$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa File: 3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa (raw, json) Hash identifier: V03YYLB7n64oWFaNCyRjfBxyGau7JMeXMeEWbhh6cZk= Subject key identifier: FF:92:CB:6F:83:DA:6C:ED:A8:F5:9F:19:68:86:ED:E6:E7:5E:3C:28 Certificate issuer: /CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Certificate serial: 71F8F3BEA2B523B87D035A4F3047B8091BB7513E Authority key identifier: ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa Signing time: Tue 01 Sep 2026 11:38:36 +0000 ROA not before: Tue 01 Sep 2026 11:33:36 +0000 ROA not after: Tue 31 Aug 2027 11:38:36 +0000 asID: 151582 IP address blocks: 160.22.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f8:f3:be:a2:b5:23:b8:7d:03:5a:4f:30:47:b8:09:1b:b7:51:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED8801C97D629F0D5149E3C88E72600C016E4712 Validity Not Before: Sep 1 11:33:36 2026 GMT Not After : Aug 31 11:38:36 2027 GMT Subject: CN=FF92CB6F83DA6CEDA8F59F196886EDE6E75E3C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:45:cd:3d:81:87:38:32:1d:61:ce:42:95: 8e:75:3c:18:37:40:11:02:fd:55:5b:91:96:f7:dd: a1:0b:d9:db:5d:a6:84:5a:63:82:71:64:b3:1e:13: 2e:5d:98:1a:72:85:56:8b:dc:57:5b:eb:0b:6b:e0: 80:f2:29:c3:03:24:99:f6:c3:e8:db:d1:b7:e2:26: ef:dc:6a:43:ec:f7:86:32:5a:15:f9:35:a2:1c:81: 1a:1f:45:e7:de:12:b8:ba:1b:76:7d:49:08:86:82: 8c:bf:91:c5:59:2e:7d:2e:e3:75:ec:85:44:d4:b9: 4d:2d:b3:78:88:05:26:5b:62:a7:f6:0d:a5:b9:47: e9:9e:98:35:fb:8d:c3:62:88:97:ba:18:0b:b3:b3: 1d:c8:86:74:9d:25:38:6e:ab:2e:43:25:2d:46:21: 94:78:61:48:83:41:5a:30:86:23:c6:e7:36:d1:42: 20:1d:34:74:8d:8e:15:d9:a2:0a:88:80:6e:48:a0: 1a:53:7f:10:2a:8c:e1:38:f1:52:d1:c4:52:b4:db: 61:29:65:35:a8:51:44:1d:59:61:02:5a:99:fb:24: 41:e5:e5:33:84:b7:83:c7:b9:88:99:43:3e:0d:41: 21:64:d7:9e:73:3b:6e:40:ad:1c:e7:a3:64:e7:d3: f2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:92:CB:6F:83:DA:6C:ED:A8:F5:9F:19:68:86:ED:E6:E7:5E:3C:28 X509v3 Authority Key Identifier: keyid:ED:88:01:C9:7D:62:9F:0D:51:49:E3:C8:8E:72:60:0C:01:6E:47:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/ED8801C97D629F0D5149E3C88E72600C016E4712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/ED8801C97D629F0D5149E3C88E72600C016E4712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/3136302e32322e3230352e302f32342d3234203d3e20313531353832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.205.0/24 Signature Algorithm: sha256WithRSAEncryption 25:e8:f2:e4:ae:7c:dd:ab:3f:13:a1:86:82:f2:dc:c9:9a:3d: