$ rpki-client -vvf rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3234203d3e20313532383136.roa File: 3136302e32322e33342e302f32332d3234203d3e20313532383136.roa (raw, json) Hash identifier: mVg+f0GQa8yORXdjVLeija5QuuIpHHtSMRvf8xSLYBY= Subject key identifier: D1:AD:2F:BA:44:D5:2B:25:73:A3:9D:CB:62:D6:CA:B8:45:6C:2A:4E Certificate issuer: /CN=0A81694898CE419119C35D18D0184407C5732E00 Certificate serial: 0FD68F91898D8864945E4BD05ED679EE81236BE6 Authority key identifier: 0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3234203d3e20313532383136.roa Signing time: Sun 03 May 2026 03:07:03 +0000 ROA not before: Sun 03 May 2026 03:02:03 +0000 ROA not after: Sun 02 May 2027 03:07:03 +0000 asID: 152816 IP address blocks: 160.22.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.crl rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d6:8f:91:89:8d:88:64:94:5e:4b:d0:5e:d6:79:ee:81:23:6b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A81694898CE419119C35D18D0184407C5732E00 Validity Not Before: May 3 03:02:03 2026 GMT Not After : May 2 03:07:03 2027 GMT Subject: CN=D1AD2FBA44D52B2573A39DCB62D6CAB8456C2A4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:a1:78:cc:03:23:06:b6:73:88:96:9e:2a: 9e:e0:bb:a5:1a:c4:b9:08:7f:3e:c3:36:a5:0a:74: 4b:eb:9a:a4:64:38:d0:00:44:ff:86:30:9f:96:85: 4e:d5:b5:ee:36:a8:94:97:20:90:8d:fc:f5:82:d6: c8:96:76:07:47:41:d2:29:97:74:e6:e9:51:a1:41: dd:b7:b7:8c:77:11:c6:4f:38:b7:5c:e8:8d:24:3b: 57:fc:77:4c:25:c3:2d:aa:a8:05:6d:b6:6f:57:10: 87:e5:9b:27:81:28:20:dc:94:88:ef:8c:e8:ca:a2: 60:48:9e:f6:c2:ed:43:53:f4:86:b7:24:07:50:71: 97:b2:41:5c:b8:89:ea:af:52:70:5f:58:48:fc:d7: cb:6d:6d:c7:6c:3a:5c:a0:71:26:dc:65:42:8a:58: 49:1d:fe:ff:ce:b7:47:eb:2f:d5:62:0d:1e:f6:01: 9c:5f:4d:75:19:56:33:07:53:0a:79:c1:e3:d7:e7: c6:5b:47:b6:ec:37:64:54:c1:03:ee:dd:a8:57:2f: bb:f4:95:5e:b8:72:8e:dd:a2:69:22:84:cc:b3:eb: 40:1a:e2:c6:66:3f:68:1c:f5:58:cf:a1:7c:c1:ee: d1:3e:30:e0:2f:e1:f0:54:6d:c1:77:46:23:2d:a9: 07:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AD:2F:BA:44:D5:2B:25:73:A3:9D:CB:62:D6:CA:B8:45:6C:2A:4E X509v3 Authority Key Identifier: keyid:0A:81:69:48:98:CE:41:91:19:C3:5D:18:D0:18:44:07:C5:73:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/0A81694898CE419119C35D18D0184407C5732E00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A81694898CE419119C35D18D0184407C5732E00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cb88a513-debf-4d5c-951b-d9759a092de7/0/3136302e32322e33342e302f32332d3234203d3e20313532383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.34.0/23 