$ rpki-client -vvf rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa File: 3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa (raw, json) Hash identifier: YiGgOB+BsUIwFQzJbwEYZBUNvXOElouRLoHqR6mJHoc= Subject key identifier: 35:B8:E6:DB:55:7C:BD:BB:75:33:B9:F2:1D:FB:DE:5D:98:DA:FC:18 Certificate issuer: /CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Certificate serial: 4AA88AD5E27D4646388C3C17C701FC14C49ADE8B Authority key identifier: 77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa Signing time: Sun 03 May 2026 02:24:49 +0000 ROA not before: Sun 03 May 2026 02:19:49 +0000 ROA not after: Sun 02 May 2027 02:24:49 +0000 asID: 153149 IP address blocks: 160.191.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a8:8a:d5:e2:7d:46:46:38:8c:3c:17:c7:01:fc:14:c4:9a:de:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA Validity Not Before: May 3 02:19:49 2026 GMT Not After : May 2 02:24:49 2027 GMT Subject: CN=35B8E6DB557CBDBB7533B9F21DFBDE5D98DAFC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:f2:03:f4:e7:f3:1c:45:36:bc:f8:64:a5: 46:4a:a9:60:bc:1d:26:a8:12:27:49:f2:54:97:f8: ce:5c:93:04:65:a6:5d:5a:92:e6:be:fb:6c:9c:36: 66:87:0e:50:33:5f:34:9a:ed:0e:60:b3:71:ef:ef: a1:bd:0d:56:c3:ba:eb:b4:9d:f5:b4:2b:cd:05:70: fd:ac:2f:23:7d:31:c9:bf:ee:10:19:e4:80:d1:14: 6b:2d:5b:f9:9d:1f:3f:3b:42:c5:28:3e:32:be:f9: e9:53:99:f0:65:d0:84:54:f4:0a:38:1c:50:1e:0c: e6:44:41:cf:e6:69:11:66:53:3d:a6:d9:58:18:37: 3d:9b:e8:43:29:84:99:b4:63:6d:94:8e:fb:f1:a9: a6:ce:c1:7d:94:40:9f:c3:32:8a:9f:87:a1:f8:49: 6b:1c:f3:5b:ed:65:93:e4:64:6b:9b:32:67:8c:03: 5d:9b:a8:d7:c4:4b:49:6a:f4:89:e2:5a:3f:57:98: 21:d7:71:a2:56:3b:81:8c:66:b0:eb:5e:e8:e7:ce: df:78:8d:97:64:2e:37:00:98:b5:82:b4:fd:b8:dc: 8f:e9:66:74:2c:6d:ee:b1:1e:e8:06:95:df:b8:97: 7d:86:95:ee:97:72:b8:05:24:b3:be:fe:9e:f9:04: ec:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:E6:DB:55:7C:BD:BB:75:33:B9:F2:1D:FB:DE:5D:98:DA:FC:18 X509v3 Authority Key Identifier: keyid:77:8D:09:4F:59:A4:A4:DE:EF:A7:C8:AA:DB:CA:9B:EF:4F:A4:24:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/778D094F59A4A4DEEFA7C8AADBCA9BEF4FA424BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/0/3136302e3139312e3233352e302f32342d3234203d3e20313533313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.235.