$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa File: 3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa (raw, json) Hash identifier: 8PaSmkIi/AG5Y6kfMrzLz9gNpKv2AOHGORsmHx3cK94= Subject key identifier: D6:4B:05:13:B8:B0:05:2D:66:C7:2D:04:17:0E:80:0E:58:9C:6F:D5 Certificate issuer: /CN=67239F5E47D123019D26807163E6542441401507 Certificate serial: 7588B74699801B98EA2F1CB33DB691A2C878C2A7 Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa Signing time: Sun 03 May 2026 03:03:31 +0000 ROA not before: Sun 03 May 2026 02:58:31 +0000 ROA not after: Sun 02 May 2027 03:03:31 +0000 asID: 18059 IP address blocks: 150.107.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:88:b7:46:99:80:1b:98:ea:2f:1c:b3:3d:b6:91:a2:c8:78:c2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67239F5E47D123019D26807163E6542441401507 Validity Not Before: May 3 02:58:31 2026 GMT Not After : May 2 03:03:31 2027 GMT Subject: CN=D64B0513B8B0052D66C72D04170E800E589C6FD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:14:0b:b9:94:65:1f:c1:00:13:a2:7f:87: 49:67:f6:1a:c2:23:29:5c:a7:25:8d:b0:a0:b0:a9: 9c:d2:37:62:0f:74:8b:85:5c:1b:14:d4:a1:58:8b: 5a:f2:04:17:2d:69:98:09:50:ef:49:9f:0e:b1:8d: b4:6b:54:00:01:be:17:27:24:f7:fe:a6:dc:c8:97: bd:e8:cf:3b:c6:e1:08:59:5d:5c:08:45:d2:40:9e: 16:ab:75:d4:79:11:c4:37:3d:47:05:b9:33:9c:a3: b7:a3:57:e7:84:49:6b:70:44:44:06:c1:a1:1a:af: c1:cd:9e:17:df:1f:0a:25:e1:66:bf:30:40:ce:61: 06:bb:0d:49:39:fc:a4:4f:5a:90:e7:be:71:a7:7a: 1b:a6:03:92:a4:2b:f3:44:6a:c8:8c:e1:ba:dd:c1: 51:2b:9d:fb:59:d8:e9:89:39:1a:dd:ec:17:01:e6: ea:8a:23:97:90:8d:55:47:93:2f:cc:5f:fe:be:61: 61:4b:c5:03:98:6f:bd:33:8b:95:55:eb:5c:bf:f9: 89:e1:1b:58:70:65:23:d1:b7:53:b8:49:3d:1a:ca: e0:7c:2d:1f:ff:67:81:53:6f:19:31:1c:b1:11:42: 1a:81:3f:86:60:7d:9b:e8:bd:47:d2:c0:fc:f9:ba: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:05:13:B8:B0:05:2D:66:C7:2D:04:17:0E:80:0E:58:9C:6F:D5 X509v3 Authority Key Identifier: keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3135302e3130372e3130382e302f32322d3234203d3e203138303539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.107.108.0/22 Signature Algorithm: sha256WithRSAEncryption 85:6b:44:69:19:f4:2e:a2:94:58:27:f5:c0:a6:0c:c5:1a:14: 97:3a:9a:f5:16:86:b2:a2:d7:ca:b4:ac:0c:af:ff:24:55:4e: 57:47:9a:89:33:21:f3:51:db:a5:35:0c:45:d7:70:ea:f7:b3: 