d9:eb:06:8d:ef:0c:14:d4: 01:b2:58:fd:f3:19:b8:ac:90:02:b1:87:1c:da:1c: b4:0e:25:fa:19:b5:db:6a:e0:e1:8d:07:48:fa:85: 32:2c:71:ab:b9:4f:df:95:8e:0c:94:7d:88:23:90: 06:9c:97:9c:92:43:1a:36:b1:30:93:31:68:f6:0b: e3:08:d1:33:cc:b4:92:15:ee:29:0a:fa:26:fa:e9: 9c:48:cc:d8:4a:73:28:f3:f0:b8:f2:ae:9d:66:f0: 6f:7a:9e:54:13:de:c6:9d:ce:21:97:a0:c2:b6:d6: 28:a2:71:14:04:96:fe:03:4c:57:07:f2:71:fa:6a: bd:2f:91:64:b5:d1:31:0a:43:ca:eb:b6:61:0f:57: 8b:61:d0:ab:28:76:81:27:1d:ce:50:89:9a:f6:f5: 8d:71:21:f0:e1:61:49:07:92:b2:10:2c:5f:3b:07: 0f:70:61:40:8e:18:f8:90:85:78:91:df:3a:b7:b3: 19:3b:f4:42:22:93:99:6e:cc:cb:14:57:f3:af:7a: fb:da:3f:16:5d:1e:93:ad:27:a6:36:d3:59:37:8b: d5:5f:6a:66:08:28:8f:cd:3d:47:e1:f0:4a:19:87: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:15:3A:6E:94:FE:4D:BB:58:B3:36:29:74:95:6F:29:DF:37:62 X509v3 Authority Key Identifier: keyid:CD:A6:98:01:1D:10:F4:36:E3:BB:C3:16:64:23:9B:31:50:C5:3C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/CDA698011D10F436E3BBC31664239B3150C53C19.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/CDA698011D10F436E3BBC31664239B3150C53C19.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6b01b895-53c6-4a21-a2c0-899df2f2d89c/1/3136302e32302e3132382e302f32332d3234203d3e20313532373833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.128.0/23 Signature Algorithm: sha256WithRSAEncryption 81:1f:54:4f:cd:3b:c1:8a:16:a8:78:ed:72:60:54:6a:49:16: 74:1f:bd:16:b7:6d:16:ee:80:f7:0c:50:69:b7:2c:1f:7f:42: 4b:aa:9c:06:59:da:74:4d:a3:e6:00:03:33:71:14:76:9a:4a: 87:0a:c9:a3:75:4d:0c:0e:94:e5:34:06:a3:0b:d5:f2:50:fc: c1:9e:29:9a:6f:fc:a5:31:86:06:c3:03:59:91:66:d1:61:43: 0e:63:63:25:a8:f8:93:90:5f:b9:3d:c0:66:b4:48:cf:d6:51: ef:d5:67:91:59:0b:ae:f6:9a:5e:2c:66:c3:78:2b:b3:44:27: c6:31:38:45:d3:27:f7:0c:d9:91:4d:64:3c:98:ae:bc:53:68: 25:8f:22:ef:19:b3:91:e8:03:7f:f7:a6:6d:26:62:c2:aa:df: 30:1f:e9:80:e3:5d:76:f1:a3:ce:4e:bb:22:de:b3:82:ad:a6: c4:27:34:cc:ab:77:2d:f6:39:33:77:2d:06:e0:c8:0d:c8:6c: 40:13:06:11:47:dc:96:fd:5c:2e:a6:b0:bc:ac:d3:55:3a:7c: b2:91:84:26:d1:39:ba:ef:b1:a4:d2:e1:73:ce:40:2d:60:28: 01:ef:66:34:44:4c:47:78:8c:38:a8:37:e2:80:2c:6e:e1:04: 0d:2c:50:14 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNBDeKJOX36u51ZXZXR0lMW8oONkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RBNjk4MDExRDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1 MEM1M0MxOTAeFw0yNjEwMjEwMjE1MTVaFw0yNzEwMjAwMjIwMTVaMDMxMTAvBgNV BAMTKEM3RDIxNTNBNkU5NEZFNERCQjU4QjMzNjI5NzQ5NTZGMjlERjM3NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4yhhluhsY/qsdHx/8cttCE6/X B3zZ6waN7wwU1AGyWP3zGbiskAKxhxzaHLQOJfoZtdtq4OGNB0j6hTIscau5T9+V jgyUfYgjkAacl5ySQxo2sTCTMWj2C+MI0TPMtJIV7ikK+ib66ZxIzNhKcyjz8Ljy rp1m8G96nlQT3sadziGXoMK21iiicRQElv4DTFcH8nH6ar0vkWS10TEKQ8rrtmEP V4th0KsodoEnHc5QiZr29Y1xIfDhYUkHkrIQLF87Bw9wYUCOGPiQhXiR3zq3sxk7 9EIik5luzMsUV/OvevvaPxZdHpOtJ6Y201k3i9VfamYIKI/NPUfh8EoZh1aJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUx9IVOm6U/k27WLM2KXSVbynfN2IwHwYDVR0j BBgwFoAUzaaYAR0Q9Dbju8MWZCObMVDFPBkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmIwMWI4OTUtNTNjNi00YTIxLWEyYzAtODk5ZGYyZjJkODljLzEvQ0RBNjk4MDEx RDEwRjQzNkUzQkJDMzE2NjQyMzlCMzE1MEM1M0MxOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DREE2OTgwMTFEMTBGNDM2RTNCQkMzMTY2NDIzOUIzMTUwQzUz QzE5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZiMDFiODk1LTUzYzYtNGEyMS1h MmMwLTg5OWRmMmYyZDg5Yy8xLzMxMzYzMDJlMzIzMDJlMzEzMjM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBSAMA0GCSqG SIb3DQEBCwUAA4IBAQCBH1RPzTvBihaoeO1yYFRqSRZ0H70Wt20W7oD3DFBptywf f0JLqpwGWdp0TaPmAAMzcRR2mkqHCsmjdU0MDpTlNAajC9XyUPzBnimab/ylMYYG wwNZkWbRYUMOY2MlqPiTkF+5PcBmtEjP1lHv1WeRWQuu9ppeLGbDeCuzRCfGMThF 0yf3DNmRTWQ8mK68U2gljyLvGbOR6AN/96ZtJmLCqt8wH+mA41128aPOTrsi3rOC rabEJzTMq3ct9jkzdy0G4MgNyGxAEwYRR9yW/VwuprC8rNNVOnyykYQm0Tm677Gk 0uFzzkAtYCgB72Y0RExHeIw4qDfigCxu4QQNLFAU -----END CERTIFICATE-----Generated at Tue Nov 3 12:54:24 2026 by rpki-client