$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137362e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3137362e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: dfsyHAnHSstxeViW5Ywci9bwt5Ut01RI7W+glFDkbEg= Subject key identifier: E0:9C:17:14:28:DC:5A:BF:D4:D1:F4:00:CD:CB:78:4F:D2:5F:B4:75 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 4F4C1550BE5920D4D25E0A7D308212018A329570 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137362e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:20 +0000 ROA not before: Sun 03 May 2026 02:22:20 +0000 ROA not after: Sun 02 May 2027 02:27:20 +0000 asID: 63859 IP address blocks: 158.140.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:4c:15:50:be:59:20:d4:d2:5e:0a:7d:30:82:12:01:8a:32:95:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:20 2026 GMT Not After : May 2 02:27:20 2027 GMT Subject: CN=E09C171428DC5ABFD4D1F400CDCB784FD25FB475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:04:76:97:f5:8d:d9:df:bc:e5:9a:fe:d6: 40:2d:fc:66:49:f2:02:50:9a:92:5d:d8:b6:47:78: cb:f5:9a:89:d8:ed:dd:63:8a:07:35:89:82:dd:96: 0f:d4:70:74:6a:ab:5f:1c:45:6e:ff:2e:6d:bc:32: e8:56:8e:e5:b6:df:46:66:fc:51:b7:7d:e9:7c:63: 54:16:bc:6e:a4:f6:2a:01:56:dc:fc:cd:a0:d9:d0: c7:72:0c:dd:67:6d:50:80:ee:06:60:fe:67:2f:e1: 5b:44:3f:5a:be:91:db:9d:3b:fe:65:7a:60:7b:35: e4:0c:3f:c4:b1:5b:eb:06:6d:3e:4f:28:f3:39:5e: d7:65:60:99:22:31:a6:54:4e:71:f9:dd:ab:97:f3: 65:4e:be:06:32:84:dd:fc:7d:79:45:12:8c:6c:6e: 4c:64:44:c7:6b:a6:ce:a1:ad:35:29:02:a3:f9:f5: 4f:9f:23:e3:6a:13:b1:53:5d:f5:60:bc:89:f8:a2: c2:32:89:ae:a5:16:da:76:4b:d1:96:14:59:25:47: 0b:85:83:a9:e3:53:cc:ca:6a:21:13:d7:74:27:c6: d6:d4:b1:b5:2d:59:0f:40:ae:f6:15:8a:88:52:43: af:41:7d:53:de:44:5a:14:f6:ba:bb:c2:8d:8f:ca: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:9C:17:14:28:DC:5A:BF:D4:D1:F4:00:CD:CB:78:4F:D2:5F:B4:75 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3137362e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.176.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:6e:75:dc:b1:19:5e:4d:e8:33:d2:2c:d7:a9:e4:d0:3a:28: 08:47:6c:38:ee:c8:f0:8d:4f:51:d2:9d:d6:cc:88:ee:4b:61: a8:48:72:03:68:e8:13:88:e4:6d:90:2c:cf:2a:8a:c1:2d:60: dc:0a:59:26:c0:6d:16:79:ee:85:1b:63:8e:c4:4b:98:4d:af: b6:d8:99:95:bc:74:ff:20:b0:8b:e6:f5:39:af:3e:4d:bb:a7: 5e:5a:d0:04:4f:ab:14:4d:7e:3b:8d:0b:f7:fc:b0:1b:50:3e: c6:c0:e7:b5:7d:dc:ae:eb:f3:31:e8:6b:b3:e1:85:a9:66:c4: ea:42:c5:d5:bf:e5:1c:d2:b6:bf:89:c0:34:fe:94:2e:17:eb: a1:fe:a3:a5:c8:50:12:d0:72:5e:c7:6c:8f:a5:26:b2:34:91: 89:78:2a:63:e7:c5:2a:30:ab:8f:91:5b:0e:a8:26:c7:18:07: b1:e1:e0:2d:c7:a1:d4:38:3c:ec:55:53:db:83:29:8b:62:52: 5d:5b:7d:6f:42:22:a4:ee:7e:c3:e8:ea:5e:f9:cf:12:89:75: 99:17:87:ac:b4:6b:f0:fe:17:92:34:bb:28:33:80:8d:19:71: 75:6e:df:ab:67:d4:a2:d9:d6:f4:ee:97:d0:a9:5b:fb:d0:c9: 35:89:db:5d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUT0wVUL5ZINTSXgp9MIISAYoylXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjBaFw0yNzA1MDIwMjI3MjBaMDMxMTAvBgNV BAMTKEUwOUMxNzE0MjhEQzVBQkZENEQxRjQwMENEQ0I3ODRGRDI1RkI0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrGgR2l/WN2d+85Zr+1kAt/GZJ 8gJQmpJd2LZHeMv1monY7d1jigc1iYLdlg/UcHRqq18cRW7/Lm28MuhWjuW230Zm /FG3fel8Y1QWvG6k9ioBVtz8zaDZ0MdyDN1nbVCA7gZg/mcv4VtEP1q+kdudO/5l emB7NeQMP8SxW+sGbT5PKPM5XtdlYJkiMaZUTnH53auX82VOvgYyhN38fXlFEoxs bkxkRMdrps6hrTUpAqP59U+fI+NqE7FTXfVgvIn4osIyia6lFtp2S9GWFFklRwuF g6njU8zKaiET13QnxtbUsbUtWQ9ArvYViohSQ69BfVPeRFoU9rq7wo2PyubVAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU4JwXFCjcWr/U0fQAzct4T9JftHUwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM3MzYyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoywMA0GCSqG SIb3DQEBCwUAA4IBAQAsbnXcsRleTegz0izXqeTQOigIR2w47sjwjU9R0p3WzIju S2GoSHIDaOgTiORtkCzPKorBLWDcClkmwG0Wee6FG2OOxEuYTa+22JmVvHT/ILCL 5vU5rz5Nu6deWtAET6sUTX47jQv3/LAbUD7GwOe1fdyu6/Mx6Guz4YWpZsTqQsXV v+Uc0ra/icA0/pQuF+uh/qOlyFAS0HJex2yPpSayNJGJeCpj58UqMKuPkVsOqCbH GAex4eAtx6HUODzsVVPbgymLYlJdW31vQiKk7n7D6Ope+c8SiXWZF4estGvw/heS NLsoM4CNGXF1bt+rZ9Si2db07pfQqVv70Mk1idtd -----END CERTIFICATE-----Generated at Wed May 13 01:35:35 2026 by rpki-client