df:26:93:69:14:0f:1b:bc:3c:54:0e:3f:38:6d:6b:c7:ce:be: d1:d3:7e:fc:e9:c0:91:2c:56:fc:fb:90:48:94:ef:29:f2:55: 98:9d:71:f7:df:ea:1c:bf:a7:dc:9e:f3:47:72:7c:06:ab:aa: 06:28:61:7c:1e:f2:b9:ad:2d:ed:9a:f1:14:e6:18:8f:e3:d7: 13:c2:df:35:bc:e0:ee:91:b3:b3:09:63:53:46:d6:29:b7:5b: 78:7c:25:51:d1:54:15:55:9b:61:f8:87:09:36:92:a5:06:a9: 7d:60:8a:7d:da:84:1f:bb:4a:c9:30:2a:7c:36:01:a9:e8:f2: f2:2c:f6:68:12:b1:1c:a2:66:b9:80:41:7d:47:4d:e1:23:32: df:a8:2b:b7:35:fb:43:83:58:8e:16:cc:50:63:62:1d:17:f6: fc:dc:fa:d4:62:eb:e5:43:e3:76:c6:df:87:3b:a2:4c:2a:5d: 1d:fe:f1:4e:b6:57:cd:73:ca:c6:66:e8:51:e6:0c:65:07:0f: 4b:27:39:47:3c:18:c7:20:c4:70:aa:f9:8d:f9:2b:4c:6c:04: 44:7e:12:1e:c6:db:07:82:b8:d4:45:a9:be:61:c3:d1:f8:1c: 24:b0:81:eb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUcfjzvqK1I7h9A1pPMEe4CRu3UT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ4ODAxQzk3RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMw MTZFNDcxMjAeFw0yNjA5MDExMTMzMzZaFw0yNzA4MzExMTM4MzZaMDMxMTAvBgNV BAMTKEZGOTJDQjZGODNEQTZDRURBOEY1OUYxOTY4ODZFREU2RTc1RTNDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAL0XNPYGHODIdYc5ClY51PBg3 QBEC/VVbkZb33aEL2dtdpoRaY4JxZLMeEy5dmBpyhVaL3Fdb6wtr4IDyKcMDJJn2 w+jb0bfiJu/cakPs94YyWhX5NaIcgRofRefeEri6G3Z9SQiGgoy/kcVZLn0u43Xs hUTUuU0ts3iIBSZbYqf2DaW5R+memDX7jcNiiJe6GAuzsx3IhnSdJThuqy5DJS1G IZR4YUiDQVowhiPG5zbRQiAdNHSNjhXZogqIgG5IoBpTfxAqjOE48VLRxFK022Ep ZTWoUUQdWWECWpn7JEHl5TOEt4PHuYiZQz4NQSFk155zO25ArRzno2Tn0/IVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU/5LLb4PabO2o9Z8ZaIbt5udePCgwHwYDVR0j BBgwFoAU7YgByX1inw1RSePIjnJgDAFuRxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWMxYjRjMzgtNzc0Ny00NWZjLWE1OTAtY2FjNTIxNjNkNTM4LzAvRUQ4ODAxQzk3 RDYyOUYwRDUxNDlFM0M4OEU3MjYwMEMwMTZFNDcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRDg4MDFDOTdENjI5RjBENTE0OUUzQzg4RTcyNjAwQzAxNkU0 NzEyLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzljMWI0YzM4LTc3NDctNDVmYy1h NTkwLWNhYzUyMTYzZDUzOC8wLzMxMzYzMDJlMzIzMjJlMzIzMDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBbNMA0GCSqG SIb3DQEBCwUAA4IBAQAl6PLkrnzdqz8ToYaC8tzJmj3fJpNpFA8bvDxUDj84bWvH zr7R03786cCRLFb8+5BIlO8p8lWYnXH33+ocv6fcnvNHcnwGq6oGKGF8HvK5rS3t mvEU5hiP49cTwt81vODukbOzCWNTRtYpt1t4fCVR0VQVVZth+IcJNpKlBql9YIp9 2oQfu0rJMCp8NgGp6PLyLPZoErEcoma5gEF9R03hIzLfqCu3NftDg1iOFsxQY2Id F/b83PrUYuvlQ+N2xt+HO6JMKl0d/vFOtlfNc8rGZuhR5gxlBw9LJzlHPBjHIMRw qvmN+StMbAREfhIextsHgrjURam+YcPR+BwksIHr -----END CERTIFICATE-----Generated at Thu Sep 3 12:57:23 2026 by rpki-client