$ rpki-client -vvf rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa File: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (raw, json) Hash identifier: HRWu5uWyYj+tP+jHdEqHR4i0tx4A8OiWh4bfexrm8jQ= Subject key identifier: 6C:D0:A5:F9:7D:C6:0A:01:1C:E7:32:F3:7E:1E:D7:D4:3D:AD:54:BF Certificate issuer: /CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Certificate serial: 584379299B89AF61A4FA57E0F02E6DC1D5A7020C Authority key identifier: 1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa Signing time: Sun 03 May 2026 02:29:11 +0000 ROA not before: Sun 03 May 2026 02:24:11 +0000 ROA not after: Sun 02 May 2027 02:29:11 +0000 asID: 152782 IP address blocks: 160.20.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:43:79:29:9b:89:af:61:a4:fa:57:e0:f0:2e:6d:c1:d5:a7:02:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D0A68202E762C420C7F38AE2915E4E5DC42123D Validity Not Before: May 3 02:24:11 2026 GMT Not After : May 2 02:29:11 2027 GMT Subject: CN=6CD0A5F97DC60A011CE732F37E1ED7D43DAD54BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:ce:7b:91:82:e7:f5:49:7d:18:22:26:8d: a6:05:ec:a7:d6:34:d7:e5:14:94:18:ff:67:be:10: bc:0f:9f:7c:38:02:57:d0:8c:a0:d0:65:8d:86:8c: 4c:59:e4:fe:4c:de:75:8a:12:70:c1:28:28:c8:d0: d8:ac:63:06:ec:58:bc:b1:05:cb:95:00:f3:94:9f: 9a:b4:c4:7c:ea:e7:c6:df:0b:73:e5:2b:5f:cf:7e: c6:e9:c7:64:ad:96:80:4f:1d:d0:4e:9b:8f:69:79: af:77:a9:8c:48:c8:4f:34:c8:0a:cc:66:63:69:df: a2:a6:4b:ec:4e:26:31:e8:7d:05:02:cc:3d:b7:00: 0d:be:75:60:83:ce:91:e9:bb:72:e7:fa:d8:3d:c8: 35:94:32:67:b2:b9:61:56:85:71:08:e0:3e:73:ed: 21:89:84:fd:e6:4a:3f:5d:aa:b2:96:b6:a2:90:6e: 92:a5:ea:c7:d9:a1:b7:47:81:8d:b0:5b:59:cc:fe: 20:8d:f7:12:21:7f:21:a5:11:7c:d5:bd:b6:ee:fa: 02:7b:05:aa:a4:0e:75:64:63:c5:35:06:36:33:4a: 73:43:b5:16:25:97:ca:04:6e:fd:46:a4:63:e2:4f: d9:b7:39:14:fe:54:7b:89:ce:6d:86:4f:80:df:a9: 00:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D0:A5:F9:7D:C6:0A:01:1C:E7:32:F3:7E:1E:D7:D4:3D:AD:54:BF X509v3 Authority Key Identifier: keyid:1D:0A:68:20:2E:76:2C:42:0C:7F:38:AE:29:15:E4:E5:DC:42:12:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D0A68202E762C420C7F38AE2915E4E5DC42123D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.138.0/23 Signature Algorithm: sha256WithRSAEncryption 01:33:e7:bc:89:44:b8:11:e9:66:9e:74:9d:68:dc:c3:8c:0e: ac:fd:8a:39:1a:3b:f4:b9:a5:0f:95:af:6c:00:bc:16:81:e3: 51:c4:bf:05:0f:54:7f:11:b8:90:00:05:81:84:d3:99:5b:19: 