$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa File: 3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa (raw, json) Hash identifier: S4hauyuLw7/w8jvKs8EoZ1L3na+uvt8Vo0vCOD48FJ4= Subject key identifier: 94:98:7C:84:AC:91:ED:0C:46:BC:D8:CC:8C:71:26:DB:57:A7:83:3A Certificate issuer: /CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Certificate serial: 3D2F7BE5B234EE789B6215F024BE8F9B73FE7736 Authority key identifier: EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa Signing time: Sun 03 May 2026 02:31:50 +0000 ROA not before: Sun 03 May 2026 02:26:50 +0000 ROA not after: Sun 02 May 2027 02:31:50 +0000 asID: 153124 IP address blocks: 160.187.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2f:7b:e5:b2:34:ee:78:9b:62:15:f0:24:be:8f:9b:73:fe:77:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D Validity Not Before: May 3 02:26:50 2026 GMT Not After : May 2 02:31:50 2027 GMT Subject: CN=94987C84AC91ED0C46BCD8CC8C7126DB57A7833A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:25:c9:b9:9f:44:f7:c9:96:ae:57:02:12:c3: 24:0a:f5:e4:62:c5:8a:ab:9a:a6:4b:4b:ec:06:36: 43:51:9b:12:e6:14:a9:71:d8:33:d5:29:88:f3:7e: 2c:22:d0:ba:99:38:a8:db:a7:f7:44:87:18:7a:3e: b8:47:5b:eb:dc:6d:e0:3c:13:a2:6c:cc:a9:bb:ef: e9:41:d0:04:5b:96:df:c9:c8:8e:09:0b:02:4f:06: 71:eb:af:03:04:4a:20:6f:2d:bf:ea:59:24:fd:71: a8:d3:df:b6:7b:78:dc:b0:5c:5b:af:fe:e1:86:46: 1d:12:78:b6:02:95:cc:43:cf:6b:71:76:0f:eb:41: de:16:7f:28:f2:c2:d4:89:90:80:86:e0:a7:d6:37: ec:af:7f:a9:cc:b8:62:14:11:97:33:23:bd:c3:70: a7:0a:8a:96:a5:96:13:b0:b3:86:5c:d0:cc:82:e1: 77:cd:1a:15:fb:e0:d5:98:2a:52:40:90:74:69:1e: 0f:c0:c1:e9:ac:07:60:7d:7f:46:e7:c9:7d:72:80: a7:95:8a:a5:f7:3a:03:a6:3e:0c:4e:17:dc:aa:a8: 2c:db:6e:7a:59:a7:2d:77:f1:6c:b2:31:de:ec:2a: 0e:0e:2b:e4:69:0d:ea:02:b5:83:2c:62:d9:26:7a: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:98:7C:84:AC:91:ED:0C:46:BC:D8:CC:8C:71:26:DB:57:A7:83:3A X509v3 Authority Key Identifier: keyid:EA:1F:A0:A5:CF:DA:8B:5A:6F:64:2F:58:87:FD:67:22:D7:53:10:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EA1FA0A5CFDA8B5A6F642F5887FD6722D753100D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c58fb7c-67b8-4bce-96d9-be912e3f73dd/0/3136302e3138372e3139362e302f32342d3234203d3e20313533313234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.196.