$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa File: 3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa (raw, json) Hash identifier: is5WdfvUY1KRmUVaEDtXvqlI2WCzItjy85jNK7qc29s= Subject key identifier: EE:C3:78:AE:3A:93:4F:5D:C0:4B:2E:31:0A:06:99:70:BE:59:EA:0A Certificate issuer: /CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Certificate serial: 2C2DBDD4C9AA033E484B0DB81374FAC883308F94 Authority key identifier: E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa Signing time: Sun 03 May 2026 02:50:45 +0000 ROA not before: Sun 03 May 2026 02:45:45 +0000 ROA not after: Sun 02 May 2027 02:50:45 +0000 asID: 153122 IP address blocks: 160.187.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2d:bd:d4:c9:aa:03:3e:48:4b:0d:b8:13:74:fa:c8:83:30:8f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A Validity Not Before: May 3 02:45:45 2026 GMT Not After : May 2 02:50:45 2027 GMT Subject: CN=EEC378AE3A934F5DC04B2E310A069970BE59EA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:32:a1:0b:d9:de:f5:dd:02:ee:3f:ff:85:ca: 3a:03:bb:22:b6:59:cb:f6:ae:48:f9:37:a5:b4:3b: 49:47:f4:32:d6:88:fa:a6:3e:cf:bc:74:6b:06:4a: d3:04:e5:f8:10:ff:c3:41:0f:0f:df:20:50:4a:d5: ac:5b:e7:a8:e9:a4:31:03:19:16:4b:b0:ab:b6:8d: f4:c6:f2:cb:9a:70:6b:9e:1f:a7:17:fa:c5:17:dd: a1:28:a3:1d:93:0d:43:d6:d1:f7:be:a2:c0:17:fb: cd:d4:95:65:ba:3a:d7:37:d6:35:7e:8e:ac:9a:b6: 1b:08:6c:33:e7:00:ee:00:28:a0:39:7e:6e:2a:9e: af:b1:96:0c:77:a0:f8:f9:0d:d7:eb:06:15:d6:f9: db:d0:2f:10:32:2f:52:7f:97:b6:17:7e:8e:ab:4c: bc:e0:05:75:37:a4:87:96:5c:5f:b0:2c:12:ed:ee: 9d:ab:61:c0:b6:a5:9c:58:15:22:02:77:22:9a:19: a5:12:f3:34:e6:0b:0d:8f:30:22:db:81:f6:19:31: 75:c7:b1:72:f2:af:ab:9e:da:0f:fe:99:7d:08:78: c9:24:c1:39:c5:b4:b7:e8:ff:32:dc:36:c7:61:0b: f9:c3:2c:70:db:32:c1:4f:6a:1c:5c:74:fc:83:63: c6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C3:78:AE:3A:93:4F:5D:C0:4B:2E:31:0A:06:99:70:BE:59:EA:0A X509v3 Authority Key Identifier: keyid:E5:04:3A:05:3B:BA:5B:BD:65:F1:17:C3:80:A8:E5:ED:BB:FB:E9:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E5043A053BBA5BBD65F117C380A8E5EDBBFBE96A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/0/3136302e3138372e3133382e302f32342d3234203d3e20313533313232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.187.138.