$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa File: 3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa (raw, json) Hash identifier: OPVfnJ03eBGt5CLhKjsxkf52B3mqtPQw9HLHzg+ODMw= Subject key identifier: D9:F2:91:63:EF:5F:0D:B1:62:8A:05:93:CC:11:22:A4:41:10:00:00 Certificate issuer: /CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Certificate serial: 52447711995C301A230E9393E32488F78B65091E Authority key identifier: 1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa Signing time: Sun 03 May 2026 03:07:37 +0000 ROA not before: Sun 03 May 2026 03:02:37 +0000 ROA not after: Sun 02 May 2027 03:07:37 +0000 asID: 152841 IP address blocks: 160.22.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:44:77:11:99:5c:30:1a:23:0e:93:93:e3:24:88:f7:8b:65:09:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274 Validity Not Before: May 3 03:02:37 2026 GMT Not After : May 2 03:07:37 2027 GMT Subject: CN=D9F29163EF5F0DB1628A0593CC1122A441100000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:45:1e:b4:25:99:32:d1:cb:58:8f:97:44:3f: d5:98:83:d9:dd:82:e8:4e:60:d8:be:1d:28:93:64: 8e:62:04:23:9b:01:1f:c6:5e:25:53:44:a8:7b:79: a0:e4:78:fc:01:7b:cc:97:11:67:ba:db:ec:fa:48: f7:c6:7f:61:47:f2:48:f3:fe:38:ad:97:85:86:06: c2:dd:20:30:cc:69:1c:8b:34:80:c2:1b:ad:b8:cc: 2b:54:84:77:ce:c6:74:87:16:fb:17:ee:d9:bf:64: 23:25:eb:2a:ea:4d:26:b7:4c:ce:49:75:26:a8:9a: 14:9b:bb:e1:e7:15:9a:1b:0b:17:91:ef:3d:2f:83: fe:5f:da:23:c8:60:39:25:e0:cd:d8:9b:7e:da:aa: c7:cc:2b:72:83:bd:29:48:48:fe:78:10:ac:3b:2b: 6e:37:4a:69:36:f5:98:25:99:98:6b:17:f8:81:02: 42:71:5b:07:69:94:8b:f3:9d:83:ae:e3:55:25:fe: f4:ef:9c:e3:63:8f:e8:7d:d6:3e:b7:3a:e8:39:20: 40:8c:c2:df:dc:0e:7a:28:62:f0:0b:e7:96:ec:77: 33:5e:5f:69:60:c0:cb:80:b7:8e:23:5b:ea:e7:66: 32:28:a6:42:a2:f7:e6:cb:8e:5b:66:09:1f:97:07: d0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:91:63:EF:5F:0D:B1:62:8A:05:93:CC:11:22:A4:41:10:00:00 X509v3 Authority Key Identifier: keyid:1B:6A:6B:7F:9B:7B:AC:CE:F8:A2:28:54:F7:A4:97:88:D8:FC:E2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1B6A6B7F9B7BACCEF8A22854F7A49788D8FCE274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/0/3136302e32322e3231372e302f32342d3234203d3e20313532383431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.217.0/24 Signature Algorithm: sha256WithRSAEncryption 65:a1:17:83:b1:c0:24:1d:e0:5c:62:25:d0:e1:0c:1c:fa:cb: b6:52:3a:b0:73:b7:a0:5d:ed:97:37:d3:5b:92:78:8f:d4:d8: 