$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3136302e3233362e36322e302f32342d3234203d3e20313534373435.roa File: 3136302e3233362e36322e302f32342d3234203d3e20313534373435.roa (raw, json) Hash identifier: sBta1ZtrzGRbaLwSoeX1uvQEgqYL3vog2PFLChcmUOA= Subject key identifier: 86:5C:7A:03:94:24:22:3E:80:64:43:F7:F7:56:CD:DE:F0:ED:F6:39 Certificate issuer: /CN=3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24 Certificate serial: 56AF3888F76699748ECB31511AE85A10DEFB4823 Authority key identifier: 3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3136302e3233362e36322e302f32342d3234203d3e20313534373435.roa Signing time: Mon 05 Oct 2026 12:08:40 +0000 ROA not before: Mon 05 Oct 2026 12:03:40 +0000 ROA not after: Mon 04 Oct 2027 12:08:40 +0000 asID: 154745 IP address blocks: 160.236.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 18:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:af:38:88:f7:66:99:74:8e:cb:31:51:1a:e8:5a:10:de:fb:48:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24 Validity Not Before: Oct 5 12:03:40 2026 GMT Not After : Oct 4 12:08:40 2027 GMT Subject: CN=865C7A039424223E806443F7F756CDDEF0EDF639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:0e:8c:4a:70:f6:f0:b2:31:7f:1d:6b:9e: 2a:f8:af:a1:01:23:77:f2:94:c2:02:34:3f:20:91: 0e:3b:f4:e4:c6:51:5c:67:6e:98:2c:1c:dc:1a:aa: 50:8f:ce:5e:fe:8b:1f:20:3b:e6:21:3f:55:a5:6b: 70:1f:02:97:5f:06:a3:6c:f6:84:07:a5:a9:f2:06: 86:a6:3a:72:52:f9:a9:5f:bd:7d:c4:3f:57:61:58: 6c:1b:41:6f:25:ee:39:50:57:50:c1:94:59:95:3f: 2a:a7:d4:d3:db:b6:3c:78:7f:ea:71:ed:88:50:29: 25:bb:d6:81:f1:e1:15:ba:f0:1e:90:3b:0c:28:01: 2c:2c:a1:cd:85:53:70:28:b5:23:a8:f9:35:56:82: 68:63:4b:a3:dd:2b:62:1e:91:95:f3:6c:c0:5f:ed: 50:61:bd:fb:05:00:ae:e7:92:e6:53:34:f6:6d:ce: eb:47:03:23:27:f8:99:b2:e0:dc:5e:7f:e6:d1:2a: bd:ed:cb:ed:6f:c3:79:10:78:28:77:44:07:1b:19: 66:06:cd:4b:53:3a:2b:86:ea:ff:00:bf:93:c9:6b: 9a:01:7e:37:4a:ad:f2:fd:0b:27:fc:35:ea:00:b0: 77:5e:3a:de:a1:3b:61:3d:4c:b3:95:04:5a:94:a5: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:7A:03:94:24:22:3E:80:64:43:F7:F7:56:CD:DE:F0:ED:F6:39 X509v3 Authority Key Identifier: keyid:3A:F8:4E:5F:2C:C0:FA:70:13:2F:88:67:3D:C1:AD:1B:AE:46:0E:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3AF84E5F2CC0FA70132F88673DC1AD1BAE460E24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c852945e-fa35-4169-885d-dfb7cb139364/1/3136302e3233362e36322e302f32342d3234203d3e20313534373435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.236.62.0/24 Signature Algorithm: sha256WithRSAEncryption 