$ rpki-client -vvf rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa File: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (raw, json) Hash identifier: SkrbD60j+7Lskvvrp9vktxOHNyXUZfRbUIZo6hU5Tds= Subject key identifier: 43:7B:60:5D:D2:07:50:D1:8C:3C:22:99:56:B0:08:AD:BE:0B:BB:F6 Certificate issuer: /CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Certificate serial: 4A5FB3BD30A85418A10AD265F7A736E656C05068 Authority key identifier: AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa Signing time: Sun 03 May 2026 02:21:18 +0000 ROA not before: Sun 03 May 2026 02:16:18 +0000 ROA not after: Sun 02 May 2027 02:21:18 +0000 asID: 138089 IP address blocks: 157.20.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5f:b3:bd:30:a8:54:18:a1:0a:d2:65:f7:a7:36:e6:56:c0:50:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA42E2E4EE53543BA04EE4744C57336151FA4CE7 Validity Not Before: May 3 02:16:18 2026 GMT Not After : May 2 02:21:18 2027 GMT Subject: CN=437B605DD20750D18C3C229956B008ADBE0BBBF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:b2:67:b2:2b:4c:a9:1c:39:bc:d3:95:28: 63:4a:0c:41:96:a7:19:84:67:31:67:4e:e2:19:0c: 8c:b9:e4:70:e3:7f:5d:34:15:2b:17:d3:c8:14:ae: 05:d5:02:99:a1:cf:14:bd:25:be:9e:14:5f:b0:0d: f0:f2:ff:31:c4:21:c5:64:de:b3:2d:8d:1d:0d:5b: 45:4c:b6:37:73:0e:87:75:fb:e5:89:24:42:a5:2f: e3:e5:a8:30:e2:98:94:01:ff:6d:46:01:f8:9b:b1: 86:8e:66:29:14:bc:99:76:dd:59:ac:7a:90:69:e7: ca:de:b5:63:a2:d3:33:cb:45:22:ff:59:7b:bb:d8: 1a:91:dc:05:b8:62:00:32:88:1e:7a:aa:8a:fd:82: a4:49:19:57:7a:f3:cc:eb:f6:ac:6a:5b:54:3e:85: a0:41:d8:ec:04:39:5c:4a:22:ff:b3:2a:48:01:6d: a9:68:7d:2b:78:df:8d:e1:0f:7f:c9:24:b0:d3:ce: 13:0d:24:1c:9e:3f:81:c6:14:36:41:be:cc:b4:ed: be:30:86:68:94:c5:ef:19:51:b8:39:17:b5:5d:e8: a3:8c:29:4f:56:1a:69:7a:a6:5c:e9:90:e9:c4:69: 7d:b7:ed:39:e0:80:58:f0:4d:22:14:fe:d6:d1:48: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7B:60:5D:D2:07:50:D1:8C:3C:22:99:56:B0:08:AD:BE:0B:BB:F6 X509v3 Authority Key Identifier: keyid:AA:42:E2:E4:EE:53:54:3B:A0:4E:E4:74:4C:57:33:61:51:FA:4C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/AA42E2E4EE53543BA04EE4744C57336151FA4CE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.244.