$ rpki-client -vvf rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa File: 3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa (raw, json) Hash identifier: JFxGecPe7UA2eaCg+ZKJcplW/KcDw+sS4WqX6uOvlVg= Subject key identifier: 03:AF:13:59:DA:65:6F:2D:33:FE:11:6F:0E:1C:51:2E:C6:16:AA:1F Certificate issuer: /CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Certificate serial: 3F813857DEB159D840D0B0A121F1DE234FEE649A Authority key identifier: D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa Signing time: Sun 03 May 2026 02:19:05 +0000 ROA not before: Sun 03 May 2026 02:14:05 +0000 ROA not after: Sun 02 May 2027 02:19:05 +0000 asID: 153129 IP address blocks: 160.191.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:81:38:57:de:b1:59:d8:40:d0:b0:a1:21:f1:de:23:4f:ee:64:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3 Validity Not Before: May 3 02:14:05 2026 GMT Not After : May 2 02:19:05 2027 GMT Subject: CN=03AF1359DA656F2D33FE116F0E1C512EC616AA1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1b:2e:a3:91:69:95:88:39:82:aa:61:d0:30: f3:2f:80:b8:de:01:5b:03:55:f7:10:ba:81:ab:3c: ac:46:3a:8d:db:a7:81:97:35:4f:f6:b8:32:62:fa: c4:af:af:1c:62:a3:5a:22:f7:72:e9:77:78:c3:85: 5d:ae:c1:fd:03:21:43:c9:60:24:d7:19:f4:c9:b9: 84:da:68:c1:8f:3c:30:42:17:fb:17:e3:ba:f0:06: 0f:69:0c:5d:8b:1f:64:02:f1:36:ba:24:0c:07:36: 93:e5:6b:50:9d:68:e6:3c:c1:bf:e4:b9:1f:7d:80: 8d:36:9c:d9:64:b4:d8:c4:2f:fd:d4:56:4f:07:88: 63:24:b9:3e:97:a1:a5:d0:19:4c:98:4d:b1:fa:46: c7:f7:10:d7:b9:7f:5b:dd:91:c4:92:a3:9a:02:6b: 6f:df:a3:85:7c:50:44:5f:37:37:e1:0b:d3:84:2c: 0f:7e:d4:7d:54:d0:79:af:2a:01:9f:0a:60:45:82: bb:9e:cd:a2:bc:83:e1:ae:af:a8:9c:e2:2f:c3:ae: 1f:87:be:a4:64:0f:cd:f6:66:11:54:29:1d:75:ea: 0c:37:b1:42:b7:90:e7:5e:e0:76:ec:f6:a3:72:ff: f5:c3:fe:4d:18:e0:7f:8c:e0:88:98:79:ec:a2:60: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AF:13:59:DA:65:6F:2D:33:FE:11:6F:0E:1C:51:2E:C6:16:AA:1F X509v3 Authority Key Identifier: keyid:D8:BF:75:90:C4:0D:E7:31:6F:52:A1:DE:E7:CE:7B:ED:A4:30:82:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D8BF7590C40DE7316F52A1DEE7CE7BEDA43082C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20396388-2d6b-476e-963d-1cc381374b1c/0/3136302e3139312e32372e302f32342d3234203d3e20313533313239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.27.0/24 Signature Algorithm: sha256WithRSAEncryption ca:11:84:4c:1b:85:e3:d5:db:d6:e2:ef:a2:ea:ee:c7:58:13: