$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa File: 3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa (raw, json) Hash identifier: FG7A9MU7fb9tdKd7oBxqaGhx29fl+O14KDwowo1B/f0= Subject key identifier: D2:A3:42:BD:5A:1E:C5:62:83:70:D1:5E:DA:52:B1:B7:AC:30:4F:87 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 1C1C489B1560C5B3D0C3F62B7D2702CE41AAA4B9 Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa Signing time: Tue 01 Sep 2026 11:38:22 +0000 ROA not before: Tue 01 Sep 2026 11:33:22 +0000 ROA not after: Tue 31 Aug 2027 11:38:22 +0000 asID: 151582 IP address blocks: 160.22.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1c:48:9b:15:60:c5:b3:d0:c3:f6:2b:7d:27:02:ce:41:aa:a4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Sep 1 11:33:22 2026 GMT Not After : Aug 31 11:38:22 2027 GMT Subject: CN=D2A342BD5A1EC5628370D15EDA52B1B7AC304F87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1c:b0:c3:7e:5b:b8:1d:67:05:f0:75:5d:1f: 1c:c9:e3:56:a6:ce:16:26:d3:82:86:85:e4:27:06: a0:15:9b:22:0b:89:71:f5:99:e4:f5:c4:66:54:05: ff:f2:3e:90:64:45:b1:90:b7:50:0b:04:5d:a4:27: c0:22:c7:fa:ee:1b:02:6e:fa:b1:6b:db:79:b2:94: 45:8a:87:e2:67:f9:73:04:e5:74:b9:ab:5c:c0:61: b6:6e:c0:fa:73:ef:28:6f:48:76:19:2f:fd:55:32: 02:32:a0:51:88:cb:77:48:32:6c:6c:a9:b7:b0:e5: 58:d2:4e:63:87:fb:6b:a9:63:dc:c3:9a:4b:ff:b2: 20:51:65:1c:3a:aa:75:46:d3:ad:4d:d8:85:18:dd: b0:e8:59:8a:91:b6:6d:bd:15:42:02:36:bc:f6:7d: 1c:8c:ee:28:9c:73:5d:8c:11:c1:26:98:df:ab:34: 10:2b:b1:f9:52:d4:12:3a:bc:71:58:84:0f:83:0b: 05:1a:03:c5:93:e4:07:28:03:63:50:51:fb:dc:a1: 46:b1:e8:fe:6b:1c:be:b7:c3:5a:a8:ca:19:56:0d: 3b:d7:53:6b:9e:bf:c2:f6:16:59:aa:d5:20:8c:16: 07:63:64:73:b0:77:de:34:48:04:5a:ac:c5:67:f7: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A3:42:BD:5A:1E:C5:62:83:70:D1:5E:DA:52:B1:B7:AC:30:4F:87 X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230342e302f32342d3234203d3e20313531353832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.204.0/24 Signature Algorithm: sha256WithRSAEncryption 63:5c:64:70:59:17:42:f3:37:49:3e:62:4f:fa:2c:94:32:9c: 2f:ba:38:c5:b9:65:fe:d1:6e:26:af:8d:23:62:94:de:ad:26: 92:ad:f1:fd:04:ff:94:5e:c0:8c:26:97:b9:dd:d5:b1:80:5c: 39:12:d6:28:20:8c:c0:00:65:e5:58:c8:b2:a3:d5:77:4f:c9: 20:4e:53:42:fe:e5:87:ba:90:77:c3:ad:6b:b6:9d:bd:32:11: 55:52:82:11:cb:99:ce:55:fa:36:9d:47:d2:af:2f:a7:22:ad: ab:3f:22:d0:88:bf:62:06:44:b1:55:70:23:ba:da:70:50:73: 41:78:5c:c4:4b:64:69:79:a7:06:73:40:8a:c5:34:00:f3:07: 39:ef:bf:f3:a7:6f:1b:e9:29:1a:d8:09:18:b4:91:16:dc:ed: a9:ec:ed:30:17:14:5f:a0:8f:37:d7:f0:f7:15:8d:a4:63:f6: 1e:2e:0e:3a:d9:c4:57:ce:9f:28:f3:4c:a9:84:6f:3d:cd:c7: 52:2e:5d:fa:28:ae:b9:55:dd:6b:48:f4:d1:96:eb:5a:27:83: 58:1f:3b:85:43:d6:f2:f7:fb:4d:d7:d1:3d:96:f4:e4:be:41: bc:90:fe:57:0b:5c:6f:06:f4:c4:90:f1:ad:b5:a9:bf:60:ba: fd:e0:eb:2e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHBxImxVgxbPQw/YrfScCzkGqpLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjA5MDExMTMzMjJaFw0yNzA4MzExMTM4MjJaMDMxMTAvBgNV BAMTKEQyQTM0MkJENUExRUM1NjI4MzcwRDE1RURBNTJCMUI3QUMzMDRGODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwHLDDflu4HWcF8HVdHxzJ41am zhYm04KGheQnBqAVmyILiXH1meT1xGZUBf/yPpBkRbGQt1ALBF2kJ8Aix/ruGwJu +rFr23mylEWKh+Jn+XME5XS5q1zAYbZuwPpz7yhvSHYZL/1VMgIyoFGIy3dIMmxs qbew5VjSTmOH+2upY9zDmkv/siBRZRw6qnVG061N2IUY3bDoWYqRtm29FUICNrz2 fRyM7iicc12MEcEmmN+rNBArsflS1BI6vHFYhA+DCwUaA8WT5AcoA2NQUfvcoUax 6P5rHL63w1qoyhlWDTvXU2uev8L2Flmq1SCMFgdjZHOwd940SARarMVn95vhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU0qNCvVoexWKDcNFe2lKxt6wwT4cwHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzljMWI0YzM4LTc3NDctNDVmYy1h NTkwLWNhYzUyMTYzZDUzOC8wLzMxMzYzMDJlMzIzMjJlMzIzMDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbMMA0GCSqG SIb3DQEBCwUAA4IBAQBjXGRwWRdC8zdJPmJP+iyUMpwvujjFuWX+0W4mr40jYpTe rSaSrfH9BP+UXsCMJpe53dWxgFw5EtYoIIzAAGXlWMiyo9V3T8kgTlNC/uWHupB3 w61rtp29MhFVUoIRy5nOVfo2nUfSry+nIq2rPyLQiL9iBkSxVXAjutpwUHNBeFzE S2RpeacGc0CKxTQA8wc577/zp28b6Ska2AkYtJEW3O2p7O0wFxRfoI831/D3FY2k Y/YeLg462cRXzp8o80yphG89zcdSLl36KK65Vd1rSPTRlutaJ4NYHzuFQ9by9/tN 19E9lvTkvkG8kP5XC1xvBvTEkPGttam/YLr94Osu -----END CERTIFICATE-----Generated at Thu Sep 3 17:43:26 2026 by rpki-client