$ rpki-client -vvf rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32332d3233203d3e20313532333737.roa File: 3135372e31352e36362e302f32332d3233203d3e20313532333737.roa (raw, json) Hash identifier: N6yMW5HjzqSkSXTxh8LYBYq0zgZeaS0wE1WlogwqRwM= Subject key identifier: CF:DA:6D:92:9C:28:0A:C6:3C:42:CD:D4:2D:04:32:B7:E7:5E:EC:D4 Certificate issuer: /CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Certificate serial: 223465ABC033A99944247CFD3661A5DD45B2C519 Authority key identifier: DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32332d3233203d3e20313532333737.roa Signing time: Sun 03 May 2026 02:30:52 +0000 ROA not before: Sun 03 May 2026 02:25:52 +0000 ROA not after: Sun 02 May 2027 02:30:52 +0000 asID: 152377 IP address blocks: 157.15.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:34:65:ab:c0:33:a9:99:44:24:7c:fd:36:61:a5:dd:45:b2:c5:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF2304429B18F8089FAE1FC938674F36A0FD77B2 Validity Not Before: May 3 02:25:52 2026 GMT Not After : May 2 02:30:52 2027 GMT Subject: CN=CFDA6D929C280AC63C42CDD42D0432B7E75EECD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:57:95:24:60:37:a8:8c:b5:6f:6a:2b:0d: a2:88:42:45:74:aa:ea:63:f3:27:da:36:6e:6a:4e: 4c:a7:6e:af:f7:94:c4:af:61:f0:b6:c6:c2:e0:e8: 08:0d:3b:da:73:12:79:46:0f:d6:e5:90:fc:ca:08: 3d:00:14:43:9d:03:44:1e:87:bf:1a:38:2e:06:63: 2c:b5:51:ef:ab:ee:70:70:27:55:c4:3c:4d:13:92: 22:84:36:0f:91:2c:88:47:fa:0c:19:f4:ae:5f:46: 30:d8:0c:53:ce:ba:b2:d9:32:8c:93:9f:4f:01:0d: 1c:82:fa:79:60:7e:ad:60:ef:48:fc:e4:48:50:45: a7:b3:bd:9b:f2:28:e8:e9:63:83:a3:f8:56:f0:b1: 79:cc:6d:66:5a:a3:58:18:9a:b0:7f:92:83:5d:68: 02:ef:90:d3:2c:c9:c1:29:0b:73:6d:fd:75:4e:d2: 35:18:26:98:e0:7c:bd:b8:7d:c8:89:b6:96:50:63: e0:59:8c:5f:16:76:75:93:66:f1:14:b4:70:c6:2d: 80:4d:66:f2:d9:d4:bb:4c:4c:1c:fd:9d:02:8c:c0: 9d:0e:a9:dc:bb:fc:9c:a3:b2:51:0a:11:5a:b4:d0: 96:86:e5:f9:05:51:e4:fd:6b:f9:05:ca:fb:97:34: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DA:6D:92:9C:28:0A:C6:3C:42:CD:D4:2D:04:32:B7:E7:5E:EC:D4 X509v3 Authority Key Identifier: keyid:DF:23:04:42:9B:18:F8:08:9F:AE:1F:C9:38:67:4F:36:A0:FD:77:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DF2304429B18F8089FAE1FC938674F36A0FD77B2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/484e879f-3a56-4d8d-83e8-0e9cc65770ea/0/3135372e31352e36362e302f32332d3233203d3e20313532333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.66.0/23 Signature Algorithm: sha256WithRSAEncryption 61:fa:53:de:42:98:34:cc:fd:0a:44:9e:21:f8:06:52:8d:6e: 