$ rpki-client -vvf rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa File: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (raw, json) Hash identifier: 7nMz4s5YYhUtNRJIR+ORKIg42vTypWbintD4uEN6yZw= Subject key identifier: 5F:11:94:AB:4C:49:C0:B8:8C:82:4B:99:13:ED:B2:62:BC:D0:EB:71 Certificate issuer: /CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Certificate serial: 66749C8BB0AAA4C49DB663D967FD46F8C6FE254B Authority key identifier: 2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa Signing time: Sun 03 May 2026 02:58:09 +0000 ROA not before: Sun 03 May 2026 02:53:09 +0000 ROA not after: Sun 02 May 2027 02:58:09 +0000 asID: 152799 IP address blocks: 160.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:74:9c:8b:b0:aa:a4:c4:9d:b6:63:d9:67:fd:46:f8:c6:fe:25:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CE9A084598867F6677FDE09C272DA8D05C480FC Validity Not Before: May 3 02:53:09 2026 GMT Not After : May 2 02:58:09 2027 GMT Subject: CN=5F1194AB4C49C0B88C824B9913EDB262BCD0EB71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:60:20:4f:06:53:a0:43:f8:16:4b:1c:d1: 9a:79:c4:bd:1a:d2:7a:ad:68:ec:63:c7:08:d3:e9: 87:47:a0:67:91:95:7e:86:c9:a5:71:e1:92:40:15: 6b:e0:cd:07:ef:8d:94:fc:e9:04:e8:85:ac:fb:78: 22:97:7d:be:b1:dd:dc:e5:dd:38:8c:43:f6:a2:11: a7:17:f3:1e:26:8f:20:9b:32:89:6e:ea:a1:66:3c: e5:99:4c:fc:a2:fd:e0:b9:a9:be:1f:b5:d3:56:f3: 6f:f3:8b:db:4f:ab:b3:37:e9:7b:7c:0a:68:88:bb: d2:e3:b3:b2:b4:e2:4b:f4:34:bb:18:7b:96:ba:5e: 43:a5:d8:34:9f:b6:62:23:86:0d:20:5f:c9:ac:0b: 68:b3:a4:92:4a:d7:d0:9b:5f:99:12:ee:20:4c:24: af:5d:4a:8a:99:29:64:f6:21:e1:e5:3e:7c:12:8f: db:f3:0d:ac:47:77:c8:9c:78:2c:dd:b0:65:6e:0d: 18:e7:74:29:df:77:a1:b1:38:81:f8:3d:e5:18:65: e8:75:d8:85:92:8e:a4:35:d4:85:c1:69:0f:27:79: 37:3a:05:b7:0d:81:94:20:c0:61:a9:4e:d6:93:cf: 95:e2:93:62:d8:20:b2:29:69:6a:5b:91:12:db:fa: be:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:11:94:AB:4C:49:C0:B8:8C:82:4B:99:13:ED:B2:62:BC:D0:EB:71 X509v3 Authority Key Identifier: keyid:2C:E9:A0:84:59:88:67:F6:67:7F:DE:09:C2:72:DA:8D:05:C4:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2CE9A084598867F6677FDE09C272DA8D05C480FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.244.