$ rpki-client -vvf rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa File: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (raw, json) Hash identifier: EocJEXTX0mSSr7fMVzkhuxkZ+TwRT9I+6KSMP/66yxQ= Subject key identifier: 39:9D:D1:23:44:25:1D:C1:46:6E:32:62:4F:4E:1F:2F:2E:DD:0D:27 Certificate issuer: /CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Certificate serial: 18A192E2CFD4D54E8A068383BCF978E507C376C7 Authority key identifier: 6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa Signing time: Sun 03 May 2026 02:13:39 +0000 ROA not before: Sun 03 May 2026 02:08:39 +0000 ROA not after: Sun 02 May 2027 02:13:39 +0000 asID: 152426 IP address blocks: 157.20.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a1:92:e2:cf:d4:d5:4e:8a:06:83:83:bc:f9:78:e5:07:c3:76:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B995520DD42E2AA6306A898618C472D1D5E4417 Validity Not Before: May 3 02:08:39 2026 GMT Not After : May 2 02:13:39 2027 GMT Subject: CN=399DD12344251DC1466E32624F4E1F2F2EDD0D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:68:a2:4a:70:48:b0:b6:b5:9f:f2:57:45: dd:67:ae:d8:bd:1f:35:e4:23:9a:4b:4b:1f:23:47: 37:75:2c:ba:4a:e3:3c:bd:30:1b:8d:a5:15:25:31: c4:1f:e7:39:ab:aa:01:4a:33:5b:0a:bf:c2:2d:f3: 28:68:42:6f:90:fb:e8:a5:6b:d2:0d:73:36:7a:d9: 84:e8:82:73:60:e2:c9:65:1b:c0:db:ac:4a:6a:8c: f4:fb:37:e4:3d:10:ac:89:85:f8:bc:bd:8e:92:3e: 34:1b:08:0f:94:f8:e5:8d:53:ff:42:9b:7e:0f:86: fe:c8:3a:45:82:01:2e:f8:20:ce:84:82:83:49:1b: 50:5b:c4:da:40:a7:5b:74:68:f9:a0:16:a2:c5:82: c6:28:13:fe:a0:13:bf:9a:f2:cc:f7:21:94:88:bb: 0a:d8:fb:85:c5:e8:93:65:da:36:05:2b:1a:e1:3e: 21:c5:96:6c:76:5a:72:ab:f6:73:8d:1e:92:52:da: 22:dc:02:ed:71:14:64:0e:1e:bc:81:d4:1e:82:9a: 30:cf:44:83:56:ba:1c:c5:b8:06:d6:30:10:ff:b4: f7:a5:ec:fe:ac:b8:c3:c8:56:2a:cb:c1:bb:09:cb: f5:08:03:8e:41:0a:d5:63:88:bc:06:81:16:57:31: 59:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9D:D1:23:44:25:1D:C1:46:6E:32:62:4F:4E:1F:2F:2E:DD:0D:27 X509v3 Authority Key Identifier: keyid:6B:99:55:20:DD:42:E2:AA:63:06:A8:98:61:8C:47:2D:1D:5E:44:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/6B995520DD42E2AA6306A898618C472D1D5E4417.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B995520DD42E2AA6306A898618C472D1D5E4417.