$ rpki-client -vvf rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa File: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (raw, json) Hash identifier: bsuMGNaULmyW/rNtR+yZTvUpMTve5vTq9u9xZYBiDgE= Subject key identifier: 88:74:49:5C:FF:F0:75:CB:CE:1D:A4:40:5C:45:64:C4:DF:96:0A:E4 Certificate issuer: /CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Certificate serial: 47DE6ED4FFB29A9E229F04210C5E3B2CF7C813F1 Authority key identifier: 97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa Signing time: Sun 03 May 2026 02:10:56 +0000 ROA not before: Sun 03 May 2026 02:05:56 +0000 ROA not after: Sun 02 May 2027 02:10:56 +0000 asID: 153112 IP address blocks: 160.30.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:de:6e:d4:ff:b2:9a:9e:22:9f:04:21:0c:5e:3b:2c:f7:c8:13:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97F8E949F6F9949E17CCA8BD66A34372BF61C549 Validity Not Before: May 3 02:05:56 2026 GMT Not After : May 2 02:10:56 2027 GMT Subject: CN=8874495CFFF075CBCE1DA4405C4564C4DF960AE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:46:08:e1:45:20:e8:f0:0b:d7:df:d6:75:27: 26:02:89:b2:f8:e2:1e:eb:68:52:d0:c3:b2:c0:d4: 80:0c:7d:ed:90:0d:30:f7:93:bc:04:ed:99:82:21: 17:b1:3a:54:2e:1c:4d:42:36:42:6b:7b:ea:df:94: 24:f9:0b:bb:e5:13:64:0b:b0:2c:03:8c:1f:88:f4: 6d:42:dd:4b:50:1c:71:75:a1:20:88:b8:49:ce:33: 3f:5e:59:b2:7a:e6:8e:a3:25:99:5a:6d:c4:b9:20: 27:20:fc:79:1f:9b:b3:16:c4:58:3c:96:60:60:16: c2:f5:43:da:6a:eb:f9:5a:ce:9d:7e:62:21:4e:28: 2b:08:8a:23:f9:84:63:57:c9:28:34:a7:db:5c:c3: 06:56:19:32:e8:03:59:6d:cf:82:cd:d7:05:34:00: 2a:2d:b4:8b:60:99:12:b4:1e:b7:5b:e2:fd:26:b8: 4c:62:66:c4:13:2c:37:06:73:34:d4:c8:32:d4:3d: fc:35:15:ab:7e:a4:f0:43:17:a3:16:c0:50:b5:d1: 46:85:2a:0c:1a:54:62:bc:9f:02:32:9a:1f:98:a8: 03:d8:08:93:e6:ce:fd:f3:73:b4:18:fa:09:47:63: 3f:e1:21:11:fa:08:59:80:e2:1d:12:ad:cf:d7:d4: 2e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:74:49:5C:FF:F0:75:CB:CE:1D:A4:40:5C:45:64:C4:DF:96:0A:E4 X509v3 Authority Key Identifier: keyid:97:F8:E9:49:F6:F9:94:9E:17:CC:A8:BD:66:A3:43:72:BF:61:C5:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/97F8E949F6F9949E17CCA8BD66A34372BF61C549.