$ rpki-client -vvf rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/3136302e32302e33362e302f32332d3234203d3e20313532373631.roa File: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (raw, json) Hash identifier: slYjvzyCrVX4GgCGyd9rvovLqFZzNIshufZkbhVSrC0= Subject key identifier: 23:AA:D8:6A:82:F3:5A:68:56:B8:BB:74:E8:B5:CC:13:D8:FD:28:16 Certificate issuer: /CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Certificate serial: 6C1D3659A14B033F66B65623ADDECA8E4249DF14 Authority key identifier: F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/3136302e32302e33362e302f32332d3234203d3e20313532373631.roa Signing time: Sun 03 May 2026 02:21:11 +0000 ROA not before: Sun 03 May 2026 02:16:11 +0000 ROA not after: Sun 02 May 2027 02:21:11 +0000 asID: 152761 IP address blocks: 160.20.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1d:36:59:a1:4b:03:3f:66:b6:56:23:ad:de:ca:8e:42:49:df:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F61FC33006E4D563052A74A3344CBDB712A9CE42 Validity Not Before: May 3 02:16:11 2026 GMT Not After : May 2 02:21:11 2027 GMT Subject: CN=23AAD86A82F35A6856B8BB74E8B5CC13D8FD2816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:52:96:08:6d:c8:ae:f4:09:47:a6:16:d1: d2:fb:58:7a:45:eb:70:53:a6:bc:f7:3d:7c:cb:18: ab:d7:ec:08:72:d2:70:4d:79:91:0b:8e:98:6d:55: 33:c5:2a:df:65:48:1a:e6:4b:1e:e0:56:5b:48:65: 23:dd:e0:57:51:de:fc:da:1f:44:31:8c:64:67:6e: c6:c9:83:c7:a5:08:04:84:2c:fc:96:55:dc:27:90: 43:96:cd:99:2d:f9:a1:39:27:a2:b6:67:78:12:c6: 38:34:ad:75:5a:19:13:42:80:85:57:1f:38:17:c3: 45:d6:6c:94:a9:85:4f:30:ae:92:cb:86:76:f1:06: 94:5a:90:5a:ad:17:80:12:a9:e4:e3:d7:e9:e4:14: 0a:71:6c:d7:89:67:11:0a:60:46:80:31:05:cc:a8: 6f:46:84:db:b6:00:07:9e:ce:4a:90:86:c6:be:4b: 3d:16:eb:09:14:89:33:98:a3:35:83:d6:62:69:16: 75:ab:35:5f:3d:7a:0e:70:69:70:21:74:0e:bb:e7: 71:17:70:9a:25:77:45:a5:34:88:85:b8:80:e8:6b: 0f:79:08:d3:d7:21:9f:58:4b:ff:d9:e4:2e:72:20: 82:eb:9c:90:d8:db:d4:9f:da:91:e6:a1:51:d7:dc: 3b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AA:D8:6A:82:F3:5A:68:56:B8:BB:74:E8:B5:CC:13:D8:FD:28:16 X509v3 Authority Key Identifier: keyid:F6:1F:C3:30:06:E4:D5:63:05:2A:74:A3:34:4C:BD:B7:12:A9:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F61FC33006E4D563052A74A3344CBDB712A9CE42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/3136302e32302e33362e302f32332d3234203d3e20313532373631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.36.