$ rpki-client -vvf rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36332e302f32342d3234203d3e20313532333733.roa File: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (raw, json) Hash identifier: 0IHHzyS35LBwjniI5IhdPgVL9nvhStnNpY8Gs7Vqfnc= Subject key identifier: 2B:7D:3C:39:32:23:3F:20:46:EB:39:A5:F6:0A:36:08:C4:FC:08:83 Certificate issuer: /CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Certificate serial: 564E41E316F09B77A1C11B714D7364A93630238B Authority key identifier: FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36332e302f32342d3234203d3e20313532333733.roa Signing time: Sun 03 May 2026 02:32:48 +0000 ROA not before: Sun 03 May 2026 02:27:48 +0000 ROA not after: Sun 02 May 2027 02:32:48 +0000 asID: 152373 IP address blocks: 157.15.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:4e:41:e3:16:f0:9b:77:a1:c1:1b:71:4d:73:64:a9:36:30:23:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D Validity Not Before: May 3 02:27:48 2026 GMT Not After : May 2 02:32:48 2027 GMT Subject: CN=2B7D3C3932233F2046EB39A5F60A3608C4FC0883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:84:9a:1e:a9:bc:74:26:d6:4d:66:57:d5:b8: 19:e0:8d:3b:19:99:48:56:9b:5b:b4:b6:f7:7e:65: eb:1f:10:5c:11:7c:6c:2f:46:03:72:9f:70:84:ac: 75:95:56:1b:ee:68:be:b2:c5:15:a5:0c:a1:b8:b7: c5:8b:d2:92:2d:ef:1b:a5:e0:1a:1b:66:df:d0:d7: 52:18:33:57:e5:a5:5f:7f:99:df:be:18:28:2f:03: 1c:0f:40:53:f3:ca:e4:e8:70:4c:0e:6f:a7:a7:5f: 03:a9:f1:9f:4d:5f:f5:83:35:0d:05:36:95:8d:fc: c1:e1:e9:a8:40:65:ab:6b:cf:e5:c2:74:bd:17:10: b8:7f:1a:c3:b9:2a:a0:51:94:7a:8f:86:a7:cf:f0: c2:cc:35:bc:1c:3e:93:56:4f:06:c2:a6:f9:34:ec: fb:9e:83:38:a7:19:36:bf:59:a3:ce:a1:c8:5d:d7: 94:c4:5e:25:c7:e9:d0:a6:88:a6:f6:85:b9:55:8f: ee:a0:db:06:88:b0:44:67:03:ce:1a:6b:98:fd:e1: be:c3:89:3f:ea:2e:01:81:4f:46:1f:71:18:5e:cd: df:45:47:70:75:af:ab:d4:cb:44:6f:2d:5c:a0:7f: 1f:0e:7b:81:e9:b6:51:53:59:1b:e9:11:bd:dc:8f: ef:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7D:3C:39:32:23:3F:20:46:EB:39:A5:F6:0A:36:08:C4:FC:08:83 X509v3 Authority Key Identifier: keyid:FC:17:10:E2:A9:2F:6D:70:BD:39:45:BF:7C:D8:C5:C1:A2:94:EF:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/FC1710E2A92F6D70BD3945BF7CD8C5C1A294EF1D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/3135372e31352e36332e302f32342d3234203d3e20313532333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.63.