Signature Algorithm: sha256WithRSAEncryption a0:8a:f5:b4:00:36:97:9f:11:fb:07:05:f2:a3:98:ff:40:98: e3:4d:5e:df:9f:bd:90:9b:e0:ab:ca:4a:31:ce:c7:0a:34:70: 6a:10:2e:5c:3f:ac:27:fd:c0:d2:0e:a0:ce:dc:db:40:ba:5d: 76:4c:00:23:50:53:bc:fe:ec:77:8e:1b:00:fe:45:ea:4c:27: 06:cf:75:93:6d:1f:e2:ff:3b:f9:34:f3:63:7c:9d:99:4b:b8: 3a:b9:10:a9:eb:87:03:31:65:12:7a:7b:05:45:05:a9:0d:41: 7d:e7:99:85:da:bd:5f:d0:32:ad:be:51:61:69:45:45:92:91: 00:10:19:55:75:22:c9:37:29:55:32:e1:17:87:c2:6e:9f:56: 64:9d:da:70:ee:5a:90:98:e3:2b:21:ab:e7:a7:d1:6b:9c:b0: 26:d1:e2:fb:ce:b7:b0:b5:f0:23:cf:6d:85:8c:db:c6:5d:77: 3a:e5:05:21:96:2d:f9:d0:bd:38:b7:a1:d2:93:92:3c:7e:6a: 6a:34:e1:ee:c6:ef:73:c1:54:9d:d6:05:e4:16:04:29:67:c3: 5f:f5:46:3c:28:9f:e5:10:82:d5:09:19:53:88:fd:8b:ca:7f: c1:c2:fe:1a:f7:11:5c:4f:7a:b8:ad:41:94:29:6b:22:fb:ff: eb:63:83:42 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUD9aPkYmNiGSUXkvQXtZ57oEja+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4MTY5NDg5OENFNDE5MTE5QzM1RDE4RDAxODQ0MDdD NTczMkUwMDAeFw0yNjA1MDMwMzAyMDNaFw0yNzA1MDIwMzA3MDNaMDMxMTAvBgNV BAMTKEQxQUQyRkJBNDRENTJCMjU3M0EzOURDQjYyRDZDQUI4NDU2QzJBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+s6F4zAMjBrZziJaeKp7gu6Ua xLkIfz7DNqUKdEvrmqRkONAARP+GMJ+WhU7Vte42qJSXIJCN/PWC1siWdgdHQdIp l3Tm6VGhQd23t4x3EcZPOLdc6I0kO1f8d0wlwy2qqAVttm9XEIflmyeBKCDclIjv jOjKomBInvbC7UNT9Ia3JAdQcZeyQVy4ieqvUnBfWEj818ttbcdsOlygcSbcZUKK WEkd/v/Ot0frL9ViDR72AZxfTXUZVjMHUwp5wePX58ZbR7bsN2RUwQPu3ahXL7v0 lV64co7domkihMyz60Aa4sZmP2gc9VjPoXzB7tE+MOAv4fBUbcF3RiMtqQdjAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU0a0vukTVKyVzo53LYtbKuEVsKk4wHwYDVR0j BBgwFoAUCoFpSJjOQZEZw10Y0BhEB8VzLgAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2I4OGE1MTMtZGViZi00ZDVjLTk1MWItZDk3NTlhMDkyZGU3LzAvMEE4MTY5NDg5 OENFNDE5MTE5QzM1RDE4RDAxODQ0MDdDNTczMkUwMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTgxNjk0ODk4Q0U0MTkxMTlDMzVEMThEMDE4NDQwN0M1NzMy RTAwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NiODhhNTEzLWRlYmYtNGQ1Yy05 NTFiLWQ5NzU5YTA5MmRlNy8wLzMxMzYzMDJlMzIzMjJlMzMzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWIjANBgkqhkiG 9w0BAQsFAAOCAQEAoIr1tAA2l58R+wcF8qOY/0CY401e35+9kJvgq8pKMc7HCjRw ahAuXD+sJ/3A0g6gztzbQLpddkwAI1BTvP7sd44bAP5F6kwnBs91k20f4v87+TTz Y3ydmUu4OrkQqeuHAzFlEnp7BUUFqQ1BfeeZhdq9X9Ayrb5RYWlFRZKRABAZVXUi yTcpVTLhF4fCbp9WZJ3acO5akJjjKyGr56fRa5ywJtHi+863sLXwI89thYzbxl13 OuUFIZYt+dC9OLeh0pOSPH5qajTh7sbvc8FUndYF5BYEKWfDX/VGPCif5RCC1QkZ U4j9i8p/wcL+GvcRXE96uK1BlClrIvv/62ODQg== -----END CERTIFICATE-----Generated at Wed May 13 03:59:16 2026 by rpki-client