$ rpki-client -vvf rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa File: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (raw, json) Hash identifier: ZdektWGBi3rfOIP5V7EV+AEsc9XAfei8AhQcCJZB3h0= Subject key identifier: 8D:68:54:FD:CA:E7:CB:91:B3:40:C1:5D:0D:03:73:2B:00:21:22:E7 Certificate issuer: /CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Certificate serial: 5326BA614EAB0EC68D56886E5AA9BBEFADC1D9D6 Authority key identifier: F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa Signing time: Sun 03 May 2026 02:43:44 +0000 ROA not before: Sun 03 May 2026 02:38:44 +0000 ROA not after: Sun 02 May 2027 02:43:44 +0000 asID: 153157 IP address blocks: 160.191.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:26:ba:61:4e:ab:0e:c6:8d:56:88:6e:5a:a9:bb:ef:ad:c1:d9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5B5D46C5DCE844707C0D789603977CD1FE1EAF6 Validity Not Before: May 3 02:38:44 2026 GMT Not After : May 2 02:43:44 2027 GMT Subject: CN=8D6854FDCAE7CB91B340C15D0D03732B002122E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:e8:f4:a1:9f:3d:be:8c:40:1c:69:4f:23: 4c:b7:cb:5e:22:71:c1:ee:47:33:36:79:a2:b4:71: c2:30:7f:b6:07:95:aa:0e:b2:fd:78:e4:00:59:dd: 1a:73:8a:74:fc:44:57:a1:6a:6f:68:bd:af:03:1b: 7c:6a:eb:94:70:35:d4:8c:f7:a4:37:4e:01:10:2b: 5f:19:1f:41:59:3d:91:38:14:96:90:25:25:46:78: 4b:83:70:02:81:28:4f:7c:77:c1:6b:37:cc:b0:0d: 24:7c:0b:63:7a:c9:f8:05:18:e8:7e:63:78:d8:a4: a7:f9:69:b3:b8:b7:c3:63:5f:db:78:de:4e:01:0c: e1:3b:6d:d7:4b:ef:1a:c2:45:71:83:97:e9:a7:9e: 8b:ca:cf:6d:bf:7b:06:f7:2c:72:fc:54:53:c3:44: 39:1a:40:13:0d:ee:68:3e:13:8d:94:cc:eb:0e:32: 49:c4:c2:f2:23:7b:c5:50:de:d1:cc:15:97:05:24: 56:20:b6:9d:34:98:09:9f:42:52:77:56:62:ec:02: 5c:ae:0f:7a:cf:25:55:41:7e:66:fd:e5:8c:6d:f1: e2:a7:b7:61:9f:b2:6c:b6:47:ad:9a:a7:67:95:79: 05:9a:df:a8:0c:3c:a6:6a:23:c7:40:5c:30:ba:e6: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:68:54:FD:CA:E7:CB:91:B3:40:C1:5D:0D:03:73:2B:00:21:22:E7 X509v3 Authority Key Identifier: keyid:F5:B5:D4:6C:5D:CE:84:47:07:C0:D7:89:60:39:77:CD:1F:E1:EA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/F5B5D46C5DCE844707C0D789603977CD1FE1EAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.191.198.