$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa File: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (raw, json) Hash identifier: bNudrF44x2izySD0tRS+nFPqbeFunnsrm7up4Eby2bw= Subject key identifier: E6:E5:F3:FC:76:B8:AB:57:80:06:A8:8A:D0:28:5C:37:62:A9:17:22 Certificate issuer: /CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Certificate serial: 497695361FC66680059FEB871BC0F3C26234F5CB Authority key identifier: 88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa Signing time: Sun 03 May 2026 03:02:12 +0000 ROA not before: Sun 03 May 2026 02:57:12 +0000 ROA not after: Sun 02 May 2027 03:02:12 +0000 asID: 152754 IP address blocks: 160.19.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:76:95:36:1f:c6:66:80:05:9f:eb:87:1b:c0:f3:c2:62:34:f5:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8 Validity Not Before: May 3 02:57:12 2026 GMT Not After : May 2 03:02:12 2027 GMT Subject: CN=E6E5F3FC76B8AB578006A88AD0285C3762A91722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e7:6d:e3:a5:bb:37:ec:b3:44:2e:8a:5f:ed: fd:28:fb:83:d4:9c:b1:49:2e:04:6a:5d:b5:71:a8: a8:bc:cb:10:60:0d:96:1e:8c:7d:4a:41:5d:e9:25: 42:14:79:3f:77:a1:26:d9:5f:3a:c1:6d:bd:aa:38: 7b:61:63:3a:1c:76:46:e0:9c:32:f9:21:3f:eb:7e: b2:6a:46:8d:4f:82:b1:b1:17:c0:29:4a:8b:2a:f6: 9c:df:47:9c:2e:da:a3:6b:05:9b:d3:06:c3:a4:c2: f1:8d:9c:7d:04:30:cc:ba:e3:f0:cc:c4:1f:25:7f: 27:c3:23:98:a0:49:f6:b1:a0:03:26:1b:37:9d:14: 34:16:bb:0e:83:d5:06:cf:68:9c:fd:bb:37:9f:f1: 05:a7:ca:a2:93:48:90:ab:ef:71:47:cc:f2:7b:37: 9c:44:6d:de:cc:8f:82:66:f8:4a:11:60:00:f3:d8: 12:25:88:d6:48:1d:58:89:32:31:9c:b1:d0:0e:bb: e8:a3:c0:98:60:a3:b4:e8:46:fb:d3:1c:f7:b0:4a: c1:f4:c1:2f:a6:99:13:78:10:9a:65:fa:45:07:69: 29:52:06:eb:8d:67:c0:d4:16:74:23:87:e6:22:de: 5e:90:75:7a:76:8a:91:ec:02:94:f8:2e:fe:66:7c: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E5:F3:FC:76:B8:AB:57:80:06:A8:8A:D0:28:5C:37:62:A9:17:22 X509v3 Authority Key Identifier: keyid:88:9C:6D:E3:F5:7A:53:47:0E:BB:EA:BC:1C:2D:89:A6:F3:FC:17:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/889C6DE3F57A53470EBBEABC1C2D89A6F3FC17C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/3136302e31392e38342e302f32342d3234203d3e20313532373534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.84.0/24 Signature Algorithm: sha256WithRSAEncryption 29:c6:4e:f9:03:ef:ba:ba:e0:68:98:d2:ce:5b:45:06:85:fb: 2b:77:23:d2:58:e0:62:11:d8:a1:89:4d:b4:01:21:60:c8:f8: 