$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa File: AS17885.roa (raw, json) Hash identifier: 3Nn5BIp9l2d6qwrPMnlXmVzjNdvVAOjZPjaxN/LFUNQ= Subject key identifier: 68:B3:38:40:44:EC:9A:EB:3D:DD:26:BA:C0:E5:A7:25:E4:B7:84:65 Certificate issuer: /CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Certificate serial: 6603A84AEF1408E1E27B71E465076D0E61172587 Authority key identifier: 1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa Signing time: Sun 03 May 2026 02:31:48 +0000 ROA not before: Sun 03 May 2026 02:26:48 +0000 ROA not after: Sun 02 May 2027 02:31:48 +0000 asID: 17885 IP address blocks: 140.213.54.0/24 maxlen: 24 140.213.93.0/24 maxlen: 24 140.213.96.0/24 maxlen: 24 140.213.189.0/24 maxlen: 24 140.213.205.0/24 maxlen: 24 140.213.248.0/24 maxlen: 24 140.213.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:03:a8:4a:ef:14:08:e1:e2:7b:71:e4:65:07:6d:0e:61:17:25:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0C0AD80A641E2882F9025541FB6DAC8F9D0071 Validity Not Before: May 3 02:26:48 2026 GMT Not After : May 2 02:31:48 2027 GMT Subject: CN=68B3384044EC9AEB3DDD26BAC0E5A725E4B78465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:69:c2:90:fa:6a:10:fe:8f:43:ee:b4:97: 1b:57:a9:35:e2:39:8f:57:ee:fd:6e:2e:fa:c8:d5: 8c:6c:24:db:29:06:bc:63:81:0a:59:c3:73:7b:cd: 67:1d:8d:23:62:7a:32:b0:e9:0c:a2:69:e5:28:34: ac:b7:ac:ef:06:a1:bf:b3:78:0c:fe:bd:83:0c:8e: 3c:76:7e:a2:6a:f8:36:36:a4:de:39:c1:c4:83:98: f4:aa:f8:5f:1d:fc:eb:fd:59:84:07:8a:ef:60:ad: 84:ea:c1:70:3e:d1:f4:c8:56:1f:97:07:a4:b8:71: a9:94:a0:27:22:c3:9c:a1:15:1e:68:87:61:ba:fd: 84:b3:47:61:bd:f0:de:dc:10:c4:9c:16:7c:6c:dd: 6a:47:6f:f7:bb:43:f3:14:a7:71:1e:36:5e:f0:dc: 86:3c:a6:ec:37:c5:54:5c:f4:6f:77:46:f4:73:d3: 12:a7:da:e6:fb:e8:01:04:03:38:d5:b4:f6:24:e3: 2e:7b:3a:69:92:fc:b1:d3:87:c4:c0:bf:a1:0c:d0: c6:13:6d:c1:65:11:0c:60:5f:2c:86:8d:b0:2e:6c: c9:e8:ce:1b:30:b7:5d:51:64:e0:fc:02:d2:0c:b3: 5e:98:9d:f5:8c:36:fd:75:9a:30:4d:60:08:13:1e: 35:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B3:38:40:44:EC:9A:EB:3D:DD:26:BA:C0:E5:A7:25:E4:B7:84:65 X509v3 Authority Key Identifier: keyid:1E:0C:0A:D8:0A:64:1E:28:82:F9:02:55:41:FB:6D:AC:8F:9D:00:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1E0C0AD80A641E2882F9025541FB6DAC8F9D0071.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/AS17885.