$ rpki-client -vvf rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa File: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (raw, json) Hash identifier: k0EZdwoMKz7RWCS9Zav9T3QIXIMh0ubhBI06Ja5H2Js= Subject key identifier: A1:08:B6:F8:68:72:38:F2:29:6E:9F:78:C9:D3:0D:45:CA:43:EF:20 Certificate issuer: /CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Certificate serial: 0443D68477A5894AC174427D72B30E6258E30F2F Authority key identifier: 3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa Signing time: Sun 03 May 2026 02:51:35 +0000 ROA not before: Sun 03 May 2026 02:46:35 +0000 ROA not after: Sun 02 May 2027 02:51:35 +0000 asID: 140456 IP address blocks: 160.22.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:43:d6:84:77:a5:89:4a:c1:74:42:7d:72:b3:0e:62:58:e3:0f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A3AAC87AB4378730C3C8CFD373E558E1273053C Validity Not Before: May 3 02:46:35 2026 GMT Not After : May 2 02:51:35 2027 GMT Subject: CN=A108B6F8687238F2296E9F78C9D30D45CA43EF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:b4:4b:93:b6:96:36:60:72:8f:ab:a7:45: e7:52:72:6f:cf:1c:4f:34:3b:2c:37:23:b8:33:36: 77:b8:9f:40:45:10:28:a9:f1:bc:2f:54:2d:80:a5: ec:ed:02:c2:b6:40:20:f0:44:5b:0e:65:6f:bb:db: a4:c5:3d:26:75:42:92:ee:8e:de:2c:91:0a:f8:15: a9:02:f1:a0:40:02:9b:2a:f5:e7:b1:af:42:81:07: d0:d2:62:56:a7:db:12:e2:53:69:55:39:af:81:75: bc:3e:30:df:92:57:70:dd:8e:8c:b9:07:4a:23:17: ad:01:41:4c:fc:b8:76:d0:27:40:64:fb:21:14:31: 4c:0f:c2:68:91:4e:cb:17:9a:9e:f1:46:1b:2b:54: 6d:30:c9:8b:a5:b0:61:80:72:ad:46:80:7a:be:da: 7c:64:29:48:89:4f:ce:7b:40:fb:94:97:da:b2:aa: 67:9e:85:35:5f:8e:ff:02:6a:7b:2b:8d:9b:ad:f4: 39:e6:fc:05:78:92:55:8a:79:a0:d9:8f:45:e8:65: b3:e3:df:91:47:b1:68:f5:81:5c:85:a1:b1:c7:36: 13:ff:9c:38:3c:2a:fd:40:9e:21:5b:9b:28:d3:96: ac:0f:59:d4:44:19:4b:3d:8d:d7:e4:97:e5:4b:48: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:08:B6:F8:68:72:38:F2:29:6E:9F:78:C9:D3:0D:45:CA:43:EF:20 X509v3 Authority Key Identifier: keyid:3A:3A:AC:87:AB:43:78:73:0C:3C:8C:FD:37:3E:55:8E:12:73:05:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3A3AAC87AB4378730C3C8CFD373E558E1273053C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.250.