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:47:b5:4c:d9:23:b7:81:0e:32:f2:d0:02:3d:a2:2b:e5:91: 79:1b:f0:97:cf:15:6d:1d:18:cf:db:5d:ce:8d:ed:f8:d2:be: a4:d8:de:9c:7d:44:b4:50:77:1a:71:f2:77:36:f0:76:d1:40: 60:a3:92:cf:fb:84:5f:f5:05:c7:13:f3:85:cc:04:65:46:af: 41:7e:80:f5:61:15:b2:65:4e:9a:11:5d:4d:d0:27:81:d6:9b: 0e:56:29:ea:e9:49:be:59:5b:0d:61:05:99:4a:c2:00:ae:99: e2:9e:4c:4d:f8:eb:98:42:02:97:56:a5:31:95:f0:23:02:ab: ed:70:08:83:ce:5d:28:7d:ef:08:42:92:e5:d5:80:3d:b4:77: 03:b2:a4:3c:7f:00:12:3f:fb:42:d9:9a:9c:37:7b:47:33:ef: d7:f3:9c:ce:a6:27:12:76:c4:0f:48:f1:b5:99:8a:66:39:fc: 6b:0c:f9:3f:8a:49:fe:13:a5:25:4f:b2:0e:86:4e:98:2b:83: bd:b1:26:5d:c0:e8:51:75:6e:2f:49:5a:01:9b:a3:40:0c:77: 93:84:a5:e0:e7:72:a6:96:16:84:ff:55:ed:bf:8e:9d:c1:a9: c1:26:19:df:d2:81:02:c6:11:74:c9:a7:b0:f0:5f:0e:bc:56: f3:56:89:78 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUPS975bI07nibYhXwJL6Pm3P+dzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExRkEwQTVDRkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJE NzUzMTAwRDAeFw0yNjA1MDMwMjI2NTBaFw0yNzA1MDIwMjMxNTBaMDMxMTAvBgNV BAMTKDk0OTg3Qzg0QUM5MUVEMEM0NkJDRDhDQzhDNzEyNkRCNTdBNzgzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjJcm5n0T3yZauVwISwyQK9eRi xYqrmqZLS+wGNkNRmxLmFKlx2DPVKYjzfiwi0LqZOKjbp/dEhxh6PrhHW+vcbeA8 E6JszKm77+lB0ARblt/JyI4JCwJPBnHrrwMESiBvLb/qWST9cajT37Z7eNywXFuv /uGGRh0SeLYClcxDz2txdg/rQd4WfyjywtSJkICG4KfWN+yvf6nMuGIUEZczI73D cKcKipallhOws4Zc0MyC4XfNGhX74NWYKlJAkHRpHg/AwemsB2B9f0bnyX1ygKeV iqX3OgOmPgxOF9yqqCzbbnpZpy138WyyMd7sKg4OK+RpDeoCtYMsYtkmej5pAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUlJh8hKyR7QxGvNjMjHEm21engzowHwYDVR0j BBgwFoAU6h+gpc/ai1pvZC9Yh/1nItdTEA0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGM1OGZiN2MtNjdiOC00YmNlLTk2ZDktYmU5MTJlM2Y3M2RkLzAvRUExRkEwQTVD RkRBOEI1QTZGNjQyRjU4ODdGRDY3MjJENzUzMTAwRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQTFGQTBBNUNGREE4QjVBNkY2NDJGNTg4N0ZENjcyMkQ3NTMx MDBELmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRjNThmYjdjLTY3YjgtNGJjZS05 NmQ5LWJlOTEyZTNmNzNkZC8wLzMxMzYzMDJlMzEzODM3MmUzMTM5MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMyMzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu8QwDQYJ KoZIhvcNAQELBQADggEBAH9HtUzZI7eBDjLy0AI9oivlkXkb8JfPFW0dGM/bXc6N 7fjSvqTY3px9RLRQdxpx8nc28HbRQGCjks/7hF/1BccT84XMBGVGr0F+gPVhFbJl TpoRXU3QJ4HWmw5WKerpSb5ZWw1hBZlKwgCumeKeTE3465hCApdWpTGV8CMCq+1w CIPOXSh97whCkuXVgD20dwOypDx/ABI/+0LZmpw3e0cz79fznM6mJxJ2xA9I8bWZ imY5/GsM+T+KSf4TpSVPsg6GTpgrg72xJl3A6FF1bi9JWgGbo0AMd5OEpeDncqaW FoT/Ve2/jp3BqcEmGd/SgQLGEXTJp7DwXw68VvNWiXg= -----END CERTIFICATE-----Generated at Wed May 13 07:11:22 2026 by rpki-client