
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS22698.roa
File: AS22698.roa (raw, json)
Hash identifier: Ft5bbtZ6G2tQLsMzXM5tzsN5dg68mXqO8Axkbm/rm9M=
Subject key identifier: 99:C2:BF:E6:9A:7F:56:9C:02:84:96:45:11:3C:19:7D:49:5B:E1:48
Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial: 73F32BA348B1321F2814F01A59B9A0AB1E411F94
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS22698.roa
Signing time: Fri 27 Mar 2026 21:05:10 +0000
ROA not before: Fri 27 Mar 2026 21:00:10 +0000
ROA not after: Fri 26 Mar 2027 21:05:10 +0000
asID: 22698
IP address blocks: 200.31.18.0/24 maxlen: 24
201.234.187.0/24 maxlen: 24
201.234.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 22 Apr 2026 04:33:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:f3:2b:a3:48:b1:32:1f:28:14:f0:1a:59:b9:a0:ab:1e:41:1f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Validity
Not Before: Mar 27 21:00:10 2026 GMT
Not After : Mar 26 21:05:10 2027 GMT
Subject: CN=99C2BFE69A7F569C02849645113C197D495BE148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:22:ae:ce:b1:7b:17:3f:a3:e3:a5:d3:b4:
32:1f:0c:e7:22:1c:15:6c:f7:83:08:54:53:ce:70:
e4:6b:b8:3a:93:93:5f:17:37:f4:c8:38:3f:ec:e6:
24:c4:1e:7d:c7:1e:eb:9b:03:76:e4:60:02:4c:f1:
b3:69:a6:5a:1e:75:77:81:0c:59:18:96:24:bc:b6:
82:42:cd:9c:bf:7a:b6:39:56:a6:27:bd:d4:73:4f:
fc:e6:1d:ea:21:8d:76:a9:5b:6d:f3:f7:b0:d2:06:
78:be:33:9e:04:bd:ba:e8:43:93:c5:18:a1:88:b9:
01:12:54:85:b2:f9:05:c8:d1:fc:19:c6:99:46:0c:
ac:57:37:c6:66:ea:5f:ea:15:ac:4d:d0:1c:94:e4:
1f:82:b5:2f:d6:6a:5d:8e:e9:b4:4b:fe:79:a3:e0:
79:fa:8f:55:e6:f9:ca:d5:4a:5e:8e:98:20:27:b5:
2b:ce:bf:99:29:a8:8b:bc:90:0c:b9:f8:d9:fc:c8:
3e:23:15:06:a4:5e:88:c3:11:7c:35:fb:9d:94:a8:
d0:11:96:b5:6b:09:d5:c8:55:d7:a1:20:cb:82:4a:
8a:01:ca:ba:01:2a:b9:08:13:e7:3c:d7:10:9e:19:
1f:a8:5d:36:d0:6e:94:22:96:c0:97:56:31:7f:7a:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:BF:E6:9A:7F:56:9C:02:84:96:45:11:3C:19:7D:49:5B:E1:48
X509v3 Authority Key Identifier:
keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/AS22698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.18.0/24
201.234.187.0-201.234.188.255
Signature Algorithm: sha256WithRSAEncryption
3d:0b:ed:c3:c5:b3:23:f9:e5:a6:72:0b:df:b8:c9:f5:b3:81:
92:cc:33:5d:bb:10:0d:34:07:44:47:71:e1:c7:b9:ea:19:63:
5c:e8:06:7a:da:25:53:14:57:a6:8e:0d:57:be:d3:a4:16:d0:
b7:a9:88:6f:56:c3:98:be:6d:32:d3:f9:17:0f:eb:6d:3c:af:
f1:9e:f0:25:97:2f:44:43:a9:eb:6b:1b:b0:ba:c6:31:ce:82:
6e:7a:15:ae:e0:d7:7b:cc:72:a6:8c:a7:8f:86:cb:75:39:9e:
c2:75:30:ea:eb:c9:0a:4a:35:5b:2a:0a:3f:09:d1:d3:76:88:
8c:24:ad:59:d5:9c:de:f0:d1:1b:d6:f8:09:e2:d7:ca:f1:57:
77:81:33:e5:be:b3:1d:19:2e:60:46:4c:36:8d:bb:2c:c5:03:
28:31:83:4a:0c:56:82:58:5c:79:d0:0e:d4:9e:70:3a:fe:8a:
ce:a6:41:2d:0b:29:21:25:7a:10:03:d6:e1:f3:b6:b1:bb:13:
18:50:06:ff:db:08:70:a2:fc:2f:d2:e1:99:81:81:1b:50:72:
81:b7:44:24:c3:e8:ba:81:ea:9a:31:a5:c0:4f:f8:44:80:95:
28:ee:ed:68:aa:da:44:e1:3b:4e:33:92:d4:fc:45:e5:ca:96:
43:11:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:30 2026 by rpki-client