$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136302e302f32302d3230203d3e203633383539.roa File: 3135382e3134302e3136302e302f32302d3230203d3e203633383539.roa (raw, json) Hash identifier: t8cZI07UiLnJq9ISvUC7Ld3HjVwcbyjkmVgd8/33KB4= Subject key identifier: B3:28:AD:DA:B0:94:23:8B:26:9F:59:A9:6F:0C:4C:1D:2A:04:6A:B9 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 6679A3D85375D9CA961E31306682EA624C119F51 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136302e302f32302d3230203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:25 +0000 ROA not before: Sun 03 May 2026 02:22:25 +0000 ROA not after: Sun 02 May 2027 02:27:25 +0000 asID: 63859 IP address blocks: 158.140.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:79:a3:d8:53:75:d9:ca:96:1e:31:30:66:82:ea:62:4c:11:9f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:25 2026 GMT Not After : May 2 02:27:25 2027 GMT Subject: CN=B328ADDAB094238B269F59A96F0C4C1D2A046AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:29:3b:03:fa:7e:a8:be:d3:37:ba:5f:62:f0: a7:a1:7b:51:2e:4d:e1:f0:06:3b:54:9e:f1:b4:bb: 49:c2:dd:ae:65:02:60:1c:c4:c5:ea:33:76:d9:bb: 13:db:f2:ee:cf:0a:59:35:b5:4f:81:cb:f7:e3:97: 90:6b:90:07:81:47:61:b8:fb:3a:52:d5:f6:23:9e: 9e:4b:60:14:d6:ef:d6:46:f5:30:4c:e8:b3:b0:00: 6d:0d:bb:99:91:2b:21:75:cd:63:c3:e2:e7:05:65: d4:ff:a3:cd:a8:51:55:79:30:c8:e5:a0:09:72:77: 9f:aa:1e:ed:cc:42:66:97:c8:8c:06:51:1d:07:f6: 7f:47:1e:d9:34:92:2a:6c:50:7d:78:6f:22:bb:32: e0:f1:fa:12:d9:4a:b6:11:f1:7e:b5:45:cf:04:44: 3e:c9:46:c7:7a:3b:fb:19:ad:69:50:a4:6a:08:2a: dc:3c:1d:b4:eb:d5:b4:37:d6:04:32:64:de:d2:f5: 30:4c:0f:21:42:d1:79:c6:ee:5d:dd:7c:e3:f2:8b: 48:79:51:d9:45:52:c4:30:c3:4e:21:46:55:5d:28: 5b:71:7f:a4:fe:e9:29:aa:e5:98:ad:45:6a:c6:c6: 31:b1:5d:48:d4:86:a0:d4:08:d8:eb:32:3d:83:f5: 18:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:28:AD:DA:B0:94:23:8B:26:9F:59:A9:6F:0C:4C:1D:2A:04:6A:B9 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136302e302f32302d3230203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.160.0/20 Signature Algorithm: sha256WithRSAEncryption d6:dd:cc:ee:e8:9e:35:32:b3:1c:f4:cb:b4:97:a0:29:c5:a9: 69:ab:81:e9:78:40:7d:f5:2c:fb:5b:55:5a:ff:03:c1:5a:ca: 10:e3:aa:7f:26:47:c4:e2:1c:a4:97:a7:21:ed:e5:ad:f2:cb: 3c:78:1f:a8:03:94:04:af:1a:69:ea:21:99:3b:e6:98:5d:b4: 33:6b:ee:69:de:15:68:c1:22:f4:e3:96:9a:d5:8e:74:27:d7: 42:30:32:f6:31:4c:df:b1:a8:9e:c7:6b:83:b2:6c:4e:58:2d: a3:2a:6d:2e:37:ef:d5:8d:af:c2:d5:43:72:8e:70:34:22:b3: 17:6a:b2:3d:a5:fc:3d:ae:b8:20:cf:47:e0:01:29:5d:a4:cf: 03:2b:73:da:ec:bb:c1:84:c9:0d:06:78:b6:12:a7:90:54:2a: 91:dc:10:b7:82:4f:ca:f0:4e:b4:22:39:4d:73:45:bb:c4:6d: a2:fb:ce:7a:16:d5:a0:74:81:14:d6:0b:be:4a:1d:76:2e:b9: 03:ca:4a:ca:e7:63:94:86:80:3d:a6:22:e2:58:a1:ce:e6:bb: 67:54:3a:60:b1:6b:77:a8:52:1e:65:e1:0b:39:53:03:33:27: c1:56:70:8b:f4:3f:5f:87:3c:35:39:98:03:eb:01:5a:f8:eb: 3e:08:3c:c1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUZnmj2FN12cqWHjEwZoLqYkwRn1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjVaFw0yNzA1MDIwMjI3MjVaMDMxMTAvBgNV BAMTKEIzMjhBRERBQjA5NDIzOEIyNjlGNTlBOTZGMEM0QzFEMkEwNDZBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvKTsD+n6ovtM3ul9i8Kehe1Eu TeHwBjtUnvG0u0nC3a5lAmAcxMXqM3bZuxPb8u7PClk1tU+By/fjl5BrkAeBR2G4 +zpS1fYjnp5LYBTW79ZG9TBM6LOwAG0Nu5mRKyF1zWPD4ucFZdT/o82oUVV5MMjl oAlyd5+qHu3MQmaXyIwGUR0H9n9HHtk0kipsUH14byK7MuDx+hLZSrYR8X61Rc8E RD7JRsd6O/sZrWlQpGoIKtw8HbTr1bQ31gQyZN7S9TBMDyFC0XnG7l3dfOPyi0h5 UdlFUsQww04hRlVdKFtxf6T+6Smq5ZitRWrGxjGxXUjUhqDUCNjrMj2D9RgXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUsyit2rCUI4smn1mpbwxMHSoEarkwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM2MzAyZTMwMmYz MjMwMmQzMjMwMjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnoygMA0GCSqG SIb3DQEBCwUAA4IBAQDW3czu6J41MrMc9Mu0l6Apxalpq4HpeEB99Sz7W1Va/wPB WsoQ46p/JkfE4hykl6ch7eWt8ss8eB+oA5QErxpp6iGZO+aYXbQza+5p3hVowSL0 45aa1Y50J9dCMDL2MUzfsaiex2uDsmxOWC2jKm0uN+/Vja/C1UNyjnA0IrMXarI9 pfw9rrggz0fgASldpM8DK3Pa7LvBhMkNBni2EqeQVCqR3BC3gk/K8E60IjlNc0W7 xG2i+856FtWgdIEU1gu+Sh12LrkDykrK52OUhoA9piLiWKHO5rtnVDpgsWt3qFIe ZeELOVMDMyfBVnCL9D9fhzw1OZgD6wFa+Os+CDzB -----END CERTIFICATE-----Generated at Wed May 13 00:20:57 2026 by rpki-client