$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa File: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (raw, json) Hash identifier: /qz46uaNZiZaElo7SNYHpcYf2DDIFfi5hKcrQOF6S+s= Subject key identifier: 4F:02:24:83:FF:04:A5:77:7C:00:75:40:08:53:75:5D:62:35:E3:C2 Certificate issuer: /CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Certificate serial: 3DFD453C3A2835E575771F9D8F023C8599BDD46F Authority key identifier: 1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa Signing time: Sun 03 May 2026 03:17:53 +0000 ROA not before: Sun 03 May 2026 03:12:53 +0000 ROA not after: Sun 02 May 2027 03:17:53 +0000 asID: 152798 IP address blocks: 160.22.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fd:45:3c:3a:28:35:e5:75:77:1f:9d:8f:02:3c:85:99:bd:d4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E Validity Not Before: May 3 03:12:53 2026 GMT Not After : May 2 03:17:53 2027 GMT Subject: CN=4F022483FF04A5777C0075400853755D6235E3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:25:c0:7a:f7:7b:bf:1b:46:f2:b1:ff:f5: 62:3c:ba:8c:5d:1b:2f:ba:d2:d7:4a:85:1d:1d:9d: 3a:12:27:17:62:90:b0:73:0e:f4:be:17:bc:4c:82: bb:cb:97:e3:f8:34:51:f5:26:70:51:c3:92:40:9c: 4e:39:b8:31:db:37:a2:c3:fd:74:47:e2:4f:76:ce: 53:97:21:3d:75:e2:9c:0b:75:9b:1b:5e:ae:d4:cd: 3b:5e:72:f5:71:a6:6d:9c:72:33:57:39:f0:a3:03: d0:63:a2:3c:dc:bb:14:eb:cd:76:76:23:75:93:d3: 8f:79:65:5c:19:6c:50:25:b8:c6:b7:32:fb:16:1c: cb:0d:10:55:a0:e4:3f:2c:46:89:51:4c:0f:84:b3: 76:92:f8:a4:1b:3b:b3:64:db:ac:33:26:2a:0a:c2: cb:99:ff:a4:83:2e:4b:01:20:47:26:d6:2b:be:d0: 7c:0e:0f:2f:92:c0:2b:33:d0:e4:9e:e1:bc:e8:0c: ef:e1:f4:c7:34:7a:cd:12:f0:84:61:17:c6:02:97: 64:0e:01:3b:a2:05:08:c4:f4:0f:9c:8e:ae:5a:5b: 08:d9:cc:ab:6e:fd:bc:fd:d7:23:aa:fe:3c:98:b3: 31:7b:81:9b:65:98:f9:c5:03:35:a5:c6:19:f6:b3: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:02:24:83:FF:04:A5:77:7C:00:75:40:08:53:75:5D:62:35:E3:C2 X509v3 Authority Key Identifier: keyid:1B:A7:48:DB:DE:37:8C:4F:7F:2C:E6:A8:1E:5D:40:F8:79:3E:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1BA748DBDE378C4F7F2CE6A81E5D40F8793EAF3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/3136302e32322e33312e302f32342d3234203d3e20313532373938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.31.0/24 Signature Algorithm: sha256WithRSAEncryption b5:03:47:2e:df:ab:2c:1c:91:6f:19:4a:41:d4:bc:ac:ee:06: 1f:56:7c:10:e6:60:15:e3:c0:6d:84:e0:b3:e7:38:1b:7d:13: