$ rpki-client -vvf rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa File: 3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa (raw, json) Hash identifier: 7fMJt0M4VQARtwl7gUUn1d68a36tK2tjagq7bmrxvDM= Subject key identifier: 59:03:21:22:8C:43:BA:DE:F4:17:EF:A1:18:B9:9A:06:3E:19:A3:B4 Certificate issuer: /CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Certificate serial: 4586234E10B6D15FE6337B8E1DD1696FF423A63D Authority key identifier: C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa Signing time: Sun 03 May 2026 02:58:25 +0000 ROA not before: Sun 03 May 2026 02:53:25 +0000 ROA not after: Sun 02 May 2027 02:58:25 +0000 asID: 152379 IP address blocks: 157.15.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:86:23:4e:10:b6:d1:5f:e6:33:7b:8e:1d:d1:69:6f:f4:23:a6:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C03D5C36BA12143F61D38A8EBDDB69F3B5990721 Validity Not Before: May 3 02:53:25 2026 GMT Not After : May 2 02:58:25 2027 GMT Subject: CN=590321228C43BADEF417EFA118B99A063E19A3B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:7c:d0:89:c1:ba:d9:94:1e:1c:61:26:93: 2e:90:28:84:8e:9a:e6:3d:c1:de:4c:73:13:98:14: 92:5e:05:be:ca:a4:04:47:7d:f0:53:0c:95:c4:09: 7a:57:3f:3b:c1:fc:59:e8:94:18:b7:ef:c9:88:40: b6:ac:c8:f1:3a:4f:40:7c:b0:3a:3d:f4:0f:3a:4e: 3e:05:fe:6c:cb:73:7c:1b:52:73:00:ef:b7:61:04: 34:e1:81:0c:13:6b:28:72:d7:6f:2f:b6:3e:66:da: 19:34:c2:8b:73:b8:91:70:b0:84:16:da:d7:83:93: c4:3a:b8:90:b2:8c:98:76:82:ce:a3:95:ad:d5:cd: 81:4e:fc:b2:fd:6e:e5:d7:5c:e0:17:a0:63:f6:40: 71:1f:f2:19:05:91:b5:48:39:e5:33:ed:f2:bf:d6: c8:9c:11:00:35:a1:9e:4b:78:0d:dc:83:95:fb:be: 02:cb:f8:d6:44:bb:dd:0f:ab:b9:1d:d1:db:ef:ca: ed:eb:d5:9d:b5:27:51:0d:fb:a7:8b:30:02:34:ef: c1:5f:d2:f7:6b:da:59:25:c3:bb:e6:41:32:4e:02: 1c:0e:46:ac:52:b7:70:5e:96:76:cd:f6:e2:36:85: da:df:ce:a1:45:5f:f2:de:78:c9:31:dd:49:77:97: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:03:21:22:8C:43:BA:DE:F4:17:EF:A1:18:B9:9A:06:3E:19:A3:B4 X509v3 Authority Key Identifier: keyid:C0:3D:5C:36:BA:12:14:3F:61:D3:8A:8E:BD:DB:69:F3:B5:99:07:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C03D5C36BA12143F61D38A8EBDDB69F3B5990721.