f6:f2:07:8d:99:bf:16:48:df:cc:3e:d9:11:77:87:fa:81:70: 60:c2:96:3c:01:7e:14:a1:7c:6b:e6:b3:43:d2:73:59:3f:50: 19:2b:5d:bd:94:3d:03:52:c7:f9:d5:75:69:b8:54:28:bb:d1: 76:1d:af:7d:42:b0:59:73:f1:e4:e6:ed:bb:60:fc:d4:10:e7: a5:9e:3c:94:cf:07:c0:6f:0e:68:8a:40:75:16:71:0c:36:bb: 4b:f1:5a:b7:b3:a6:c6:00:c4:8e:d2:23:c2:7e:d8:58:6d:dd: 1f:65:13:70:a6:39:39:94:b4:24:55:00:a4:f0:b8:a3:c0:f0: 5c:49:92:95:28:b9:a4:79:51:72:e2:00:5b:6f:06:5a:29:87: c7:3c:21:2d:5b:8e:e4:36:9b:6e:59:65:37:77:e5:b4:5b:f4: ec:42:c2:e0:74:de:2e:4d:bb:c7:a4:62:ec:ac:91:ab:55:54: 7f:dd:a1:8d:4e:e2:c1:bf:2e:07:7b:b4:23:d8:58:37:b9:7a: 8e:ff:da:d5:e3:c4:94:68:7b:5b:4c:1a:d8:5b:22:a9:da:7e: dd:a3:9e:65:29:a2:bd:50:cb:24:a7:ce:71:0c:20:ab:dd:f0: 0d:c2:c6:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUP4E4V96xWdhA0LChIfHeI0/uZJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhCRjc1OTBDNDBERTczMTZGNTJBMURFRTdDRTdCRURB NDMwODJDMzAeFw0yNjA1MDMwMjE0MDVaFw0yNzA1MDIwMjE5MDVaMDMxMTAvBgNV BAMTKDAzQUYxMzU5REE2NTZGMkQzM0ZFMTE2RjBFMUM1MTJFQzYxNkFBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGy6jkWmViDmCqmHQMPMvgLje AVsDVfcQuoGrPKxGOo3bp4GXNU/2uDJi+sSvrxxio1oi93Lpd3jDhV2uwf0DIUPJ YCTXGfTJuYTaaMGPPDBCF/sX47rwBg9pDF2LH2QC8Ta6JAwHNpPla1CdaOY8wb/k uR99gI02nNlktNjEL/3UVk8HiGMkuT6XoaXQGUyYTbH6Rsf3ENe5f1vdkcSSo5oC a2/fo4V8UERfNzfhC9OELA9+1H1U0HmvKgGfCmBFgruezaK8g+Gur6ic4i/Drh+H vqRkD832ZhFUKR116gw3sUK3kOde4Hbs9qNy//XD/k0Y4H+M4IiYeeyiYFxfAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUA68TWdplby0z/hFvDhxRLsYWqh8wHwYDVR0j BBgwFoAU2L91kMQN5zFvUqHe58577aQwgsMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAzOTYzODgtMmQ2Yi00NzZlLTk2M2QtMWNjMzgxMzc0YjFjLzAvRDhCRjc1OTBD NDBERTczMTZGNTJBMURFRTdDRTdCRURBNDMwODJDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EOEJGNzU5MEM0MERFNzMxNkY1MkExREVFN0NFN0JFREE0MzA4 MkMzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMzk2Mzg4LTJkNmItNDc2ZS05 NjNkLTFjYzM4MTM3NGIxYy8wLzMxMzYzMDJlMzEzOTMxMmUzMjM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoL8bMA0GCSqG SIb3DQEBCwUAA4IBAQDKEYRMG4Xj1dvW4u+i6u7HWBP28geNmb8WSN/MPtkRd4f6 gXBgwpY8AX4UoXxr5rND0nNZP1AZK129lD0DUsf51XVpuFQou9F2Ha99QrBZc/Hk 5u27YPzUEOelnjyUzwfAbw5oikB1FnEMNrtL8Vq3s6bGAMSO0iPCfthYbd0fZRNw pjk5lLQkVQCk8LijwPBcSZKVKLmkeVFy4gBbbwZaKYfHPCEtW47kNptuWWU3d+W0 W/TsQsLgdN4uTbvHpGLsrJGrVVR/3aGNTuLBvy4He7Qj2Fg3uXqO/9rV48SUaHtb TBrYWyKp2n7do55lKaK9UMskp85xDCCr3fANwsZn -----END CERTIFICATE-----Generated at Wed May 13 12:25:03 2026 by rpki-client