$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: kwJiCacEpef+POZ+z3KrWJoEuuEVMDxG1/4nlU/wsvw= Subject key identifier: 6A:5B:68:11:11:A4:E5:D9:AB:B9:CF:32:89:95:37:B6:7B:55:54:80 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 0CCF39193557DD4B9C4E46F7FA2A07327BDBF910 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:25 +0000 ROA not before: Sun 03 May 2026 02:22:25 +0000 ROA not after: Sun 02 May 2027 02:27:25 +0000 asID: 63859 IP address blocks: 158.140.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:cf:39:19:35:57:dd:4b:9c:4e:46:f7:fa:2a:07:32:7b:db:f9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:25 2026 GMT Not After : May 2 02:27:25 2027 GMT Subject: CN=6A5B681111A4E5D9ABB9CF32899537B67B555480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:c9:2d:00:b2:b8:a3:0c:99:c7:98:0c:c3: cb:a6:92:dc:7e:65:6d:04:35:6d:85:90:38:f9:d6: bb:8c:10:88:0a:05:b3:03:11:33:9d:4f:19:38:fb: 88:6a:a6:91:47:d9:d5:02:cd:4b:a5:6c:8e:52:cc: 18:b0:d7:d9:8c:c3:18:2a:84:24:68:72:bf:b3:db: 65:ee:15:89:bd:0f:2c:92:20:12:7d:3d:9f:e6:90: 89:4a:a5:e6:a4:c4:ec:58:39:41:95:0f:68:8b:1e: c3:67:f0:82:14:ab:33:fd:0f:b6:58:9d:bd:7e:95: 18:9c:a2:6a:9d:07:b5:0f:21:0b:2c:d8:3d:4e:12: 2e:0e:16:18:f3:ef:d4:7c:57:ad:1e:bf:18:bd:3d: 78:de:8d:6f:e6:e8:89:76:3c:c2:b2:d4:31:09:a0: 3b:d8:e3:0c:a0:1a:43:49:55:65:44:7b:42:84:ee: 39:fa:c5:2b:5a:ec:a7:10:94:15:80:63:0e:52:0f: 99:29:d4:b2:8f:7d:cd:a4:15:0a:ee:02:8a:32:39: d7:23:c2:25:06:b7:07:4a:6c:c4:35:6b:71:15:49: f3:31:1a:b9:5c:41:f7:cd:67:9d:07:c7:93:0d:ad: 91:db:52:0e:80:65:8d:c5:d5:99:99:b0:75:dc:b9: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5B:68:11:11:A4:E5:D9:AB:B9:CF:32:89:95:37:B6:7B:55:54:80 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136352e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.165.0/24 Signature Algorithm: sha256WithRSAEncryption c5:c4:5a:15:cb:90:99:40:47:ff:78:c7:3f:5d:f1:85:51:d9: a9:29:5d:25:fb:7b:36:e1:ad:0d:8d:a2:a4:f6:1a:f9:46:94: 60:0a:30:e8:1c:de:70:7e:53:e9:1d:47:fa:d9:38:93:c0:f9: fb:6b:fd:58:ff:a2:e4:93:16:5a:94:95:a1:3b:95:6c:51:cf: 4a:e0:8b:15:b9:39:f9:49:a6:df:4e:4e:3f:be:d9:9d:ae:8c: 11:f8:2d:21:5a:fe:6c:a0:12:12:b6:8c:a9:44:32:2e:20:50: c1:c3:f0:24:21:73:2c:82:bd:e4:2c:13:f9:85:c4:37:8d:49: 95:60:5b:47:77:d5:7d:e5:30:11:42:6a:14:fd:13:9b:29:cb: 7a:2d:62:38:cb:23:be:87:b3:d6:4b:41:dd:4b:40:6a:09:6d: 7b:fb:e1:9f:2d:eb:66:06:76:8f:57:7f:d4:7e:d6:d3:c5:09: 68:8c:b0:a4:d0:60:f6:8f:9b:c5:25:7f:77:14:05:8d:18:4c: 5b:ae:b1:37:c4:19:96:f7:57:a1:49:ae:35:6c:5e:4f:6c:73: 24:c7:f8:ff:69:0c:6e:35:5c:a3:b9:fe:35:01:73:9c:89:54: bc:b7:67:ef:54:a4:6d:36:33:a1:cc:47:7e:b5:77:7e:4b:5f: 93:d7:db:45 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDM85GTVX3UucTkb3+ioHMnvb+RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjVaFw0yNzA1MDIwMjI3MjVaMDMxMTAvBgNV BAMTKDZBNUI2ODExMTFBNEU1RDlBQkI5Q0YzMjg5OTUzN0I2N0I1NTU0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVcktALK4owyZx5gMw8umktx+ ZW0ENW2FkDj51ruMEIgKBbMDETOdTxk4+4hqppFH2dUCzUulbI5SzBiw19mMwxgq hCRocr+z22XuFYm9DyySIBJ9PZ/mkIlKpeakxOxYOUGVD2iLHsNn8IIUqzP9D7ZY nb1+lRicomqdB7UPIQss2D1OEi4OFhjz79R8V60evxi9PXjejW/m6Il2PMKy1DEJ oDvY4wygGkNJVWVEe0KE7jn6xSta7KcQlBWAYw5SD5kp1LKPfc2kFQruAooyOdcj wiUGtwdKbMQ1a3EVSfMxGrlcQffNZ50Hx5MNrZHbUg6AZY3F1ZmZsHXcuU7HAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUaltoERGk5dmruc8yiZU3tntVVIAwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM2MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoylMA0GCSqG SIb3DQEBCwUAA4IBAQDFxFoVy5CZQEf/eMc/XfGFUdmpKV0l+3s24a0NjaKk9hr5 RpRgCjDoHN5wflPpHUf62TiTwPn7a/1Y/6LkkxZalJWhO5VsUc9K4IsVuTn5Sabf Tk4/vtmdrowR+C0hWv5soBIStoypRDIuIFDBw/AkIXMsgr3kLBP5hcQ3jUmVYFtH d9V95TARQmoU/RObKct6LWI4yyO+h7PWS0HdS0BqCW17++GfLetmBnaPV3/UftbT xQlojLCk0GD2j5vFJX93FAWNGExbrrE3xBmW91ehSa41bF5PbHMkx/j/aQxuNVyj uf41AXOciVS8t2fvVKRtNjOhzEd+tXd+S1+T19tF -----END CERTIFICATE-----Generated at Wed May 13 02:40:26 2026 by rpki-client