$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa File: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (raw, json) Hash identifier: 4hzEJ9YbAF9buAExFLN+RTSrGCyc9GGfXKqoc6rWOKY= Subject key identifier: 4E:43:B0:48:F9:78:A6:5F:F4:BD:C3:A0:18:80:64:85:4B:F1:44:28 Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 4383F55867E93E07FFAB7F1D3FC01931540CBC05 Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa Signing time: Sun 03 May 2026 02:55:07 +0000 ROA not before: Sun 03 May 2026 02:50:07 +0000 ROA not after: Sun 02 May 2027 02:55:07 +0000 asID: 152836 IP address blocks: 160.22.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:83:f5:58:67:e9:3e:07:ff:ab:7f:1d:3f:c0:19:31:54:0c:bc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: May 3 02:50:07 2026 GMT Not After : May 2 02:55:07 2027 GMT Subject: CN=4E43B048F978A65FF4BDC3A0188064854BF14428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:54:67:c7:2b:91:24:55:d5:7a:89:cc:e4: 90:48:7e:d1:43:c2:73:e7:23:5b:ed:ec:a3:c0:d8: dc:1b:68:21:81:91:db:f5:3d:7d:18:19:93:3c:72: 48:f1:fb:5e:55:5e:4d:1b:f5:eb:1a:86:de:2f:4f: 90:b9:1c:05:ad:2d:1f:0d:3f:93:91:fc:d8:cb:02: 33:84:7c:f7:e5:71:3d:08:99:11:0a:df:fd:cf:92: e3:8c:c6:bb:b1:32:6d:e4:2d:97:9e:3f:32:74:d6: 69:5c:d1:e3:81:56:f1:22:59:b8:87:23:68:f3:9b: 13:1b:e3:53:f1:7b:bc:29:57:52:2e:d9:30:69:18: fc:4b:34:30:44:ed:fe:ed:93:c9:3c:f3:8a:dc:b8: 5d:53:6b:28:be:98:28:00:f1:61:7c:2b:8e:d7:aa: 0f:0e:95:ef:c5:04:db:36:ce:47:4c:5d:a3:8c:aa: 9f:c2:dd:68:d6:8f:b8:41:97:97:d2:3b:84:64:c9: 8c:d2:e1:5d:5c:b0:21:d3:91:c8:b1:77:bd:95:e6: b2:c6:7a:84:7a:c1:39:fc:89:56:12:82:f1:ba:40: 30:04:0e:c8:74:8c:fa:ac:62:fc:1d:0e:78:ae:89: 23:bc:13:3c:5a:2b:d8:b8:63:01:c9:2c:d6:7a:37: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:43:B0:48:F9:78:A6:5F:F4:BD:C3:A0:18:80:64:85:4B:F1:44:28 X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.198.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a4:ca:17:d8:f2:86:cd:cc:65:a3:1b:2f:cd:6f:33:50:f4: 7d:61:4a:80:d2:65:65:83:2c:05:47:05:10:5c:82:06:d3:0d: eb:45:6a:b7:be:61:ed:ee:6a:1f:cc:cf:7b:57:28:fd:cd:1f: c2:c2:2a:79:08:db:c4:0a:8b:80:1e:9c:5e:82:50:72:86:fe: fc:cb:26:b7:e7:e0:91:cb:d3:86:7f:8a:5c:0f:d8:e0:fa:33: d6:92:88:49:2a:ec:c6:2f:08:4a:c9:37:b1:5a:c0:c7:1d:5c: 13:58:18:9b:1f:33:22:bc:b5:fb:53:b7:17:25:61:74:da:cd: e4:0e:4c:8e:29:f9:8c:50:3b:4a:bb:84:a7:a3:c7:e2:93:51: f9:fe:e9:e6:f8:7a:99:83:f0:81:b4:2f:bc:5e:d1:39:96:af: 30:c9:b3:a2:ea:9b:cf:06:79:a8:de:8d:65:19:e2:16:b4:75: ec:21:a6:e3:30:57:f0:a8:98:2b:76:c2:42:8f:46:6d:31:11: fb:ae:2c:22:20:57:38:33:73:40:e0:54:20:53:b8:30:ac:b9: 2b:c4:75:72:26:79:de:af:8a:41:06:6c:fc:fc:50:b4:33:7d: bd:c4:a4:7d:66:da:75:de:95:43:74:57:0c:49:46:bd:ec:52: c6:7e:8f:8b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQ4P1WGfpPgf/q38dP8AZMVQMvAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA1MDMwMjUwMDdaFw0yNzA1MDIwMjU1MDdaMDMxMTAvBgNV BAMTKDRFNDNCMDQ4Rjk3OEE2NUZGNEJEQzNBMDE4ODA2NDg1NEJGMTQ0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXBFRnxyuRJFXVeonM5JBIftFD wnPnI1vt7KPA2NwbaCGBkdv1PX0YGZM8ckjx+15VXk0b9esaht4vT5C5HAWtLR8N P5OR/NjLAjOEfPflcT0ImREK3/3PkuOMxruxMm3kLZeePzJ01mlc0eOBVvEiWbiH I2jzmxMb41Pxe7wpV1Iu2TBpGPxLNDBE7f7tk8k884rcuF1Tayi+mCgA8WF8K47X qg8Ole/FBNs2zkdMXaOMqp/C3WjWj7hBl5fSO4RkyYzS4V1csCHTkcixd72V5rLG eoR6wTn8iVYSgvG6QDAEDsh0jPqsYvwdDniuiSO8EzxaK9i4YwHJLNZ6N1DzAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTkOwSPl4pl/0vcOgGIBkhUvxRCgwHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlmMzBlNGFlLTNlNDctNDU0MC04 MjNjLTUzY2FmMjI2N2IzNi8wLzMxMzYzMDJlMzIzMjJlMzEzOTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbGMA0GCSqG SIb3DQEBCwUAA4IBAQAJpMoX2PKGzcxloxsvzW8zUPR9YUqA0mVlgywFRwUQXIIG 0w3rRWq3vmHt7mofzM97Vyj9zR/Cwip5CNvECouAHpxeglByhv78yya35+CRy9OG f4pcD9jg+jPWkohJKuzGLwhKyTexWsDHHVwTWBibHzMivLX7U7cXJWF02s3kDkyO KfmMUDtKu4Sno8fik1H5/unm+HqZg/CBtC+8XtE5lq8wybOi6pvPBnmo3o1lGeIW tHXsIabjMFfwqJgrdsJCj0ZtMRH7riwiIFc4M3NA4FQgU7gwrLkrxHVyJnner4pB Bmz8/FC0M329xKR9Ztp13pVDdFcMSUa97FLGfo+L -----END CERTIFICATE-----Generated at Wed May 13 10:10:30 2026 by rpki-client