$ rpki-client -vvf rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34352e302f32342d3234203d3e20313532333932.roa File: 3135372e32302e34352e302f32342d3234203d3e20313532333932.roa (raw, json) Hash identifier: PIubzi7VZ2N4uYX3mam6XOmZc4gw31pwt2ndjjqEeIM= Subject key identifier: FA:EB:41:B6:A1:27:53:55:56:16:29:00:06:49:2C:D5:A3:64:79:45 Certificate issuer: /CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Certificate serial: 572AB7DB2096780A152A1E18505DA45479C65EA0 Authority key identifier: 5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34352e302f32342d3234203d3e20313532333932.roa Signing time: Sun 03 May 2026 02:11:15 +0000 ROA not before: Sun 03 May 2026 02:06:15 +0000 ROA not after: Sun 02 May 2027 02:11:15 +0000 asID: 152392 IP address blocks: 157.20.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2a:b7:db:20:96:78:0a:15:2a:1e:18:50:5d:a4:54:79:c6:5e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A1C1ACEC0B674017FFB89F21865BA63FEAAB909 Validity Not Before: May 3 02:06:15 2026 GMT Not After : May 2 02:11:15 2027 GMT Subject: CN=FAEB41B6A12753555616290006492CD5A3647945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:37:28:38:2e:3e:e2:c9:b9:71:4a:9c:cf:d3: 19:bd:0c:59:e9:9e:38:75:70:46:f5:08:f0:3a:25: 4e:12:da:bd:a9:89:a3:17:97:21:38:cc:ce:4c:3a: 6f:ab:3f:10:46:e9:78:70:21:2d:c8:b9:5c:d0:99: dc:bd:34:43:91:aa:92:a3:b7:17:e3:4e:24:a6:8e: df:c6:ce:c0:45:2c:0f:47:21:7b:e0:80:7a:66:1c: 61:2e:05:c7:89:41:01:2a:47:16:cf:38:6c:56:41: e9:9c:53:d0:4d:8e:e5:17:c5:a4:86:3e:78:24:19: df:61:10:5d:08:8c:66:97:37:02:74:d5:09:47:52: 42:34:41:88:72:b3:c3:36:15:7e:4f:5c:d7:26:cc: 5d:d6:63:2e:09:38:2c:ae:db:91:19:af:b7:f2:d5: 2f:4a:12:b9:02:a1:af:31:b3:98:22:52:82:31:1c: c6:d2:43:ad:35:d7:93:75:bd:23:11:47:81:07:79: 17:67:f1:2f:e5:92:2b:07:de:e7:b5:48:52:a0:21: bd:16:28:84:b6:e2:38:4f:9f:9f:71:27:54:5c:3c: 2b:9f:0f:e2:7d:81:88:2a:1b:86:36:88:04:51:37: 10:8f:5a:85:3f:9f:03:c7:ff:79:7c:fc:b6:e7:86: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:41:B6:A1:27:53:55:56:16:29:00:06:49:2C:D5:A3:64:79:45 X509v3 Authority Key Identifier: keyid:5A:1C:1A:CE:C0:B6:74:01:7F:FB:89:F2:18:65:BA:63:FE:AA:B9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/5A1C1ACEC0B674017FFB89F21865BA63FEAAB909.