$ rpki-client -vvf rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa File: 3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa (raw, json) Hash identifier: vmjqWZXe1WAW716qvYHn6H4tiVZPN9hJplwpeaEOs+c= Subject key identifier: BB:EB:89:6E:57:D4:34:32:98:D8:23:08:05:2B:1B:24:8F:5F:C1:D8 Certificate issuer: /CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Certificate serial: 0AF8AB438B3D803AFF107277ABF1F72327CB6CA4 Authority key identifier: A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa Signing time: Sun 03 May 2026 03:11:54 +0000 ROA not before: Sun 03 May 2026 03:06:54 +0000 ROA not after: Sun 02 May 2027 03:11:54 +0000 asID: 152822 IP address blocks: 160.22.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f8:ab:43:8b:3d:80:3a:ff:10:72:77:ab:f1:f7:23:27:cb:6c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A041DA85A835517127145910FB36AAA5B7CA41F2 Validity Not Before: May 3 03:06:54 2026 GMT Not After : May 2 03:11:54 2027 GMT Subject: CN=BBEB896E57D4343298D82308052B1B248F5FC1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:79:fb:a3:56:7e:1b:53:50:9e:6e:61:62: 53:dc:25:c3:bd:a0:22:f0:17:12:3f:40:bb:61:57: 96:af:af:96:c1:32:ec:2e:12:c1:27:0f:78:f8:45: 6f:94:b4:33:11:d5:9a:01:3d:51:5d:a8:f6:02:0c: bd:48:3d:4d:4b:6a:b0:b8:19:cf:7c:27:d7:18:bc: ae:c7:27:73:0b:7a:bd:4f:cf:7f:26:86:84:d6:02: 37:ff:41:e2:2e:0b:19:d6:31:77:82:98:3a:3b:28: 7e:50:de:c9:57:91:a0:11:0d:d5:47:b4:37:3a:cb: b3:ed:3b:60:40:0e:b3:0b:6a:61:22:d5:c7:5c:55: e0:c6:e8:9c:63:7e:82:eb:dd:a1:eb:3f:1f:81:7f: 37:8c:b7:79:9a:b7:aa:1b:4e:00:6f:2e:7e:7a:f2: 01:2e:dd:c3:9a:77:e2:35:d8:68:bc:cf:8d:06:fa: 44:2b:a2:35:ea:61:39:ac:55:d0:93:ef:e5:dc:be: cf:66:a8:c5:0e:34:64:1a:cf:f6:de:dc:af:06:7c: 31:43:a8:c0:dd:19:95:5a:cc:87:f8:ad:ad:f9:33: 07:71:21:1b:3e:d6:7d:5c:b7:a6:d3:eb:34:81:e4: 9a:20:83:91:46:8f:16:bc:01:a4:7e:f6:02:b1:84: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EB:89:6E:57:D4:34:32:98:D8:23:08:05:2B:1B:24:8F:5F:C1:D8 X509v3 Authority Key Identifier: keyid:A0:41:DA:85:A8:35:51:71:27:14:59:10:FB:36:AA:A5:B7:CA:41:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/A041DA85A835517127145910FB36AAA5B7CA41F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A041DA85A835517127145910FB36AAA5B7CA41F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/df1a0df6-1d3a-4bcc-b3d1-64695f87e37f/0/3136302e32322e3139362e302f32332d3233203d3e20313532383232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.196.0/23 Signature Algorithm: sha256WithRSAEncryption 85:db:b6:5e:a5:51:77:9b:64:b1:24:59:b0:42:d4:13:0d:b6: d5:44:56:44:4b:25:4b:5e:17:45:67:85:d4:2f:59:2f:88:05: f5:7f:26:5c:da:11:3b:ee:93:d4:55:0b:3b:d0:d8:d6:5f:27: d6:2a:1d:d1:5b:2e:8e:5e:3a:ed:a6:88:e0:e9:e4:f5:9c:3a: cb:65:ad:62:ce:5f:8e:92:e9:4c:6d:13:70:89:04:63:ef:98: 3d:cb:69:24:9e:16:b9:fc:7b:f8:4f:49:09:41:78:67:94:d1: f2:07:da:76:80:25:a4:4f:ac:f3:7f:bd:63:d1:f3:ae:ba:ff: d9:a0:b0:02:1d:26:cb:b4:47:19:e0:8d:9c:75:f0:c1:ab:e5: b3:29:58:26:e9:07:4e:4f:15:20:e6:a9:7b:64:c8:f3:fc:a3: 4a:2b:97:71:9a:70:aa:b9:ee:0e:0d:32:b2:80:f7:7e:f4:e1: d6:a1:9e:8a:27:d5:02:0e:2a:ae:e3:3f:68:f3:d2:04:1d:a6: 58:0d:14:d5:21:e5:1c:b9:a1:2b:90:2b:85:9b:97:30:a5:f5: 94:87:66:52:99:db:d2:9e:d8:9e:ec:8e:2a:b7:f1:84:e3:7b: 5d:da:63:84:e9:fc:4a:3f:32:3a:01:45:06:6a:00:9c:f0:8f: c0:20:3e:8f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCvirQ4s9gDr/EHJ3q/H3IyfLbKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA0MURBODVBODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVC N0NBNDFGMjAeFw0yNjA1MDMwMzA2NTRaFw0yNzA1MDIwMzExNTRaMDMxMTAvBgNV BAMTKEJCRUI4OTZFNTdENDM0MzI5OEQ4MjMwODA1MkIxQjI0OEY1RkMxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBnn7o1Z+G1NQnm5hYlPcJcO9 oCLwFxI/QLthV5avr5bBMuwuEsEnD3j4RW+UtDMR1ZoBPVFdqPYCDL1IPU1LarC4 Gc98J9cYvK7HJ3MLer1Pz38mhoTWAjf/QeIuCxnWMXeCmDo7KH5Q3slXkaARDdVH tDc6y7PtO2BADrMLamEi1cdcVeDG6JxjfoLr3aHrPx+BfzeMt3mat6obTgBvLn56 8gEu3cOad+I12Gi8z40G+kQrojXqYTmsVdCT7+Xcvs9mqMUONGQaz/be3K8GfDFD qMDdGZVazIf4ra35MwdxIRs+1n1ct6bT6zSB5Jogg5FGjxa8AaR+9gKxhOzDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUu+uJblfUNDKY2CMIBSsbJI9fwdgwHwYDVR0j BBgwFoAUoEHahag1UXEnFFkQ+zaqpbfKQfIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGYxYTBkZjYtMWQzYS00YmNjLWIzZDEtNjQ2OTVmODdlMzdmLzAvQTA0MURBODVB ODM1NTE3MTI3MTQ1OTEwRkIzNkFBQTVCN0NBNDFGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BMDQxREE4NUE4MzU1MTcxMjcxNDU5MTBGQjM2QUFBNUI3Q0E0 MUYyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmMWEwZGY2LTFkM2EtNGJjYy1i M2QxLTY0Njk1Zjg3ZTM3Zi8wLzMxMzYzMDJlMzIzMjJlMzEzOTM2MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzgzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBbEMA0GCSqG SIb3DQEBCwUAA4IBAQCF27ZepVF3m2SxJFmwQtQTDbbVRFZESyVLXhdFZ4XUL1kv iAX1fyZc2hE77pPUVQs70NjWXyfWKh3RWy6OXjrtpojg6eT1nDrLZa1izl+OkulM bRNwiQRj75g9y2kknha5/Hv4T0kJQXhnlNHyB9p2gCWkT6zzf71j0fOuuv/ZoLAC HSbLtEcZ4I2cdfDBq+WzKVgm6QdOTxUg5ql7ZMjz/KNKK5dxmnCque4ODTKygPd+ 9OHWoZ6KJ9UCDiqu4z9o89IEHaZYDRTVIeUcuaErkCuFm5cwpfWUh2ZSmdvSntie 7I4qt/GE43td2mOE6fxKPzI6AUUGagCc8I/AID6P -----END CERTIFICATE-----Generated at Wed May 13 02:47:57 2026 by rpki-client