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:1a:c9:12:eb:d6:83:b7:17:27:41:02:46:5f:57:49:1b:16: f9:f3:14:f7:54:af:73:38:57:1b:b5:33:56:10:8a:58:f6:ad: 6d:56:7c:4c:04:9e:4e:bf:5c:a1:79:fe:60:ca:37:55:d8:9e: c3:bc:fc:7d:56:45:c5:63:b7:db:fa:59:16:7c:a2:11:5d:78: 6c:62:47:55:f0:99:5d:b9:3a:96:86:db:6a:1d:9e:e2:01:82: a0:a2:38:8b:aa:7b:7c:8c:b2:ac:7d:b3:d4:f3:3e:40:61:ba: 72:92:a2:fc:43:ca:b1:89:20:1b:84:51:ad:63:6f:d9:53:65: e9:79:7f:f9:56:7c:5a:fe:a2:99:5e:78:4e:7e:47:a3:bd:16: 4d:69:9f:a8:49:31:4b:17:ec:02:77:26:59:67:11:e9:cd:43: 0a:5f:e8:67:94:99:04:10:1f:4b:e5:ed:d1:ce:7a:e6:e0:e6: d4:0c:6c:8a:4c:54:54:fe:16:10:52:1c:80:30:4d:7c:5d:4a: 98:fa:b5:44:b2:3d:3b:6b:54:8f:09:ab:34:be:69:68:c3:7a: ef:6a:3c:82:80:95:f1:bc:ee:4a:4c:ba:16:db:11:38:25:28: 44:7f:80:2d:d5:c4:06:3e:30:16:9c:43:f0:25:36:35:e1:13: 42:cf:ef:b2 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVk5B4xbwm3ehwRtxTXNkqTYwI4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkMxNzEwRTJBOTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFB Mjk0RUYxRDAeFw0yNjA1MDMwMjI3NDhaFw0yNzA1MDIwMjMyNDhaMDMxMTAvBgNV BAMTKDJCN0QzQzM5MzIyMzNGMjA0NkVCMzlBNUY2MEEzNjA4QzRGQzA4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPhJoeqbx0JtZNZlfVuBngjTsZ mUhWm1u0tvd+ZesfEFwRfGwvRgNyn3CErHWVVhvuaL6yxRWlDKG4t8WL0pIt7xul 4BobZt/Q11IYM1flpV9/md++GCgvAxwPQFPzyuTocEwOb6enXwOp8Z9NX/WDNQ0F NpWN/MHh6ahAZatrz+XCdL0XELh/GsO5KqBRlHqPhqfP8MLMNbwcPpNWTwbCpvk0 7PuegzinGTa/WaPOochd15TEXiXH6dCmiKb2hblVj+6g2waIsERnA84aa5j94b7D iT/qLgGBT0YfcRhezd9FR3B1r6vUy0RvLVygfx8Oe4HptlFTWRvpEb3cj+9VAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUK308OTIjPyBG6zml9go2CMT8CIMwHwYDVR0j BBgwFoAU/BcQ4qkvbXC9OUW/fNjFwaKU7x0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyMzRjNGEtYThmZi00MDM2LTg0MjAtZGE4MTYyMTExODA2LzAvRkMxNzEwRTJB OTJGNkQ3MEJEMzk0NUJGN0NEOEM1QzFBMjk0RUYxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9GQzE3MTBFMkE5MkY2RDcwQkQzOTQ1QkY3Q0Q4QzVDMUEyOTRF RjFELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzUxMjM0YzRhLWE4ZmYtNDAzNi04 NDIwLWRhODE2MjExMTgwNi8wLzMxMzUzNzJlMzEzNTJlMzYzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PPzANBgkqhkiG 9w0BAQsFAAOCAQEAXxrJEuvWg7cXJ0ECRl9XSRsW+fMU91SvczhXG7UzVhCKWPat bVZ8TASeTr9coXn+YMo3Vdiew7z8fVZFxWO32/pZFnyiEV14bGJHVfCZXbk6lobb ah2e4gGCoKI4i6p7fIyyrH2z1PM+QGG6cpKi/EPKsYkgG4RRrWNv2VNl6Xl/+VZ8 Wv6imV54Tn5Ho70WTWmfqEkxSxfsAncmWWcR6c1DCl/oZ5SZBBAfS+Xt0c565uDm 1AxsikxUVP4WEFIcgDBNfF1KmPq1RLI9O2tUjwmrNL5paMN672o8goCV8bzuSky6 FtsROCUoRH+ALdXEBj4wFpxD8CU2NeETQs/vsg== -----END CERTIFICATE-----Generated at Wed May 13 09:12:47 2026 by rpki-client