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:23:04:01:af:d8:2a:04:0c:c9:7a:7f:41:69:97:eb:8e:4a: fa:4b:e9:fd:f6:b8:1a:36:81:ab:a5:29:d9:44:91:43:60:44: 42:96:4e:cb:97:b6:93:cf:86:72:9f:bb:f3:63:1a:f3:d4:62: ef:c4:67:b9:33:bd:0c:ad:14:5d:83:49:8d:69:01:55:a7:c7: 37:3d:bb:c3:64:82:4e:4f:67:20:2f:03:01:40:4b:87:63:63: 75:b6:38:0f:e7:dd:ff:10:6d:f2:7a:68:2e:10:29:ea:fd:32: 24:b7:f5:e7:4e:eb:5d:61:4d:ec:20:16:93:23:bb:4f:76:99: 67:1a:6c:24:9a:a6:ce:a7:f2:97:21:af:67:05:4e:26:75:ba: ca:2d:3c:c2:86:87:73:34:7a:69:67:ad:60:8b:2b:86:74:09: 1e:79:85:0a:00:a5:c7:ee:3b:93:36:d7:c9:78:f8:93:74:06: 0c:cf:b3:16:94:80:92:03:b4:4e:6c:bb:8b:2e:f6:0e:02:a8: 8c:5a:6b:2a:cf:07:ba:10:95:15:62:f3:a3:17:85:3b:14:00: 63:47:13:58:b2:15:83:78:22:03:26:5f:6b:60:35:a1:a1:e4: d2:6e:a5:7e:32:63:1b:55:5e:5e:59:66:56:7e:46:ac:26:74: 64:5d:23:78 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUbB02WaFLAz9mtlYjrd7KjkJJ3xQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjYxRkMzMzAwNkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcx MkE5Q0U0MjAeFw0yNjA1MDMwMjE2MTFaFw0yNzA1MDIwMjIxMTFaMDMxMTAvBgNV BAMTKDIzQUFEODZBODJGMzVBNjg1NkI4QkI3NEU4QjVDQzEzRDhGRDI4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hVKWCG3IrvQJR6YW0dL7WHpF 63BTprz3PXzLGKvX7Ahy0nBNeZELjphtVTPFKt9lSBrmSx7gVltIZSPd4FdR3vza H0QxjGRnbsbJg8elCASELPyWVdwnkEOWzZkt+aE5J6K2Z3gSxjg0rXVaGRNCgIVX HzgXw0XWbJSphU8wrpLLhnbxBpRakFqtF4ASqeTj1+nkFApxbNeJZxEKYEaAMQXM qG9GhNu2AAeezkqQhsa+Sz0W6wkUiTOYozWD1mJpFnWrNV89eg5waXAhdA6753EX cJold0WlNIiFuIDoaw95CNPXIZ9YS//Z5C5yIILrnJDY29Sf2pHmoVHX3DudAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUI6rYaoLzWmhWuLt06LXME9j9KBYwHwYDVR0j BBgwFoAU9h/DMAbk1WMFKnSjNEy9txKpzkIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjgxZWY0NDAtNWE1Zi00YTRmLWI1MDktYjEwMzI0NWM1Y2YxLzAvRjYxRkMzMzAw NkU0RDU2MzA1MkE3NEEzMzQ0Q0JEQjcxMkE5Q0U0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNjFGQzMzMDA2RTRENTYzMDUyQTc0QTMzNDRDQkRCNzEyQTlD RTQyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI4MWVmNDQwLTVhNWYtNGE0Zi1i NTA5LWIxMDMyNDVjNWNmMS8wLzMxMzYzMDJlMzIzMDJlMzMzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAUJDANBgkqhkiG 9w0BAQsFAAOCAQEAXSMEAa/YKgQMyXp/QWmX645K+kvp/fa4GjaBq6Up2USRQ2BE QpZOy5e2k8+Gcp+782Ma89Ri78RnuTO9DK0UXYNJjWkBVafHNz27w2SCTk9nIC8D AUBLh2NjdbY4D+fd/xBt8npoLhAp6v0yJLf1507rXWFN7CAWkyO7T3aZZxpsJJqm zqfylyGvZwVOJnW6yi08woaHczR6aWetYIsrhnQJHnmFCgClx+47kzbXyXj4k3QG DM+zFpSAkgO0Tmy7iy72DgKojFprKs8HuhCVFWLzoxeFOxQAY0cTWLIVg3giAyZf a2A1oaHk0m6lfjJjG1VeXllmVn5GrCZ0ZF0jeA== -----END CERTIFICATE-----Generated at Wed May 13 02:48:03 2026 by rpki-client