$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/3136302e32322e32322e302f32332d3234203d3e20313532383032.roa File: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (raw, json) Hash identifier: FDN+vWqI8jY1TcVA5tnPjA+uJVk6yz1tbuS0ryftIrQ= Subject key identifier: 49:1E:9F:78:6F:D2:8D:DA:D9:87:81:0A:3D:DF:EC:65:3A:42:A7:2C Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 21C379E3FF5BF17DC385D7B4D0017F54057893C3 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/3136302e32322e32322e302f32332d3234203d3e20313532383032.roa Signing time: Tue 14 Apr 2026 18:00:02 +0000 ROA not before: Tue 14 Apr 2026 17:55:02 +0000 ROA not after: Tue 13 Apr 2027 18:00:02 +0000 asID: 152802 IP address blocks: 160.22.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:79:e3:ff:5b:f1:7d:c3:85:d7:b4:d0:01:7f:54:05:78:93:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Apr 14 17:55:02 2026 GMT Not After : Apr 13 18:00:02 2027 GMT Subject: CN=491E9F786FD28DDAD987810A3DDFEC653A42A72C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:49:9e:a1:a8:47:37:f7:0a:93:4b:9e:23: ad:d5:4a:40:c8:dc:5e:e0:11:b6:f6:97:41:76:4b: 18:63:95:26:07:94:14:5a:56:81:60:c9:4b:76:b9: 70:e5:ab:bf:b6:8e:cd:f8:c2:6b:af:b5:a8:f1:92: 0a:5b:a0:cc:9b:5f:2d:cd:60:d6:3d:fe:14:9d:0b: e4:56:c1:84:12:7d:e1:3e:c4:01:36:96:26:df:ec: ad:62:a5:3c:f5:b1:3d:08:48:c2:dc:de:b3:d5:bc: ee:f3:e7:ef:73:37:e6:5d:fc:34:17:42:39:58:ce: 43:7e:a7:50:72:6d:d6:8f:39:bf:4c:67:39:54:ab: 45:56:5e:9b:b8:f9:53:76:f0:ac:39:2b:22:92:b7: 5e:1d:dd:5d:08:85:e6:68:24:4a:91:a7:08:8a:11: 4d:15:c6:56:1b:51:9b:a1:aa:02:b5:3d:1c:85:37: c7:a0:4c:05:5f:c6:fd:7f:78:03:40:e6:ae:94:80: 94:7c:3f:3a:77:01:f4:0a:9e:34:06:40:4c:4f:d0: e3:2b:ec:15:00:8c:95:1b:13:3a:f3:74:96:38:6a: 84:f9:0a:ee:91:cb:c2:db:c1:0e:31:9a:71:d6:20: 8a:2b:5f:b7:8d:53:8e:ba:33:71:bd:98:6e:fe:09: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1E:9F:78:6F:D2:8D:DA:D9:87:81:0A:3D:DF:EC:65:3A:42:A7:2C X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/3136302e32322e32322e302f32332d3234203d3e20313532383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.22.0/23 Signature Algorithm: sha256WithRSAEncryption 50:6e:d8:fc:84:17:8a:b1:44:f2:ce:b3:4b:fa:0c:11:83:cf: 9a:33:3a:a2:ba:83:93:72:34:53:27:dd:6a:41:6f:7f:d1:eb: 98:f0:9a:ea:40:27:ba:1d:1b:02:3d:04:e1:29:f1:d6:77:77: 3a:aa:f1:48:1a:bc:b7:bb:31:f2:6f:f7:f2:86:58:c7:53:66: b2:21:2c:77:31:11:07:12:0f:34:7d:90:32:a4:c0:ba:19:0e: c3:94:b7:e2:2d:0e:f6:be:03:e5:61:fa:53:84:aa:4d:24:a4: 66:85:b7:b5:e6:ea:6d:7b:7c:cc:32:cc:c1:e9:2a:95:37:3e: 09:8c:21:65:73:d8:69:be:b6:c3:32:58:1c:a1:82:44:b0:a8: 13:8f:df:77:82:4c:fb:56:de:04:c0:2d:ae:10:0e:c0:76:4c: b2:d4:a3:c1:6b:b5:9d:3c:c7:27:e4:ac:12:69:05:91:4e:c9: 92:39:2b:ff:7f:b2:e9:a9:8d:15:ef:f7:64:eb:fc:55:d2:fc: b9:0e:eb:d9:4c:bf:a7:da:eb:47:28:23:2a:5d:fe:c0:7a:67: c2:6e:4a:7d:15:c3:b0:1d:40:f6:c6:25:f1:91:2d:91:ed:4e: 1c:70:c8:fa:bf:a3:d3:17:6e:fc:d6:ed:13:de:66:78:d6:2a: 77:66:01:f0 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIcN54/9b8X3Dhde00AF/VAV4k8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNjA0MTQxNzU1MDJaFw0yNzA0MTMxODAwMDJaMDMxMTAvBgNV BAMTKDQ5MUU5Rjc4NkZEMjhEREFEOTg3ODEwQTNEREZFQzY1M0E0MkE3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKWkmeoahHN/cKk0ueI63VSkDI 3F7gEbb2l0F2SxhjlSYHlBRaVoFgyUt2uXDlq7+2js34wmuvtajxkgpboMybXy3N YNY9/hSdC+RWwYQSfeE+xAE2libf7K1ipTz1sT0ISMLc3rPVvO7z5+9zN+Zd/DQX QjlYzkN+p1BybdaPOb9MZzlUq0VWXpu4+VN28Kw5KyKSt14d3V0IheZoJEqRpwiK EU0VxlYbUZuhqgK1PRyFN8egTAVfxv1/eANA5q6UgJR8Pzp3AfQKnjQGQExP0OMr 7BUAjJUbEzrzdJY4aoT5Cu6Ry8LbwQ4xmnHWIIorX7eNU466M3G9mG7+Cd5vAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUSR6feG/SjdrZh4EKPd/sZTpCpywwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmN2QyODk0LWMwNzctNDIxYy1i YzFkLTM3ZDZmOWQ5ODk3ZC8wLzMxMzYzMDJlMzIzMjJlMzIzMjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzUzMjM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWFjANBgkqhkiG 9w0BAQsFAAOCAQEAUG7Y/IQXirFE8s6zS/oMEYPPmjM6orqDk3I0UyfdakFvf9Hr mPCa6kAnuh0bAj0E4Snx1nd3OqrxSBq8t7sx8m/38oZYx1NmsiEsdzERBxIPNH2Q MqTAuhkOw5S34i0O9r4D5WH6U4SqTSSkZoW3tebqbXt8zDLMwekqlTc+CYwhZXPY ab62wzJYHKGCRLCoE4/fd4JM+1beBMAtrhAOwHZMstSjwWu1nTzHJ+SsEmkFkU7J kjkr/3+y6amNFe/3ZOv8VdL8uQ7r2Uy/p9rrRygjKl3+wHpnwm5KfRXDsB1A9sYl 8ZEtke1OHHDI+r+j0xdu/NbtE95meNYqd2YB8A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:35 2026 by rpki-client