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ab002992-acb2-4f77-997d-3217ead99bb5/0/3135372e31352e3137342e302f32342d3234203d3e20313532333739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.174.0/24 Signature Algorithm: sha256WithRSAEncryption 00:f0:43:3b:1d:51:30:41:c6:42:54:76:8b:7d:ba:20:33:a5: 2f:c9:1b:21:09:52:bf:42:c1:12:09:c5:f7:b8:ad:56:0d:c8: 88:ef:d5:29:bc:9d:82:b9:3e:9d:27:f9:43:05:88:10:98:d0: 55:89:e5:c4:35:ae:79:83:33:2c:45:e6:87:47:df:8a:7d:14: 5f:0c:20:c6:5d:2f:cf:a1:0b:56:d2:ab:78:71:33:86:1e:80: 01:8b:56:d8:12:42:9f:46:b6:0a:d6:1a:7a:0b:4b:8a:22:d4: 08:1b:22:d5:43:dc:e2:fa:64:10:ba:8c:c2:7e:0a:2a:c5:96: 1f:56:04:8e:aa:d6:9d:99:39:97:a1:e5:68:45:87:41:18:bb: dd:38:72:95:84:e6:97:c0:6c:d1:7c:11:1b:8e:e9:ba:18:13: 9f:6f:17:2a:7c:a7:96:82:aa:11:53:4b:9f:1f:70:5e:db:d7: 19:6b:10:5b:bb:4f:ce:55:51:72:e2:8c:a9:cf:d3:51:91:d6: c3:88:55:45:f0:88:a4:71:2d:43:e7:b0:0b:2f:86:d1:c1:b1: eb:7d:ef:7e:4e:f3:c3:95:92:d3:d6:fb:c4:ae:5a:3d:9f:5e: 80:f7:a0:f1:90:52:16:32:f7:d3:39:67:52:e8:6d:4a:db:49: 95:28:9b:76 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURYYjThC20V/mM3uOHdFpb/Qjpj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzRDVDMzZCQTEyMTQzRjYxRDM4QThFQkREQjY5RjNC NTk5MDcyMTAeFw0yNjA1MDMwMjUzMjVaFw0yNzA1MDIwMjU4MjVaMDMxMTAvBgNV BAMTKDU5MDMyMTIyOEM0M0JBREVGNDE3RUZBMTE4Qjk5QTA2M0UxOUEzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Z3zQicG62ZQeHGEmky6QKISO muY9wd5McxOYFJJeBb7KpARHffBTDJXECXpXPzvB/FnolBi378mIQLasyPE6T0B8 sDo99A86Tj4F/mzLc3wbUnMA77dhBDThgQwTayhy128vtj5m2hk0wotzuJFwsIQW 2teDk8Q6uJCyjJh2gs6jla3VzYFO/LL9buXXXOAXoGP2QHEf8hkFkbVIOeUz7fK/ 1sicEQA1oZ5LeA3cg5X7vgLL+NZEu90Pq7kd0dvvyu3r1Z21J1EN+6eLMAI078Ff 0vdr2lklw7vmQTJOAhwORqxSt3BelnbN9uI2hdrfzqFFX/LeeMkx3Ul3l239AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUWQMhIoxDut70F++hGLmaBj4Zo7QwHwYDVR0j BBgwFoAUwD1cNroSFD9h04qOvdtp87WZByEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWIwMDI5OTItYWNiMi00Zjc3LTk5N2QtMzIxN2VhZDk5YmI1LzAvQzAzRDVDMzZC QTEyMTQzRjYxRDM4QThFQkREQjY5RjNCNTk5MDcyMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DMDNENUMzNkJBMTIxNDNGNjFEMzhBOEVCRERCNjlGM0I1OTkw NzIxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2FiMDAyOTkyLWFjYjItNGY3Ny05 OTdkLTMyMTdlYWQ5OWJiNS8wLzMxMzUzNzJlMzEzNTJlMzEzNzM0MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzMzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ+uMA0GCSqG SIb3DQEBCwUAA4IBAQAA8EM7HVEwQcZCVHaLfbogM6UvyRshCVK/QsESCcX3uK1W DciI79UpvJ2CuT6dJ/lDBYgQmNBVieXENa55gzMsReaHR9+KfRRfDCDGXS/PoQtW 0qt4cTOGHoABi1bYEkKfRrYK1hp6C0uKItQIGyLVQ9zi+mQQuozCfgoqxZYfVgSO qtadmTmXoeVoRYdBGLvdOHKVhOaXwGzRfBEbjum6GBOfbxcqfKeWgqoRU0ufH3Be 29cZaxBbu0/OVVFy4oypz9NRkdbDiFVF8IikcS1D57ALL4bRwbHrfe9+TvPDlZLT 1vvErlo9n16A96DxkFIWMvfTOWdS6G1K20mVKJt2 -----END CERTIFICATE-----Generated at Wed May 13 07:14:36 2026 by rpki-client