78:e1:5a:c0:53:45:0d:69:cd:26:88:72:34:c4:41:cd:1a:45: a8:68:a1:69:ec:a8:5b:a4:85:ad:ac:7e:12:5b:03:fa:f8:d7: d1:25:69:ec:d5:45:3c:88:a5:4e:12:06:37:a8:b2:20:c0:95: 79:26:cc:6b:d1:1e:7a:89:f4:10:96:29:a2:a9:05:f9:77:b6: 3e:07:d8:5a:fb:7e:8a:28:fe:5b:0e:8a:c2:16:7c:26:d5:1b: f0:e5:3c:be:5b:d0:ea:d0:09:42:f3:cb:63:30:44:69:e7:90: bf:f3:67:e2:3f:ca:f0:ea:9d:3a:6f:a3:35:31:03:2b:71:6b: 6d:c8:b8:a6:74:48:18:e6:57:0e:9d:3d:e2:68:cd:53:8f:9d: 83:4f:0c:e8:d9:d6:52:ba:09:ca:01:4a:42:ff:3b:75:7a:c8: cd:ad:8b:53:31:38:5d:bd:6b:d0:96:db:b4:e2:8f:71:95:f2: 4f:5b:ed:e3:1e:7f:36:da:af:d1:8c:d1:f9:89:ac:61:ca:89: 10:4f:c1:38:c0:51:25:df:c6:fa:0b:24:4d:d7:5f:e4:18:38: 27:aa:c1:1b:7d:dc:54:05:e2:ca:22:2e:9c:5a:22:cd:04:33: d1:5c:ad:43 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUIjRlq8AzqZlEJHz9NmGl3UWyxRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYyMzA0NDI5QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZB MEZENzdCMjAeFw0yNjA1MDMwMjI1NTJaFw0yNzA1MDIwMjMwNTJaMDMxMTAvBgNV BAMTKENGREE2RDkyOUMyODBBQzYzQzQyQ0RENDJEMDQzMkI3RTc1RUVDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwVeVJGA3qIy1b2orDaKIQkV0 qupj8yfaNm5qTkynbq/3lMSvYfC2xsLg6AgNO9pzEnlGD9blkPzKCD0AFEOdA0Qe h78aOC4GYyy1Ue+r7nBwJ1XEPE0TkiKENg+RLIhH+gwZ9K5fRjDYDFPOurLZMoyT n08BDRyC+nlgfq1g70j85EhQRaezvZvyKOjpY4Oj+FbwsXnMbWZao1gYmrB/koNd aALvkNMsycEpC3Nt/XVO0jUYJpjgfL24fciJtpZQY+BZjF8WdnWTZvEUtHDGLYBN ZvLZ1LtMTBz9nQKMwJ0Oqdy7/JyjslEKEVq00JaG5fkFUeT9a/kFyvuXNGGvAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUz9ptkpwoCsY8Qs3ULQQyt+de7NQwHwYDVR0j BBgwFoAU3yMEQpsY+Aifrh/JOGdPNqD9d7IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDg0ZTg3OWYtM2E1Ni00ZDhkLTgzZTgtMGU5Y2M2NTc3MGVhLzAvREYyMzA0NDI5 QjE4RjgwODlGQUUxRkM5Mzg2NzRGMzZBMEZENzdCMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ERjIzMDQ0MjlCMThGODA4OUZBRTFGQzkzODY3NEYzNkEwRkQ3 N0IyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQ4NGU4NzlmLTNhNTYtNGQ4ZC04 M2U4LTBlOWNjNjU3NzBlYS8wLzMxMzUzNzJlMzEzNTJlMzYzNjJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ0PQjANBgkqhkiG 9w0BAQsFAAOCAQEAYfpT3kKYNMz9CkSeIfgGUo1ueOFawFNFDWnNJohyNMRBzRpF qGihaeyoW6SFrax+ElsD+vjX0SVp7NVFPIilThIGN6iyIMCVeSbMa9Eeeon0EJYp oqkF+Xe2PgfYWvt+iij+Ww6KwhZ8JtUb8OU8vlvQ6tAJQvPLYzBEaeeQv/Nn4j/K 8OqdOm+jNTEDK3Frbci4pnRIGOZXDp094mjNU4+dg08M6NnWUroJygFKQv87dXrI za2LUzE4Xb1r0JbbtOKPcZXyT1vt4x5/Ntqv0YzR+YmsYcqJEE/BOMBRJd/G+gsk Tddf5Bg4J6rBG33cVAXiyiIunFoizQQz0VytQw== -----END CERTIFICATE-----Generated at Wed May 13 00:43:43 2026 by rpki-client