$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa File: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (raw, json) Hash identifier: EoJCqqilpIYvbJ/RnVfwHNYiOZPcKV9S7o08S4nSo30= Subject key identifier: 79:43:AB:52:40:5D:48:AA:8A:41:CC:5D:75:8D:78:5D:CD:38:A6:F9 Certificate issuer: /CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Certificate serial: 2C1E1683806F4A29C30A1D461DF16D1F8640C603 Authority key identifier: 20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa Signing time: Sun 03 May 2026 02:32:11 +0000 ROA not before: Sun 03 May 2026 02:27:11 +0000 ROA not after: Sun 02 May 2027 02:32:11 +0000 asID: 152754 IP address blocks: 160.19.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:1e:16:83:80:6f:4a:29:c3:0a:1d:46:1d:f1:6d:1f:86:40:c6:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B75971A03105CC77AE06D20D23D95EBAFC11D2 Validity Not Before: May 3 02:27:11 2026 GMT Not After : May 2 02:32:11 2027 GMT Subject: CN=7943AB52405D48AA8A41CC5D758D785DCD38A6F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:f9:db:d2:78:81:0b:b0:66:bf:75:7b:b2: a7:b4:9f:80:e2:f4:56:39:4a:1c:f9:9c:2d:0b:93: 38:70:69:a3:c4:c5:33:76:c4:d0:7a:83:27:8a:82: 54:42:bc:26:55:3a:29:a5:7c:cc:3d:84:d4:22:e5: 4c:65:26:ea:e1:b3:70:fc:3a:e9:53:96:3d:54:92: 0a:7e:33:46:cf:3c:0f:1c:c1:6b:16:bb:33:0f:ea: c0:d4:1b:fa:a4:ed:13:50:86:e4:2c:fd:56:83:35: bd:61:41:c6:1a:f0:ff:1d:81:9a:8e:60:81:b4:b2: 5c:39:a0:ae:45:42:f4:35:ab:e1:7a:1f:07:ef:2e: 5c:37:d4:1a:4e:60:3a:0e:a5:5d:bd:a5:77:af:27: 47:4a:6c:73:5c:2f:b3:f1:8c:e4:d5:40:65:7a:3c: a4:0c:e5:b2:4e:c9:46:cb:05:1d:b7:05:f7:68:24: 54:aa:c9:0d:3e:ac:95:f8:c1:2f:d6:66:a6:b0:ec: 5c:f2:1c:17:cb:b5:83:99:d4:5a:be:3c:da:fd:bb: 74:01:f8:d0:dc:81:d4:d0:ab:70:b2:2f:6f:67:99: 25:58:8a:71:55:51:48:7c:31:c3:41:f0:e6:07:11: 98:c5:a3:d0:40:e1:1c:27:c0:3e:58:79:b2:df:da: 1e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:43:AB:52:40:5D:48:AA:8A:41:CC:5D:75:8D:78:5D:CD:38:A6:F9 X509v3 Authority Key Identifier: keyid:20:B7:59:71:A0:31:05:CC:77:AE:06:D2:0D:23:D9:5E:BA:FC:11:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/20B75971A03105CC77AE06D20D23D95EBAFC11D2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ff:43:1e:f7:00:85:f5:d0:94:de:c7:77:e0:e9:e2:7e:56: c9:da:c3:e0:b7:16:d5:86:90:2d:5d:9e:e9:0d:07:da:ae:4c: 16:7b:a5:2e:c8:53:cb:3d:59:ea:b4:bc:74:06:28:dd:0f:1d: 