$ rpki-client -vvf rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa File: 3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa (raw, json) Hash identifier: iyyTicCYI3PReuzMhbLu1UKWtg/CJ9OarlydnyTRbJo= Subject key identifier: 8A:5A:6B:13:38:9E:0A:C1:58:AA:D8:6C:18:7A:C0:3B:45:76:13:C8 Certificate issuer: /CN=408DEB7465856EE053B64340FA814B862FA5ED30 Certificate serial: 1BE8136266ADED4DDD18F25C362A343330E7C643 Authority key identifier: 40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa Signing time: Sun 03 May 2026 02:47:55 +0000 ROA not before: Sun 03 May 2026 02:42:55 +0000 ROA not after: Sun 02 May 2027 02:47:55 +0000 asID: 55685 IP address blocks: 150.107.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e8:13:62:66:ad:ed:4d:dd:18:f2:5c:36:2a:34:33:30:e7:c6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408DEB7465856EE053B64340FA814B862FA5ED30 Validity Not Before: May 3 02:42:55 2026 GMT Not After : May 2 02:47:55 2027 GMT Subject: CN=8A5A6B13389E0AC158AAD86C187AC03B457613C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:55:50:38:eb:3a:0a:6a:a6:d0:3b:2a:d7:7b: 25:73:37:41:de:b7:e5:a6:8d:19:6b:51:7c:30:1e: d9:81:da:0d:c3:1c:37:ac:b3:72:36:bf:85:b0:60: 0a:67:5c:f0:8e:bb:45:43:60:a0:e5:4d:69:dd:20: 5b:00:63:57:cf:61:25:be:51:68:2a:39:e4:94:5c: 24:3d:26:a8:8f:74:ac:22:68:0e:07:fd:cc:dc:81: 00:8e:5a:6a:af:2b:e5:13:c6:4f:30:d9:71:84:7e: 09:41:52:ac:1c:2b:ea:78:60:7c:f6:bf:31:17:30: 40:13:cf:8a:f5:c8:be:9f:ea:b4:d1:4c:a6:4a:81: 7c:81:9a:10:4c:45:d3:7e:48:a9:90:23:12:c9:fd: 2c:21:93:da:a4:90:58:fb:7f:65:84:cf:82:a7:8e: 1d:34:7e:c0:02:e6:a0:da:f9:93:07:6d:df:76:2a: cb:45:ac:b5:b7:14:8a:dd:f5:5f:e0:74:91:0d:b4: a5:1c:23:0a:ed:22:4c:e9:cb:f5:af:3c:1e:5d:77: a4:90:10:d6:9f:0f:38:c8:24:d2:44:c1:52:53:b1: b1:a0:cd:8d:ae:fd:e3:1f:d8:e6:0c:f0:5b:b4:8d: 42:fc:fe:c4:b6:c2:02:31:37:7a:a4:c0:89:e1:d6: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5A:6B:13:38:9E:0A:C1:58:AA:D8:6C:18:7A:C0:3B:45:76:13:C8 X509v3 Authority Key Identifier: keyid:40:8D:EB:74:65:85:6E:E0:53:B6:43:40:FA:81:4B:86:2F:A5:ED:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/408DEB7465856EE053B64340FA814B862FA5ED30.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/408DEB7465856EE053B64340FA814B862FA5ED30.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3135302e3130372e3134302e302f32342d3234203d3e203535363835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.140.