$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3135302e3130372e3133362e302f32332d3234203d3e203233363739.roa File: 3135302e3130372e3133362e302f32332d3234203d3e203233363739.roa (raw, json) Hash identifier: 1x/70Y8+arbJxbxfiMF5WfUFg6sLcrqsNf10AyL06ow= Subject key identifier: F5:E7:42:0C:D1:9B:AE:F4:A7:FB:70:6A:84:5D:F2:0A:35:1A:0B:C9 Certificate issuer: /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Certificate serial: 1015B321C81D1251199A05783E5DCD09E1117F8E Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3135302e3130372e3133362e302f32332d3234203d3e203233363739.roa Signing time: Sun 03 May 2026 02:18:45 +0000 ROA not before: Sun 03 May 2026 02:13:45 +0000 ROA not after: Sun 02 May 2027 02:18:45 +0000 asID: 23679 IP address blocks: 150.107.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:15:b3:21:c8:1d:12:51:19:9a:05:78:3e:5d:cd:09:e1:11:7f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87 Validity Not Before: May 3 02:13:45 2026 GMT Not After : May 2 02:18:45 2027 GMT Subject: CN=F5E7420CD19BAEF4A7FB706A845DF20A351A0BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dc:79:da:30:cd:a9:9d:45:03:be:24:5e:96: 25:95:16:8d:73:4e:4f:14:15:24:7c:3a:a4:24:d4: 65:71:61:4f:6c:39:ef:ba:49:b2:f5:51:ba:af:2b: 96:dc:69:e7:ad:76:1a:95:37:c4:12:58:00:8e:f2: b9:23:62:b4:1a:c5:ec:b6:a0:2d:c5:a4:b6:93:ce: 45:de:41:64:6c:32:29:60:64:df:91:3b:7d:37:ff: bd:18:6f:ba:c9:83:ce:f1:2b:99:40:80:05:e6:a0: b9:c7:90:6f:4c:63:da:32:3c:ab:d2:fe:e1:1f:dc: 6d:7b:13:4e:b0:38:eb:16:6d:20:ea:dc:7f:7a:2f: f9:3e:72:af:0a:ff:26:4a:07:7c:a3:68:be:b1:cb: 33:66:39:64:1f:6b:e6:e7:76:c1:b4:55:da:0c:fd: 32:1b:db:d5:94:c5:80:fe:2e:40:57:a3:d4:6e:a9: a7:ba:4b:6d:34:b5:f4:fb:b4:97:5d:e1:47:21:47: bc:7b:11:0c:bc:e4:63:e6:06:dd:2b:11:d1:6e:b0: f5:c6:73:75:3c:07:2c:aa:3a:03:7c:57:55:27:40: 05:53:fa:9f:90:5d:5a:e1:54:f1:15:60:f9:0d:0f: 25:23:85:79:fe:cc:49:66:5a:49:5b:a5:b0:8f:eb: cf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E7:42:0C:D1:9B:AE:F4:A7:FB:70:6A:84:5D:F2:0A:35:1A:0B:C9 X509v3 Authority Key Identifier: keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3135302e3130372e3133362e302f32332d3234203d3e203233363739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.136.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:6a:84:65:f1:4d:c4:2b:ce:22:fe:cf:26:46:84:60:e6:cc: b0:15:79:f2:7b:0c:7b:cc:2b:19:a5:3c:d1:64:da:9a:3d:a3: 7e:1f:50:8d:f2:cb:87:e8:23:ed:a2:74:43:26:2f:ba:f2:ea: 25:d0:b1:39:80:1a:69:ca:a9:1b:35:05:a1:43:41:4c:a7:0a: 38:80:df:6b:a9:96:fb:79:57:8a:53:77:35:d4:ec:2c:2b:4d: 34:8e:fb:ab:04:b1:32:b6:8d:81:a6:00:36:b5:40:f9:32:19: 12:e9:ee:a5:6f:2e:b3:ce:be:e0:ec:80:0e:4c:42:6f:ea:c6: 7f:fe:df:2d:9c:04:01:84:f9:32:31:26:4b:08:fd:a3:70:a1: 24:d9:38:3d:60:fb:78:9e:75:db:c4:93:21:74:ac:38:f9:57: 70:d6:78:e6:51:b6:42:aa:2c:36:63:d3:4f:b6:3c:c9:72:a8: f0:6d:f9:77:30:ee:43:99:4b:73:ae:54:ff:c3:f6:e6:bd:8c: 7b:5b:17:9f:f3:8b:7a:64:7c:b5:10:bc:81:69:95:b5:51:93: ce:69:8b:9d:d5:13:d1:fb:d4:21:0b:de:d6:11:22:26:e0:e3: 59:31:4a:92:27:f7:05:51:a0:7b:5e:c2:8e:2f:86:e5:ef:a7: a4:e6:a2:10 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEBWzIcgdElEZmgV4Pl3NCeERf44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC RDg5MEE4NzAeFw0yNjA1MDMwMjEzNDVaFw0yNzA1MDIwMjE4NDVaMDMxMTAvBgNV BAMTKEY1RTc0MjBDRDE5QkFFRjRBN0ZCNzA2QTg0NURGMjBBMzUxQTBCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD3HnaMM2pnUUDviReliWVFo1z Tk8UFSR8OqQk1GVxYU9sOe+6SbL1UbqvK5bcaeetdhqVN8QSWACO8rkjYrQaxey2 oC3FpLaTzkXeQWRsMilgZN+RO303/70Yb7rJg87xK5lAgAXmoLnHkG9MY9oyPKvS /uEf3G17E06wOOsWbSDq3H96L/k+cq8K/yZKB3yjaL6xyzNmOWQfa+bndsG0VdoM /TIb29WUxYD+LkBXo9Ruqae6S200tfT7tJdd4UchR7x7EQy85GPmBt0rEdFusPXG c3U8ByyqOgN8V1UnQAVT+p+QXVrhVPEVYPkNDyUjhXn+zElmWklbpbCP68/1AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9edCDNGbrvSn+3BqhF3yCjUaC8kwHwYDVR0j BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw QTg3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzUzMDJlMzEzMDM3MmUzMTMzMzYyZTMwMmYz MjMzMmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlmuIMA0GCSqG SIb3DQEBCwUAA4IBAQCPaoRl8U3EK84i/s8mRoRg5sywFXnyewx7zCsZpTzRZNqa PaN+H1CN8suH6CPtonRDJi+68uol0LE5gBppyqkbNQWhQ0FMpwo4gN9rqZb7eVeK U3c11OwsK000jvurBLEyto2BpgA2tUD5MhkS6e6lby6zzr7g7IAOTEJv6sZ//t8t nAQBhPkyMSZLCP2jcKEk2Tg9YPt4nnXbxJMhdKw4+Vdw1njmUbZCqiw2Y9NPtjzJ cqjwbfl3MO5DmUtzrlT/w/bmvYx7Wxef84t6ZHy1ELyBaZW1UZPOaYud1RPR+9Qh C97WESIm4ONZMUqSJ/cFUaB7XsKOL4bl76ek5qIQ -----END CERTIFICATE-----Generated at Wed May 13 06:25:48 2026 by rpki-client