$ rpki-client -vvf rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa File: 3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa (raw, json) Hash identifier: BX3zo4jm394L+4A0hATz0MD3kr1dhrVpAj21QCDfQYI= Subject key identifier: FB:86:84:2B:70:AE:39:08:95:C6:32:39:E6:16:A6:26:3F:02:DB:6F Certificate issuer: /CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Certificate serial: 07E5BA9A911AA1EA434AF45411633C653D27C668 Authority key identifier: 1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa Signing time: Sun 03 May 2026 02:24:11 +0000 ROA not before: Sun 03 May 2026 02:19:11 +0000 ROA not after: Sun 02 May 2027 02:24:11 +0000 asID: 152427 IP address blocks: 157.20.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e5:ba:9a:91:1a:a1:ea:43:4a:f4:54:11:63:3c:65:3d:27:c6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D2C9E44E4E5E22E88CD03135142D17683A24E7D Validity Not Before: May 3 02:19:11 2026 GMT Not After : May 2 02:24:11 2027 GMT Subject: CN=FB86842B70AE390895C63239E616A6263F02DB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:50:ab:2b:fc:52:75:a4:7d:14:91:eb:e6: c3:48:6d:49:ca:0f:bc:5d:27:10:22:9f:56:28:b7: 76:d6:a1:13:0e:d8:a3:71:6e:49:ce:27:ac:20:2b: 04:4e:c1:75:ce:3f:88:a9:b8:9e:8d:66:de:a3:ae: 8b:76:9b:3e:5f:12:94:1d:a5:d4:6c:3c:fa:f6:f0: 61:b8:0c:3d:88:14:da:e7:44:1d:ba:3b:3f:e5:2b: 0a:67:cf:57:57:0a:e5:7a:0d:0a:92:70:e2:1b:78: c7:0f:36:1f:75:82:b4:69:2d:17:c5:04:ee:48:0d: dc:d6:60:26:1d:65:6b:63:2b:f4:83:73:0a:7d:3e: 52:99:44:6f:10:f3:3c:b5:32:c3:8a:96:c0:ea:5b: 77:be:e0:52:da:0a:a8:95:5d:be:fc:da:6d:00:f7: 6f:a4:91:b5:43:ea:2e:a1:6d:b5:78:4a:1e:c1:73: be:d7:85:e5:c2:5d:8f:91:a5:bb:8e:64:95:9d:8a: 06:23:6d:12:21:4e:b7:42:27:c0:23:05:94:b6:2b: b8:b4:19:a2:14:f6:91:e8:fb:be:ad:f2:9e:50:e3: d8:64:48:e6:c3:f7:d8:11:ce:13:72:44:b1:d8:49: 5c:78:b9:e5:96:0a:af:d1:29:f9:72:35:05:c6:ee: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:86:84:2B:70:AE:39:08:95:C6:32:39:E6:16:A6:26:3F:02:DB:6F X509v3 Authority Key Identifier: keyid:1D:2C:9E:44:E4:E5:E2:2E:88:CD:03:13:51:42:D1:76:83:A2:4E:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1D2C9E44E4E5E22E88CD03135142D17683A24E7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/32880ddb-3d94-4e34-92dc-4d4538b905a2/0/3135372e32302e3139332e302f32342d3234203d3e20313532343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.193.