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.30.224.0/23 Signature Algorithm: sha256WithRSAEncryption 93:66:37:77:24:0a:5c:d8:df:73:e6:f7:0c:b5:19:1a:a4:da: 08:af:bf:a8:6e:43:19:75:4f:1a:5e:53:90:ed:84:90:7c:77: 6e:1e:9f:53:03:f7:f0:dc:64:97:f1:14:46:9e:47:45:75:0e: e2:a3:d6:de:33:68:b8:9e:bf:61:db:bf:6c:96:0d:1f:d4:75: b4:48:75:1d:ca:0e:92:8c:14:1b:e1:27:e3:63:9a:1d:03:00: fc:e7:88:3b:82:07:cc:ae:86:fa:54:ce:ed:c7:2a:7d:55:7b: ef:26:d8:4a:e8:a5:01:78:84:59:01:af:9b:cd:c7:1b:52:ec: 19:42:d2:e7:b4:df:95:60:68:87:77:40:a4:c8:41:7c:b4:4a: 2e:29:34:34:8e:86:3b:09:00:ff:1d:8b:e9:3e:e0:88:75:8e: f3:9e:5f:f0:03:00:38:cc:a7:6a:98:cb:90:3a:19:85:aa:46: 18:ce:b6:cf:f8:80:22:11:5a:95:f3:dd:f3:36:2f:34:f5:41: 32:aa:32:ed:3d:45:58:57:4c:23:84:ff:74:d8:14:7c:af:5d: 2a:44:f4:50:88:7b:69:d8:dd:40:5b:db:9a:00:d0:ca:9b:f4: 96:c2:cf:0f:96:13:3f:52:e9:d4:67:6a:46:63:cc:16:76:ce: 82:c6:85:bb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUR95u1P+ymp4inwQhDF47LPfIE/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdGOEU5NDlGNkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJC RjYxQzU0OTAeFw0yNjA1MDMwMjA1NTZaFw0yNzA1MDIwMjEwNTZaMDMxMTAvBgNV BAMTKDg4NzQ0OTVDRkZGMDc1Q0JDRTFEQTQ0MDVDNDU2NEM0REY5NjBBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRgjhRSDo8AvX39Z1JyYCibL4 4h7raFLQw7LA1IAMfe2QDTD3k7wE7ZmCIRexOlQuHE1CNkJre+rflCT5C7vlE2QL sCwDjB+I9G1C3UtQHHF1oSCIuEnOMz9eWbJ65o6jJZlabcS5ICcg/Hkfm7MWxFg8 lmBgFsL1Q9pq6/lazp1+YiFOKCsIiiP5hGNXySg0p9tcwwZWGTLoA1ltz4LN1wU0 ACottItgmRK0Hrdb4v0muExiZsQTLDcGczTUyDLUPfw1Fat+pPBDF6MWwFC10UaF KgwaVGK8nwIymh+YqAPYCJPmzv3zc7QY+glHYz/hIRH6CFmA4h0Src/X1C6FAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUiHRJXP/wdcvOHaRAXEVkxN+WCuQwHwYDVR0j BBgwFoAUl/jpSfb5lJ4XzKi9ZqNDcr9hxUkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDQ1NjUxOWUtYWI2MS00OTQzLWIzZTgtMTBiZGQ2MDgwZmRhLzAvOTdGOEU5NDlG NkY5OTQ5RTE3Q0NBOEJENjZBMzQzNzJCRjYxQzU0OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85N0Y4RTk0OUY2Rjk5NDlFMTdDQ0E4QkQ2NkEzNDM3MkJGNjFD NTQ5LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA0NTY1MTllLWFiNjEtNDk0My1i M2U4LTEwYmRkNjA4MGZkYS8wLzMxMzYzMDJlMzMzMDJlMzIzMjM0MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoB7gMA0GCSqG SIb3DQEBCwUAA4IBAQCTZjd3JApc2N9z5vcMtRkapNoIr7+obkMZdU8aXlOQ7YSQ fHduHp9TA/fw3GSX8RRGnkdFdQ7io9beM2i4nr9h279slg0f1HW0SHUdyg6SjBQb 4SfjY5odAwD854g7ggfMrob6VM7txyp9VXvvJthK6KUBeIRZAa+bzccbUuwZQtLn tN+VYGiHd0CkyEF8tEouKTQ0joY7CQD/HYvpPuCIdY7znl/wAwA4zKdqmMuQOhmF qkYYzrbP+IAiEVqV893zNi809UEyqjLtPUVYV0wjhP902BR8r10qRPRQiHtp2N1A W9uaANDKm/SWws8PlhM/UunUZ2pGY8wWds6CxoW7 -----END CERTIFICATE-----Generated at Wed May 13 03:48:54 2026 by rpki-client