31:da:2a:92:b6:ed:d9:7b:ea:d9:4a:24:5c:26:c0:9b:04:30: fa:ed:e7:29:e4:d7:b6:e5:64:3d:7f:e3:0c:c3:41:4c:e7:8e: 3f:38:39:a4:ac:83:73:69:25:6c:7c:82:43:e9:4c:54:82:59: a2:14:6c:75:50:96:6b:f6:a1:d7:d6:9b:70:dc:3e:98:1c:25: d4:c4:57:be:d9:46:3c:b3:5a:97:a0:5f:05:5e:6f:8f:d9:3d: 58:28:4c:30:06:d9:52:1d:58:5f:42:c1:3b:5c:53:78:dc:74: fa:e1:99:00:9f:3f:06:23:aa:49:e9:b0:be:50:86:f2:10:ed: 85:d0:a4:62:20:d1:97:b7:65:ee:5b:af:a6:48:26:22:b4:3b: f1:e9:72:08:68:ae:3d:65:c3:8f:e6:d8:d5:cb:b1:62:c2:6e: 2e:d9:65:d2:7e:9f:3d:78:84:4d:42:ec:da:4c:d2:90:0d:65: 10:6f:8f:2a:c9:aa:5f:ca:3b:84:53:6b:eb:00:c4:94:c4:9d: 47:76:cf:ca:a4:48:71:0e:7a:21:fa:42:65:84:d9:36:5f:6c: b4:59:14:44:6b:e2:37:07:da:f4:ff:d6:9b:d2:74:56:9e:ee: 63:d0:25:b6:0d:e3:82:bd:ba:0b:a7:ef:85:76:8b:61:6c:32: b5:d0:40:51 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUVq84iPdmmXSOyzFRGuhaEN77SCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0FGODRFNUYyQ0MwRkE3MDEzMkY4ODY3M0RDMUFEMUJB RTQ2MEUyNDAeFw0yNjEwMDUxMjAzNDBaFw0yNzEwMDQxMjA4NDBaMDMxMTAvBgNV BAMTKDg2NUM3QTAzOTQyNDIyM0U4MDY0NDNGN0Y3NTZDRERFRjBFREY2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5Q6MSnD28LIxfx1rnir4r6EB I3fylMICND8gkQ479OTGUVxnbpgsHNwaqlCPzl7+ix8gO+YhP1Wla3AfApdfBqNs 9oQHpanyBoamOnJS+alfvX3EP1dhWGwbQW8l7jlQV1DBlFmVPyqn1NPbtjx4f+px 7YhQKSW71oHx4RW68B6QOwwoASwsoc2FU3AotSOo+TVWgmhjS6PdK2IekZXzbMBf 7VBhvfsFAK7nkuZTNPZtzutHAyMn+Jmy4Nxef+bRKr3ty+1vw3kQeCh3RAcbGWYG zUtTOiuG6v8Av5PJa5oBfjdKrfL9Cyf8NeoAsHdeOt6hO2E9TLOVBFqUpfMnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUhlx6A5QkIj6AZEP391bN3vDt9jkwHwYDVR0j BBgwFoAUOvhOXyzA+nATL4hnPcGtG65GDiQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Yzg1Mjk0NWUtZmEzNS00MTY5LTg4NWQtZGZiN2NiMTM5MzY0LzEvM0FGODRFNUYy Q0MwRkE3MDEzMkY4ODY3M0RDMUFEMUJBRTQ2MEUyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQUY4NEU1RjJDQzBGQTcwMTMyRjg4NjczREMxQUQxQkFFNDYw RTI0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2M4NTI5NDVlLWZhMzUtNDE2OS04 ODVkLWRmYjdjYjEzOTM2NC8xLzMxMzYzMDJlMzIzMzM2MmUzNjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTM0MzczNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoOw+MA0GCSqG SIb3DQEBCwUAA4IBAQAx2iqStu3Ze+rZSiRcJsCbBDD67ecp5Ne25WQ9f+MMw0FM 544/ODmkrINzaSVsfIJD6UxUglmiFGx1UJZr9qHX1ptw3D6YHCXUxFe+2UY8s1qX oF8FXm+P2T1YKEwwBtlSHVhfQsE7XFN43HT64ZkAnz8GI6pJ6bC+UIbyEO2F0KRi INGXt2XuW6+mSCYitDvx6XIIaK49ZcOP5tjVy7Fiwm4u2WXSfp89eIRNQuzaTNKQ DWUQb48qyapfyjuEU2vrAMSUxJ1Hds/KpEhxDnoh+kJlhNk2X2y0WRREa+I3B9r0 /9ab0nRWnu5j0CW2DeOCvboLp++FdothbDK10EBR -----END CERTIFICATE-----Generated at Mon Oct 26 08:56:29 2026 by rpki-client