$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136372e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136372e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: gTvtvuj2mu5AIOp6i9YAPAvAy0ZjafGS8pKn6CimkOg= Subject key identifier: AF:D8:51:9F:65:C0:F8:70:86:1C:5E:5F:C0:9C:0D:F6:C3:1A:D5:85 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 5A1FB6820D5A931E5A9088199447DA177AF44115 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136372e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:27 +0000 ROA not before: Sun 03 May 2026 02:22:27 +0000 ROA not after: Sun 02 May 2027 02:27:27 +0000 asID: 63859 IP address blocks: 158.140.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1f:b6:82:0d:5a:93:1e:5a:90:88:19:94:47:da:17:7a:f4:41:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:27 2026 GMT Not After : May 2 02:27:27 2027 GMT Subject: CN=AFD8519F65C0F870861C5E5FC09C0DF6C31AD585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:14:3e:71:8c:30:a1:f6:31:e6:a9:2e:1e: a7:40:a6:a5:e7:b8:45:ae:5d:37:af:e7:f3:9c:d7: ce:77:71:ea:8c:88:a2:69:84:7b:c8:07:14:34:03: 6e:02:52:f8:4d:be:d9:72:c0:bd:c5:97:1f:ab:1e: e8:73:f3:fd:ae:e2:4d:da:cd:df:42:46:1d:7f:d0: 28:21:76:9b:30:90:13:4d:4b:ff:62:2d:f7:b8:1e: 68:11:56:93:c2:06:c0:2e:7e:5b:4f:d3:88:92:ac: 2d:74:6a:d7:3f:e4:9c:0a:93:a6:05:8a:08:17:cf: 9f:a0:3c:00:87:d4:06:f3:9c:27:c4:c8:6e:77:15: 79:82:29:34:a9:81:83:83:e0:4a:b0:47:5a:66:9a: 9c:ae:eb:dc:98:16:63:46:19:8e:43:ea:e3:9d:58: f4:c0:cd:a5:2e:5e:53:7e:ce:ae:97:f4:09:5a:78: d4:cb:fd:e0:56:9b:d6:69:23:3a:14:b1:27:5c:39: b5:8e:82:40:39:2c:7b:f8:5d:67:00:99:8a:6a:f1: 82:bd:12:42:35:15:23:47:94:7a:41:11:91:e5:20: 38:9a:fd:2a:c0:64:2c:a8:21:33:af:12:fa:db:ee: 81:97:ac:94:ee:6d:7e:cc:9d:b8:3a:17:ec:ae:48: 2d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D8:51:9F:65:C0:F8:70:86:1C:5E:5F:C0:9C:0D:F6:C3:1A:D5:85 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136372e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.167.0/24 Signature Algorithm: sha256WithRSAEncryption 50:e4:8d:55:22:e7:a6:e3:83:59:b8:11:2d:4e:b0:15:34:d6: 02:4d:29:70:88:16:00:fb:ff:4d:8e:85:88:28:e0:fb:c9:04: db:d7:1b:59:df:86:99:89:ce:5f:48:66:f3:81:a8:a4:fb:cd: c2:e7:d8:c7:58:ea:67:4a:37:c3:c7:ce:6b:c9:a9:80:6b:52: bc:f0:00:48:c3:62:f6:72:c2:2b:90:54:c9:1e:8d:f3:ab:db: 15:85:b3:8e:8b:95:79:2c:ea:90:17:79:6e:ef:d9:20:31:13: f3:c8:71:78:2e:b9:2a:d5:04:b7:7c:aa:ab:08:66:89:fa:52: da:b5:93:5a:73:58:64:b7:b7:53:ad:82:f1:4e:2e:a8:43:b4: 4f:c6:eb:a5:3e:6a:35:6f:da:d0:94:5d:c7:83:47:ce:7e:b8: af:0f:62:7c:4d:7b:e7:f7:b7:17:d2:ee:03:f0:df:07:f5:32: ee:4b:da:f5:01:8e:1f:d4:f7:34:8a:d9:96:49:a0:0f:93:8d: d4:ae:84:c7:1e:79:21:53:f6:24:0c:a1:4b:4b:c3:96:49:f7: 45:f4:47:0d:44:5f:e1:38:b6:09:bc:26:5f:c8:a9:a5:dc:29: 48:d3:7b:23:df:f0:b5:ed:2d:36:76:e4:6b:04:42:1c:8c:09: f8:46:6d:80 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWh+2gg1akx5akIgZlEfaF3r0QRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjdaFw0yNzA1MDIwMjI3MjdaMDMxMTAvBgNV BAMTKEFGRDg1MTlGNjVDMEY4NzA4NjFDNUU1RkMwOUMwREY2QzMxQUQ1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgGRQ+cYwwofYx5qkuHqdApqXn uEWuXTev5/Oc1853ceqMiKJphHvIBxQ0A24CUvhNvtlywL3Flx+rHuhz8/2u4k3a zd9CRh1/0CghdpswkBNNS/9iLfe4HmgRVpPCBsAufltP04iSrC10atc/5JwKk6YF iggXz5+gPACH1AbznCfEyG53FXmCKTSpgYOD4EqwR1pmmpyu69yYFmNGGY5D6uOd WPTAzaUuXlN+zq6X9AlaeNTL/eBWm9ZpIzoUsSdcObWOgkA5LHv4XWcAmYpq8YK9 EkI1FSNHlHpBEZHlIDia/SrAZCyoITOvEvrb7oGXrJTubX7Mnbg6F+yuSC1lAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUr9hRn2XA+HCGHF5fwJwN9sMa1YUwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM2MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoynMA0GCSqG SIb3DQEBCwUAA4IBAQBQ5I1VIuem44NZuBEtTrAVNNYCTSlwiBYA+/9NjoWIKOD7 yQTb1xtZ34aZic5fSGbzgaik+83C59jHWOpnSjfDx85ryamAa1K88ABIw2L2csIr kFTJHo3zq9sVhbOOi5V5LOqQF3lu79kgMRPzyHF4Lrkq1QS3fKqrCGaJ+lLatZNa c1hkt7dTrYLxTi6oQ7RPxuulPmo1b9rQlF3Hg0fOfrivD2J8TXvn97cX0u4D8N8H 9TLuS9r1AY4f1Pc0itmWSaAPk43UroTHHnkhU/YkDKFLS8OWSfdF9EcNRF/hOLYJ vCZfyKml3ClI03sj3/C17S02duRrBEIcjAn4Rm2A -----END CERTIFICATE-----Generated at Wed May 13 02:40:56 2026 by rpki-client