$ rpki-client -vvf rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa File: 3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa (raw, json) Hash identifier: lzFm6Q75CZcB/+vlMIfl+v5WLGkE1UU/8+RPcBOnazs= Subject key identifier: 06:8E:EA:30:E8:77:25:ED:2B:B9:79:40:A8:87:42:0A:52:C5:B6:85 Certificate issuer: /CN=C17465888212A3582B210ADEFFA05A3EB2D99CF8 Certificate serial: 1B98DA8C5BF9E434504DF245289D36EC33F7734A Authority key identifier: C1:74:65:88:82:12:A3:58:2B:21:0A:DE:FF:A0:5A:3E:B2:D9:9C:F8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa Signing time: Sun 03 May 2026 02:40:37 +0000 ROA not before: Sun 03 May 2026 02:35:37 +0000 ROA not after: Sun 02 May 2027 02:40:37 +0000 asID: 153061 IP address blocks: 160.22.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.crl rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:98:da:8c:5b:f9:e4:34:50:4d:f2:45:28:9d:36:ec:33:f7:73:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C17465888212A3582B210ADEFFA05A3EB2D99CF8 Validity Not Before: May 3 02:35:37 2026 GMT Not After : May 2 02:40:37 2027 GMT Subject: CN=068EEA30E87725ED2BB97940A887420A52C5B685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f3:3d:75:ff:72:e3:a5:db:b4:39:c1:52:5f: bb:f3:0a:b3:88:1c:fe:08:05:32:3a:b1:f2:7e:42: 80:22:b6:f1:a3:88:6e:91:c7:17:00:4d:b0:13:e5: 31:0e:41:93:ad:61:c3:0d:f5:1a:ef:e8:e9:81:58: 8f:39:17:ce:f9:06:1d:af:81:b0:e4:d3:06:aa:83: 62:97:a5:12:ef:01:8f:c5:c9:fe:a3:44:87:dc:04: 23:07:d8:04:a2:eb:fc:ac:3a:7c:5f:09:53:47:eb: 3e:ef:9c:cf:1d:60:92:ca:96:1c:7f:45:b6:21:ba: 0d:ac:cf:fa:fb:dc:f7:6a:4d:b3:f8:c3:d0:5b:08: bf:c6:ee:45:de:0e:94:85:41:3a:9c:f6:e9:d9:1b: 8b:56:10:bd:ca:e8:d2:1d:79:68:51:61:f1:30:65: 16:3e:a9:4f:c2:9f:a1:08:7c:9f:5e:d3:f3:cc:2d: b0:ae:ae:01:23:70:21:8e:4d:fa:5d:53:75:7c:1b: de:7a:ca:74:09:95:1f:ad:b9:86:3b:fe:f2:a9:62: fc:35:e3:43:ad:e6:80:e9:5f:3c:d1:b3:38:82:35: b5:56:e8:e4:f7:44:6c:48:b9:a4:fe:eb:0d:b1:b8: 2c:b1:2d:02:04:75:e1:a8:28:cf:04:6f:85:93:2c: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8E:EA:30:E8:77:25:ED:2B:B9:79:40:A8:87:42:0A:52:C5:B6:85 X509v3 Authority Key Identifier: keyid:C1:74:65:88:82:12:A3:58:2B:21:0A:DE:FF:A0:5A:3E:B2:D9:9C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C17465888212A3582B210ADEFFA05A3EB2D99CF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/69b53420-8c59-49cf-b3b2-f55e9890ddcd/0/3136302e32322e3233342e302f32342d3234203d3e20313533303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.234.0/24 Signature Algorithm: sha256WithRSAEncryption 