$ rpki-client -vvf rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa File: 3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa (raw, json) Hash identifier: 83bYI1z3e7ETkpXnXGTkrnk19/a7Qfy/7K16nNObwH0= Subject key identifier: 45:4E:FD:2E:EA:1B:95:7A:39:50:2E:BC:A4:91:98:4E:47:CD:64:06 Certificate issuer: /CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Certificate serial: 6A94FC73A25BD209FB90502A2B27C7673BF3A892 Authority key identifier: D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa Signing time: Sun 03 May 2026 03:06:55 +0000 ROA not before: Sun 03 May 2026 03:01:55 +0000 ROA not after: Sun 02 May 2027 03:06:55 +0000 asID: 153140 IP address blocks: 160.187.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:94:fc:73:a2:5b:d2:09:fb:90:50:2a:2b:27:c7:67:3b:f3:a8:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3CDCB356F94C51B241188653C7ADC2C79D79424 Validity Not Before: May 3 03:01:55 2026 GMT Not After : May 2 03:06:55 2027 GMT Subject: CN=454EFD2EEA1B957A39502EBCA491984E47CD6406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:09:68:ec:f3:43:e6:d8:c9:d7:10:5b:c9: 58:1c:43:cb:c2:63:98:6d:43:05:b7:c1:2d:5b:f6: 42:48:6e:64:2e:86:05:e5:8c:43:b1:f2:08:c3:51: 27:10:b7:fe:b6:2e:f8:66:ad:48:e4:47:6d:9d:49: 76:1b:bb:e1:2f:0e:55:90:f5:d8:e1:21:76:ae:33: fd:54:60:6a:c8:c6:42:08:82:fe:48:e0:d7:f1:d3: 62:62:c3:a4:09:28:9e:a8:e8:e8:04:b1:67:21:ad: a9:f8:62:36:de:b0:86:c5:bd:17:4c:f9:60:c6:83: f0:17:79:85:42:96:d5:3d:50:22:78:ca:1f:b9:68: 00:5b:66:5a:21:cc:ed:0e:df:3d:d9:c6:bc:b0:62: ce:62:64:e7:23:02:91:ee:54:9b:9c:90:57:7b:1a: 1b:4d:ce:6f:0b:5f:90:22:10:e9:c0:0e:dd:9e:a9: 2e:1e:8d:b9:fd:78:15:ac:61:4f:95:bf:99:92:7e: ce:93:37:c1:36:9b:65:8b:23:1e:5f:06:a8:dc:6b: f8:d7:ec:81:97:69:4c:00:a2:5c:de:c8:45:2d:b7: f8:cf:8a:2a:03:c2:ca:1f:61:7d:cc:cc:27:0a:0c: 9c:9d:8c:c0:c3:be:67:9a:51:99:3a:38:1c:10:ad: 99:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4E:FD:2E:EA:1B:95:7A:39:50:2E:BC:A4:91:98:4E:47:CD:64:06 X509v3 Authority Key Identifier: keyid:D3:CD:CB:35:6F:94:C5:1B:24:11:88:65:3C:7A:DC:2C:79:D7:94:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D3CDCB356F94C51B241188653C7ADC2C79D79424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/0/3136302e3138372e3233312e302f32342d3234203d3e20313533313430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.231.0/24 Signature Algorithm: sha256WithRSAEncryption 16:52:77:ce:0b:6f:c6:cc:e3:fd:7e:31:27:52:11:8b:6a:98: 4e:ec:d8:ff:7b:11:26:b7:21:dd:96:c6:1f:d2:b6:96:4a:30: ce:40:6d:d9:30:38:55:c5:59:03:27:d1:e8:9b:74:4a:cf:3f: f5:78:71:c0:e2:86:26:bf:84:54:29:42:53:1a:0e:14:63:95: ad:65:91:6c:e4:1d:d0:d6:b3:37:6b:48:81:3c:c2:d2:f1:de: a3:c7:29:2f:4d:ee:7f:d8:ac:7d:03:71:eb:13:46:b6:98:9b: 28:88:26:5f:42:13:d3:f4:67:7d:27:1c:f6:77:6e:02:c6:aa: 49:08:f5:e2:ab:44:c4:37:07:9b:56:62:5f:49:be:73:77:a0: c1:fe:7e:51:f4:be:25:70:f8:6d:c2:8c:ce:17:63:32:2c:3c: c0:62:28:59:da:f7:37:68:3a:4e:21:c5:27:ed:01:83:ff:53: ce:8d:99:68:6f:c9:73:08:66:7b:32:44:91:2f:ae:a2:be:58: 00:b4:7c:1c:d7:0f:03:b1:8a:69:af:02:c8:49:23:47:2f:0b: b1:91:4e:cc:fa:8d:f8:47:d9:6c:cf:70:59:39:63:10:28:41: de:fd:c1:72:98:bf:8c:98:cc:23:4d:07:83:f6:3e:4e:9b:b5: 46:95:ab:f4 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUapT8c6Jb0gn7kFAqKyfHZzvzqJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNDRENCMzU2Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3 OUQ3OTQyNDAeFw0yNjA1MDMwMzAxNTVaFw0yNzA1MDIwMzA2NTVaMDMxMTAvBgNV BAMTKDQ1NEVGRDJFRUExQjk1N0EzOTUwMkVCQ0E0OTE5ODRFNDdDRDY0MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfAlo7PND5tjJ1xBbyVgcQ8vC Y5htQwW3wS1b9kJIbmQuhgXljEOx8gjDUScQt/62LvhmrUjkR22dSXYbu+EvDlWQ 9djhIXauM/1UYGrIxkIIgv5I4Nfx02Jiw6QJKJ6o6OgEsWchran4YjbesIbFvRdM +WDGg/AXeYVCltU9UCJ4yh+5aABbZlohzO0O3z3ZxrywYs5iZOcjApHuVJuckFd7 GhtNzm8LX5AiEOnADt2eqS4ejbn9eBWsYU+Vv5mSfs6TN8E2m2WLIx5fBqjca/jX 7IGXaUwAolzeyEUtt/jPiioDwsofYX3MzCcKDJydjMDDvmeaUZk6OBwQrZnfAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQURU79LuoblXo5UC68pJGYTkfNZAYwHwYDVR0j BBgwFoAU083LNW+UxRskEYhlPHrcLHnXlCQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2FmY2JmYmItYmEzZi00ZDUzLWEwNGYtMTRkNmY0YmUwY2IxLzAvRDNDRENCMzU2 Rjk0QzUxQjI0MTE4ODY1M0M3QURDMkM3OUQ3OTQyNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9EM0NEQ0IzNTZGOTRDNTFCMjQxMTg4NjUzQzdBREMyQzc5RDc5 NDI0LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NhZmNiZmJiLWJhM2YtNGQ1My1h MDRmLTE0ZDZmNGJlMGNiMS8wLzMxMzYzMDJlMzEzODM3MmUzMjMzMzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTM0MzAucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu+cwDQYJ KoZIhvcNAQELBQADggEBABZSd84Lb8bM4/1+MSdSEYtqmE7s2P97ESa3Id2Wxh/S tpZKMM5AbdkwOFXFWQMn0eibdErPP/V4ccDihia/hFQpQlMaDhRjla1lkWzkHdDW szdrSIE8wtLx3qPHKS9N7n/YrH0DcesTRraYmyiIJl9CE9P0Z30nHPZ3bgLGqkkI 9eKrRMQ3B5tWYl9JvnN3oMH+flH0viVw+G3CjM4XYzIsPMBiKFna9zdoOk4hxSft AYP/U86NmWhvyXMIZnsyRJEvrqK+WAC0fBzXDwOximmvAshJI0cvC7GRTsz6jfhH 2WzPcFk5YxAoQd79wXKYv4yYzCNNB4P2Pk6btUaVq/Q= -----END CERTIFICATE-----Generated at Wed May 13 01:36:24 2026 by rpki-client