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8c:c1:58:15:70:f3:fe:5c:73:d2:62:22:39:66:93:38:bf: e4:72:e4:de:f9:c5:a5:29:a3:8a:17:92:35:66:77:4c:6a:ac: 22:56:f0:23:11:d1:14:ee:59:00:b9:69:b9:9c:4d:6f:3a:11: 5c:73:1a:48:74:21:5d:4e:98:93:8d:26:ac:22:01:95:83:83: 3f:16:cb:76:80:88:e4:7a:32:b8:a0:d3:e9:18:30:ca:98:c2: 14:c6:bd:d6:1c:51:fa:5a:3c:2b:73:26:35:a3:10:00:b4:09: 12:9d:ba:6f:e0:ec:53:4e:29:02:74:4f:52:f6:03:fd:4d:19: 52:75:79:f0:de:9b:38:c8:19:12:95:d8:55:97:76:b2:ea:97: 4d:47:fa:8c:98:44:02:ab:2b:32:06:ec:b4:03:e2:1b:23:a8: 4c:d2:01:b1:35:4d:51:43:f3:40:10:3e:3a:ce:29:19:a5:8e: af:a5:7b:5b:6a:85:9c:76:5b:90:10:fc:40:62:8f:8d:10:03: ab:8b:c4:ff:96:95:e8:64:b5:e1:27:77:1b:f2:5a:13:75:62: 2a:aa:b3:d2:33:a8:d9:ef:c6:8b:98:13:0c:80:10:6b:76:0b: e7:e5:da:ea:f6:01:48:55:d1:0e:b6:29:16:a7:a7:91:75:d2: 39:5e:4b:7f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZnSci7CqpMSdtmPZZ/1G+Mb+JUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFOUEwODQ1OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQw NUM0ODBGQzAeFw0yNjA1MDMwMjUzMDlaFw0yNzA1MDIwMjU4MDlaMDMxMTAvBgNV BAMTKDVGMTE5NEFCNEM0OUMwQjg4QzgyNEI5OTEzRURCMjYyQkNEMEVCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqmAgTwZToEP4Fksc0Zp5xL0a 0nqtaOxjxwjT6YdHoGeRlX6GyaVx4ZJAFWvgzQfvjZT86QTohaz7eCKXfb6x3dzl 3TiMQ/aiEacX8x4mjyCbMolu6qFmPOWZTPyi/eC5qb4ftdNW82/zi9tPq7M36Xt8 CmiIu9Ljs7K04kv0NLsYe5a6XkOl2DSftmIjhg0gX8msC2izpJJK19CbX5kS7iBM JK9dSoqZKWT2IeHlPnwSj9vzDaxHd8iceCzdsGVuDRjndCnfd6GxOIH4PeUYZeh1 2IWSjqQ11IXBaQ8neTc6BbcNgZQgwGGpTtaTz5Xik2LYILIpaWpbkRLb+r4bAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXxGUq0xJwLiMgkuZE+2yYrzQ63EwHwYDVR0j BBgwFoAULOmghFmIZ/Znf94JwnLajQXEgPwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTliODE1MmUtYWE4Ni00ZDhhLTgxZGEtZTcxMDg2YjI5NTZjLzAvMkNFOUEwODQ1 OTg4NjdGNjY3N0ZERTA5QzI3MkRBOEQwNUM0ODBGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yQ0U5QTA4NDU5ODg2N0Y2Njc3RkRFMDlDMjcyREE4RDA1QzQ4 MEZDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E5YjgxNTJlLWFhODYtNGQ4YS04 MWRhLWU3MTA4NmIyOTU2Yy8wLzMxMzYzMDJlMzIzMDJlMzIzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBT0MA0GCSqG SIb3DQEBCwUAA4IBAQARjMFYFXDz/lxz0mIiOWaTOL/kcuTe+cWlKaOKF5I1ZndM aqwiVvAjEdEU7lkAuWm5nE1vOhFccxpIdCFdTpiTjSasIgGVg4M/Fst2gIjkejK4 oNPpGDDKmMIUxr3WHFH6WjwrcyY1oxAAtAkSnbpv4OxTTikCdE9S9gP9TRlSdXnw 3ps4yBkSldhVl3ay6pdNR/qMmEQCqysyBuy0A+IbI6hM0gGxNU1RQ/NAED46zikZ pY6vpXtbaoWcdluQEPxAYo+NEAOri8T/lpXoZLXhJ3cb8loTdWIqqrPSM6jZ78aL mBMMgBBrdgvn5drq9gFIVdEOtikWp6eRddI5Xkt/ -----END CERTIFICATE-----Generated at Wed May 13 00:43:39 2026 by rpki-client