$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa File: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: rrzxlF06KjaeWOab2SfdeYXEnvubBNLCq3WZSBYMU7k= Subject key identifier: 4E:EE:00:F5:0C:CF:BD:53:A0:00:69:9B:B6:DF:09:B4:ED:A6:D6:1D Certificate issuer: /CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Certificate serial: 5A7B6D75027D3114F77F21A203159BE54FFEC0F0 Authority key identifier: A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa Signing time: Sun 03 May 2026 02:13:25 +0000 ROA not before: Sun 03 May 2026 02:08:25 +0000 ROA not after: Sun 02 May 2027 02:13:25 +0000 asID: 138089 IP address blocks: 157.20.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7b:6d:75:02:7d:31:14:f7:7f:21:a2:03:15:9b:e5:4f:fe:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3ECF91698ACD25C4EFB56C39B77F8F514511335 Validity Not Before: May 3 02:08:25 2026 GMT Not After : May 2 02:13:25 2027 GMT Subject: CN=4EEE00F50CCFBD53A000699BB6DF09B4EDA6D61D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:63:ae:1c:9d:e6:a2:3f:91:e1:12:62:c2: 0c:58:f5:28:b6:7a:69:a2:9e:bf:93:e4:0a:2b:1e: a1:8f:0b:58:37:41:c8:fb:41:bc:43:77:99:31:fd: f7:d5:c4:c6:1a:92:ba:db:66:3f:63:16:57:47:06: e2:6a:e4:7c:b5:22:e5:b3:fa:a6:a3:92:d6:04:e1: 1f:ff:47:f7:41:7b:07:05:0d:6e:74:da:c1:2a:be: 8d:a9:dd:84:aa:9a:af:26:ab:91:02:fd:62:f1:3e: 28:c5:6d:28:0d:8b:f9:1f:8e:0b:c7:46:94:27:5c: ea:ff:ee:64:e9:c2:d7:d2:64:23:bf:f0:53:96:a0: 1a:d2:8f:43:f1:8b:fe:31:0b:d8:52:8d:b5:3b:a1: 57:ad:3b:7b:3d:77:e0:db:71:9e:8b:13:1b:95:b3: f0:83:24:71:3c:81:c9:a4:31:59:9c:1e:80:0f:38: c0:36:c4:01:d3:c0:12:f6:1e:7e:46:84:8a:91:75: 63:2a:be:72:a7:29:bf:d5:05:6e:5d:83:3f:da:3f: 05:3c:2d:cd:4c:6b:36:d2:c1:e8:d7:a5:c0:2f:7e: 91:36:a3:47:64:e0:0b:26:14:fa:85:66:9b:2b:83: e6:f4:0e:d0:a3:0b:a4:5d:25:0d:fc:54:87:33:17: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:00:F5:0C:CF:BD:53:A0:00:69:9B:B6:DF:09:B4:ED:A6:D6:1D X509v3 Authority Key Identifier: keyid:A3:EC:F9:16:98:AC:D2:5C:4E:FB:56:C3:9B:77:F8:F5:14:51:13:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A3ECF91698ACD25C4EFB56C39B77F8F514511335.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.252.