$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa File: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (raw, json) Hash identifier: ml34NC1R87K9Zf0E/ACprwe1/Uh3m52IpSfVQUykZgM= Subject key identifier: AE:9C:FA:55:DE:0A:87:63:C1:47:76:EF:27:3A:60:74:8B:E7:72:D5 Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 15BE4EB6393C4E1496C1098E4C08E380665C5D3D Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa Signing time: Sun 03 May 2026 02:32:48 +0000 ROA not before: Sun 03 May 2026 02:27:48 +0000 ROA not after: Sun 02 May 2027 02:32:48 +0000 asID: 152373 IP address blocks: 157.15.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:be:4e:b6:39:3c:4e:14:96:c1:09:8e:4c:08:e3:80:66:5c:5d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: May 3 02:27:48 2026 GMT Not After : May 2 02:32:48 2027 GMT Subject: CN=AE9CFA55DE0A8763C14776EF273A60748BE772D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:6c:0b:82:5e:61:f3:47:2d:b0:02:61:da: c2:d1:bb:c6:69:12:3c:9e:7c:f1:28:73:bd:60:09: 9f:66:c0:05:92:74:d0:38:30:d8:6d:b5:8f:86:21: f6:cc:c8:0c:8a:10:54:74:24:df:87:66:db:1b:ef: 27:5a:56:02:ea:60:ea:91:cf:cc:ba:90:3a:e2:b1: b0:4f:d8:ea:61:f0:51:cf:60:0a:91:d9:8d:58:cc: c0:77:7a:52:9e:f4:05:09:ed:a5:fe:af:fe:ed:c6: 7a:51:c4:2d:44:0e:2b:26:e5:2f:29:ea:e6:97:a6: 47:1a:45:9b:7b:3e:b5:bd:5b:a1:9c:53:61:cf:1b: 92:52:3f:5d:77:9f:68:5f:f3:7e:50:62:7b:51:a4: c4:d1:3e:42:c5:bd:ee:ed:5e:8f:d9:31:19:15:a9: 4a:ad:b5:c9:aa:80:8d:b3:f7:7c:55:c0:a3:3a:73: 75:f3:04:78:04:b1:82:0a:cc:87:ae:23:1b:6e:64: 7a:35:47:c2:e0:8c:38:88:ba:fb:90:16:59:03:bb: 22:0d:73:db:1f:8b:ff:47:37:17:f0:b8:ab:95:aa: d2:c7:47:d4:c9:24:36:b4:cd:51:d9:55:39:4e:88: ec:b6:bd:11:27:c6:a1:47:0d:98:94:27:6c:22:fd: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:FA:55:DE:0A:87:63:C1:47:76:EF:27:3A:60:74:8B:E7:72:D5 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36322e302f32342d3234203d3e20313532333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.62.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:2e:15:3a:3a:b6:38:de:d2:68:41:af:85:36:af:9a:02:8e: d6:c8:58:e0:3d:20:94:c9:aa:04:42:8c:0a:4d:8d:d2:8d:1f: 2c:56:a5:f7:fe:6b:d5:42:5e:75:25:46:fb:48:39:f0:6d:ec: f5:a7:f9:fd:ea:e7:26:09:a3:40:0e:6d:ad:71:14:a0:f7:dc: 3a:31:ba:1c:5b:58:39:16:63:80:ed:ad:83:2c:c4:a7:e5:aa: 48:08:2a:06:82:ee:90:30:a9:f3:0e:95:26:71:b5:38:31:25: 0f:9d:c3:78:7e:56:df:ba:39:c5:68:8d:b6:9e:d6:ee:a7:d4: 37:e4:93:81:75:1d:cc:85:aa:53:cd:b7:51:05:6f:4c:63:e4: d0:be:73:b3:f7:44:b8:7d:17:28:78:9a:e4:5e:0b:fe:8f:3f: f1:e5:73:00:c6:aa:f6:87:56:88:71:37:2f:bf:e8:e7:38:14: 58:c2:bf:da:dd:4c:2a:b5:d9:b2:b6:40:3d:91:bb:53:c9:22: c1:c5:8f:10:96:b5:63:96:a7:23:b5:38:fb:01:95:54:c6:aa: 5f:df:66:13:12:e8:34:84:4d:f6:73:e5:f9:13:dd:6a:2b:29: df:cb:f5:fd:7b:e7:23:ca:de:81:33:ca:c4:b3:d5:bb:c4:f8: 89:ad:63:34 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUFb5Otjk8ThSWwQmOTAjjgGZcXT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA1MDMwMjI3NDhaFw0yNzA1MDIwMjMyNDhaMDMxMTAvBgNV BAMTKEFFOUNGQTU1REUwQTg3NjNDMTQ3NzZFRjI3M0E2MDc0OEJFNzcyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiC2wLgl5h80ctsAJh2sLRu8Zp EjyefPEoc71gCZ9mwAWSdNA4MNhttY+GIfbMyAyKEFR0JN+HZtsb7ydaVgLqYOqR z8y6kDrisbBP2Oph8FHPYAqR2Y1YzMB3elKe9AUJ7aX+r/7txnpRxC1EDism5S8p 6uaXpkcaRZt7PrW9W6GcU2HPG5JSP113n2hf835QYntRpMTRPkLFve7tXo/ZMRkV qUqttcmqgI2z93xVwKM6c3XzBHgEsYIKzIeuIxtuZHo1R8LgjDiIuvuQFlkDuyIN c9sfi/9HNxfwuKuVqtLHR9TJJDa0zVHZVTlOiOy2vREnxqFHDZiUJ2wi/YupAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUrpz6Vd4Kh2PBR3bvJzpgdIvnctUwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUxMjM0YzRhLWE4ZmYtNDAzNi04 NDIwLWRhODE2MjExMTgwNi8wLzMxMzUzNzJlMzEzNTJlMzYzMjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PPjANBgkqhkiG 9w0BAQsFAAOCAQEAKy4VOjq2ON7SaEGvhTavmgKO1shY4D0glMmqBEKMCk2N0o0f LFal9/5r1UJedSVG+0g58G3s9af5/ernJgmjQA5trXEUoPfcOjG6HFtYORZjgO2t gyzEp+WqSAgqBoLukDCp8w6VJnG1ODElD53DeH5W37o5xWiNtp7W7qfUN+STgXUd zIWqU823UQVvTGPk0L5zs/dEuH0XKHia5F4L/o8/8eVzAMaq9odWiHE3L7/o5zgU WMK/2t1MKrXZsrZAPZG7U8kiwcWPEJa1Y5anI7U4+wGVVMaqX99mExLoNIRN9nPl +RPdaisp38v1/XvnI8regTPKxLPVu8T4ia1jNA== -----END CERTIFICATE-----Generated at Wed May 13 09:09:05 2026 by rpki-client