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:75:7c:3c:cd:5e:77:4d:5c:7c:e1:38:ee:01:e8:79:73:20: 2f:1b:2f:d6:fd:5f:f0:b2:2e:bb:b8:87:24:24:55:d6:7c:e8: a1:35:b7:99:5d:55:7d:1f:a5:d4:be:5f:c7:85:9d:01:50:a8: fc:e1:8d:53:5a:56:d0:bf:40:33:46:69:71:8c:6b:72:80:73: bd:af:6e:9e:a4:8c:61:0c:b4:c2:49:e4:ab:b6:00:dc:f8:dc: 38:1b:b9:63:26:01:9d:01:e4:8d:ab:93:29:0d:82:fa:30:fb: bb:76:15:cb:e2:a8:b8:c0:35:7c:a2:77:43:99:ec:08:6b:12: dd:f8:0e:29:0e:6e:23:0c:ad:22:bb:78:37:21:3c:fa:db:23: 17:5b:cb:0d:0e:48:e9:8b:a6:84:93:80:d3:a9:7b:34:32:46: 5c:21:4a:03:45:6a:08:9e:44:61:0e:06:ca:e2:9e:68:ab:ed: 23:15:28:11:d1:f8:ba:b2:14:51:4f:62:64:bc:fe:0d:e7:ef: 6a:fd:69:7a:b6:89:e6:c3:58:cd:35:14:07:ea:1c:09:42:76: e5:97:77:45:39:33:54:be:b8:0a:7a:bd:f1:09:de:a1:94:90: 41:8b:ff:25:c7:e0:96:04:9e:91:1c:91:63:97:63:46:ac:2d: 05:b6:86:96 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUB+W6mpEaoepDSvRUEWM8ZT0nxmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyQzlFNDRFNEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4 M0EyNEU3RDAeFw0yNjA1MDMwMjE5MTFaFw0yNzA1MDIwMjI0MTFaMDMxMTAvBgNV BAMTKEZCODY4NDJCNzBBRTM5MDg5NUM2MzIzOUU2MTZBNjI2M0YwMkRCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+FCrK/xSdaR9FJHr5sNIbUnK D7xdJxAin1Yot3bWoRMO2KNxbknOJ6wgKwROwXXOP4ipuJ6NZt6jrot2mz5fEpQd pdRsPPr28GG4DD2IFNrnRB26Oz/lKwpnz1dXCuV6DQqScOIbeMcPNh91grRpLRfF BO5IDdzWYCYdZWtjK/SDcwp9PlKZRG8Q8zy1MsOKlsDqW3e+4FLaCqiVXb782m0A 92+kkbVD6i6hbbV4Sh7Bc77XheXCXY+RpbuOZJWdigYjbRIhTrdCJ8AjBZS2K7i0 GaIU9pHo+76t8p5Q49hkSObD99gRzhNyRLHYSVx4ueWWCq/RKflyNQXG7v5VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU+4aEK3CuOQiVxjI55hamJj8C228wHwYDVR0j BBgwFoAUHSyeROTl4i6IzQMTUULRdoOiTn0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI4ODBkZGItM2Q5NC00ZTM0LTkyZGMtNGQ0NTM4YjkwNWEyLzAvMUQyQzlFNDRF NEU1RTIyRTg4Q0QwMzEzNTE0MkQxNzY4M0EyNEU3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRDJDOUU0NEU0RTVFMjJFODhDRDAzMTM1MTQyRDE3NjgzQTI0 RTdELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzMyODgwZGRiLTNkOTQtNGUzNC05 MmRjLTRkNDUzOGI5MDVhMi8wLzMxMzUzNzJlMzIzMDJlMzEzOTMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTBMA0GCSqG SIb3DQEBCwUAA4IBAQAqdXw8zV53TVx84TjuAeh5cyAvGy/W/V/wsi67uIckJFXW fOihNbeZXVV9H6XUvl/HhZ0BUKj84Y1TWlbQv0AzRmlxjGtygHO9r26epIxhDLTC SeSrtgDc+Nw4G7ljJgGdAeSNq5MpDYL6MPu7dhXL4qi4wDV8ondDmewIaxLd+A4p Dm4jDK0iu3g3ITz62yMXW8sNDkjpi6aEk4DTqXs0MkZcIUoDRWoInkRhDgbK4p5o q+0jFSgR0fi6shRRT2JkvP4N5+9q/Wl6tonmw1jNNRQH6hwJQnbll3dFOTNUvrgK er3xCd6hlJBBi/8lx+CWBJ6RHJFjl2NGrC0FtoaW -----END CERTIFICATE-----Generated at Wed May 13 04:17:05 2026 by rpki-client