$ rpki-client -vvf rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36372e302f32342d3234203d3e20313532333531.roa File: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (raw, json) Hash identifier: 1VC6tx62RM0RJKUyjy72jMG/vbqwvlA0dq4MTvGeKAY= Subject key identifier: F3:7C:A3:05:7B:29:AF:71:59:3B:1B:D5:D3:14:19:99:2D:27:D5:5B Certificate issuer: /CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Certificate serial: 1AFAD357E0D71D5EDBBF06DE15D28597C45A82B0 Authority key identifier: 31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36372e302f32342d3234203d3e20313532333531.roa Signing time: Sun 03 May 2026 02:46:45 +0000 ROA not before: Sun 03 May 2026 02:41:45 +0000 ROA not after: Sun 02 May 2027 02:46:45 +0000 asID: 152351 IP address blocks: 157.10.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fa:d3:57:e0:d7:1d:5e:db:bf:06:de:15:d2:85:97:c4:5a:82:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F5B417659DF6EE03991B6AB5E72A24009BC769 Validity Not Before: May 3 02:41:45 2026 GMT Not After : May 2 02:46:45 2027 GMT Subject: CN=F37CA3057B29AF71593B1BD5D31419992D27D55B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:bf:f8:29:50:e3:98:10:13:42:2b:ad:95: 36:04:b9:3c:06:a9:a4:4e:8f:bf:cf:b7:1b:89:67: 4a:41:04:d2:55:58:e7:7a:fb:7c:e9:38:d4:47:8f: 00:31:0a:e7:71:b3:cf:90:cd:89:db:a8:66:17:7c: 67:34:f4:59:89:bb:a0:d8:ad:1d:1c:3b:8a:1b:66: 8f:19:a4:90:f6:73:9f:d4:f7:51:aa:4f:3c:31:32: 90:0f:35:6a:30:50:a6:47:54:46:f7:ad:38:c5:7e: 9d:6d:e9:4d:39:18:7f:74:e0:fa:09:15:e0:00:d2: 88:65:a3:5c:f9:c4:90:de:d8:97:99:34:36:61:df: 2f:5a:14:57:7c:ad:3f:f3:a3:2c:18:66:48:c1:f5: 27:fd:32:62:83:d7:93:f8:ef:a6:b8:d2:05:71:e9: ea:fa:8f:bd:c2:a0:15:81:9a:49:4f:54:31:f4:3f: 87:73:51:eb:2b:33:cc:0f:b3:54:25:97:97:bf:02: 5c:9e:6f:35:9e:00:b2:e4:6e:43:67:13:ca:e7:72: 59:bc:52:ef:10:a5:5a:5c:60:ab:8f:fa:bc:88:66: cd:a3:aa:4f:2c:77:17:bd:cf:d6:96:4e:45:0c:fe: 25:ba:a2:e3:e3:09:45:1e:06:71:41:13:9c:49:29: cd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7C:A3:05:7B:29:AF:71:59:3B:1B:D5:D3:14:19:99:2D:27:D5:5B X509v3 Authority Key Identifier: keyid:31:F5:B4:17:65:9D:F6:EE:03:99:1B:6A:B5:E7:2A:24:00:9B:C7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/31F5B417659DF6EE03991B6AB5E72A24009BC769.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/3135372e31302e36372e302f32342d3234203d3e20313532333531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.67.