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:91:b0:ef:63:fd:39:60:b6:5d:44:74:dc:f8:a0:7f:c7:83: 21:80:e4:44:83:f9:22:6e:8a:9a:9f:ed:35:13:bc:51:5a:6e: da:51:dc:41:88:87:68:38:36:e5:bc:02:85:d3:73:ac:81:fa: bb:28:a1:b7:b4:38:25:3e:71:79:f3:b9:ca:5f:9a:09:66:bf: 0c:61:62:ac:4c:ca:86:71:0a:c6:26:65:bc:3c:1c:ed:ad:f1: 38:13:af:c5:96:20:25:25:1a:1e:2f:36:e1:e2:9c:e9:97:3d: ef:2d:06:9a:b6:3e:09:6a:70:1a:19:b7:49:05:17:48:59:fb: 0d:51:d4:de:7e:e6:77:2c:6d:84:f4:52:6c:1d:85:a6:b7:3c: d6:aa:37:3f:47:8a:1c:33:b2:2d:8a:fc:8f:3f:aa:17:d1:4c: 53:ed:a2:07:e5:ac:f1:74:23:d2:eb:d2:1a:46:e3:ed:4b:a1: 80:33:87:41:33:c5:85:f6:17:22:e8:d4:4b:7d:f4:af:79:33: 60:95:23:26:02:59:a8:32:30:7a:0d:be:3f:37:0a:d8:00:15: 4d:78:d6:e9:36:dd:51:64:d3:ed:a4:84:24:55:55:a3:48:24: 8c:8f:0d:a5:bb:91:d2:88:6a:78:82:60:8b:62:7a:f8:a4:f4: 71:03:4a:4e -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSl+zvTCoVBihCtJl96c25lbAUGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE0MkUyRTRFRTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1 MUZBNENFNzAeFw0yNjA1MDMwMjE2MThaFw0yNzA1MDIwMjIxMThaMDMxMTAvBgNV BAMTKDQzN0I2MDVERDIwNzUwRDE4QzNDMjI5OTU2QjAwOEFEQkUwQkJCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGT7JnsitMqRw5vNOVKGNKDEGW pxmEZzFnTuIZDIy55HDjf100FSsX08gUrgXVApmhzxS9Jb6eFF+wDfDy/zHEIcVk 3rMtjR0NW0VMtjdzDod1++WJJEKlL+PlqDDimJQB/21GAfibsYaOZikUvJl23Vms epBp58retWOi0zPLRSL/WXu72BqR3AW4YgAyiB56qor9gqRJGVd688zr9qxqW1Q+ haBB2OwEOVxKIv+zKkgBbalofSt4343hD3/JJLDTzhMNJByeP4HGFDZBvsy07b4w hmiUxe8ZUbg5F7Vd6KOMKU9WGml6plzpkOnEaX237TnggFjwTSIU/tbRSMedAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQ3tgXdIHUNGMPCKZVrAIrb4Lu/YwHwYDVR0j BBgwFoAUqkLi5O5TVDugTuR0TFczYVH6TOcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjg2N2EyZWUtZDQxMS00ZmY4LTlmNWMtMzVkMDM0MTIzZjg0LzAvQUE0MkUyRTRF RTUzNTQzQkEwNEVFNDc0NEM1NzMzNjE1MUZBNENFNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BQTQyRTJFNEVFNTM1NDNCQTA0RUU0NzQ0QzU3MzM2MTUxRkE0 Q0U3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI4NjdhMmVlLWQ0MTEtNGZmOC05 ZjVjLTM1ZDAzNDEyM2Y4NC8wLzMxMzUzNzJlMzIzMDJlMzIzNDM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRT0MA0GCSqG SIb3DQEBCwUAA4IBAQCMkbDvY/05YLZdRHTc+KB/x4MhgOREg/kiboqan+01E7xR Wm7aUdxBiIdoODblvAKF03Osgfq7KKG3tDglPnF587nKX5oJZr8MYWKsTMqGcQrG JmW8PBztrfE4E6/FliAlJRoeLzbh4pzplz3vLQaatj4JanAaGbdJBRdIWfsNUdTe fuZ3LG2E9FJsHYWmtzzWqjc/R4ocM7ItivyPP6oX0UxT7aIH5azxdCPS69IaRuPt S6GAM4dBM8WF9hci6NRLffSveTNglSMmAlmoMjB6Db4/NwrYABVNeNbpNt1RZNPt pIQkVVWjSCSMjw2lu5HSiGp4gmCLYnr4pPRxA0pO -----END CERTIFICATE-----Generated at Wed May 13 06:47:30 2026 by rpki-client