43:52:9f:06:ab:af:53:2f:1a:7b:9e:27:fd:12:47:f5:47:ae: 56:bb:23:01:92:fa:11:de:d1:88:dc:fd:2b:35:bf:b2:09:8b: c0:fa:ea:0f:ec:c7:52:1c:23:eb:28:3e:59:2d:14:0c:0a:b1: b7:ad:67:3c:61:53:9d:ea:79:ab:da:b7:91:d0:9d:1c:a6:ae: 5a:7d:d6:20:c2:11:67:06:9c:f1:c1:ce:61:d6:c3:35:f0:ad: 80:0a:ff:9a:32:d7:ff:fa:1e:2a:ad:2d:47:7e:76:d3:37:4c: 4b:f8:c6:6f:e7:9d:d2:3b:44:03:61:ab:66:f1:a1:2b:43:bb: cc:3f:ba:c8:00:6d:85:6c:97:a2:a0:5d:c8:82:6d:8f:42:30: a7:44:df:c2:23:37:dd:fe:1d:bd:e5:34:54:7c:d8:b8:e8:ef: 9b:94:c0:e1:3a:ea:f8:ff:75:85:06:6e:9f:59:9b:5c:1e:7c: df:e5:3b:e8:15:57:10:73:a9:94:18:04:8f:77:08:92:ba:4c: 60:0b:ef:73 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUdYi3RpmAG5jqLxyzPbaRosh4wqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjcyMzlGNUU0N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0 MTQwMTUwNzAeFw0yNjA1MDMwMjU4MzFaFw0yNzA1MDIwMzAzMzFaMDMxMTAvBgNV BAMTKEQ2NEIwNTEzQjhCMDA1MkQ2NkM3MkQwNDE3MEU4MDBFNTg5QzZGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7BQLuZRlH8EAE6J/h0ln9hrC IylcpyWNsKCwqZzSN2IPdIuFXBsU1KFYi1ryBBctaZgJUO9Jnw6xjbRrVAABvhcn JPf+ptzIl73ozzvG4QhZXVwIRdJAnharddR5EcQ3PUcFuTOco7ejV+eESWtwREQG waEar8HNnhffHwol4Wa/MEDOYQa7DUk5/KRPWpDnvnGnehumA5KkK/NEasiM4brd wVErnftZ2OmJORrd7BcB5uqKI5eQjVVHky/MX/6+YWFLxQOYb70zi5VV61y/+Ynh G1hwZSPRt1O4ST0ayuB8LR//Z4FTbxkxHLERQhqBP4ZgfZvovUfSwPz5ugezAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU1ksFE7iwBS1mxy0EFw6ADlicb9UwHwYDVR0j BBgwFoAUZyOfXkfRIwGdJoBxY+ZUJEFAFQcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzI4MzY3NjMtMTJiNi00ZDhmLWFkMGItNGNkNWI2MTk1OWVmLzAvNjcyMzlGNUU0 N0QxMjMwMTlEMjY4MDcxNjNFNjU0MjQ0MTQwMTUwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NzIzOUY1RTQ3RDEyMzAxOUQyNjgwNzE2M0U2NTQyNDQxNDAx NTA3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h ZDBiLTRjZDViNjE5NTllZi8wLzMxMzUzMDJlMzEzMDM3MmUzMTMwMzgyZTMwMmYz MjMyMmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClmtsMA0GCSqG SIb3DQEBCwUAA4IBAQCFa0RpGfQuopRYJ/XApgzFGhSXOpr1FoayotfKtKwMr/8k VU5XR5qJMyHzUdulNQxF13Dq97NDUp8Gq69TLxp7nif9Ekf1R65WuyMBkvoR3tGI 3P0rNb+yCYvA+uoP7MdSHCPrKD5ZLRQMCrG3rWc8YVOd6nmr2reR0J0cpq5afdYg whFnBpzxwc5h1sM18K2ACv+aMtf/+h4qrS1HfnbTN0xL+MZv553SO0QDYatm8aEr Q7vMP7rIAG2FbJeioF3Igm2PQjCnRN/CIzfd/h295TRUfNi46O+blMDhOur4/3WF Bm6fWZtcHnzf5TvoFVcQc6mUGASPdwiSukxgC+9z -----END CERTIFICATE-----Generated at Wed May 13 10:00:59 2026 by rpki-client