$ rpki-client -vvf rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa File: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (raw, json) Hash identifier: zEzn+j/oAs9F4CAyeoPk5AtHjPA5M7d6z/EhlMBHp5M= Subject key identifier: 8C:F9:97:21:E7:71:C4:CB:22:22:8D:D9:F9:1F:CA:F6:2C:4A:2D:23 Certificate issuer: /CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Certificate serial: 33FE3AA08918D16F966BB105A872BD579AEE63 Authority key identifier: 82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa Signing time: Sun 03 May 2026 02:59:50 +0000 ROA not before: Sun 03 May 2026 02:54:50 +0000 ROA not after: Sun 02 May 2027 02:59:50 +0000 asID: 138077 IP address blocks: 160.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fe:3a:a0:89:18:d1:6f:96:6b:b1:05:a8:72:bd:57:9a:ee:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822159966075595E4F7698AB063AA58F2CE6EFF6 Validity Not Before: May 3 02:54:50 2026 GMT Not After : May 2 02:59:50 2027 GMT Subject: CN=8CF99721E771C4CB22228DD9F91FCAF62C4A2D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:28:3e:b9:8d:b0:a7:77:cd:c6:b4:16:5c: f8:7e:2f:d9:be:95:ca:a6:ca:60:0b:77:56:29:a6: e0:95:6c:bd:92:e1:6b:08:d0:d7:c7:0a:3e:db:0f: b1:ef:f1:a6:85:20:2d:a3:69:6a:13:a9:a1:31:44: 6f:f1:03:61:e7:97:4f:c9:70:e5:09:46:c8:7a:b2: 3d:4f:d3:b7:31:25:c4:67:4b:e4:14:fd:c4:2d:dd: 65:72:a9:c9:87:27:db:45:92:04:51:06:6d:ce:27: 9d:d9:6f:f7:07:69:36:ed:e7:96:13:23:c6:33:c4: 48:08:4e:a7:cc:86:b2:61:70:f9:af:42:43:87:cb: 8a:7a:1c:64:ec:86:ba:f2:b7:cd:a9:24:81:a1:60: 08:1f:96:08:5b:5f:26:c6:a3:cb:0b:c9:c7:c6:8b: d1:07:2c:51:0f:2d:36:ec:d2:76:57:8c:4e:0b:cb: 1c:8d:f8:2a:18:2f:1c:f0:d8:e6:b2:02:25:58:42: 5b:4b:aa:d5:fa:a6:3c:55:4b:36:60:dd:6f:43:a7: 0f:2c:85:64:35:17:41:f1:74:01:b8:2b:fe:7a:cb: 17:28:98:b4:b2:85:3d:ee:65:c2:a2:e9:f8:63:c9: ae:b1:59:b9:53:24:b7:d1:d7:47:6b:c8:2d:19:d5: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F9:97:21:E7:71:C4:CB:22:22:8D:D9:F9:1F:CA:F6:2C:4A:2D:23 X509v3 Authority Key Identifier: keyid:82:21:59:96:60:75:59:5E:4F:76:98:AB:06:3A:A5:8F:2C:E6:EF:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/822159966075595E4F7698AB063AA58F2CE6EFF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/822159966075595E4F7698AB063AA58F2CE6EFF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.222.0/24 Signature Algorithm: sha256WithRSAEncryption 68:c3:96:d1:1a:2f:0a:36:be:af:a3:5b:5c:97:56:18:6c:eb: 1e:8b:7f:58:c2:4a:f1:33:34:a2:a8:22:58:60:d0:59:f9:9e: 