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:d4:5e:9f:14:d0:eb:0e:70:c6:e5:5b:80:a8:4c:c4:4a:6d: 36:37:9a:c5:e4:cd:57:74:cc:d8:16:b7:00:61:3a:99:08:3e: 31:79:b1:c9:d5:ef:39:38:3b:95:f2:b9:6b:c5:65:ed:d4:fe: 4b:93:49:cb:1a:68:e9:b8:4a:7e:d0:ad:96:49:5f:5c:8d:3f: 9d:8f:88:46:04:16:97:8d:ec:db:ad:5b:62:8c:ea:52:45:96: d0:4a:53:99:c7:55:21:01:24:e9:45:f9:44:2e:8e:1e:27:aa: 89:8b:31:ea:03:ed:4f:28:c2:dd:6e:37:7d:88:b9:85:54:53: 56:3d:98:4a:12:69:12:32:3e:10:52:28:c5:09:cb:fc:65:e5: 11:2e:8b:60:a8:e4:ae:67:03:b5:0f:1a:96:5c:08:83:21:fb: d5:75:eb:57:f2:d3:c2:70:9f:98:fd:2c:84:75:4d:d3:90:29: 15:38:bb:50:21:7d:27:27:b7:0b:34:33:6a:7f:b1:80:3d:4e: 1f:54:11:33:d0:d2:bb:d7:1c:9d:6e:e3:3f:f0:26:6a:53:fd: 3a:b4:1e:20:29:b7:58:93:e5:ee:df:2e:33:1b:a8:60:2c:53: 98:d1:9c:58:1a:f2:74:aa:19:54:5f:df:ba:d8:c5:43:5c:43: 89:95:1d:23 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIULC291MmqAz5ISw24E3T6yIMwj5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUwNDNBMDUzQkJBNUJCRDY1RjExN0MzODBBOEU1RURC QkZCRTk2QTAeFw0yNjA1MDMwMjQ1NDVaFw0yNzA1MDIwMjUwNDVaMDMxMTAvBgNV BAMTKEVFQzM3OEFFM0E5MzRGNURDMDRCMkUzMTBBMDY5OTcwQkU1OUVBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgMqEL2d713QLuP/+FyjoDuyK2 Wcv2rkj5N6W0O0lH9DLWiPqmPs+8dGsGStME5fgQ/8NBDw/fIFBK1axb56jppDED GRZLsKu2jfTG8suacGueH6cX+sUX3aEoox2TDUPW0fe+osAX+83UlWW6Otc31jV+ jqyathsIbDPnAO4AKKA5fm4qnq+xlgx3oPj5DdfrBhXW+dvQLxAyL1J/l7YXfo6r TLzgBXU3pIeWXF+wLBLt7p2rYcC2pZxYFSICdyKaGaUS8zTmCw2PMCLbgfYZMXXH sXLyr6ue2g/+mX0IeMkkwTnFtLfo/zLcNsdhC/nDLHDbMsFPahxcdPyDY8ZZAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU7sN4rjqTT13ASy4xCgaZcL5Z6gowHwYDVR0j BBgwFoAU5QQ6BTu6W71l8RfDgKjl7bv76WowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQyMmY2NDktOTk2OC00OTVkLWJkZjEtN2Q3NjI1NmRhYWQ1LzAvRTUwNDNBMDUz QkJBNUJCRDY1RjExN0MzODBBOEU1RURCQkZCRTk2QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FNTA0M0EwNTNCQkE1QkJENjVGMTE3QzM4MEE4RTVFREJCRkJF OTZBLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhkMjJmNjQ5LTk5NjgtNDk1ZC1i ZGYxLTdkNzYyNTZkYWFkNS8wLzMxMzYzMDJlMzEzODM3MmUzMTMzMzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzMzMTMyMzIucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgu4owDQYJ KoZIhvcNAQELBQADggEBAGzUXp8U0OsOcMblW4CoTMRKbTY3msXkzVd0zNgWtwBh OpkIPjF5scnV7zk4O5XyuWvFZe3U/kuTScsaaOm4Sn7QrZZJX1yNP52PiEYEFpeN 7NutW2KM6lJFltBKU5nHVSEBJOlF+UQujh4nqomLMeoD7U8owt1uN32IuYVUU1Y9 mEoSaRIyPhBSKMUJy/xl5REui2Co5K5nA7UPGpZcCIMh+9V161fy08Jwn5j9LIR1 TdOQKRU4u1AhfScntws0M2p/sYA9Th9UETPQ0rvXHJ1u4z/wJmpT/Tq0HiApt1iT 5e7fLjMbqGAsU5jRnFga8nSqGVRf37rYxUNcQ4mVHSM= -----END CERTIFICATE-----Generated at Wed May 13 03:00:03 2026 by rpki-client