$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: NfQtyk9Pl91WGi0b+1Bl/Cb4IlR2Nh2R7JmFSBtw1jM= Subject key identifier: A4:A3:F3:05:0C:D8:CF:3F:4B:42:2D:82:90:24:C2:27:15:7C:2A:52 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 6F30E3DF5EC85D91B1D0188C49E84B005F5488EF Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:28 +0000 ROA not before: Sun 03 May 2026 02:22:28 +0000 ROA not after: Sun 02 May 2027 02:27:28 +0000 asID: 63859 IP address blocks: 158.140.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:30:e3:df:5e:c8:5d:91:b1:d0:18:8c:49:e8:4b:00:5f:54:88:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:28 2026 GMT Not After : May 2 02:27:28 2027 GMT Subject: CN=A4A3F3050CD8CF3F4B422D829024C227157C2A52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:95:41:7a:6f:fb:38:9d:c3:88:fc:f7:9c: 0e:14:e6:b0:7b:11:d2:4f:56:81:4c:5e:85:c9:34: ff:75:e5:98:d7:d5:f3:23:96:e9:e2:12:a4:aa:b5: 24:99:ae:21:a6:57:9a:d4:4f:d5:f0:b9:be:92:6c: 34:fe:a2:ab:b8:15:73:85:f4:ef:4d:0a:18:a0:cf: a8:9c:1d:dc:11:b7:64:79:cb:bd:b9:b2:ff:20:f2: 22:a5:6f:2e:ea:f5:ec:f4:39:a0:a0:77:0a:a8:a6: 87:08:69:bf:de:09:b7:8d:f9:b5:aa:f3:cc:8e:4d: d8:36:de:c2:62:af:1c:6e:36:93:f1:bf:3d:e2:94: ce:f9:1e:83:cb:71:23:23:63:3a:e5:bc:2f:69:64: ca:35:92:6e:55:53:2e:ed:a8:4d:29:f9:9a:cc:0d: e9:61:8a:4f:d7:2c:ac:a7:eb:18:76:46:1c:2f:9b: a9:f9:a4:ff:13:d4:92:7b:47:18:7f:27:cf:bb:68: db:22:73:6d:ba:bc:0f:28:f8:a0:43:00:be:b0:01: f7:9b:41:2a:1a:5b:f9:4b:9d:cf:90:07:34:00:ce: 0f:43:c0:74:33:61:b6:43:cc:2e:6f:35:10:65:ab: f7:42:b4:c9:ed:da:43:7b:8e:6c:86:4f:42:4b:0d: 47:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A3:F3:05:0C:D8:CF:3F:4B:42:2D:82:90:24:C2:27:15:7C:2A:52 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138372e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.187.0/24 Signature Algorithm: sha256WithRSAEncryption c0:1a:fc:df:5e:18:04:bf:a3:79:c3:cb:6e:11:a0:68:ef:5f: 63:ce:82:41:3b:84:4d:41:f1:72:48:ba:05:50:58:ce:68:90: 65:87:09:aa:6a:f1:c0:d3:4e:0b:a1:bf:ad:97:42:4d:ba:d9: e5:02:9e:db:80:e7:37:8e:88:9b:62:8b:00:0d:7f:78:d9:7c: 82:43:68:77:55:da:2e:20:ea:38:90:c3:fb:e4:d6:30:07:d6: fc:ec:ba:af:18:ce:3d:7f:66:23:21:df:42:11:fb:60:a4:9a: 09:aa:75:f8:72:a1:cf:ba:88:f7:f2:f6:5f:38:c6:aa:74:18: 5b:c6:e0:cf:69:32:ad:d5:8f:52:62:2c:45:91:cb:c1:71:03: 3c:95:35:a5:c7:bd:8a:b3:1d:90:70:b2:f2:02:37:f6:e9:10: 65:a2:06:89:81:bf:b5:fa:c5:b6:dd:d3:3b:39:3d:2b:5a:fa: 37:db:e3:3e:02:9b:cc:7c:68:53:11:e3:73:00:a2:f9:37:b4: 6b:a7:ad:e4:0d:8a:6b:f2:28:bf:5b:de:08:0b:e4:48:ae:55: ab:62:80:be:5d:88:82:19:d7:b4:5a:ab:f9:e5:8a:9b:82:71: 94:82:2f:cc:a1:c1:91:1b:56:9d:e3:e9:d9:cf:6e:25:a0:d1: a8:98:3e:46 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUbzDj317IXZGx0BiMSehLAF9UiO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjhaFw0yNzA1MDIwMjI3MjhaMDMxMTAvBgNV BAMTKEE0QTNGMzA1MENEOENGM0Y0QjQyMkQ4MjkwMjRDMjI3MTU3QzJBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9pVBem/7OJ3DiPz3nA4U5rB7 EdJPVoFMXoXJNP915ZjX1fMjluniEqSqtSSZriGmV5rUT9Xwub6SbDT+oqu4FXOF 9O9NChigz6icHdwRt2R5y725sv8g8iKlby7q9ez0OaCgdwqopocIab/eCbeN+bWq 88yOTdg23sJirxxuNpPxvz3ilM75HoPLcSMjYzrlvC9pZMo1km5VUy7tqE0p+ZrM Delhik/XLKyn6xh2Rhwvm6n5pP8T1JJ7Rxh/J8+7aNsic226vA8o+KBDAL6wAfeb QSoaW/lLnc+QBzQAzg9DwHQzYbZDzC5vNRBlq/dCtMnt2kN7jmyGT0JLDUf/AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUpKPzBQzYzz9LQi2CkCTCJxV8KlIwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM4MzcyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy7MA0GCSqG SIb3DQEBCwUAA4IBAQDAGvzfXhgEv6N5w8tuEaBo719jzoJBO4RNQfFySLoFUFjO aJBlhwmqavHA004Lob+tl0JNutnlAp7bgOc3joibYosADX942XyCQ2h3VdouIOo4 kMP75NYwB9b87LqvGM49f2YjId9CEftgpJoJqnX4cqHPuoj38vZfOMaqdBhbxuDP aTKt1Y9SYixFkcvBcQM8lTWlx72Ksx2QcLLyAjf26RBlogaJgb+1+sW23dM7OT0r Wvo32+M+ApvMfGhTEeNzAKL5N7Rrp63kDYpr8ii/W94IC+RIrlWrYoC+XYiCGde0 Wqv55YqbgnGUgi/MocGRG1ad4+nZz24loNGomD5G -----END CERTIFICATE-----Generated at Wed May 13 02:12:32 2026 by rpki-client