86:7c:76:5e:0e:2c:6e:a8:bf:20:57:50:76:83:26:e0:74:0b: 9f:ad:7c:ab:aa:ce:e3:14:b1:f5:a3:e0:da:d1:0b:5c:19:63: 12:a8:3f:69:c8:e6:68:e0:26:f2:33:ea:e5:54:39:80:f3:1a: fa:80:9b:47:e4:e2:f8:53:59:e3:22:67:2d:14:dd:f6:46:1f: 46:44:15:ea:29:bd:b0:ae:b1:86:dc:5f:dc:b7:52:f4:e1:39: 19:e6:92:76:fb:ae:b9:8f:7f:87:20:07:da:51:67:8b:16:92: af:b9:21:e0:cb:1d:da:29:1e:c3:9e:9e:8b:fe:df:18:40:58: 13:ac:e0:b9:97:1d:a6:55:66:e9:7c:ba:8a:11:4f:80:a4:c7: 9c:c5:5f:4c:d6:d1:8b:61:e5:d5:b0:47:a6:51:c5:2c:da:1c: 26:21:0e:7c:82:19:63:a1:ad:4b:81:49:68:5e:94:2f:f7:e9: d5:18:38:82:11:03:ef:3b:d6:1c:80:b9:fe:92:89:8a:fc:f3: ca:cf:53:00:7c:c1:f0:d0:9e:b3:75:48:64:93:21:57:20:59: 26:07:b4:83 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUSXaVNh/GZoAFn+uHG8DzwmI09cswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5QzZERTNGNTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZG M0ZDMTdDODAeFw0yNjA1MDMwMjU3MTJaFw0yNzA1MDIwMzAyMTJaMDMxMTAvBgNV BAMTKEU2RTVGM0ZDNzZCOEFCNTc4MDA2QTg4QUQwMjg1QzM3NjJBOTE3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe523jpbs37LNELopf7f0o+4PU nLFJLgRqXbVxqKi8yxBgDZYejH1KQV3pJUIUeT93oSbZXzrBbb2qOHthYzocdkbg nDL5IT/rfrJqRo1PgrGxF8ApSosq9pzfR5wu2qNrBZvTBsOkwvGNnH0EMMy64/DM xB8lfyfDI5igSfaxoAMmGzedFDQWuw6D1QbPaJz9uzef8QWnyqKTSJCr73FHzPJ7 N5xEbd7Mj4Jm+EoRYADz2BIliNZIHViJMjGcsdAOu+ijwJhgo7ToRvvTHPewSsH0 wS+mmRN4EJpl+kUHaSlSBuuNZ8DUFnQjh+Yi3l6QdXp2ipHsApT4Lv5mfIapAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU5uXz/Ha4q1eABqiK0ChcN2KpFyIwHwYDVR0j BBgwFoAUiJxt4/V6U0cOu+q8HC2JpvP8F8gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmEwOThmMDAtYTBhMC00YjVjLTllODMtNjA2NzM3MTI4Y2IxLzAvODg5QzZERTNG NTdBNTM0NzBFQkJFQUJDMUMyRDg5QTZGM0ZDMTdDOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODlDNkRFM0Y1N0E1MzQ3MEVCQkVBQkMxQzJEODlBNkYzRkMx N0M4LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2JhMDk4ZjAwLWEwYTAtNGI1Yy05 ZTgzLTYwNjczNzEyOGNiMS8wLzMxMzYzMDJlMzEzOTJlMzgzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKATVDANBgkqhkiG 9w0BAQsFAAOCAQEAKcZO+QPvurrgaJjSzltFBoX7K3cj0ljgYhHYoYlNtAEhYMj4 hnx2Xg4sbqi/IFdQdoMm4HQLn618q6rO4xSx9aPg2tELXBljEqg/acjmaOAm8jPq 5VQ5gPMa+oCbR+Ti+FNZ4yJnLRTd9kYfRkQV6im9sK6xhtxf3LdS9OE5GeaSdvuu uY9/hyAH2lFnixaSr7kh4Msd2ikew56ei/7fGEBYE6zguZcdplVm6Xy6ihFPgKTH nMVfTNbRi2Hl1bBHplHFLNocJiEOfIIZY6GtS4FJaF6UL/fp1Rg4ghED7zvWHIC5 /pKJivzzys9TAHzB8NCes3VIZJMhVyBZJge0gw== -----END CERTIFICATE-----Generated at Wed May 13 04:48:24 2026 by rpki-client