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:fe:b1:44:af:ef:a7:26:fa:49:2a:42:91:bf:68:c2:c5:b4: b4:5d:f1:ca:3d:7f:bd:e4:20:5e:fa:a1:e3:4d:0d:dc:7f:4b: d5:8e:8f:a6:92:51:ca:5b:99:70:39:97:7a:2c:8f:1a:63:e7: 23:6b:1b:3d:72:a3:8e:af:d0:f0:aa:27:8d:3a:4b:bb:75:51: db:b3:45:a6:50:07:23:c5:b3:22:5d:a1:55:43:5a:d8:03:cd: 86:06:8d:14:00:57:21:0d:38:af:d9:59:87:69:23:1a:f1:0f: a7:f8:b2:d3:f5:86:60:bd:9e:a2:b0:81:ff:0b:34:51:77:c0: 9b:49:d1:70:8b:a3:b7:26:68:82:d4:cb:e9:36:e2:c0:4b:94: d7:39:80:4f:3b:f6:6c:1f:b7:3c:ad:ce:2e:3e:e2:77:0c:fb: ff:fa:62:12:0a:d5:7f:5e:2f:c6:b1:c1:7e:a3:70:40:9a:8a: 87:0b:de:5e:b7:27:0a:f0:9c:71:91:e1:6b:53:95:03:7a:24: ea:d5:b3:d5:41:47:82:d6:6c:f7:18:16:5f:61:ec:70:bf:78: 54:21:6b:66:4b:de:1f:27:2c:73:9c:fb:0e:ad:af:2b:62:7d: 74:a3:bc:d1:75:09:4c:ae:7c:03:db:d3:3f:5b:61:2f:f3:83: d5:20:e7:9c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUG+gTYmat7U3dGPJcNio0MzDnxkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4REVCNzQ2NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYy RkE1RUQzMDAeFw0yNjA1MDMwMjQyNTVaFw0yNzA1MDIwMjQ3NTVaMDMxMTAvBgNV BAMTKDhBNUE2QjEzMzg5RTBBQzE1OEFBRDg2QzE4N0FDMDNCNDU3NjEzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVVA46zoKaqbQOyrXeyVzN0He t+WmjRlrUXwwHtmB2g3DHDess3I2v4WwYApnXPCOu0VDYKDlTWndIFsAY1fPYSW+ UWgqOeSUXCQ9JqiPdKwiaA4H/czcgQCOWmqvK+UTxk8w2XGEfglBUqwcK+p4YHz2 vzEXMEATz4r1yL6f6rTRTKZKgXyBmhBMRdN+SKmQIxLJ/Swhk9qkkFj7f2WEz4Kn jh00fsAC5qDa+ZMHbd92KstFrLW3FIrd9V/gdJENtKUcIwrtIkzpy/WvPB5dd6SQ ENafDzjIJNJEwVJTsbGgzY2u/eMf2OYM8Fu0jUL8/sS2wgIxN3qkwInh1uh5AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUilprEzieCsFYqthsGHrAO0V2E8gwHwYDVR0j BBgwFoAUQI3rdGWFbuBTtkNA+oFLhi+l7TAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODVkOGRhYjQtOGJiNi00ZWQwLThkYWItNWE0MDYxNjdiOTlkLzAvNDA4REVCNzQ2 NTg1NkVFMDUzQjY0MzQwRkE4MTRCODYyRkE1RUQzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDhERUI3NDY1ODU2RUUwNTNCNjQzNDBGQTgxNEI4NjJGQTVF RDMwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04 ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzUzMDJlMzEzMDM3MmUzMTM0MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNTM1MzYzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmuMMA0GCSqG SIb3DQEBCwUAA4IBAQA6/rFEr++nJvpJKkKRv2jCxbS0XfHKPX+95CBe+qHjTQ3c f0vVjo+mklHKW5lwOZd6LI8aY+cjaxs9cqOOr9DwqieNOku7dVHbs0WmUAcjxbMi XaFVQ1rYA82GBo0UAFchDTiv2VmHaSMa8Q+n+LLT9YZgvZ6isIH/CzRRd8CbSdFw i6O3JmiC1MvpNuLAS5TXOYBPO/ZsH7c8rc4uPuJ3DPv/+mISCtV/Xi/GscF+o3BA moqHC95etycK8JxxkeFrU5UDeiTq1bPVQUeC1mz3GBZfYexwv3hUIWtmS94fJyxz nPsOra8rYn10o7zRdQlMrnwD29M/W2Ev84PVIOec -----END CERTIFICATE-----Generated at Wed May 13 02:15:55 2026 by rpki-client