$ rpki-client -vvf rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa File: 3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa (raw, json) Hash identifier: 7ih/cC2+LAsXqVPNvC5gz44ZBDPBatRFoOMXqptl20I= Subject key identifier: 9D:45:3C:51:C8:09:E6:6C:AB:4D:83:64:4E:BF:E2:91:84:44:24:D1 Certificate issuer: /CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Certificate serial: 40D3E1E6008EFD38871C2934CCC11FE3915D1181 Authority key identifier: 70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa Signing time: Sun 03 May 2026 02:25:32 +0000 ROA not before: Sun 03 May 2026 02:20:32 +0000 ROA not after: Sun 02 May 2027 02:25:32 +0000 asID: 152397 IP address blocks: 157.15.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d3:e1:e6:00:8e:fd:38:87:1c:29:34:cc:c1:1f:e3:91:5d:11:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E Validity Not Before: May 3 02:20:32 2026 GMT Not After : May 2 02:25:32 2027 GMT Subject: CN=9D453C51C809E66CAB4D83644EBFE291844424D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ce:94:6a:0b:3b:0e:98:60:09:34:f1:39:25: f8:08:b8:2a:79:79:b7:aa:db:75:3d:cd:96:84:7a: 8d:8d:c5:91:89:1f:dd:e5:a3:5a:ab:52:27:7d:b2: 7d:7d:f7:b0:cd:1c:b3:34:16:e1:5c:c9:59:72:f5: 2d:11:ff:1d:47:f6:ef:e3:5c:9a:67:00:d2:2d:ee: 39:d9:81:5b:84:75:ff:29:dd:56:6b:a2:2d:5b:e2: 18:27:74:ae:04:e5:a4:f0:e3:5b:12:c0:15:03:21: d1:91:cd:44:68:24:2b:b7:a4:ad:ed:19:12:4e:4b: 5f:2a:97:23:ac:a1:4d:b4:66:e7:c6:38:70:96:63: 87:4e:5f:30:2f:2e:01:45:22:93:d3:2c:bd:71:c1: 26:17:d9:a4:2c:cd:6d:a2:84:d8:3f:f6:6f:b8:b2: f2:9f:a6:94:d9:68:33:47:23:45:16:ce:29:91:ea: fe:a2:12:b8:af:2a:f8:1a:61:9f:2c:60:75:90:14: b4:d4:24:c6:ee:e7:7f:a9:c9:d1:50:e0:13:fd:c8: fb:18:40:fd:00:ef:42:4c:7b:46:ef:c3:c1:6b:5d: 9b:35:a6:b8:5b:dc:22:7f:54:67:a2:73:67:da:b2: 97:5d:3d:13:e9:0c:86:19:41:45:7a:b6:c8:7d:ce: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:3C:51:C8:09:E6:6C:AB:4D:83:64:4E:BF:E2:91:84:44:24:D1 X509v3 Authority Key Identifier: keyid:70:F6:EC:1E:72:3D:6D:ED:42:4B:93:45:CC:3D:F6:CE:BC:99:DB:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/70F6EC1E723D6DED424B9345CC3DF6CEBC99DB8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36dd15e3-9ee5-4d52-9eee-712bb3b7bffb/0/3135372e31352e3132332e302f32342d3234203d3e20313532333937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.123.0/24 Signature Algorithm: sha256WithRSAEncryption e0:61:92:89:00:7b:82:fe:5a:f7:2c:ec:5e:41:4e:ec:47:bb: f9:0c:84:ed:92:18:5c:11:f3:7c:67:16:8f:14:7f:b2:8e:48: 9a:da:2a:21:69:06:5b:da:0c:b2:c4:df:97:62:98:94:27:18: 2e:ba:98:1c:a0:67:1d:a9:19:20:98:b2:a5:76:7a:54:00:c2: 58:68:bd:6d:b6:d7:0d:cf:01:49:6b:47:ef:0e:04:99:7e:5e: 84:92:16:fa:5b:d9:e2:d0:a1:5e:b4:5d:75:4e:01:b9:83:e4: c3:ef:aa:8c:b9:05:18:73:f5:e1:ff:9f:ee:0f:b2:24:7c:12: 89:c3:1d:43:fd:27:da:ed:bd:b3:5c:14:56:3c:ad:87:00:cf: 14:9a:e1:7f:ba:1c:67:c9:2e:c0:cd:d0:fc:cb:94:c2:2d:69: 1c:7b:96:d0:a9:15:8b:e2:da:76:95:19:f7:cf:14:ce:6b:26: 81:62:0f:67:3e:8e:3c:a9:0a:ef:e0:97:5f:99:2a:55:f0:8b: 34:25:af:d7:d6:0d:c3:49:d4:ec:28:a5:fb:8d:e5:83:09:62: 32:2c:c3:d1:93:39:67:4b:4d:43:62:c5:72:bb:5d:b1:2d:8d: a8:f2:58:97:75:f9:6a:24:7a:57:64:95:42:69:06:8d:4b:d5: f9:8b:04:af -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQNPh5gCO/TiHHCk0zMEf45FdEYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBGNkVDMUU3MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VC Qzk5REI4RTAeFw0yNjA1MDMwMjIwMzJaFw0yNzA1MDIwMjI1MzJaMDMxMTAvBgNV BAMTKDlENDUzQzUxQzgwOUU2NkNBQjREODM2NDRFQkZFMjkxODQ0NDI0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzpRqCzsOmGAJNPE5JfgIuCp5 ebeq23U9zZaEeo2NxZGJH93lo1qrUid9sn1997DNHLM0FuFcyVly9S0R/x1H9u/j XJpnANIt7jnZgVuEdf8p3VZroi1b4hgndK4E5aTw41sSwBUDIdGRzURoJCu3pK3t GRJOS18qlyOsoU20ZufGOHCWY4dOXzAvLgFFIpPTLL1xwSYX2aQszW2ihNg/9m+4 svKfppTZaDNHI0UWzimR6v6iErivKvgaYZ8sYHWQFLTUJMbu53+pydFQ4BP9yPsY QP0A70JMe0bvw8FrXZs1prhb3CJ/VGeic2faspddPRPpDIYZQUV6tsh9zmnTAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUnUU8UcgJ5myrTYNkTr/ikYREJNEwHwYDVR0j BBgwFoAUcPbsHnI9be1CS5NFzD32zryZ244wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzZkZDE1ZTMtOWVlNS00ZDUyLTllZWUtNzEyYmIzYjdiZmZiLzAvNzBGNkVDMUU3 MjNENkRFRDQyNEI5MzQ1Q0MzREY2Q0VCQzk5REI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MEY2RUMxRTcyM0Q2REVENDI0QjkzNDVDQzNERjZDRUJDOTlE QjhFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzM2ZGQxNWUzLTllZTUtNGQ1Mi05 ZWVlLTcxMmJiM2I3YmZmYi8wLzMxMzUzNzJlMzEzNTJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ97MA0GCSqG SIb3DQEBCwUAA4IBAQDgYZKJAHuC/lr3LOxeQU7sR7v5DITtkhhcEfN8ZxaPFH+y jkia2iohaQZb2gyyxN+XYpiUJxguupgcoGcdqRkgmLKldnpUAMJYaL1tttcNzwFJ a0fvDgSZfl6Ekhb6W9ni0KFetF11TgG5g+TD76qMuQUYc/Xh/5/uD7IkfBKJwx1D /Sfa7b2zXBRWPK2HAM8UmuF/uhxnyS7AzdD8y5TCLWkce5bQqRWL4tp2lRn3zxTO ayaBYg9nPo48qQrv4JdfmSpV8Is0Ja/X1g3DSdTsKKX7jeWDCWIyLMPRkzlnS01D YsVyu12xLY2o8liXdflqJHpXZJVCaQaNS9X5iwSv -----END CERTIFICATE-----Generated at Wed May 13 04:51:57 2026 by rpki-client