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:45:5c:4d:78:57:34:99:9e:98:fb:42:e3:7a:dd:ea:f5:c4: 60:b7:76:07:e9:0c:0c:85:6a:c8:63:fd:53:cb:28:98:4b:d9: f9:f3:ee:10:84:a4:05:bf:6e:62:34:d0:1b:71:0d:17:e7:d7: 76:f4:92:03:52:94:a9:98:4f:10:9b:43:14:d7:9b:dd:10:35: de:ac:c5:fd:ad:5c:32:b0:a0:03:bb:2c:7a:22:ed:d6:33:64: 4e:72:5d:39:f0:ae:19:c8:1b:76:d8:e7:df:c9:bc:44:84:ca: 38:12:92:ec:15:ef:16:30:6b:d3:e6:75:4b:c7:63:3c:6b:cf: d8:97:ea:3e:07:22:d1:90:c5:db:04:77:65:cd:93:96:05:3a: 4c:b4:1a:87:72:f2:cb:24:45:b9:fc:66:8d:da:0b:bc:3c:8e: 88:68:19:fd:39:99:0f:4b:e6:39:b3:15:54:ee:d6:43:98:fa: 77:78:b3:7e:47:90:80:66:e8:0d:89:e1:e0:21:4c:cf:a3:ef: fe:ad:2b:23:03:73:75:cf:71:d4:ce:53:df:78:0f:23:27:60: b1:a5:b4:2a:ef:40:31:2a:a9:f9:41:41:0e:9d:5d:32:a5:fb: 89:9b:be:3b:62:2a:cd:0c:30:bf:68:bf:20:38:26:55:df:a7: df:2e:29:a4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUBEPWhHeliUrBdEJ9crMOYljjDy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EzQUFDODdBQjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUx MjczMDUzQzAeFw0yNjA1MDMwMjQ2MzVaFw0yNzA1MDIwMjUxMzVaMDMxMTAvBgNV BAMTKEExMDhCNkY4Njg3MjM4RjIyOTZFOUY3OEM5RDMwRDQ1Q0E0M0VGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC197RLk7aWNmByj6unRedScm/P HE80Oyw3I7gzNne4n0BFECip8bwvVC2ApeztAsK2QCDwRFsOZW+726TFPSZ1QpLu jt4skQr4FakC8aBAApsq9eexr0KBB9DSYlan2xLiU2lVOa+Bdbw+MN+SV3Ddjoy5 B0ojF60BQUz8uHbQJ0Bk+yEUMUwPwmiRTssXmp7xRhsrVG0wyYulsGGAcq1GgHq+ 2nxkKUiJT857QPuUl9qyqmeehTVfjv8CansrjZut9Dnm/AV4klWKeaDZj0XoZbPj 35FHsWj1gVyFobHHNhP/nDg8Kv1AniFbmyjTlqwPWdREGUs9jdfkl+VLSHrrAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUoQi2+GhyOPIpbp94ydMNRcpD7yAwHwYDVR0j BBgwFoAUOjqsh6tDeHMMPIz9Nz5VjhJzBTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA4YWIxNTctZDgyNy00OWE4LWJiODYtMjhiZTEzMWMzZDI2LzAvM0EzQUFDODdB QjQzNzg3MzBDM0M4Q0ZEMzczRTU1OEUxMjczMDUzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQTNBQUM4N0FCNDM3ODczMEMzQzhDRkQzNzNFNTU4RTEyNzMw NTNDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzkwOGFiMTU3LWQ4MjctNDlhOC1i Yjg2LTI4YmUxMzFjM2QyNi8wLzMxMzYzMDJlMzIzMjJlMzIzNTMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMwMzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBb6MA0GCSqG SIb3DQEBCwUAA4IBAQBeRVxNeFc0mZ6Y+0Ljet3q9cRgt3YH6QwMhWrIY/1TyyiY S9n58+4QhKQFv25iNNAbcQ0X59d29JIDUpSpmE8Qm0MU15vdEDXerMX9rVwysKAD uyx6Iu3WM2ROcl058K4ZyBt22OffybxEhMo4EpLsFe8WMGvT5nVLx2M8a8/Yl+o+ ByLRkMXbBHdlzZOWBTpMtBqHcvLLJEW5/GaN2gu8PI6IaBn9OZkPS+Y5sxVU7tZD mPp3eLN+R5CAZugNieHgIUzPo+/+rSsjA3N1z3HUzlPfeA8jJ2CxpbQq70AxKqn5 QUEOnV0ypfuJm747YirNDDC/aL8gOCZV36ffLimk -----END CERTIFICATE-----Generated at Wed May 13 06:27:24 2026 by rpki-client