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0588dff7-6a92-4293-8800-b53e2a918aca/0/3135372e32302e34352e302f32342d3234203d3e20313532333932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.45.0/24 Signature Algorithm: sha256WithRSAEncryption 65:7c:74:da:30:9f:f2:33:ec:2a:be:a6:e5:c9:ac:23:6d:23: 67:2c:50:97:db:40:f9:88:7b:21:83:7d:f7:9d:b8:aa:e5:47: 8e:48:36:c2:ab:02:9a:6c:37:61:bb:50:ef:4a:3e:89:b7:ee: 2b:dc:42:79:c5:e4:f9:ab:3b:cb:4b:21:ac:21:55:d9:b1:73: 2d:59:9a:54:cb:54:ee:f0:2d:ae:22:f2:94:57:96:95:88:46: 1d:96:83:73:42:a5:52:3f:ee:41:f1:8b:8d:3c:4b:5f:f9:ef: a4:63:d5:35:86:c6:1a:5a:7b:56:da:b6:fb:0d:43:46:d2:b9: 36:23:ef:ea:24:dc:aa:5a:ce:de:2f:55:e0:58:6f:c8:3c:fe: 3b:5a:c7:98:3c:80:f5:46:5f:f6:08:4e:c1:7a:3e:ac:12:ee: 5e:33:7b:84:89:ad:03:69:3d:b9:53:ac:90:a3:9e:65:6e:db: 99:eb:9c:5d:46:6a:61:1c:f1:cf:18:6f:d2:41:ff:06:86:df: 08:f4:ec:80:89:55:be:cd:84:3b:b7:9b:c5:33:32:ae:09:66: e1:fc:df:26:71:89:17:50:d7:35:8a:e5:08:aa:46:46:3a:a1: 1d:29:69:64:d8:75:2e:c3:e9:0a:10:6f:49:e3:de:ca:91:57: aa:33:48:be -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVyq32yCWeAoVKh4YUF2kVHnGXqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExQzFBQ0VDMEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNG RUFBQjkwOTAeFw0yNjA1MDMwMjA2MTVaFw0yNzA1MDIwMjExMTVaMDMxMTAvBgNV BAMTKEZBRUI0MUI2QTEyNzUzNTU1NjE2MjkwMDA2NDkyQ0Q1QTM2NDc5NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNyg4Lj7iyblxSpzP0xm9DFnp njh1cEb1CPA6JU4S2r2piaMXlyE4zM5MOm+rPxBG6XhwIS3IuVzQmdy9NEORqpKj txfjTiSmjt/GzsBFLA9HIXvggHpmHGEuBceJQQEqRxbPOGxWQemcU9BNjuUXxaSG PngkGd9hEF0IjGaXNwJ01QlHUkI0QYhys8M2FX5PXNcmzF3WYy4JOCyu25EZr7fy 1S9KErkCoa8xs5giUoIxHMbSQ60115N1vSMRR4EHeRdn8S/lkisH3ue1SFKgIb0W KIS24jhPn59xJ1RcPCufD+J9gYgqG4Y2iARRNxCPWoU/nwPH/3l8/LbnhknNAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+utBtqEnU1VWFikABkks1aNkeUUwHwYDVR0j BBgwFoAUWhwazsC2dAF/+4nyGGW6Y/6quQkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDU4OGRmZjctNmE5Mi00MjkzLTg4MDAtYjUzZTJhOTE4YWNhLzAvNUExQzFBQ0VD MEI2NzQwMTdGRkI4OUYyMTg2NUJBNjNGRUFBQjkwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81QTFDMUFDRUMwQjY3NDAxN0ZGQjg5RjIxODY1QkE2M0ZFQUFC OTA5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzA1ODhkZmY3LTZhOTItNDI5My04 ODAwLWI1M2UyYTkxOGFjYS8wLzMxMzUzNzJlMzIzMDJlMzQzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0ULTANBgkqhkiG 9w0BAQsFAAOCAQEAZXx02jCf8jPsKr6m5cmsI20jZyxQl9tA+Yh7IYN99524quVH jkg2wqsCmmw3YbtQ70o+ibfuK9xCecXk+as7y0shrCFV2bFzLVmaVMtU7vAtriLy lFeWlYhGHZaDc0KlUj/uQfGLjTxLX/nvpGPVNYbGGlp7Vtq2+w1DRtK5NiPv6iTc qlrO3i9V4FhvyDz+O1rHmDyA9UZf9ghOwXo+rBLuXjN7hImtA2k9uVOskKOeZW7b meucXUZqYRzxzxhv0kH/BobfCPTsgIlVvs2EO7ebxTMyrglm4fzfJnGJF1DXNYrl CKpGRjqhHSlpZNh1LsPpChBvSePeypFXqjNIvg== -----END CERTIFICATE-----Generated at Wed May 13 08:10:21 2026 by rpki-client