$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa File: 3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa (raw, json) Hash identifier: ceEQX4hLQUEVwqwiK7AvRZEpY3FYP9gmdEz+oYil3Lk= Subject key identifier: DB:A9:3B:DF:A0:09:0A:63:02:3F:6C:43:8E:80:43:B4:A2:11:F5:23 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 5AB16853CD8A4E134801E6B377E9B35E4145C6D3 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:21 +0000 ROA not before: Sun 03 May 2026 02:22:21 +0000 ROA not after: Sun 02 May 2027 02:27:21 +0000 asID: 63859 IP address blocks: 158.140.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b1:68:53:cd:8a:4e:13:48:01:e6:b3:77:e9:b3:5e:41:45:c6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:21 2026 GMT Not After : May 2 02:27:21 2027 GMT Subject: CN=DBA93BDFA0090A63023F6C438E8043B4A211F523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:51:a1:ff:cd:1c:2b:47:ed:3a:b2:8a:88:c5: 1f:5c:28:66:61:8e:50:11:39:c8:7a:43:bb:bd:86: 68:9b:21:29:03:da:86:4c:6b:a3:7e:64:08:3a:de: 5b:7b:ec:50:77:79:b1:8e:14:e2:5f:2d:ec:23:c4: 61:41:2e:56:49:ab:4f:26:ab:57:a4:87:83:c7:e7: 92:66:89:fd:77:e7:b4:f1:85:f0:c2:75:ea:9a:d9: 3a:3c:cd:16:8a:b1:c0:a9:40:c2:30:20:42:ad:5e: 39:51:28:77:09:cb:d6:e9:91:c1:7f:62:76:a0:e6: 12:c8:7b:b9:7b:5e:63:f4:1c:12:d5:9b:f2:97:fd: 0e:16:25:56:27:26:92:ac:55:ee:7d:c4:3f:ad:ab: 51:d4:33:26:f8:da:03:27:f3:7e:eb:27:fb:cc:ea: fe:b1:2b:4e:be:e8:6a:44:c6:38:ca:80:3c:72:04: c1:a6:92:3a:f8:1f:52:8a:3b:b7:e0:ae:bf:3d:45: 81:70:58:f3:b4:23:8e:38:bd:87:48:8d:bd:b2:09: d6:a0:48:2e:68:d6:b0:a7:31:f4:41:ca:2e:44:12: ad:74:5e:d4:20:01:47:49:a8:f1:e4:ec:5d:41:4f: de:eb:cf:81:90:2a:6c:dd:e4:db:97:85:61:eb:9e: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A9:3B:DF:A0:09:0A:63:02:3F:6C:43:8E:80:43:B4:A2:11:F5:23 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138342e302f32322d3232203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.184.0/22 Signature Algorithm: sha256WithRSAEncryption 17:17:ce:f5:43:75:aa:7e:3f:53:93:ab:53:e6:30:da:50:52: 85:ab:14:86:5e:91:74:54:fd:b5:8c:a3:a1:b6:2b:69:23:2a: c6:3c:d0:2e:b1:5e:a1:5f:2f:e9:38:01:bf:fd:9f:d1:ae:74: 55:a5:2c:d5:ca:e1:06:e1:62:6f:c8:02:9a:f2:7e:53:24:9e: 4d:1c:5b:31:92:57:4a:64:2f:84:ef:45:c9:80:48:1e:6f:ba: e0:20:b9:42:c8:ab:41:80:db:6f:71:8c:ec:28:c8:70:04:04: 4a:69:2f:9e:49:37:8f:ef:52:20:b1:b6:9e:42:bf:30:ca:3e: e0:6d:9b:8c:ed:4d:6f:20:af:23:f7:56:5d:05:09:33:e0:b3: fc:56:09:9e:cc:d9:51:3b:8c:56:57:07:54:ec:76:01:de:33: c2:50:ae:cf:dc:4c:38:33:76:cf:e2:01:05:3c:6a:71:48:1d: 2c:d0:57:04:97:16:d7:50:8b:95:37:09:11:86:53:1a:a4:09: f0:48:cf:74:17:88:93:48:be:29:0a:53:d0:ae:ba:95:e1:50: 25:36:9e:14:8a:61:b4:fe:b5:c2:26:a4:0a:25:41:bb:3b:98: 51:31:64:3e:9a:5c:07:82:34:2b:73:df:39:9e:4f:d2:70:21: 28:07:df:e8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWrFoU82KThNIAeazd+mzXkFFxtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjFaFw0yNzA1MDIwMjI3MjFaMDMxMTAvBgNV BAMTKERCQTkzQkRGQTAwOTBBNjMwMjNGNkM0MzhFODA0M0I0QTIxMUY1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuUaH/zRwrR+06soqIxR9cKGZh jlAROch6Q7u9hmibISkD2oZMa6N+ZAg63lt77FB3ebGOFOJfLewjxGFBLlZJq08m q1ekh4PH55Jmif1357TxhfDCdeqa2To8zRaKscCpQMIwIEKtXjlRKHcJy9bpkcF/ Ynag5hLIe7l7XmP0HBLVm/KX/Q4WJVYnJpKsVe59xD+tq1HUMyb42gMn837rJ/vM 6v6xK06+6GpExjjKgDxyBMGmkjr4H1KKO7fgrr89RYFwWPO0I444vYdIjb2yCdag SC5o1rCnMfRByi5EEq10XtQgAUdJqPHk7F1BT97rz4GQKmzd5NuXhWHrnu7XAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU26k736AJCmMCP2xDjoBDtKIR9SMwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM4MzQyZTMwMmYz MjMyMmQzMjMyMjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnoy4MA0GCSqG SIb3DQEBCwUAA4IBAQAXF871Q3Wqfj9Tk6tT5jDaUFKFqxSGXpF0VP21jKOhtitp IyrGPNAusV6hXy/pOAG//Z/RrnRVpSzVyuEG4WJvyAKa8n5TJJ5NHFsxkldKZC+E 70XJgEgeb7rgILlCyKtBgNtvcYzsKMhwBARKaS+eSTeP71IgsbaeQr8wyj7gbZuM 7U1vIK8j91ZdBQkz4LP8VgmezNlRO4xWVwdU7HYB3jPCUK7P3Ew4M3bP4gEFPGpx SB0s0FcElxbXUIuVNwkRhlMapAnwSM90F4iTSL4pClPQrrqV4VAlNp4UimG0/rXC JqQKJUG7O5hRMWQ+mlwHgjQrc985nk/ScCEoB9/o -----END CERTIFICATE-----Generated at Wed May 13 02:18:52 2026 by rpki-client