49:e4:1a:3d:82:85:12:7c:37:b6:d5:91:5c:c7:9d:1b:47:48: b0:1c:4b:74:1d:17:68:fa:bd:f9:e2:0d:7e:21:df:d0:ef:38: 33:37:ad:d4:22:c0:ac:9b:03:bc:1c:70:6b:41:41:a7:d9:04: 70:02:61:d0:3e:84:2e:cc:10:04:e0:2e:a7:e6:a6:04:a2:2c: f5:6a:a4:95:96:b8:a8:d9:19:46:8e:dc:37:2d:40:6e:04:a1: 71:b1:a1:6a:ee:8c:7d:e2:76:31:19:8f:0f:a8:23:37:95:fc: 3a:ed:5e:e9:1a:79:f6:88:af:d6:9b:99:a7:b4:0c:e0:2f:5f: 73:4d:e6:53:df:d4:7e:a4:db:36:9c:f2:fd:a8:75:7d:cb:c6: b7:fc:6d:e2:62:36:90:6e:42:0a:f8:f3:31:8f:b5:c2:71:45: 2a:72:39:8a:3d:c4:88:6e:78:93:97:ba:5c:7d:cd:f1:28:68: 41:cd:fd:e9:d5:4b:cb:79:c0:f3:07:3a:ef:6e:a3:16:99:de: a9:fa:d1:d4:5b:0e:22:cf:22:ea:c7:d1:f4:14:fe:4a:15:d5: 5b:6c:fc:f9:83:e8:19:44:77:89:f8:76:ac:51:e3:1d:95:70: 98:d6:46:43:75:38:4f:01:ca:95:2f:42:83:b6:3c:23:28:71: 78:6b:7a:d2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUG5jajFv55DRQTfJFKJ027DP3c0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3NDY1ODg4MjEyQTM1ODJCMjEwQURFRkZBMDVBM0VC MkQ5OUNGODAeFw0yNjA1MDMwMjM1MzdaFw0yNzA1MDIwMjQwMzdaMDMxMTAvBgNV BAMTKDA2OEVFQTMwRTg3NzI1RUQyQkI5Nzk0MEE4ODc0MjBBNTJDNUI2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ8z11/3Ljpdu0OcFSX7vzCrOI HP4IBTI6sfJ+QoAitvGjiG6RxxcATbAT5TEOQZOtYcMN9Rrv6OmBWI85F875Bh2v gbDk0waqg2KXpRLvAY/Fyf6jRIfcBCMH2ASi6/ysOnxfCVNH6z7vnM8dYJLKlhx/ RbYhug2sz/r73PdqTbP4w9BbCL/G7kXeDpSFQTqc9unZG4tWEL3K6NIdeWhRYfEw ZRY+qU/Cn6EIfJ9e0/PMLbCurgEjcCGOTfpdU3V8G956ynQJlR+tuYY7/vKpYvw1 40Ot5oDpXzzRsziCNbVW6OT3RGxIuaT+6w2xuCyxLQIEdeGoKM8Eb4WTLDLzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUBo7qMOh3Je0ruXlAqIdCClLFtoUwHwYDVR0j BBgwFoAUwXRliIISo1grIQre/6BaPrLZnPgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjliNTM0MjAtOGM1OS00OWNmLWIzYjItZjU1ZTk4OTBkZGNkLzAvQzE3NDY1ODg4 MjEyQTM1ODJCMjEwQURFRkZBMDVBM0VCMkQ5OUNGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMTc0NjU4ODgyMTJBMzU4MkIyMTBBREVGRkEwNUEzRUIyRDk5 Q0Y4LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzY5YjUzNDIwLThjNTktNDljZi1i M2IyLWY1NWU5ODkwZGRjZC8wLzMxMzYzMDJlMzIzMjJlMzIzMzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMzMzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbqMA0GCSqG SIb3DQEBCwUAA4IBAQBJ5Bo9goUSfDe21ZFcx50bR0iwHEt0HRdo+r354g1+Id/Q 7zgzN63UIsCsmwO8HHBrQUGn2QRwAmHQPoQuzBAE4C6n5qYEoiz1aqSVlrio2RlG jtw3LUBuBKFxsaFq7ox94nYxGY8PqCM3lfw67V7pGnn2iK/Wm5mntAzgL19zTeZT 39R+pNs2nPL9qHV9y8a3/G3iYjaQbkIK+PMxj7XCcUUqcjmKPcSIbniTl7pcfc3x KGhBzf3p1UvLecDzBzrvbqMWmd6p+tHUWw4izyLqx9H0FP5KFdVbbPz5g+gZRHeJ +HasUeMdlXCY1kZDdThPAcqVL0KDtjwjKHF4a3rS -----END CERTIFICATE-----Generated at Wed May 13 03:56:02 2026 by rpki-client