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.220.0/23 Signature Algorithm: sha256WithRSAEncryption 94:56:a9:dd:6f:ae:c7:00:82:3a:08:3c:dc:47:c3:89:dd:87: e7:50:c6:30:6d:7f:74:6d:55:de:33:06:26:86:9f:1b:6e:e3: 76:b8:b9:58:26:eb:bb:1f:a9:d4:c4:25:30:94:50:c0:64:d9: 4e:4f:82:c3:26:49:d4:b8:97:5c:8f:bc:bc:c0:35:d5:61:ad: 79:57:5b:e8:df:e9:11:28:54:a4:a7:10:07:17:48:6b:88:c6: d4:03:e1:06:2b:b6:72:8e:ba:79:ee:98:00:82:bc:07:9d:51: a1:06:1e:c0:e0:97:75:fc:55:87:79:2f:2a:57:73:06:05:bb: 1e:c6:bc:94:5a:f0:04:da:3e:a6:d8:49:5e:30:8d:4e:0f:7d: b4:43:4c:46:14:7d:53:fb:2b:80:fc:b1:09:e5:1b:9e:34:05: 1d:e6:18:f7:34:07:16:bf:a1:dd:da:67:f9:15:b6:11:1b:b6: 1e:60:5d:19:f4:91:62:50:d7:ab:a0:53:90:f0:d2:4e:70:7d: 54:91:83:20:4e:5b:a3:70:fe:9a:9d:a8:b4:d9:37:4b:5b:ce: f0:1f:ef:ad:36:3b:62:51:d6:b7:dd:ed:c5:2c:d3:ed:1c:dc: bc:f6:78:ff:59:66:20:45:e1:71:78:3e:5c:9f:cb:f8:b3:65: ab:5b:d7:68 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGKGS4s/U1U6KBoODvPl45QfDdscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5OTU1MjBERDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQx RDVFNDQxNzAeFw0yNjA1MDMwMjA4MzlaFw0yNzA1MDIwMjEzMzlaMDMxMTAvBgNV BAMTKDM5OUREMTIzNDQyNTFEQzE0NjZFMzI2MjRGNEUxRjJGMkVERDBEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutGiiSnBIsLa1n/JXRd1nrti9 HzXkI5pLSx8jRzd1LLpK4zy9MBuNpRUlMcQf5zmrqgFKM1sKv8It8yhoQm+Q++il a9INczZ62YTognNg4sllG8DbrEpqjPT7N+Q9EKyJhfi8vY6SPjQbCA+U+OWNU/9C m34Phv7IOkWCAS74IM6EgoNJG1BbxNpAp1t0aPmgFqLFgsYoE/6gE7+a8sz3IZSI uwrY+4XF6JNl2jYFKxrhPiHFlmx2WnKr9nONHpJS2iLcAu1xFGQOHryB1B6CmjDP RINWuhzFuAbWMBD/tPel7P6suMPIVirLwbsJy/UIA45BCtVjiLwGgRZXMVlBAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUOZ3RI0QlHcFGbjJiT04fLy7dDScwHwYDVR0j BBgwFoAUa5lVIN1C4qpjBqiYYYxHLR1eRBcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGVkZDRjY2ItNDJlMy00YjcyLTkxOTMtZTkxOGU3YjMwNjdkLzAvNkI5OTU1MjBE RDQyRTJBQTYzMDZBODk4NjE4QzQ3MkQxRDVFNDQxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82Qjk5NTUyMERENDJFMkFBNjMwNkE4OTg2MThDNDcyRDFENUU0 NDE3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBlZGQ0Y2NiLTQyZTMtNGI3Mi05 MTkzLWU5MThlN2IzMDY3ZC8wLzMxMzUzNzJlMzIzMDJlMzIzMjMwMmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNTMyMzQzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRTcMA0GCSqG SIb3DQEBCwUAA4IBAQCUVqndb67HAII6CDzcR8OJ3YfnUMYwbX90bVXeMwYmhp8b buN2uLlYJuu7H6nUxCUwlFDAZNlOT4LDJknUuJdcj7y8wDXVYa15V1vo3+kRKFSk pxAHF0hriMbUA+EGK7Zyjrp57pgAgrwHnVGhBh7A4Jd1/FWHeS8qV3MGBbsexryU WvAE2j6m2EleMI1OD320Q0xGFH1T+yuA/LEJ5RueNAUd5hj3NAcWv6Hd2mf5FbYR G7YeYF0Z9JFiUNeroFOQ8NJOcH1UkYMgTlujcP6anai02TdLW87wH++tNjtiUda3 3e3FLNPtHNy89nj/WWYgReFxeD5cn8v4s2WrW9do -----END CERTIFICATE-----Generated at Tue May 12 23:46:06 2026 by rpki-client