$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/3136302e32322e32322e302f32332d3234203d3e20313532383032.roa File: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (raw, json) Hash identifier: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4= Subject key identifier: CA:DF:D1:13:3C:0C:DC:1E:75:00:0D:89:11:E0:07:E0:5B:D0:F1:25 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 68EE5777807F25B819483C9A2C63CEFB245CCB01 Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/3136302e32322e32322e302f32332d3234203d3e20313532383032.roa Signing time: Sun 03 May 2026 02:13:48 +0000 ROA not before: Sun 03 May 2026 02:08:48 +0000 ROA not after: Sun 02 May 2027 02:13:48 +0000 asID: 152802 IP address blocks: 160.22.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:57:77:80:7f:25:b8:19:48:3c:9a:2c:63:ce:fb:24:5c:cb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: May 3 02:08:48 2026 GMT Not After : May 2 02:13:48 2027 GMT Subject: CN=CADFD1133C0CDC1E75000D8911E007E05BD0F125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:90:56:e3:f7:b6:c1:27:eb:00:92:3d:f8:a7: 03:30:4d:8d:ef:75:4d:4a:f4:09:92:45:c1:41:36: 14:dc:d4:ac:b7:15:c2:5d:09:be:90:e3:ca:63:0a: 06:15:b5:ca:a7:ab:35:50:2b:36:04:29:5e:f5:e0: 4b:0e:80:c1:d8:9a:fd:9c:61:c7:f3:a5:c7:80:46: df:1a:86:dd:e8:bc:d4:1e:82:b2:ec:be:cd:0f:0f: 19:31:38:4f:45:c1:3b:e2:7d:db:53:16:7a:39:10: 77:67:3c:2e:d2:24:84:bb:ef:1f:82:2f:3b:84:3a: 64:81:43:5b:ac:ea:45:f3:95:0b:0e:b4:d7:fe:0f: f8:c1:c6:25:d9:fb:0c:6c:66:f3:5e:50:04:74:79: 07:2d:a5:88:02:e2:e9:75:39:82:72:22:1a:8d:70: cc:15:2e:14:59:6d:90:35:32:d2:15:4a:82:b9:e3: 2a:28:fe:9e:2c:f2:91:10:f1:47:3b:32:d7:22:72: 23:e9:3c:52:65:f1:1f:71:bf:28:92:e9:b7:ef:9b: 96:f0:41:53:2c:7d:9f:ef:40:6f:e5:41:69:54:cd: 6f:91:b2:dc:d1:85:41:d0:46:ba:2c:6d:2a:6d:e1: 27:10:01:ca:16:dd:c6:41:00:0f:06:11:0a:ef:28: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DF:D1:13:3C:0C:DC:1E:75:00:0D:89:11:E0:07:E0:5B:D0:F1:25 X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/3136302e32322e32322e302f32332d3234203d3e20313532383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.22.0/23 Signature Algorithm: sha256WithRSAEncryption 08:ed:09:21:95:b4:f6:ca:cc:b6:e8:43:c8:ad:7f:7f:f9:c4: 45:62:3b:e7:f6:8f:89:81:cf:63:d9:ef:37:1e:30:4c:9e:d9: c2:d1:ff:bf:88:4c:53:1a:bc:b5:10:09:02:73:c5:be:8f:0f: 9f:94:1a:0b:5f:d3:fc:f5:9a:43:dc:a6:6f:58:88:7b:b5:0f: 47:a3:2b:72:f9:8c:77:24:07:00:91:f4:c0:a4:a9:a8:46:81: 79:9c:ba:bb:65:79:50:1b:37:b4:d2:3a:1c:2d:3a:ab:08:89: 98:81:7f:a4:3e:50:13:09:68:2a:6c:9e:e0:87:67:52:c7:79: c6:43:6c:b2:ed:00:55:98:9a:80:a8:21:6f:5f:3b:b7:8c:79: cc:33:73:28:a2:64:d3:e3:53:fc:63:47:08:23:ce:9c:69:5d: 8d:43:b7:f8:66:c8:50:bb:1c:25:63:03:cb:7e:ef:7d:57:bd: 43:fc:4d:a4:7a:27:47:26:a7:08:1e:1c:ee:41:d9:e8:0f:db: 82:b8:0a:3d:eb:c8:fb:ad:58:63:7b:63:e6:b0:4d:ff:2a:38: 71:aa:ab:74:68:aa:68:2d:fe:4e:b3:c0:e4:df:3e:3f:77:39: 4f:7c:eb:d0:92:f6:e5:f6:8c:50:b1:0b:93:3e:13:fb:4b:8d: a6:f3:44:43 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUaO5Xd4B/JbgZSDyaLGPO+yRcywEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjA1MDMwMjA4NDhaFw0yNzA1MDIwMjEzNDhaMDMxMTAvBgNV BAMTKENBREZEMTEzM0MwQ0RDMUU3NTAwMEQ4OTExRTAwN0UwNUJEMEYxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkFbj97bBJ+sAkj34pwMwTY3v dU1K9AmSRcFBNhTc1Ky3FcJdCb6Q48pjCgYVtcqnqzVQKzYEKV714EsOgMHYmv2c YcfzpceARt8aht3ovNQegrLsvs0PDxkxOE9FwTvifdtTFno5EHdnPC7SJIS77x+C LzuEOmSBQ1us6kXzlQsOtNf+D/jBxiXZ+wxsZvNeUAR0eQctpYgC4ul1OYJyIhqN cMwVLhRZbZA1MtIVSoK54yoo/p4s8pEQ8Uc7MtciciPpPFJl8R9xvyiS6bfvm5bw QVMsfZ/vQG/lQWlUzW+RstzRhUHQRrosbSpt4ScQAcoW3cZBAA8GEQrvKP4hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUyt/REzwM3B51AA2JEeAH4FvQ8SUwHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBmN2QyODk0LWMwNzctNDIxYy1i YzFkLTM3ZDZmOWQ5ODk3ZC8wLzMxMzYzMDJlMzIzMjJlMzIzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWFjANBgkqhkiG 9w0BAQsFAAOCAQEACO0JIZW09srMtuhDyK1/f/nERWI75/aPiYHPY9nvNx4wTJ7Z wtH/v4hMUxq8tRAJAnPFvo8Pn5QaC1/T/PWaQ9ymb1iIe7UPR6MrcvmMdyQHAJH0 wKSpqEaBeZy6u2V5UBs3tNI6HC06qwiJmIF/pD5QEwloKmye4IdnUsd5xkNssu0A VZiagKghb187t4x5zDNzKKJk0+NT/GNHCCPOnGldjUO3+GbIULscJWMDy37vfVe9 Q/xNpHonRyanCB4c7kHZ6A/bgrgKPevI+61YY3tj5rBN/yo4caqrdGiqaC3+TrPA 5N8+P3c5T3zr0JL25faMULELkz4T+0uNpvNEQw== -----END CERTIFICATE-----Generated at Wed May 13 03:48:30 2026 by rpki-client