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:69:3b:ab:e9:f6:df:00:e7:20:1b:f5:5b:7f:85:b6:7a:ce: 1d:4d:b0:43:1b:17:9e:84:8e:98:89:c4:99:07:17:46:34:3c: 66:38:07:34:40:73:d4:67:92:d3:af:d5:10:96:cd:39:6a:73: ed:c3:fa:89:32:ab:1e:3b:de:6f:7c:f6:b1:f6:7e:d9:5a:cf: 82:57:70:ae:de:5d:c7:4d:92:3e:2a:89:57:05:16:a3:98:0c: 04:63:b5:3c:8e:51:88:1d:ed:cc:ea:e6:17:f4:bb:55:2c:db: d5:dc:d3:a6:7f:b8:23:e2:31:dc:4d:f4:e3:b3:49:48:ff:ee: 9f:d8:46:12:09:4a:d5:fe:53:2c:87:aa:6f:74:fa:c4:52:bf: 37:de:3b:61:7c:11:06:9e:aa:b8:44:26:14:d1:39:d4:4a:9a: 82:de:27:b5:10:b5:1a:86:c6:65:5b:48:c5:1e:ae:22:df:96: b9:9d:c6:38:30:5b:a2:58:2d:32:25:75:79:ca:e7:8a:1b:90: f8:c4:62:0b:06:97:ee:26:b5:31:90:7b:4c:b0:9e:d1:a3:ea: 4c:32:b9:d3:f8:62:6e:1e:3c:1a:a0:9c:7f:53:14:cd:78:64: f7:9e:53:13:31:ea:4d:2f:6a:39:ea:79:52:c4:d5:86:7a:90: 55:52:3a:14 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWnttdQJ9MRT3fyGiAxWb5U/+wPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFQ0Y5MTY5OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUx NDUxMTMzNTAeFw0yNjA1MDMwMjA4MjVaFw0yNzA1MDIwMjEzMjVaMDMxMTAvBgNV BAMTKDRFRUUwMEY1MENDRkJENTNBMDAwNjk5QkI2REYwOUI0RURBNkQ2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4PWOuHJ3moj+R4RJiwgxY9Si2 emminr+T5AorHqGPC1g3Qcj7QbxDd5kx/ffVxMYakrrbZj9jFldHBuJq5Hy1IuWz +qajktYE4R//R/dBewcFDW502sEqvo2p3YSqmq8mq5EC/WLxPijFbSgNi/kfjgvH RpQnXOr/7mTpwtfSZCO/8FOWoBrSj0Pxi/4xC9hSjbU7oVetO3s9d+DbcZ6LExuV s/CDJHE8gcmkMVmcHoAPOMA2xAHTwBL2Hn5GhIqRdWMqvnKnKb/VBW5dgz/aPwU8 Lc1MazbSwejXpcAvfpE2o0dk4AsmFPqFZpsrg+b0DtCjC6RdJQ38VIczF2GnAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUTu4A9QzPvVOgAGmbtt8JtO2m1h0wHwYDVR0j BBgwFoAUo+z5Fpis0lxO+1bDm3f49RRREzUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU4ZDU4YTgtZTE5Ny00MTc5LWI3M2MtNjA4ZTA0N2QwOWEzLzAvQTNFQ0Y5MTY5 OEFDRDI1QzRFRkI1NkMzOUI3N0Y4RjUxNDUxMTMzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BM0VDRjkxNjk4QUNEMjVDNEVGQjU2QzM5Qjc3RjhGNTE0NTEx MzM1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlOGQ1OGE4LWUxOTctNDE3OS1i NzNjLTYwOGUwNDdkMDlhMy8wLzMxMzUzNzJlMzIzMDJlMzIzNTMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRT8MA0GCSqG SIb3DQEBCwUAA4IBAQAuaTur6fbfAOcgG/Vbf4W2es4dTbBDGxeehI6YicSZBxdG NDxmOAc0QHPUZ5LTr9UQls05anPtw/qJMqseO95vfPax9n7ZWs+CV3Cu3l3HTZI+ KolXBRajmAwEY7U8jlGIHe3M6uYX9LtVLNvV3NOmf7gj4jHcTfTjs0lI/+6f2EYS CUrV/lMsh6pvdPrEUr833jthfBEGnqq4RCYU0TnUSpqC3ie1ELUahsZlW0jFHq4i 35a5ncY4MFuiWC0yJXV5yueKG5D4xGILBpfuJrUxkHtMsJ7Ro+pMMrnT+GJuHjwa oJx/UxTNeGT3nlMTMepNL2o56nlSxNWGepBVUjoU -----END CERTIFICATE-----Generated at Wed May 13 02:16:02 2026 by rpki-client