$ rpki-client -vvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa File: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (raw, json) Hash identifier: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk= Subject key identifier: EA:E8:10:18:0A:22:79:66:A5:F6:03:61:E3:4C:20:25:10:65:14:59 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 299387EC3858289E0E3932D0DB6DB01532612AE5 Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa Signing time: Sun 03 May 2026 02:23:47 +0000 ROA not before: Sun 03 May 2026 02:18:47 +0000 ROA not after: Sun 02 May 2027 02:23:47 +0000 asID: 152818 IP address blocks: 160.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:93:87:ec:38:58:28:9e:0e:39:32:d0:db:6d:b0:15:32:61:2a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: May 3 02:18:47 2026 GMT Not After : May 2 02:23:47 2027 GMT Subject: CN=EAE810180A227966A5F60361E34C202510651459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:29:27:08:44:72:d1:4c:0a:73:68:ef:93: 89:cb:1d:ba:d0:fc:87:78:49:76:35:fa:fc:6f:04: 10:11:57:85:e2:3f:7b:fd:82:0d:a8:3d:b9:dd:5b: 6c:8c:3a:ca:79:2f:cd:de:2b:89:08:cc:7f:2a:fc: 10:ec:24:0d:2c:ef:c4:82:b4:9f:a6:78:ad:d0:71: 72:2f:5a:e8:49:68:c8:e9:1a:e3:20:49:21:c9:13: eb:49:9b:ff:54:1b:c0:9a:2d:96:a4:0d:06:93:10: 2e:d8:2e:07:07:da:a5:55:e9:57:4c:02:16:cb:29: 2d:af:a8:ac:77:f0:0a:b3:66:d3:3e:f3:cc:19:bf: a2:17:66:63:34:48:7a:97:43:f7:48:3a:ad:df:c3: 7b:b1:74:23:33:19:3a:44:e5:4c:9f:79:b7:16:35: 8d:06:58:a1:02:41:d7:fa:72:9c:01:7f:40:2a:eb: ac:77:d6:3a:73:02:f8:dd:43:68:7e:db:d4:66:e1: 30:85:cf:ab:38:e8:5d:79:40:59:34:e8:a1:d2:5a: ec:63:3c:26:99:5a:fd:dd:3f:92:a1:24:a5:e5:70: 8e:1a:6a:6b:75:3b:35:cf:7a:c1:cc:1b:7c:bf:d4: 03:66:00:34:28:c9:e4:15:5d:ea:71:d7:2e:87:65: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E8:10:18:0A:22:79:66:A5:F6:03:61:E3:4C:20:25:10:65:14:59 X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.128.0/24 Signature Algorithm: sha256WithRSAEncryption 09:97:84:92:5d:dc:b1:df:bc:6b:be:c1:54:2b:14:68:63:02: 19:63:19:44:ba:ce:78:a7:b3:03:0a:02:71:60:15:79:2a:54: 24:39:64:c9:38:ab:9a:ec:cf:7f:f4:d7:67:21:8b:cd:dc:6d: c6:c9:2e:a8:e2:40:ad:9f:27:b3:2f:18:7c:0d:f8:9d:6a:43: 44:af:8d:b7:97:f0:4b:8a:e0:f1:17:1d:32:f3:a3:67:2f:41: 0f:5d:c2:08:8c:17:14:be:9c:fb:c9:5d:1e:9c:a3:52:c8:b7: 64:1c:53:5a:21:21:24:9e:89:38:78:64:82:fa:83:ca:88:7e: ad:a2:09:53:4a:45:d0:aa:57:90:a2:d4:4f:35:d4:78:3e:2c: 45:fa:7c:1a:a5:54:fe:0b:e3:4e:a8:c2:03:50:63:7f:87:67: 34:d9:01:24:aa:3b:f6:b3:87:e3:46:e1:e2:0d:7f:e9:86:eb: a4:a2:b5:2d:b6:e7:6b:b6:c0:3c:d5:c0:0f:2b:bd:66:e8:74: da:7d:5b:ee:90:31:cf:9b:c0:40:0c:df:14:df:53:ff:06:78: 30:7d:5d:f6:5f:c7:2c:6d:af:61:54:9b:0c:c6:2c:c9:9c:74: ee:1d:65:98:50:b1:45:da:f6:e7:5f:58:52:3f:03:ac:aa:a5: c1:65:2a:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKZOH7DhYKJ4OOTLQ222wFTJhKuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA1MDMwMjE4NDdaFw0yNzA1MDIwMjIzNDdaMDMxMTAvBgNV BAMTKEVBRTgxMDE4MEEyMjc5NjZBNUY2MDM2MUUzNEMyMDI1MTA2NTE0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVmSknCERy0UwKc2jvk4nLHbrQ /Id4SXY1+vxvBBARV4XiP3v9gg2oPbndW2yMOsp5L83eK4kIzH8q/BDsJA0s78SC tJ+meK3QcXIvWuhJaMjpGuMgSSHJE+tJm/9UG8CaLZakDQaTEC7YLgcH2qVV6VdM AhbLKS2vqKx38AqzZtM+88wZv6IXZmM0SHqXQ/dIOq3fw3uxdCMzGTpE5UyfebcW NY0GWKECQdf6cpwBf0Aq66x31jpzAvjdQ2h+29Rm4TCFz6s46F15QFk06KHSWuxj PCaZWv3dP5KhJKXlcI4aamt1OzXPesHMG3y/1ANmADQoyeQVXepx1y6HZbiLAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU6ugQGAoieWal9gNh40wgJRBlFFkwHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMwZmI3OGE5LWNkNjgtNDRmZC04 NWFhLTZjNmIwOGNiMjM0Ni8wLzMxMzYzMDJlMzIzMjJlMzEzMjM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBaAMA0GCSqG SIb3DQEBCwUAA4IBAQAJl4SSXdyx37xrvsFUKxRoYwIZYxlEus54p7MDCgJxYBV5 KlQkOWTJOKua7M9/9NdnIYvN3G3GyS6o4kCtnyezLxh8DfidakNEr423l/BLiuDx Fx0y86NnL0EPXcIIjBcUvpz7yV0enKNSyLdkHFNaISEknok4eGSC+oPKiH6toglT SkXQqleQotRPNdR4PixF+nwapVT+C+NOqMIDUGN/h2c02QEkqjv2s4fjRuHiDX/p huukorUttudrtsA81cAPK71m6HTafVvukDHPm8BADN8U31P/BngwfV32X8csba9h VJsMxizJnHTuHWWYULFF2vbnX1hSPwOsqqXBZSrA -----END CERTIFICATE-----Generated at Wed May 13 06:37:48 2026 by rpki-client