2e:ac:2f:52:be:07:1e:5f:83:3b:34:2a:3a:e3:a2:c5:c1:ba: 30:e6:04:bb:93:73:29:4e:7c:65:82:b8:5b:b1:8d:e3:a4:34: 60:32:cf:a1:37:c7:0c:09:e1:62:8d:c3:e1:c1:0a:a3:48:19: 90:36:89:a0:e2:b6:56:bd:e6:ec:f3:54:e2:ee:f1:4d:ed:fb: 58:51:b0:05:1d:c3:be:65:96:74:ff:63:26:cd:d8:91:97:14: 7a:2e:69:15:63:04:95:9c:31:f1:04:4b:e3:9c:99:77:4e:38: 70:b0:37:a6:d6:b6:66:6c:c5:15:a1:66:43:13:86:1d:c1:f1: c9:22:45:46:69:a8:0c:3b:dd:0a:c3:49:c2:ed:b7:af:a3:27: e4:47:37:a1:e4:80:f8:c7:dd:d7:b5:13:64:02:c2:ed:31:e4: 37:51:ca:22:3e:ce:c1:a1:d0:b7:03:b6:e8:e0:47:fe:f8:57: 49:47:b2:78:ad:9c:0b:2c:af:fd:d6:e4:66:6e:d3:b2:df:e8: e3:23:e9:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIULB4Wg4BvSinDCh1GHfFtH4ZAxgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCNzU5NzFBMDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVC QUZDMTFEMjAeFw0yNjA1MDMwMjI3MTFaFw0yNzA1MDIwMjMyMTFaMDMxMTAvBgNV BAMTKDc5NDNBQjUyNDA1RDQ4QUE4QTQxQ0M1RDc1OEQ3ODVEQ0QzOEE2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1/nb0niBC7Bmv3V7sqe0n4Di 9FY5Shz5nC0LkzhwaaPExTN2xNB6gyeKglRCvCZVOimlfMw9hNQi5UxlJurhs3D8 OulTlj1Ukgp+M0bPPA8cwWsWuzMP6sDUG/qk7RNQhuQs/VaDNb1hQcYa8P8dgZqO YIG0slw5oK5FQvQ1q+F6HwfvLlw31BpOYDoOpV29pXevJ0dKbHNcL7PxjOTVQGV6 PKQM5bJOyUbLBR23BfdoJFSqyQ0+rJX4wS/WZqaw7FzyHBfLtYOZ1Fq+PNr9u3QB +NDcgdTQq3CyL29nmSVYinFVUUh8McNB8OYHEZjFo9BA4RwnwD5YebLf2h5hAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUeUOrUkBdSKqKQcxddY14Xc04pvkwHwYDVR0j BBgwFoAUILdZcaAxBcx3rgbSDSPZXrr8EdIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGUzNzRkNDgtNWE3MC00YzdmLWJkZmQtZDgwNTJlYmFmMGFiLzAvMjBCNzU5NzFB MDMxMDVDQzc3QUUwNkQyMEQyM0Q5NUVCQUZDMTFEMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yMEI3NTk3MUEwMzEwNUNDNzdBRTA2RDIwRDIzRDk1RUJBRkMx MUQyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRlMzc0ZDQ4LTVhNzAtNGM3Zi1i ZGZkLWQ4MDUyZWJhZjBhYi8wLzMxMzYzMDJlMzEzOTJlMzgzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATVDANBgkqhkiG 9w0BAQsFAAOCAQEAM/9DHvcAhfXQlN7Hd+Dp4n5WydrD4LcW1YaQLV2e6Q0H2q5M FnulLshTyz1Z6rS8dAYo3Q8dLqwvUr4HHl+DOzQqOuOixcG6MOYEu5NzKU58ZYK4 W7GN46Q0YDLPoTfHDAnhYo3D4cEKo0gZkDaJoOK2Vr3m7PNU4u7xTe37WFGwBR3D vmWWdP9jJs3YkZcUei5pFWMElZwx8QRL45yZd044cLA3pta2ZmzFFaFmQxOGHcHx ySJFRmmoDDvdCsNJwu23r6Mn5Ec3oeSA+Mfd17UTZALC7THkN1HKIj7OwaHQtwO2 6OBH/vhXSUeyeK2cCyyv/dbkZm7Tst/o4yPpNA== -----END CERTIFICATE-----Generated at Wed May 13 01:37:43 2026 by rpki-client