83:c6:47:5d:e0:22:f5:a2:62:1c:93:fa:c8:91:39:a2:17:24: 3c:a0:5e:61:9a:2f:5f:61:06:b5:8e:18:cf:f2:42:0e:21:e5: 4a:8a:71:d5:f5:99:74:98:31:7e:b2:05:b6:2e:69:3e:c0:7f: 3e:9d:21:89:42:74:12:52:e3:5f:9a:2b:18:94:1d:8a:94:fd: 71:41:e5:70:31:ce:72:6c:11:67:2d:cb:a6:e9:d6:06:5f:41: 4b:a4:a2:43:f1:2b:81:90:89:6d:fc:c1:fc:23:4b:57:92:d7: f8:f6:76:f0:83:bd:9c:8e:2a:46:51:55:c2:c0:cc:55:70:28: 9e:84:d4:33:80:13:51:05:b1:6a:a8:1b:3c:15:80:4b:56:f0: 42:c5:04:9b:a7:41:8d:75:d8:39:92:42:1f:64:f7:79:80:fe: 1f:5d:60:f8:1e:21:04:53:30:18:04:a2:58:ce:08:b6:b6:81: 13:5c:e1:82:a4:4c:c1:97:29:21:bc:16:42:ed:dc:1c:80:51: 71:e3:e0:ee -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWEN5KZuJr2Gk+lfg8C5twdWnAgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwQTY4MjAyRTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVE QzQyMTIzRDAeFw0yNjA1MDMwMjI0MTFaFw0yNzA1MDIwMjI5MTFaMDMxMTAvBgNV BAMTKDZDRDBBNUY5N0RDNjBBMDExQ0U3MzJGMzdFMUVEN0Q0M0RBRDU0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTP857kYLn9Ul9GCImjaYF7KfW NNflFJQY/2e+ELwPn3w4AlfQjKDQZY2GjExZ5P5M3nWKEnDBKCjI0NisYwbsWLyx BcuVAPOUn5q0xHzq58bfC3PlK1/Pfsbpx2StloBPHdBOm49pea93qYxIyE80yArM ZmNp36KmS+xOJjHofQUCzD23AA2+dWCDzpHpu3Ln+tg9yDWUMmeyuWFWhXEI4D5z 7SGJhP3mSj9dqrKWtqKQbpKl6sfZobdHgY2wW1nM/iCN9xIhfyGlEXzVvbbu+gJ7 BaqkDnVkY8U1BjYzSnNDtRYll8oEbv1GpGPiT9m3ORT+VHuJzm2GT4DfqQAtAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbNCl+X3GCgEc5zLzfh7X1D2tVL8wHwYDVR0j BBgwFoAUHQpoIC52LEIMfziuKRXk5dxCEj0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDIxMGVjMGYtMDQyMC00MDJmLTk1ZmUtN2IzM2U1MTEyYmMzLzAvMUQwQTY4MjAy RTc2MkM0MjBDN0YzOEFFMjkxNUU0RTVEQzQyMTIzRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDBBNjgyMDJFNzYyQzQyMEM3RjM4QUUyOTE1RTRFNURDNDIx MjNELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQyMTBlYzBmLTA0MjAtNDAyZi05 NWZlLTdiMzNlNTExMmJjMy8wLzMxMzYzMDJlMzIzMDJlMzEzMzM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBSKMA0GCSqG SIb3DQEBCwUAA4IBAQABM+e8iUS4EelmnnSdaNzDjA6s/Yo5Gjv0uaUPla9sALwW geNRxL8FD1R/EbiQAAWBhNOZWxmDxkdd4CL1omIck/rIkTmiFyQ8oF5hmi9fYQa1 jhjP8kIOIeVKinHV9Zl0mDF+sgW2Lmk+wH8+nSGJQnQSUuNfmisYlB2KlP1xQeVw Mc5ybBFnLcum6dYGX0FLpKJD8SuBkIlt/MH8I0tXktf49nbwg72cjipGUVXCwMxV cCiehNQzgBNRBbFqqBs8FYBLVvBCxQSbp0GNddg5kkIfZPd5gP4fXWD4HiEEUzAY BKJYzgi2toETXOGCpEzBlykhvBZC7dwcgFFx4+Du -----END CERTIFICATE-----Generated at Wed May 13 03:51:35 2026 by rpki-client