$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31352e302f32342d3234203d3e203338353030.roa File: 3133372e35392e31352e302f32342d3234203d3e203338353030.roa (raw, json) Hash identifier: mtEcadi16+fViy+3NdHpH4yi3hZq4j3yUz7Ba7wpACE= Subject key identifier: 69:B1:F3:38:DC:BD:6C:DB:C2:C7:5C:A3:F7:28:19:E8:BD:15:B5:E9 Certificate issuer: /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Certificate serial: 4A0D3A55B9591B87A5CFA739EB36482F8B68944F Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31352e302f32342d3234203d3e203338353030.roa Signing time: Sun 03 May 2026 02:59:53 +0000 ROA not before: Sun 03 May 2026 02:54:53 +0000 ROA not after: Sun 02 May 2027 02:59:53 +0000 asID: 38500 IP address blocks: 137.59.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0d:3a:55:b9:59:1b:87:a5:cf:a7:39:eb:36:48:2f:8b:68:94:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293 Validity Not Before: May 3 02:54:53 2026 GMT Not After : May 2 02:59:53 2027 GMT Subject: CN=69B1F338DCBD6CDBC2C75CA3F72819E8BD15B5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:99:cb:04:d3:38:cd:f5:af:6d:f8:b8:35: 48:eb:83:cf:80:95:80:ac:bd:3a:00:a4:59:f7:1e: 7b:18:29:b8:62:e1:0a:db:15:27:e8:0b:30:26:4d: 49:07:c5:7a:77:57:6a:42:98:9b:14:ed:88:8a:2a: db:9d:fb:3f:e7:15:84:f1:7a:59:b1:db:e0:81:59: a6:0c:33:65:b2:01:bf:06:23:e8:df:ce:f2:f1:d7: ee:47:d5:eb:22:82:05:66:94:de:a9:1e:3a:97:18: b6:c1:db:b2:81:65:b4:f5:ef:06:56:f0:f0:af:2d: fc:d8:27:18:e0:4f:75:23:84:b1:db:b7:ee:97:ab: 20:30:88:7a:48:e8:3b:64:a8:01:9d:79:98:12:68: 85:c6:75:2a:c1:3c:ca:55:16:33:2c:f5:f3:46:0f: 72:84:7a:30:5e:ac:74:84:34:f5:5c:f4:98:e1:d3: d9:33:df:df:b8:b1:ed:ec:f0:39:34:c5:b3:5e:42: d6:eb:69:7d:6a:7e:b4:9e:90:17:e5:46:8c:db:80: 44:8f:bc:63:8d:1b:46:75:34:0a:68:14:bb:dc:a4: 4e:d9:88:44:4c:d1:22:35:8a:47:2a:0a:85:a8:45: 64:a6:a9:a8:a2:52:63:53:30:f2:e1:ba:f9:8d:fc: 29:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B1:F3:38:DC:BD:6C:DB:C2:C7:5C:A3:F7:28:19:E8:BD:15:B5:E9 X509v3 Authority Key Identifier: keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3133372e35392e31352e302f32342d3234203d3e203338353030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.59.15.0/24 Signature Algorithm: sha256WithRSAEncryption 60:c4:96:b2:89:8d:44:1f:99:81:8d:c6:ea:f3:5d:e3:c9:b3: 95:14:1e:ab:c0:e2:5d:35:e1:2e:88:ab:c9:a8:bd:2e:ad:17: df:23:96:fe:b0:73:3d:e0:5e:5e:5d:e7:c7:9f:92:0f:4e:87: 5e:e0:25:af:be:e5:50:1f:c1:61:8e:91:75:45:e7:88:66:58: 90:e8:66:51:2d:71:32:eb:2e:d3:1e:c4:33:55:67:2e:56:7e: 02:e8:b4:4a:2c:2f:5b:dd:75:b9:79:a3:6f:f7:d0:83:3a:f0: fc:80:bf:91:0d:2e:0b:5b:0a:d6:fa:1b:03:f6:f9:7f:3a:9b: 7f:74:62:9b:33:b8:4b:d4:8b:81:b2:f6:af:00:07:29:19:b0: 3b:85:ce:77:8c:71:11:c0:8e:3a:f2:fc:5b:2d:eb:f9:89:fe: 6a:cd:21:79:90:9b:22:ba:a3:5c:ac:17:44:cc:be:b8:f5:a3: 61:63:76:8a:80:40:dd:ab:1a:a7:b4:41:c1:3c:7a:39:ac:92: f7:ec:0f:aa:1f:54:79:4d:87:2e:28:35:96:1f:b5:c2:8d:93: 85:22:84:29:3a:ed:21:7f:6e:13:18:4c:46:c6:ba:75:ab:5b: b4:ec:60:5f:ed:b0:7f:8b:2d:d0:57:39:5b:ca:f0:c0:95:40: ab:dd:06:88 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUSg06VblZG4elz6c56zZIL4tolE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF QkZDOTI5MzAeFw0yNjA1MDMwMjU0NTNaFw0yNzA1MDIwMjU5NTNaMDMxMTAvBgNV BAMTKDY5QjFGMzM4RENCRDZDREJDMkM3NUNBM0Y3MjgxOUU4QkQxNUI1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSJnLBNM4zfWvbfi4NUjrg8+A lYCsvToApFn3HnsYKbhi4QrbFSfoCzAmTUkHxXp3V2pCmJsU7YiKKtud+z/nFYTx elmx2+CBWaYMM2WyAb8GI+jfzvLx1+5H1esiggVmlN6pHjqXGLbB27KBZbT17wZW 8PCvLfzYJxjgT3UjhLHbt+6XqyAwiHpI6DtkqAGdeZgSaIXGdSrBPMpVFjMs9fNG D3KEejBerHSENPVc9Jjh09kz39+4se3s8Dk0xbNeQtbraX1qfrSekBflRozbgESP vGONG0Z1NApoFLvcpE7ZiERM0SI1ikcqCoWoRWSmqaiiUmNTMPLhuvmN/CnBAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUabHzONy9bNvCx1yj9ygZ6L0VtekwHwYDVR0j BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5 MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5 MjkzLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05 ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzMzNzJlMzUzOTJlMzEzNTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMzMzgzNTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACJOw8wDQYJKoZIhvcN AQELBQADggEBAGDElrKJjUQfmYGNxurzXePJs5UUHqvA4l014S6Iq8movS6tF98j lv6wcz3gXl5d58efkg9Oh17gJa++5VAfwWGOkXVF54hmWJDoZlEtcTLrLtMexDNV Zy5WfgLotEosL1vddbl5o2/30IM68PyAv5ENLgtbCtb6GwP2+X86m390YpszuEvU i4Gy9q8ABykZsDuFzneMcRHAjjry/Fst6/mJ/mrNIXmQmyK6o1ysF0TMvrj1o2Fj doqAQN2rGqe0QcE8ejmskvfsD6ofVHlNhy4oNZYftcKNk4UihCk67SF/bhMYTEbG unWrW7TsYF/tsH+LLdBXOVvK8MCVQKvdBog= -----END CERTIFICATE-----Generated at Wed May 13 03:16:56 2026 by rpki-client