$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa File: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (raw, json) Hash identifier: a0teJ5lq1xBgiI5mA8EcJ42YaSmlhBF26ShVqEb+s/8= Subject key identifier: 7C:2A:3C:A0:B2:7A:57:E5:CE:97:3E:E6:7B:CC:43:AA:D8:CE:B8:C7 Certificate issuer: /CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Certificate serial: 15C3E09FFBBBF5D537AA87E7C8484A503FFB8AB7 Authority key identifier: EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa Signing time: Sun 03 May 2026 02:55:06 +0000 ROA not before: Sun 03 May 2026 02:50:06 +0000 ROA not after: Sun 02 May 2027 02:55:06 +0000 asID: 152836 IP address blocks: 160.22.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:c3:e0:9f:fb:bb:f5:d5:37:aa:87:e7:c8:48:4a:50:3f:fb:8a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F Validity Not Before: May 3 02:50:06 2026 GMT Not After : May 2 02:55:06 2027 GMT Subject: CN=7C2A3CA0B27A57E5CE973EE67BCC43AAD8CEB8C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:91:d9:47:10:f4:f7:a4:de:64:5c:d2:a1: 3a:d3:90:c4:6d:cb:78:6f:52:8c:21:8f:59:74:19: 20:f4:36:89:ee:bb:44:93:ac:ac:b6:3d:39:87:3e: fa:73:c5:77:1d:6c:d7:93:2b:68:1a:dc:c1:8c:63: 5a:7f:30:29:7a:f5:53:ac:e2:07:01:cf:46:29:6a: 06:6e:60:64:fe:8f:92:f6:2b:4a:07:f4:15:ba:37: ea:c2:11:5d:ea:8e:b3:46:e3:1e:0e:31:f2:01:b3: 9f:06:20:02:c5:23:cf:bd:13:1e:db:e9:3b:35:3f: d9:a5:88:7f:5f:03:bb:31:22:68:c5:c8:4e:fd:51: 20:1d:cf:60:76:37:8f:d9:a8:51:c4:bf:ac:cf:de: 67:91:d6:1a:e6:85:d1:6e:52:27:9d:d7:36:22:ba: 5e:13:61:97:a4:fe:84:0f:23:9a:ee:d1:df:e1:bf: 76:e9:34:e2:61:cf:ec:4e:30:8e:67:29:47:b8:84: d7:5e:5c:91:66:3a:47:95:88:a4:09:a4:81:7b:90: ab:77:fd:62:1e:d6:a5:75:f1:3c:91:8c:50:80:51: 64:f8:9e:df:ec:6a:5f:48:fe:b0:0e:27:72:42:34: f3:b9:b2:89:a4:06:b3:2a:09:c6:c3:c9:fe:4a:7b: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2A:3C:A0:B2:7A:57:E5:CE:97:3E:E6:7B:CC:43:AA:D8:CE:B8:C7 X509v3 Authority Key Identifier: keyid:EC:5A:E3:6D:AF:9B:DD:77:E6:23:FC:7C:7F:5A:8A:0F:67:FD:71:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EC5AE36DAF9BDD77E623FC7C7F5A8A0F67FD716F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.199.0/24 Signature Algorithm: sha256WithRSAEncryption 88:7b:fd:d9:88:64:68:b5:3c:20:7c:8b:2a:76:4a:7a:43:94: 22:81:ce:a7:e8:88:97:59:ca:12:56:27:44:2b:d2:74:7f:7f: 1f:12:4b:32:c3:c7:f2:39:f3:fc:46:4a:ac:ea:e6:5c:51:d0: 