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d6:5f:ca:f8:9f:a0:3a:db:6c:ac:52:44:54:7b:72:9b:67: 57:08:01:0c:e5:cd:e6:0c:36:de:f5:59:ed:90:30:b0:9a:5d: 11:ed:1f:0b:25:4f:f2:0a:09:11:54:49:d2:08:07:b2:b4:50: 92:58:18:49:d1:ce:81:bf:14:09:44:18:f4:f0:dd:ec:ef:34: 82:50:01:51:9b:33:d3:ec:f4:58:95:ad:09:ba:cb:58:54:76: 72:af:19:fa:0e:d3:51:9f:06:03:59:15:6f:d7:27:d4:2d:f5: bc:b9:e2:a1:ca:39:a7:b9:4b:3e:a2:35:da:c2:15:55:92:90: 70:4d:d9:ae:46:ba:bc:9c:c8:6b:a7:8f:74:cb:f2:0f:ea:4a: 56:a8:7a:70:b2:fb:80:ec:34:a3:3b:7c:89:d4:62:a9:e4:98: 16:e0:f3:f4:58:e7:3a:79:d4:85:81:f0:30:75:07:c4:29:44: cf:60:03:8e:05:66:4b:02:8d:e1:f5:5f:b1:1c:3e:98:c3:c8: f3:45:db:b6:86:ac:a2:8e:a6:75:f1:f6:bb:5f:7e:55:ef:75: 1b:cc:8c:f0:33:d9:bd:5f:c2:43:c6:34:aa:e0:21:e3:01:e8: 45:73:bb:2a:fe:de:1a:51:92:b8:8c:bc:21:16:46:9c:4c:cc: 05:14:4f:cd -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUUya6YU6rDsaNVohuWqm7763B2dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCNUQ0NkM1RENFODQ0NzA3QzBENzg5NjAzOTc3Q0Qx RkUxRUFGNjAeFw0yNjA1MDMwMjM4NDRaFw0yNzA1MDIwMjQzNDRaMDMxMTAvBgNV BAMTKDhENjg1NEZEQ0FFN0NCOTFCMzQwQzE1RDBEMDM3MzJCMDAyMTIyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPej0oZ89voxAHGlPI0y3y14i ccHuRzM2eaK0ccIwf7YHlaoOsv145ABZ3RpzinT8RFeham9ova8DG3xq65RwNdSM 96Q3TgEQK18ZH0FZPZE4FJaQJSVGeEuDcAKBKE98d8FrN8ywDSR8C2N6yfgFGOh+ Y3jYpKf5abO4t8NjX9t43k4BDOE7bddL7xrCRXGDl+mnnovKz22/ewb3LHL8VFPD RDkaQBMN7mg+E42UzOsOMknEwvIje8VQ3tHMFZcFJFYgtp00mAmfQlJ3VmLsAlyu D3rPJVVBfmb95Yxt8eKnt2Gfsmy2R62ap2eVeQWa36gMPKZqI8dAXDC65iMrAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQUjWhU/crny5GzQMFdDQNzKwAhIucwHwYDVR0j BBgwFoAU9bXUbF3OhEcHwNeJYDl3zR/h6vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY5ZjhhYTgtODk3MS00ZTUxLThiNTEtODAzYjQ5YjMyYTRmLzAvRjVCNUQ0NkM1 RENFODQ0NzA3QzBENzg5NjAzOTc3Q0QxRkUxRUFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GNUI1RDQ2QzVEQ0U4NDQ3MDdDMEQ3ODk2MDM5NzdDRDFGRTFF QUY2LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc2OWY4YWE4LTg5NzEtNGU1MS04 YjUxLTgwM2I0OWIzMmE0Zi8wLzMxMzYzMDJlMzEzOTMxMmUzMTM5MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTM1Mzcucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgv8YwDQYJ KoZIhvcNAQELBQADggEBAAjWX8r4n6A622ysUkRUe3KbZ1cIAQzlzeYMNt71We2Q MLCaXRHtHwslT/IKCRFUSdIIB7K0UJJYGEnRzoG/FAlEGPTw3ezvNIJQAVGbM9Ps 9FiVrQm6y1hUdnKvGfoO01GfBgNZFW/XJ9Qt9by54qHKOae5Sz6iNdrCFVWSkHBN 2a5GurycyGunj3TL8g/qSlaoenCy+4DsNKM7fInUYqnkmBbg8/RY5zp51IWB8DB1 B8QpRM9gA44FZksCjeH1X7EcPpjDyPNF27aGrKKOpnXx9rtfflXvdRvMjPAz2b1f wkPGNKrgIeMB6EVzuyr+3hpRkriMvCEWRpxMzAUUT80= -----END CERTIFICATE-----Generated at Wed May 13 07:56:14 2026 by rpki-client