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:cd:b0:6b:22:36:e9:67:62:f3:5b:06:74:b2:47:9f:4c:23: 78:3f:a5:e4:95:5f:05:cd:84:23:48:2a:2f:52:94:be:78:91: cc:8a:cf:37:23:f3:cb:2a:a4:82:87:fb:51:75:64:00:d2:0e: c3:3b:6e:6b:4f:b9:0b:9e:fe:67:b7:4a:b0:1c:b2:8a:ed:d6: 1e:d2:19:fa:88:b1:65:bc:30:8d:ba:f7:d4:d2:aa:a9:dc:31: bf:62:5a:95:55:08:a4:fb:51:0b:d4:d6:3d:d6:b7:a8:17:34: 33:f0:6f:31:21:cc:24:9e:19:4e:ef:3d:b6:8c:ef:e9:16:50: 81:f2:bc:90:13:f0:29:f8:29:62:47:9d:2a:79:8c:93:a6:1c: f0:6a:36:61:71:a3:8c:e8:b0:a5:0d:f5:a2:e4:d2:98:c1:d3: 1b:89:b8:b4:2b:8c:ab:6b:4c:4e:b7:87:53:60:f3:c6:79:7f: 06:4b:cc:38:b4:05:c2:a3:4c:2a:29:67:19:25:d8:93:97:b7: 23:6e:45:00:28:6f:fe:4b:70:32:31:8a:a6:35:74:22:84:46: 9f:b0:43:a7:ee:de:3d:b5:b5:92:b0:33:20:9e:f0:23:f8:cb: fd:76:f0:85:08:c5:1b:3a:1b:01:b0:c2:84:a3:74:41:e9:f9: ce:60:2d:d7 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUSqiK1eJ9RkY4jDwXxwH8FMSa3oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc4RDA5NEY1OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0 RkE0MjRCQTAeFw0yNjA1MDMwMjE5NDlaFw0yNzA1MDIwMjI0NDlaMDMxMTAvBgNV BAMTKDM1QjhFNkRCNTU3Q0JEQkI3NTMzQjlGMjFERkJERTVEOThEQUZDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmPID9OfzHEU2vPhkpUZKqWC8 HSaoEidJ8lSX+M5ckwRlpl1akua++2ycNmaHDlAzXzSa7Q5gs3Hv76G9DVbDuuu0 nfW0K80FcP2sLyN9Mcm/7hAZ5IDRFGstW/mdHz87QsUoPjK++elTmfBl0IRU9Ao4 HFAeDOZEQc/maRFmUz2m2VgYNz2b6EMphJm0Y22UjvvxqabOwX2UQJ/DMoqfh6H4 SWsc81vtZZPkZGubMmeMA12bqNfES0lq9IniWj9XmCHXcaJWO4GMZrDrXujnzt94 jZdkLjcAmLWCtP243I/pZnQsbe6xHugGld+4l32Gle6XcrgFJLO+/p75BOzTAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUNbjm21V8vbt1M7nyHfveXZja/BgwHwYDVR0j BBgwFoAUd40JT1mkpN7vp8iq28qb70+kJLowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNkYzAzNGYtMzgyMy00OGFmLTk1M2QtYWFhODczYjBmYjZhLzAvNzc4RDA5NEY1 OUE0QTRERUVGQTdDOEFBREJDQTlCRUY0RkE0MjRCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83NzhEMDk0RjU5QTRBNERFRUZBN0M4QUFEQkNBOUJFRjRGQTQy NEJBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRmLTM4MjMtNDhhZi05 NTNkLWFhYTg3M2IwZmI2YS8wLzMxMzYzMDJlMzEzOTMxMmUzMjMzMzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgv+swDQYJ KoZIhvcNAQELBQADggEBAA3NsGsiNulnYvNbBnSyR59MI3g/peSVXwXNhCNIKi9S lL54kcyKzzcj88sqpIKH+1F1ZADSDsM7bmtPuQue/me3SrAcsort1h7SGfqIsWW8 MI2699TSqqncMb9iWpVVCKT7UQvU1j3Wt6gXNDPwbzEhzCSeGU7vPbaM7+kWUIHy vJAT8Cn4KWJHnSp5jJOmHPBqNmFxo4zosKUN9aLk0pjB0xuJuLQrjKtrTE63h1Ng 88Z5fwZLzDi0BcKjTCopZxkl2JOXtyNuRQAob/5LcDIxiqY1dCKERp+wQ6fu3j21 tZKwMyCe8CP4y/128IUIxRs6GwGwwoSjdEHp+c5gLdc= -----END CERTIFICATE-----Generated at Wed May 13 06:11:35 2026 by rpki-client