ea:6e:e4:3b:fe:d8:63:d2:cb:4f:fc:0f:38:e3:b4:77:b6:ed: 35:bc:b5:b4:6c:45:14:fd:69:c3:19:f8:ae:75:8f:d6:96:b6: 75:8a:b3:78:0b:0f:b1:24:ae:1d:77:98:33:c7:f9:fc:2c:a7: 4d:a5:13:42:93:82:c8:0b:1b:5f:7a:a3:88:58:ee:11:e9:07: af:46:b7:e7:bd:69:0a:cc:4c:d9:84:ee:d5:f0:41:94:f2:60: 61:9d:a7:f4:3c:4f:24:97:bd:b4:50:b2:47:cb:84:cf:12:76: 60:8f:74:b7:6e:1d:dc:44:fe:79:b8:ad:25:08:33:da:df:e0: 0a:6c:ef:5f:c8:c8:18:d1:9a:24:42:4a:47:12:3a:62:3d:94: 0a:f1:75:9a:89:7c:c0:60:85:32:eb:6b:39:89:a5:7a:6c:0a: 15:16:60:0a:0e:7b:03:59:2d:dd:4a:f1:cb:0d:d3:75:41:9f: 9c:cc:11:70:cf:a2:55:10:0e:3a:55:ac:3e:2f:11:af:63:5f: f7:5e:54:1f:54:59:3f:f7:47:f8:57:1b:dd:ab:99:36:34:f9: fc:a1:a7:c6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUPf1FPDooNeV1dx+djwI8hZm91G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBNzQ4REJERTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3 OTNFQUYzRTAeFw0yNjA1MDMwMzEyNTNaFw0yNzA1MDIwMzE3NTNaMDMxMTAvBgNV BAMTKDRGMDIyNDgzRkYwNEE1Nzc3QzAwNzU0MDA4NTM3NTVENjIzNUUzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fCXAevd7vxtG8rH/9WI8uoxd Gy+60tdKhR0dnToSJxdikLBzDvS+F7xMgrvLl+P4NFH1JnBRw5JAnE45uDHbN6LD /XRH4k92zlOXIT114pwLdZsbXq7UzTtecvVxpm2ccjNXOfCjA9BjojzcuxTrzXZ2 I3WT0495ZVwZbFAluMa3MvsWHMsNEFWg5D8sRolRTA+Es3aS+KQbO7Nk26wzJioK wsuZ/6SDLksBIEcm1iu+0HwODy+SwCsz0OSe4bzoDO/h9Mc0es0S8IRhF8YCl2QO ATuiBQjE9A+cjq5aWwjZzKtu/bz91yOq/jyYszF7gZtlmPnFAzWlxhn2s6v3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUTwIkg/8EpXd8AHVACFN1XWI148IwHwYDVR0j BBgwFoAUG6dI2943jE9/LOaoHl1A+Hk+rz4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVlZmM0MTMtMjcwOS00ODNlLWEzMTQtYzVkMDY2M2RmOTMyLzAvMUJBNzQ4REJE RTM3OEM0RjdGMkNFNkE4MUU1RDQwRjg3OTNFQUYzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQkE3NDhEQkRFMzc4QzRGN0YyQ0U2QTgxRTVENDBGODc5M0VB RjNFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y1ZWZjNDEzLTI3MDktNDgzZS1h MzE0LWM1ZDA2NjNkZjkzMi8wLzMxMzYzMDJlMzIzMjJlMzMzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAWHzANBgkqhkiG 9w0BAQsFAAOCAQEAtQNHLt+rLByRbxlKQdS8rO4GH1Z8EOZgFePAbYTgs+c4G30T 6m7kO/7YY9LLT/wPOOO0d7btNby1tGxFFP1pwxn4rnWP1pa2dYqzeAsPsSSuHXeY M8f5/CynTaUTQpOCyAsbX3qjiFjuEekHr0a3571pCsxM2YTu1fBBlPJgYZ2n9DxP JJe9tFCyR8uEzxJ2YI90t24d3ET+ebitJQgz2t/gCmzvX8jIGNGaJEJKRxI6Yj2U CvF1mol8wGCFMutrOYmlemwKFRZgCg57A1kt3Urxyw3TdUGfnMwRcM+iVRAOOlWs Pi8Rr2Nf915UH1RZP/dH+Fcb3auZNjT5/KGnxg== -----END CERTIFICATE-----Generated at Wed May 13 04:51:38 2026 by rpki-client