$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa File: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (raw, json) Hash identifier: 77972k6MYcuZdjQWO5NsuORM4k9B55J3rC8Pahn1Zak= Subject key identifier: E5:A5:65:5E:44:F8:70:C7:3A:91:DC:B3:D5:2C:54:23:B1:C8:37:35 Certificate issuer: /CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E Certificate serial: 64822102F5D972B68F8C08EE7793A9F38A5F14C9 Authority key identifier: 8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa Signing time: Sun 03 May 2026 02:36:52 +0000 ROA not before: Sun 03 May 2026 02:31:52 +0000 ROA not after: Sun 02 May 2027 02:36:52 +0000 asID: 152809 IP address blocks: 160.22.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:82:21:02:f5:d9:72:b6:8f:8c:08:ee:77:93:a9:f3:8a:5f:14:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E0F94081A4207FEB15CB2A5997CBB738543C65E Validity Not Before: May 3 02:31:52 2026 GMT Not After : May 2 02:36:52 2027 GMT Subject: CN=E5A5655E44F870C73A91DCB3D52C5423B1C83735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:82:19:4f:6a:94:f9:fd:18:1a:f8:8b:0a: 0c:4f:36:3a:63:7e:c0:82:9d:25:37:60:0e:f3:cd: b2:b4:f6:08:17:c8:e4:74:f1:f2:c1:c1:64:ec:60: 15:89:75:af:1e:36:80:f7:c5:1a:9f:7f:4c:1f:fb: 8f:15:a6:70:6b:d4:c5:f7:02:04:64:77:dc:11:f6: 52:99:71:90:b7:63:fc:8e:d1:b8:8f:a7:ac:5c:e3: 8f:ec:fb:bb:ff:04:9e:6c:66:63:81:95:81:db:53: 3f:e6:ba:7e:f7:26:ab:29:c8:2a:dd:cd:ee:38:67: 27:97:4b:08:0c:36:ae:82:2d:7a:7b:94:be:89:83: 08:8a:c4:88:74:bd:72:db:75:22:c8:70:ab:20:31: ca:80:a2:66:e8:20:89:6c:06:63:28:f9:74:7c:00: 04:ac:00:c5:24:1d:70:11:98:c1:38:a9:f1:36:b0: 1b:cb:bc:29:cb:fc:74:fc:1b:f0:a2:62:b8:a5:cd: 3b:5b:54:2b:1f:be:1d:84:58:e7:45:c1:ba:19:08: 74:c3:f1:65:1b:b0:1e:2a:bd:49:b1:84:fa:9e:d8: ce:19:9e:35:d6:56:98:ae:05:5c:b4:30:15:4d:9d: 97:ef:b9:a3:ee:aa:06:ac:55:e9:a3:37:6f:b3:ee: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A5:65:5E:44:F8:70:C7:3A:91:DC:B3:D5:2C:54:23:B1:C8:37:35 X509v3 Authority Key Identifier: keyid:8E:0F:94:08:1A:42:07:FE:B1:5C:B2:A5:99:7C:BB:73:85:43:C6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/8E0F94081A4207FEB15CB2A5997CBB738543C65E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.101.0/24 Signature Algorithm: sha256WithRSAEncryption ba:3e:f9:48:fe:b4:a1:92:e7:db:5f:bc:aa:12:95:a3:b4:9a: 20:2e:34:0a:b5:f0:7c:74:27:47:0a:7c:b7:4d:11:aa:62:bc: d0:c9:1b:c3:88:42:d1:d9:45:a5:e3:00:89:b9:f5:55:fd:71: 48:e8:de:e7:f6:db:db:50:3a:b0:b6:d7:92:f8:ec:99:a0:e1: 74:f5:11:a8:2b:56:e7:be:f9:6e:e9:13:af:2e:0c:ef:6a:7f: 88:55:62:0c:55:8c:94:e4:f4:6a:79:26:39:91:c9:db:10:fb: 9f:b3:74:29:fe:53:f1:04:16:4d:3a:62:38:e4:70:50:ad:79: 0f:22:bb:7a:98:46:e8:1d:eb:e4:74:96:9d:33:f7:22:44:96: 13:5c:60:a9:78:a9:33:1c:fd:75:c2:83:15:57:0c:22:4d:fa: 1a:d1:b7:e0:f6:de:cc:7e:b3:7d:43:20:4f:93:86:8b:37:0b: 95:9e:e4:bf:63:77:73:6c:14:3f:55:4b:28:1b:63:c8:53:3c: a2:74:8d:b5:ca:31:64:70:eb:5f:8c:fd:6e:b8:13:72:06:ba: d0:be:aa:7f:ae:e4:51:57:62:f8:07:3f:2c:06:ab:dc:0c:2b: e5:61:92:29:01:da:e3:97:75:ea:f2:25:a9:ce:d4:4f:39:39: 94:53:cb:96 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZIIhAvXZcraPjAjud5Op84pfFMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwRjk0MDgxQTQyMDdGRUIxNUNCMkE1OTk3Q0JCNzM4 NTQzQzY1RTAeFw0yNjA1MDMwMjMxNTJaFw0yNzA1MDIwMjM2NTJaMDMxMTAvBgNV BAMTKEU1QTU2NTVFNDRGODcwQzczQTkxRENCM0Q1MkM1NDIzQjFDODM3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR/IIZT2qU+f0YGviLCgxPNjpj fsCCnSU3YA7zzbK09ggXyOR08fLBwWTsYBWJda8eNoD3xRqff0wf+48VpnBr1MX3 AgRkd9wR9lKZcZC3Y/yO0biPp6xc44/s+7v/BJ5sZmOBlYHbUz/mun73JqspyCrd ze44ZyeXSwgMNq6CLXp7lL6JgwiKxIh0vXLbdSLIcKsgMcqAomboIIlsBmMo+XR8 AASsAMUkHXARmME4qfE2sBvLvCnL/HT8G/CiYrilzTtbVCsfvh2EWOdFwboZCHTD 8WUbsB4qvUmxhPqe2M4ZnjXWVpiuBVy0MBVNnZfvuaPuqgasVemjN2+z7nt5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5aVlXkT4cMc6kdyz1SxUI7HINzUwHwYDVR0j BBgwFoAUjg+UCBpCB/6xXLKlmXy7c4VDxl4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4ZWYxMTktN2RkZi00NWU1LTg2MzQtMzhiNzcyNThjYmNjLzAvOEUwRjk0MDgx QTQyMDdGRUIxNUNCMkE1OTk3Q0JCNzM4NTQzQzY1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84RTBGOTQwODFBNDIwN0ZFQjE1Q0IyQTU5OTdDQkI3Mzg1NDND NjVFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVkOGVmMTE5LTdkZGYtNDVlNS04 NjM0LTM4Yjc3MjU4Y2JjYy8wLzMxMzYzMDJlMzIzMjJlMzEzMDMxMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBZlMA0GCSqG SIb3DQEBCwUAA4IBAQC6PvlI/rShkufbX7yqEpWjtJogLjQKtfB8dCdHCny3TRGq YrzQyRvDiELR2UWl4wCJufVV/XFI6N7n9tvbUDqwtteS+OyZoOF09RGoK1bnvvlu 6ROvLgzvan+IVWIMVYyU5PRqeSY5kcnbEPufs3Qp/lPxBBZNOmI45HBQrXkPIrt6 mEboHevkdJadM/ciRJYTXGCpeKkzHP11woMVVwwiTfoa0bfg9t7MfrN9QyBPk4aL NwuVnuS/Y3dzbBQ/VUsoG2PIUzyidI21yjFkcOtfjP1uuBNyBrrQvqp/ruRRV2L4 Bz8sBqvcDCvlYZIpAdrjl3Xq8iWpztRPOTmUU8uW -----END CERTIFICATE-----Generated at Wed May 13 07:38:56 2026 by rpki-client