@Test
public void testValidateRoleCertificateExtRequestInvalidIP() throws IOException {

    Path path = Paths.get("src/test/resources/athenz_coretech_role_uri_ip.csr");
    String csr = new String(Files.readAllBytes(path));
    X509RoleCertRequest certReq = new X509RoleCertRequest(csr);
    assertFalse(zts.validateRoleCertificateExtRequest(certReq, "user_domain.user1", null, null, "10.20.20.20"));
    // with disabled ip check, we should get success
    zts.verifyCertRequestIP = false;
    assertTrue(zts.validateRoleCertificateExtRequest(certReq, "user_domain.user1", null, null, "10.20.20.20"));
}