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e3:42:5b:ff:f3:04:bc:b2:19:4d:81:f0:3a:b2:0e:aa:78: 05:12:ce:06:51:96:b3:51:d6:1f:a0:3f:ad:47:2d:e6:9a:6d: 8f:e0:4a:db:52:30:5e:92:61:05:68:c4:52:e3:d7:59:02:34: b7:3d:ab:4d:5e:c8:43:68:56:94:79:b4:38:05:bc:45:07:68: d7:e6:87:be:c9:4a:ee:1e:18:2c:a5:3c:dc:0d:e2:e8:85:8e: 01:5d:90:63:43:95:1f:9a:80:3c:93:0a:cc:c9:c2:6c:29:dd: 7f:01:b7:fd:b0:d6:bf:61:84:a7:b2:35:64:40:ca:56:f8:44: 40:aa:33:08:06:de:aa:7f:08:cb:50:10:75:ef:fc:8d:c9:30: 0c:ba:e7:6d:99:8c:9b:47:2c:15:c1:a2:63:58:6a:74:46:54: bd:af:46:11:95:9c:75:91:cc:9c:7f:72:bd:64:cb:87:ef:ea: 32:d9:a4:b0:8b:fb:f9:9c:3f:28:63:d8:99:13:38:91:51:57: 8c:3b:38:90:ba:9f:0c:c1:08:37:ce:63:c0:d9:a5:03:94:f9: b4:af:b5:0a:e2:28:2c:81:db:89:9d:87:17:c8:e4:88:81:a0: 50:d3:73:8a:ec:b1:5a:33:e1:82:18:f2:31:82:e8:e8:98:c1: d7:89:26:0c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGvrTV+DXHV7bvwbeFdKFl8RagrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNUI0MTc2NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQw MDlCQzc2OTAeFw0yNjA1MDMwMjQxNDVaFw0yNzA1MDIwMjQ2NDVaMDMxMTAvBgNV BAMTKEYzN0NBMzA1N0IyOUFGNzE1OTNCMUJENUQzMTQxOTk5MkQyN0Q1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYO7/4KVDjmBATQiutlTYEuTwG qaROj7/PtxuJZ0pBBNJVWOd6+3zpONRHjwAxCudxs8+QzYnbqGYXfGc09FmJu6DY rR0cO4obZo8ZpJD2c5/U91GqTzwxMpAPNWowUKZHVEb3rTjFfp1t6U05GH904PoJ FeAA0ohlo1z5xJDe2JeZNDZh3y9aFFd8rT/zoywYZkjB9Sf9MmKD15P476a40gVx 6er6j73CoBWBmklPVDH0P4dzUesrM8wPs1Qll5e/AlyebzWeALLkbkNnE8rnclm8 Uu8QpVpcYKuP+ryIZs2jqk8sdxe9z9aWTkUM/iW6ouPjCUUeBnFBE5xJKc0rAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU83yjBXspr3FZOxvV0xQZmS0n1VswHwYDVR0j BBgwFoAUMfW0F2Wd9u4DmRtqtecqJACbx2kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBjMjY2ZTYtMGI4NC00MzFmLTllNzQtMDZkM2Q5M2U5NzA0LzAvMzFGNUI0MTc2 NTlERjZFRTAzOTkxQjZBQjVFNzJBMjQwMDlCQzc2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zMUY1QjQxNzY1OURGNkVFMDM5OTFCNkFCNUU3MkEyNDAwOUJD NzY5LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgwYzI2NmU2LTBiODQtNDMxZi05 ZTc0LTA2ZDNkOTNlOTcwNC8wLzMxMzUzNzJlMzEzMDJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0KQzANBgkqhkiG 9w0BAQsFAAOCAQEARONCW//zBLyyGU2B8DqyDqp4BRLOBlGWs1HWH6A/rUct5ppt j+BK21IwXpJhBWjEUuPXWQI0tz2rTV7IQ2hWlHm0OAW8RQdo1+aHvslK7h4YLKU8 3A3i6IWOAV2QY0OVH5qAPJMKzMnCbCndfwG3/bDWv2GEp7I1ZEDKVvhEQKozCAbe qn8Iy1AQde/8jckwDLrnbZmMm0csFcGiY1hqdEZUva9GEZWcdZHMnH9yvWTLh+/q MtmksIv7+Zw/KGPYmRM4kVFXjDs4kLqfDMEIN85jwNmlA5T5tK+1CuIoLIHbiZ2H F8jkiIGgUNNziuyxWjPhghjyMYLo6JjB14kmDA== -----END CERTIFICATE-----Generated at Wed May 13 07:36:16 2026 by rpki-client