9c:92:ae:7f:88:af:ab:ff:9a:ca:14:33:39:9b:da:e9:00:5d: 90:9f:08:af:48:31:0e:24:16:c8:c1:9e:d5:91:2a:39:1d:60: e8:61:19:37:0a:d6:35:df:6f:6a:91:dc:8c:dd:ed:20:38:2c: d4:b5:15:82:1e:d4:a5:3c:57:18:8b:48:db:a8:1e:1e:1c:ba: db:02:a3:50:10:b1:29:72:52:9c:b2:9e:9d:e0:d0:01:8a:5e: 13:72:4a:9b:6a:5e:57:ac:22:25:01:0b:9b:43:26:8f:fa:a2: aa:2b:61:36:07:94:70:e7:1b:d8:6c:cf:8f:75:2d:10:0f:eb: 84:85:2c:02:9e:2f:c7:d8:3c:b7:88:36:c4:44:60:1e:74:2b: 28:cf:39:90:27:14:b5:86:9f:b6:33:6d:46:9b:29:6f:36:20: 2c:69:2c:1a:12:6d:7c:cd:2d:99:ac:8c:40:96:6b:b3:9c:dd: 20:a7:ce:e0:85:d9:b7:23:10:63:1a:ee:f9:2a:af:ca:ff:aa: 8d:26:86:41 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFcPgn/u79dU3qofnyEhKUD/7ircwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM1QUUzNkRBRjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2 N0ZENzE2RjAeFw0yNjA1MDMwMjUwMDZaFw0yNzA1MDIwMjU1MDZaMDMxMTAvBgNV BAMTKDdDMkEzQ0EwQjI3QTU3RTVDRTk3M0VFNjdCQ0M0M0FBRDhDRUI4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfpHZRxD096TeZFzSoTrTkMRt y3hvUowhj1l0GSD0Nonuu0STrKy2PTmHPvpzxXcdbNeTK2ga3MGMY1p/MCl69VOs 4gcBz0YpagZuYGT+j5L2K0oH9BW6N+rCEV3qjrNG4x4OMfIBs58GIALFI8+9Ex7b 6Ts1P9mliH9fA7sxImjFyE79USAdz2B2N4/ZqFHEv6zP3meR1hrmhdFuUied1zYi ul4TYZek/oQPI5ru0d/hv3bpNOJhz+xOMI5nKUe4hNdeXJFmOkeViKQJpIF7kKt3 /WIe1qV18TyRjFCAUWT4nt/sal9I/rAOJ3JCNPO5somkBrMqCcbDyf5Key4DAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUfCo8oLJ6V+XOlz7me8xDqtjOuMcwHwYDVR0j BBgwFoAU7Frjba+b3XfmI/x8f1qKD2f9cW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWYzMGU0YWUtM2U0Ny00NTQwLTgyM2MtNTNjYWYyMjY3YjM2LzAvRUM1QUUzNkRB RjlCREQ3N0U2MjNGQzdDN0Y1QThBMEY2N0ZENzE2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FQzVBRTM2REFGOUJERDc3RTYyM0ZDN0M3RjVBOEEwRjY3RkQ3 MTZGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzlmMzBlNGFlLTNlNDctNDU0MC04 MjNjLTUzY2FmMjI2N2IzNi8wLzMxMzYzMDJlMzIzMjJlMzEzOTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbHMA0GCSqG SIb3DQEBCwUAA4IBAQCIe/3ZiGRotTwgfIsqdkp6Q5Qigc6n6IiXWcoSVidEK9J0 f38fEksyw8fyOfP8Rkqs6uZcUdCckq5/iK+r/5rKFDM5m9rpAF2QnwivSDEOJBbI wZ7VkSo5HWDoYRk3CtY1329qkdyM3e0gOCzUtRWCHtSlPFcYi0jbqB4eHLrbAqNQ ELEpclKcsp6d4NABil4Tckqbal5XrCIlAQubQyaP+qKqK2E2B5Rw5xvYbM+PdS0Q D+uEhSwCni/H2Dy3iDbERGAedCsozzmQJxS1hp+2M21GmylvNiAsaSwaEm18zS2Z rIxAlmuznN0gp87ghdm3IxBjGu75Kq/K/6qNJoZB -----END CERTIFICATE-----Generated at Wed May 13 10:32:41 2026 by rpki-client