4e:9f:42:3f:46:82:03:85:d3:50:30:8b:39:2d:6d:55:bf:9b: 4e:08:a6:98:e0:25:bc:5d:97:7f:93:9b:11:d0:00:db:1a:60: 78:52:6e:20:77:10:08:6e:61:af:ec:19:6c:ce:a1:6f:08:6d: 72:f8:0e:16:59:c5:5a:52:c8:ed:9c:50:94:e1:90:c9:08:ee: 0d:7e:63:c6:e1:be:ce:c4:f3:de:52:a3:5f:46:8f:24:b6:c8: 30:5a:25:5a:0d:20:17:e3:de:e1:13:1b:32:ad:4a:37:e4:1b: c7:16:4e:08:98:35:fe:83:83:8c:a4:b2:cc:9a:b9:0c:37:b6: a2:80:16:ac:d6:e8:fe:25:97:cc:60:3f:cb:19:3f:fb:89:f7: 65:ef:eb:fd:8d:61:a9:45:eb:11:ff:49:c6:49:ef:44:78:20: 54:ae:03:a7:c4:e7:60:81:9d:98:d9:58:6b:d3:ae:6c:0d:cc: 6a:32:ae:53:8e:d4:d7:bf:14:42:82:5f:11:3b:dc:6a:41:a0: d1:35:45:4d:d7:d0:b0:6d:ba:a2:38:e5:e1:d6:c1:de:8a:e7: 08:70:e3:dc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUUkR3EZlcMBojDpOT4ySI94tlCR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI2QTZCN0Y5QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhE OEZDRTI3NDAeFw0yNjA1MDMwMzAyMzdaFw0yNzA1MDIwMzA3MzdaMDMxMTAvBgNV BAMTKEQ5RjI5MTYzRUY1RjBEQjE2MjhBMDU5M0NDMTEyMkE0NDExMDAwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RR60JZky0ctYj5dEP9WYg9nd guhOYNi+HSiTZI5iBCObAR/GXiVTRKh7eaDkePwBe8yXEWe62+z6SPfGf2FH8kjz /jitl4WGBsLdIDDMaRyLNIDCG624zCtUhHfOxnSHFvsX7tm/ZCMl6yrqTSa3TM5J dSaomhSbu+HnFZobCxeR7z0vg/5f2iPIYDkl4M3Ym37aqsfMK3KDvSlISP54EKw7 K243Smk29ZglmZhrF/iBAkJxWwdplIvznYOu41Ul/vTvnONjj+h91j63Oug5IECM wt/cDnooYvAL55bsdzNeX2lgwMuAt44jW+rnZjIopkKi9+bLjltmCR+XB9CvAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU2fKRY+9fDbFiigWTzBEipEEQAAAwHwYDVR0j BBgwFoAUG2prf5t7rM74oihU96SXiNj84nQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzAvMUI2QTZCN0Y5 QjdCQUNDRUY4QTIyODU0RjdBNDk3ODhEOEZDRTI3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQjZBNkI3RjlCN0JBQ0NFRjhBMjI4NTRGN0E0OTc4OEQ4RkNF Mjc0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NlN2Q3MzhlLTJjYzctNGJkMi1i YjI4LTkxNDJlMWJhYTBiYS8wLzMxMzYzMDJlMzIzMjJlMzIzMTM3MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzgzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbZMA0GCSqG SIb3DQEBCwUAA4IBAQBloReDscAkHeBcYiXQ4Qwc+su2Ujqwc7egXe2XN9NbkniP 1NhOn0I/RoIDhdNQMIs5LW1Vv5tOCKaY4CW8XZd/k5sR0ADbGmB4Um4gdxAIbmGv 7BlszqFvCG1y+A4WWcVaUsjtnFCU4ZDJCO4NfmPG4b7OxPPeUqNfRo8ktsgwWiVa DSAX497hExsyrUo35BvHFk4ImDX+g4OMpLLMmrkMN7aigBas1uj+JZfMYD/LGT/7 ifdl7+v9jWGpResR/0nGSe9EeCBUrgOnxOdggZ2Y2Vhr065sDcxqMq5TjtTXvxRC gl8RO9xqQaDRNUVN19CwbbqiOOXh1sHeiucIcOPc -----END CERTIFICATE-----Generated at Wed May 13 02:40:40 2026 by rpki-client