29:d3:e7:69:f2:7e:b4:a0:18:92:9c:6a:71:76:d9:a5:66:74: d2:6a:ff:19:4f:f1:6f:c0:57:3f:b1:29:a2:8f:de:1f:c9:e3: 6a:0c:55:34:e1:31:35:ae:aa:e4:df:66:37:b7:10:62:e9:de: 98:26:34:e9:ee:62:af:fa:89:a9:55:99:6c:a5:84:e3:b5:26: d4:1c:94:59:9a:11:ac:7f:75:cf:9f:63:f9:63:92:76:44:3c: 32:ec:67:ca:75:4d:85:5c:e9:29:bc:7f:a8:67:46:79:d7:8f: c7:96:21:8a:20:36:b1:4f:10:a8:f4:37:3e:0c:5f:34:ef:13: 6b:f9:54:0b:2f:80:71:dd:ab:2f:f8:35:6e:00:ca:0b:93:c1: 94:88:f5:e1:af:89:61:f7:24:a3:f3:dd:51:80:a2:2c:d9:ad: db:b6:81:82:68:f7:22:36:71:19:80:38:3e:be:ba:2d:e2:44: b5:1d:00:56:7a:9c:9f:24:4a:b8:4a:41:fb:ae:c8:12:59:7b: 08:45:53:42:95:0a:4e:de:aa:e1:28:38:c6:f0:ab:d2:0d:7d: 7e:80:89:e4 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgITM/46oIkY0W+Wa7EFqHK9V5ruYzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4MjIxNTk5NjYwNzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJD RTZFRkY2MB4XDTI2MDUwMzAyNTQ1MFoXDTI3MDUwMjAyNTk1MFowMzExMC8GA1UE AxMoOENGOTk3MjFFNzcxQzRDQjIyMjI4REQ5RjkxRkNBRjYyQzRBMkQyMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANByKD65jbCnd83GtBZc+H4v2b6V yqbKYAt3Vimm4JVsvZLhawjQ18cKPtsPse/xpoUgLaNpahOpoTFEb/EDYeeXT8lw 5QlGyHqyPU/TtzElxGdL5BT9xC3dZXKpyYcn20WSBFEGbc4nndlv9wdpNu3nlhMj xjPESAhOp8yGsmFw+a9CQ4fLinocZOyGuvK3zakkgaFgCB+WCFtfJsajywvJx8aL 0QcsUQ8tNuzSdleMTgvLHI34KhgvHPDY5rICJVhCW0uq1fqmPFVLNmDdb0OnDyyF ZDUXQfF0Abgr/nrLFyiYtLKFPe5lwqLp+GPJrrFZuVMkt9HXR2vILRnVUGsCAwEA AaOCAjQwggIwMB0GA1UdDgQWBBSM+Zch53HEyyIijdn5H8r2LEotIzAfBgNVHSME GDAWgBSCIVmWYHVZXk92mKsGOqWPLObv9jAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC84MjIxNTk5NjYw NzU1OTVFNEY3Njk4QUIwNjNBQTU4RjJDRTZFRkY2LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzgyMjE1OTk2NjA3NTU5NUU0Rjc2OThBQjA2M0FBNThGMkNFNkVG RjYuY2VyMIGlBggrBgEFBQcBCwSBmDCBlTCBkgYIKwYBBQUHMAuGgYVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvMzEzNjMwMmUzMjMwMmUzMjMyMzIyZTMwMmYzMjM0 MmQzMjM0MjAzZDNlMjAzMTMzMzgzMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgFN4wDQYJKoZI hvcNAQELBQADggEBAGjDltEaLwo2vq+jW1yXVhhs6x6Lf1jCSvEzNKKoIlhg0Fn5 ninT52nyfrSgGJKcanF22aVmdNJq/xlP8W/AVz+xKaKP3h/J42oMVTThMTWuquTf Zje3EGLp3pgmNOnuYq/6ialVmWylhOO1JtQclFmaEax/dc+fY/ljknZEPDLsZ8p1 TYVc6Sm8f6hnRnnXj8eWIYogNrFPEKj0Nz4MXzTvE2v5VAsvgHHdqy/4NW4AyguT wZSI9eGviWH3JKPz3VGAoizZrdu2gYJo9yI2cRmAOD6+ui3iRLUdAFZ6nJ8kSrhK QfuuyBJZewhFU0KVCk7equEoOMbwq9INfX6AieQ= -----END CERTIFICATE-----Generated at Wed May 13 06:27:00 2026 by rpki-client