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.213.54.0/24 140.213.93.0/24 140.213.96.0/24 140.213.189.0/24 140.213.205.0/24 140.213.248.0/23 Signature Algorithm: sha256WithRSAEncryption 74:60:d3:ac:7a:e1:3f:f6:e8:d1:65:e6:78:2f:12:94:af:fd: 61:7d:02:3f:59:89:d1:52:1d:4c:f7:75:b8:57:7e:15:a9:70: 17:02:b2:15:5d:29:5f:27:1c:de:69:4d:cf:aa:a9:a6:63:26: af:64:27:d6:e8:52:4c:80:30:12:17:27:2c:9c:16:d7:3a:18: ca:32:25:0d:3f:8a:1b:87:a9:f3:d8:57:14:a8:8c:e5:60:33: f0:ea:8f:97:1b:8f:7f:1a:f5:fe:65:9c:90:6f:67:8a:a6:f9: 20:e5:82:06:05:41:10:26:c0:9d:5c:1c:4a:49:e2:2d:35:07: 17:f5:3a:a0:b0:b8:32:b7:91:0a:13:d4:37:37:37:1c:e2:e7: a3:b8:58:58:22:65:79:14:d3:81:0e:e0:62:cb:78:ab:d0:e7: 0f:7d:aa:45:09:e9:68:27:33:e5:99:a9:eb:f4:36:43:3e:b1: 5c:ce:99:29:0f:b1:da:b6:b2:6c:b9:06:02:df:51:cf:a8:0f: 2b:93:27:b0:f1:49:fa:d0:b9:f0:c0:1d:9d:dd:96:c1:2e:53: af:fe:a5:b2:be:30:a0:bd:aa:2e:12:11:bb:49:8f:a3:27:c8: 3e:20:af:47:8b:2f:fd:5f:a2:13:ab:90:7e:f5:97:01:86:36: 31:09:ab:00 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUZgOoSu8UCOHie3HkZQdtDmEXJYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwQzBBRDgwQTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4 RjlEMDA3MTAeFw0yNjA1MDMwMjI2NDhaFw0yNzA1MDIwMjMxNDhaMDMxMTAvBgNV BAMTKDY4QjMzODQwNDRFQzlBRUIzREREMjZCQUMwRTVBNzI1RTRCNzg0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/2nCkPpqEP6PQ+60lxtXqTXi OY9X7v1uLvrI1YxsJNspBrxjgQpZw3N7zWcdjSNiejKw6QyiaeUoNKy3rO8Gob+z eAz+vYMMjjx2fqJq+DY2pN45wcSDmPSq+F8d/Ov9WYQHiu9grYTqwXA+0fTIVh+X B6S4camUoCciw5yhFR5oh2G6/YSzR2G98N7cEMScFnxs3WpHb/e7Q/MUp3EeNl7w 3IY8puw3xVRc9G93RvRz0xKn2ub76AEEAzjVtPYk4y57OmmS/LHTh8TAv6EM0MYT bcFlEQxgXyyGjbAubMnozhswt11RZOD8AtIMs16YnfWMNv11mjBNYAgTHjXjAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUaLM4QETsmus93Sa6wOWnJeS3hGUwHwYDVR0j BBgwFoAUHgwK2ApkHiiC+QJVQfttrI+dAHEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGJkYjFlMGEtYTRlYy00OWRiLWJlODktOGQ3ZTdmYzJjMjI3LzAvMUUwQzBBRDgw QTY0MUUyODgyRjkwMjU1NDFGQjZEQUM4RjlEMDA3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xRTBDMEFEODBBNjQxRTI4ODJGOTAyNTU0MUZCNkRBQzhGOUQw MDcxLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBr aS1yc3luYy5pZG5pYy5uZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04 ZDdlN2ZjMmMyMjcvMC9BUzE3ODg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAjNU2AwQAjNVdAwQAjNVg AwQAjNW9AwQAjNXNAwQBjNX4MA0GCSqGSIb3DQEBCwUAA4IBAQB0YNOseuE/9ujR ZeZ4LxKUr/1hfQI/WYnRUh1M93W4V34VqXAXArIVXSlfJxzeaU3PqqmmYyavZCfW 6FJMgDASFycsnBbXOhjKMiUNP4obh6nz2FcUqIzlYDPw6o+XG49/GvX+ZZyQb2eK pvkg5YIGBUEQJsCdXBxKSeItNQcX9TqgsLgyt5EKE9Q3Nzcc4uejuFhYImV5FNOB DuBiy3ir0OcPfapFCeloJzPlmanr9DZDPrFczpkpD7HatrJsuQYC31HPqA8rkyew 8Un60LnwwB2d3ZbBLlOv/qWyvjCgvaouEhG7SY+jJ8g+IK9Hiy/9X6ITq5B+9ZcB hjYxCasA -----END CERTIFICATE-----Generated at Wed May 13 00:51:49 2026 by rpki-client