$ rpki-client -vvf rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa File: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (raw, json) Hash identifier: ks4tQxKb/HT7mZZsol2xTOY4z3gIixS1lQAzEE6O77U= Subject key identifier: 75:7B:63:77:F6:34:77:3F:A7:04:12:2D:EF:72:B3:15:11:F1:35:C5 Certificate issuer: /CN=D6344C556CB88A244AE43DD23D620550C754F24F Certificate serial: 3270592677C25BBF85147F5328A1254F4F467F9F Authority key identifier: D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa Signing time: Sun 03 May 2026 02:15:43 +0000 ROA not before: Sun 03 May 2026 02:10:43 +0000 ROA not after: Sun 02 May 2027 02:15:43 +0000 asID: 152409 IP address blocks: 157.20.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:70:59:26:77:c2:5b:bf:85:14:7f:53:28:a1:25:4f:4f:46:7f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6344C556CB88A244AE43DD23D620550C754F24F Validity Not Before: May 3 02:10:43 2026 GMT Not After : May 2 02:15:43 2027 GMT Subject: CN=757B6377F634773FA704122DEF72B31511F135C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:85:12:18:6e:27:a6:fd:9c:97:28:00:0e:57: 60:2b:d7:29:3a:41:8a:b0:82:a3:5c:b9:8e:03:bc: 3f:ca:52:2d:6a:18:7b:3d:6c:d7:26:41:4c:0a:25: b3:8c:e9:67:30:d4:ed:5c:fa:a3:6b:82:ea:2a:4f: bc:a6:fe:58:fd:3a:22:e1:79:e7:de:fd:f8:ac:9a: 9b:87:8f:4a:3f:f9:b6:0a:70:94:fb:78:f5:51:24: 5b:17:21:f0:78:c6:a3:b6:10:d9:86:82:3a:f5:01: 74:97:a1:f9:91:88:a8:fe:4f:b6:69:da:ec:bc:b4: 4e:d4:42:ee:e7:32:78:e8:ff:63:2e:0e:0c:0d:84: 7f:3f:e7:6c:ea:b9:a7:88:f3:04:69:6d:9c:de:f1: 65:b8:96:f0:f7:c0:21:9b:94:54:0c:dc:8f:63:66: 21:16:01:8c:9e:88:2f:39:31:c8:29:12:6d:94:f4: fa:b3:70:09:b0:2d:02:09:38:49:9a:90:4f:01:70: 63:86:8c:e3:25:59:c7:85:47:78:84:24:fe:f0:29: 3a:f3:61:37:95:c4:47:b3:e3:f2:d3:ea:43:38:11: 12:e4:e1:6f:50:04:34:d4:7f:11:33:19:a6:eb:89: 77:36:c0:b5:9f:50:35:29:22:9e:ba:0f:53:4d:0b: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7B:63:77:F6:34:77:3F:A7:04:12:2D:EF:72:B3:15:11:F1:35:C5 X509v3 Authority Key Identifier: keyid:D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/3135372e32302e39342e302f32342d3234203d3e20313532343039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.94.0/24 Signature Algorithm: sha256WithRSAEncryption 36:87:c6:e1:8e:d0:c3:85:bb:e8:7e:23:5c:d2:8c:65:8c:53: 44:82:1e:e2:46:ae:a6:80:13:0f:b9:54:cd:61:33:31:85:98: 49:41:08:cb:70:9b:88:b0:f4:72:dc:b1:fb:53:9d:e9:34:9f: da:c7:4d:93:9b:9a:01:73:02:6f:a6:da:b3:12:b1:6b:4b:99: d9:ee:28:83:b7:cf:16:b2:14:c6:e7:f0:a3:88:cc:18:6a:7f: b4:77:21:bf:93:fa:05:db:35:93:f1:7f:d6:1b:ca:d9:18:17: 41:d4:bd:e3:45:93:06:66:55:d9:55:61:a0:61:54:fe:16:37: a6:f7:da:95:2c:0e:b5:24:eb:98:b0:75:91:d1:ff:ea:c6:18: 4c:4b:19:ff:91:43:cb:8c:20:a5:ae:71:b3:c0:f7:88:0c:7b: 78:92:67:18:a7:80:46:e1:69:f6:83:62:2a:5f:44:21:ec:18: ed:80:fc:41:fe:dd:88:ee:03:75:8d:07:98:e2:4b:a5:57:5a: 5b:08:4b:bf:c3:5d:36:99:e1:31:e3:1c:2e:c5:63:f7:63:23: 0b:e6:e1:d8:ea:3f:55:32:5e:4c:40:09:d1:a4:55:fd:a5:82: da:76:74:9e:42:82:d1:6b:48:64:49:c6:d7:7a:0a:98:ba:26: 7f:b0:b0:f4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMnBZJnfCW7+FFH9TKKElT09Gf58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBD NzU0RjI0RjAeFw0yNjA1MDMwMjEwNDNaFw0yNzA1MDIwMjE1NDNaMDMxMTAvBgNV BAMTKDc1N0I2Mzc3RjYzNDc3M0ZBNzA0MTIyREVGNzJCMzE1MTFGMTM1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6hRIYbiem/ZyXKAAOV2Ar1yk6 QYqwgqNcuY4DvD/KUi1qGHs9bNcmQUwKJbOM6Wcw1O1c+qNrguoqT7ym/lj9OiLh eefe/fismpuHj0o/+bYKcJT7ePVRJFsXIfB4xqO2ENmGgjr1AXSXofmRiKj+T7Zp 2uy8tE7UQu7nMnjo/2MuDgwNhH8/52zquaeI8wRpbZze8WW4lvD3wCGblFQM3I9j ZiEWAYyeiC85McgpEm2U9PqzcAmwLQIJOEmakE8BcGOGjOMlWceFR3iEJP7wKTrz YTeVxEez4/LT6kM4ERLk4W9QBDTUfxEzGabriXc2wLWfUDUpIp66D1NNCzX1AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUdXtjd/Y0dz+nBBIt73KzFRHxNcUwHwYDVR0j BBgwFoAU1jRMVWy4iiRK5D3SPWIFUMdU8k8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcyZDE3NTItNDg1My00Yzc0LWI1NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2 Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBDNzU0RjI0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjM0NEM1NTZDQjg4QTI0NEFFNDNERDIzRDYyMDU1MEM3NTRG MjRGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE3MmQxNzUyLTQ4NTMtNGM3NC1i NTc0LTk5NGQzYjEyNDA5MC8wLzMxMzUzNzJlMzIzMDJlMzkzNDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM0MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0UXjANBgkqhkiG 9w0BAQsFAAOCAQEANofG4Y7Qw4W76H4jXNKMZYxTRIIe4kaupoATD7lUzWEzMYWY SUEIy3CbiLD0ctyx+1Od6TSf2sdNk5uaAXMCb6basxKxa0uZ2e4og7fPFrIUxufw o4jMGGp/tHchv5P6Bds1k/F/1hvK2RgXQdS940WTBmZV2VVhoGFU/hY3pvfalSwO tSTrmLB1kdH/6sYYTEsZ/5FDy4wgpa5xs8D3iAx7eJJnGKeARuFp9oNiKl9EIewY 7YD8Qf7diO4DdY0HmOJLpVdaWwhLv8NdNpnhMeMcLsVj92MjC+bh2Oo/VTJeTEAJ 0aRV/aWC2nZ0nkKC0WtIZEnG13oKmLomf7Cw9A== -----END CERTIFICATE-----Generated at Wed May 13 16:48:31 2026 by rpki-client