$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa File: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (raw, json) Hash identifier: ULosa8oOcpOyjPS4P0ZvXKdBJwWf6O7Y5KYahLiZN3s= Subject key identifier: 41:92:23:AC:6B:DC:6D:63:C8:E4:EF:74:E8:13:08:B3:DA:AE:6B:15 Certificate issuer: /CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Certificate serial: 17096A41BD5462889846195B8D8A997DD8194D28 Authority key identifier: 7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa Signing time: Sun 03 May 2026 02:27:00 +0000 ROA not before: Sun 03 May 2026 02:22:00 +0000 ROA not after: Sun 02 May 2027 02:27:00 +0000 asID: 132652 IP address blocks: 146.196.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:09:6a:41:bd:54:62:88:98:46:19:5b:8d:8a:99:7d:d8:19:4d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1 Validity Not Before: May 3 02:22:00 2026 GMT Not After : May 2 02:27:00 2027 GMT Subject: CN=419223AC6BDC6D63C8E4EF74E81308B3DAAE6B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:30:3e:63:54:0a:52:9e:05:f3:52:f4:15: 85:05:9c:e1:c4:df:8a:0a:8f:62:cd:a5:ba:40:af: b1:3e:73:13:0d:5d:b8:bd:40:ab:25:cf:46:27:0c: c9:d6:47:a3:98:17:8f:e9:f3:a9:eb:1f:6b:11:5f: cb:6d:41:99:d6:07:15:2e:70:ca:0b:4a:b6:57:3c: 98:49:ae:96:d8:f1:f0:df:f9:f5:8d:30:56:7b:77: a1:a0:6b:58:2d:e4:a3:cf:13:27:58:33:82:2a:d4: 31:ff:b1:ae:1c:e6:96:89:bc:13:b3:a5:e6:54:a7: be:3c:8c:b1:51:6f:83:83:52:12:99:b2:3d:ef:8c: 60:32:dd:d2:5b:ee:90:e9:82:e7:35:c3:32:41:5b: 61:05:a8:6a:74:78:f1:96:00:60:27:69:77:22:02: ca:e8:86:33:5a:7f:71:c8:59:a3:ee:11:43:ad:02: 2f:05:84:c9:81:35:3b:c4:5f:19:07:3b:ae:08:b9: 86:b3:e1:85:1d:73:54:77:e7:24:2a:62:7e:bb:ea: ee:25:7f:7f:04:3f:fb:fc:b6:e9:11:0f:85:d3:16: d8:c7:89:6b:9a:80:27:ba:49:1f:f0:b1:f7:4e:c4: ae:eb:bd:45:b8:ad:52:c7:e5:34:08:b1:c9:5b:29: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:92:23:AC:6B:DC:6D:63:C8:E4:EF:74:E8:13:08:B3:DA:AE:6B:15 X509v3 Authority Key Identifier: keyid:7E:FC:34:6D:E3:A1:4C:30:30:37:D3:F3:BF:A4:1F:CD:81:FA:0E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7EFC346DE3A14C303037D3F3BFA41FCD81FA0EE1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.196.40.0/22 Signature Algorithm: sha256WithRSAEncryption 68:b2:32:50:e5:ff:dd:e1:27:37:c4:b7:c9:6c:6b:10:ed:49: 36:43:78:6c:e0:2d:37:a4:ae:9c:d2:ed:05:23:03:4f:5a:bd: 05:66:5d:cd:1c:56:c3:68:68:75:2a:b8:87:d7:5a:0d:29:48: d9:61:27:62:57:58:fc:65:0e:5a:04:6d:be:85:99:91:77:41: 44:a8:6a:f7:1b:0c:c6:d5:df:be:e8:bc:35:58:6d:5d:59:da: 73:98:6d:df:30:24:42:8d:22:4c:63:0a:2c:ab:26:5c:ab:66: 4e:91:52:c0:e8:0c:cd:be:75:54:4a:8f:aa:ad:52:c6:3a:a8: 27:c7:d0:fc:a4:c1:c0:37:59:e7:9c:ca:87:94:73:87:07:46: 21:7d:a1:62:c2:42:e9:bc:c7:31:9f:4d:5e:9c:62:e6:f0:21: dc:41:2d:6d:91:f5:87:3e:7b:03:f8:c4:a2:40:70:10:cf:2c: 84:07:d1:09:82:fe:7d:07:42:bb:30:c7:53:74:85:67:c7:22: 1d:9b:5c:19:ce:6b:88:ca:68:be:97:78:10:25:32:64:fb:1e: 88:1b:35:06:09:65:de:6d:74:fd:c7:4d:34:64:c5:c6:e9:6e: dd:b1:7a:32:20:39:ab:49:44:95:60:01:71:ad:df:b8:92:f8: da:b7:6a:67 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUFwlqQb1UYoiYRhlbjYqZfdgZTSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQzM0NkRFM0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4 MUZBMEVFMTAeFw0yNjA1MDMwMjIyMDBaFw0yNzA1MDIwMjI3MDBaMDMxMTAvBgNV BAMTKDQxOTIyM0FDNkJEQzZENjNDOEU0RUY3NEU4MTMwOEIzREFBRTZCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIjA+Y1QKUp4F81L0FYUFnOHE 34oKj2LNpbpAr7E+cxMNXbi9QKslz0YnDMnWR6OYF4/p86nrH2sRX8ttQZnWBxUu cMoLSrZXPJhJrpbY8fDf+fWNMFZ7d6Gga1gt5KPPEydYM4Iq1DH/sa4c5paJvBOz peZUp748jLFRb4ODUhKZsj3vjGAy3dJb7pDpguc1wzJBW2EFqGp0ePGWAGAnaXci AsrohjNaf3HIWaPuEUOtAi8FhMmBNTvEXxkHO64IuYaz4YUdc1R35yQqYn676u4l f38EP/v8tukRD4XTFtjHiWuagCe6SR/wsfdOxK7rvUW4rVLH5TQIsclbKd/RAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUQZIjrGvcbWPI5O906BMIs9quaxUwHwYDVR0j BBgwFoAUfvw0beOhTDAwN9Pzv6QfzYH6DuEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2I2MzJhMmMtNDA2ZS00NWQ3LWEwMjgtMjYwNDc0Yzc3MDM4LzAvN0VGQzM0NkRF M0ExNEMzMDMwMzdEM0YzQkZBNDFGQ0Q4MUZBMEVFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83RUZDMzQ2REUzQTE0QzMwMzAzN0QzRjNCRkE0MUZDRDgxRkEw RUUxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiNjMyYTJjLTQwNmUtNDVkNy1h MDI4LTI2MDQ3NGM3NzAzOC8wLzMxMzQzNjJlMzEzOTM2MmUzNDMwMmUzMDJmMzIz MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCksQoMA0GCSqG SIb3DQEBCwUAA4IBAQBosjJQ5f/d4Sc3xLfJbGsQ7Uk2Q3hs4C03pK6c0u0FIwNP Wr0FZl3NHFbDaGh1KriH11oNKUjZYSdiV1j8ZQ5aBG2+hZmRd0FEqGr3GwzG1d++ 6Lw1WG1dWdpzmG3fMCRCjSJMYwosqyZcq2ZOkVLA6AzNvnVUSo+qrVLGOqgnx9D8 pMHAN1nnnMqHlHOHB0YhfaFiwkLpvMcxn01enGLm8CHcQS1tkfWHPnsD+MSiQHAQ zyyEB9EJgv59B0K7MMdTdIVnxyIdm1wZzmuIymi+l3gQJTJk+x6IGzUGCWXebXT9 x000ZMXG6W7dsXoyIDmrSUSVYAFxrd+4kvjat2pn -----END CERTIFICATE-----Generated at Wed May 13 09:12:25 2026 by rpki-client