$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32332d3233203d3e20313532383036.roa File: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (raw, json) Hash identifier: V+6ICfxJlzIXx0tsJaXlK0qkvR8zksD4IbjFfV4kF/o= Subject key identifier: 9E:35:E7:FE:11:E1:FA:0B:87:2A:D1:64:08:2F:15:63:D8:80:60:D6 Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 2B879DF830E120E4E8825A2FAAFD1F02B46B7F4B Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32332d3233203d3e20313532383036.roa Signing time: Mon 13 Apr 2026 19:00:02 +0000 ROA not before: Mon 13 Apr 2026 18:55:02 +0000 ROA not after: Mon 12 Apr 2027 19:00:02 +0000 asID: 152806 IP address blocks: 160.22.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:87:9d:f8:30:e1:20:e4:e8:82:5a:2f:aa:fd:1f:02:b4:6b:7f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Apr 13 18:55:02 2026 GMT Not After : Apr 12 19:00:02 2027 GMT Subject: CN=9E35E7FE11E1FA0B872AD164082F1563D88060D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:0f:53:61:65:c5:74:4c:b6:81:e2:68:b1: a7:73:14:8e:c5:44:cb:86:a2:e6:32:5c:80:e2:74: 32:3c:8d:1c:45:56:5c:61:9c:84:c9:c6:f3:cd:53: 7e:74:87:70:9a:69:1a:f1:da:81:72:2d:9a:0e:7d: 8b:a8:97:4f:91:14:0b:f7:a1:f9:c0:0f:6c:41:84: 93:0a:57:38:db:41:f9:63:59:9d:c5:17:a0:3f:a3: d4:02:93:aa:8b:29:e2:ad:13:91:bd:bc:6a:3f:ba: 6f:f9:59:c4:57:52:d9:74:5f:50:26:8b:69:16:93: c0:58:c9:64:87:72:6b:ff:5e:4b:4c:95:3c:64:68: 9b:d5:38:da:c1:16:de:a1:cb:a8:c2:90:51:ba:c2: 68:43:73:42:e3:43:fb:86:6a:8d:de:4d:bc:35:3c: 11:89:c9:6c:a8:bd:83:05:94:74:ce:9c:2a:5d:ad: 14:b2:48:c7:7a:16:c3:21:6a:1e:92:a0:03:f8:05: 45:8f:ad:00:47:a5:43:40:7d:28:23:56:f5:51:bb: e0:25:1a:ac:a3:69:9b:92:44:6f:41:59:50:2b:f2: 8e:b0:ce:ff:21:1f:f3:36:4b:0c:86:b2:b4:18:ec: 49:af:31:31:e9:fa:3a:8e:f1:eb:74:ea:a2:89:73: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:E7:FE:11:E1:FA:0B:87:2A:D1:64:08:2F:15:63:D8:80:60:D6 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/3136302e32322e32362e302f32332d3233203d3e20313532383036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.22.26.0/23 Signature Algorithm: sha256WithRSAEncryption 74:a9:69:13:8c:2a:98:41:73:c1:ec:ab:89:4e:e5:0b:21:25: a2:02:9b:9e:71:27:3d:6f:b8:21:eb:42:12:44:e2:ff:34:05: 65:25:1c:a4:40:a7:7b:0b:39:53:4d:d8:16:8c:30:49:7e:40: 6a:7b:08:94:4d:5d:09:74:a9:29:3f:81:32:35:d0:a2:62:34: 9b:07:67:98:3f:89:04:fd:66:f3:67:73:aa:87:41:9b:9b:ad: ff:85:fc:1f:29:b5:dd:a5:e8:c4:97:25:32:21:a5:85:6f:19: 10:78:87:e7:20:47:90:07:58:bd:14:02:57:b3:37:d9:47:8a: 47:8e:5f:7d:ef:fc:10:12:2a:a2:8f:a7:22:e3:57:c1:9e:03: 23:5f:bb:ac:29:af:11:47:7d:24:8b:b5:6a:b2:ec:9e:23:4f: 86:e8:76:5c:6a:34:58:12:e8:7b:20:1e:5c:5d:db:1a:a9:fa: 65:3a:e6:0f:fd:75:50:f5:59:af:a8:b5:8a:25:d3:30:ab:39: 8a:87:4e:b0:05:fc:9e:10:4b:f7:1e:5c:3c:7d:9d:a6:58:cb: 8e:61:49:fd:d4:3c:fa:ba:c4:b3:2d:4e:17:8e:91:38:b7:0b: 4c:c8:db:78:04:5d:0f:ac:f2:6d:46:eb:ef:96:d6:f4:1d:a0: 9b:82:8e:ce -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUK4ed+DDhIOToglovqv0fArRrf0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNjA0MTMxODU1MDJaFw0yNzA0MTIxOTAwMDJaMDMxMTAvBgNV BAMTKDlFMzVFN0ZFMTFFMUZBMEI4NzJBRDE2NDA4MkYxNTYzRDg4MDYwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGg9TYWXFdEy2geJosadzFI7F RMuGouYyXIDidDI8jRxFVlxhnITJxvPNU350h3CaaRrx2oFyLZoOfYuol0+RFAv3 ofnAD2xBhJMKVzjbQfljWZ3FF6A/o9QCk6qLKeKtE5G9vGo/um/5WcRXUtl0X1Am i2kWk8BYyWSHcmv/XktMlTxkaJvVONrBFt6hy6jCkFG6wmhDc0LjQ/uGao3eTbw1 PBGJyWyovYMFlHTOnCpdrRSySMd6FsMhah6SoAP4BUWPrQBHpUNAfSgjVvVRu+Al GqyjaZuSRG9BWVAr8o6wzv8hH/M2SwyGsrQY7EmvMTHp+jqO8et06qKJc4w9AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUnjXn/hHh+guHKtFkCC8VY9iAYNYwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiZGNlMzkxLWE1ZDMtNDExYi1h OTdiLWU4NjJmYmY1NjMxYy8wLzMxMzYzMDJlMzIzMjJlMzIzNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjM4MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaAWGjANBgkqhkiG 9w0BAQsFAAOCAQEAdKlpE4wqmEFzweyriU7lCyElogKbnnEnPW+4IetCEkTi/zQF ZSUcpECnews5U03YFowwSX5AansIlE1dCXSpKT+BMjXQomI0mwdnmD+JBP1m82dz qodBm5ut/4X8Hym13aXoxJclMiGlhW8ZEHiH5yBHkAdYvRQCV7M32UeKR45ffe/8 EBIqoo+nIuNXwZ4DI1+7rCmvEUd9JIu1arLsniNPhuh2XGo0WBLoeyAeXF3bGqn6 ZTrmD/11UPVZr6i1iiXTMKs5iodOsAX8nhBL9x5cPH2dpljLjmFJ/dQ8+rrEsy1O F46ROLcLTMjbeARdD6zybUbr75bW9B2gm4KOzg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:56:39 2026 by rpki-client