$ rpki-client -vvf rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa File: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (raw, json) Hash identifier: IlV0vgNjpTuApXjZnZRsOZX0dY/TDSqULrpC6FIi3II= Subject key identifier: 26:E1:DC:9A:10:A5:58:D5:2F:28:7F:BE:8F:05:51:26:58:C1:B3:C6 Certificate issuer: /CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Certificate serial: 78E9910785542BBDDB64FE0BAD265661C69271DE Authority key identifier: 4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa Signing time: Sun 03 May 2026 03:08:31 +0000 ROA not before: Sun 03 May 2026 03:03:31 +0000 ROA not after: Sun 02 May 2027 03:08:31 +0000 asID: 141120 IP address blocks: 157.20.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e9:91:07:85:54:2b:bd:db:64:fe:0b:ad:26:56:61:c6:92:71:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B Validity Not Before: May 3 03:03:31 2026 GMT Not After : May 2 03:08:31 2027 GMT Subject: CN=26E1DC9A10A558D52F287FBE8F05512658C1B3C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:44:95:84:c8:a9:2a:0c:17:34:e1:60:0d: 36:9b:75:ed:6a:24:60:97:c9:b4:c4:ff:4f:6d:03: a3:df:e8:de:78:94:29:ae:a7:1d:26:55:d6:34:b2: 0c:37:d8:c4:1f:63:b0:96:4f:e9:9f:cc:be:f2:5a: 6b:a9:c5:d9:91:fe:c7:1a:39:c0:65:58:e3:ae:02: 0e:32:88:c0:55:57:97:b5:12:5b:a3:7e:a9:0c:b5: 33:c9:3c:37:99:17:e7:aa:aa:c5:cd:a0:ae:e9:82: db:93:1b:68:c5:2b:3c:f5:dc:51:4d:a6:b9:4c:a2: e9:dd:a9:f4:23:92:d1:32:72:75:74:2f:90:95:48: 56:ee:d3:cf:5f:f7:58:b8:25:1a:0b:93:73:ad:fe: 45:cd:ed:4a:b9:c0:05:98:8f:af:c6:e4:15:88:f8: 71:0a:71:84:53:4c:8c:9f:f4:91:d1:82:ec:12:f0: 28:bb:a6:30:64:f1:52:91:57:13:f5:e3:92:91:96: 7c:32:f6:01:c2:2f:6a:f8:3b:16:b8:60:03:8f:cb: cb:16:76:7c:a0:c0:cd:30:c9:36:48:02:41:bd:94: 53:1e:4c:75:95:c0:c2:ce:8c:1a:20:b4:7b:19:ed: d7:34:79:2d:dd:68:fb:dd:c4:e7:9d:3e:05:0c:35: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E1:DC:9A:10:A5:58:D5:2F:28:7F:BE:8F:05:51:26:58:C1:B3:C6 X509v3 Authority Key Identifier: keyid:4A:F7:A5:C6:F5:4C:5F:DB:D8:95:7A:7F:E5:B7:24:24:26:06:9C:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/4AF7A5C6F54C5FDBD8957A7FE5B7242426069C2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.158.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:63:d4:f4:42:f5:93:54:ee:41:bc:a5:be:d7:8e:b6:5d:59: 36:ee:d0:ca:b8:eb:1f:92:99:a5:ab:05:80:c8:5b:61:fb:df: 0b:69:13:69:71:96:ba:a2:28:e0:ae:32:57:50:b0:cf:9a:46: d7:be:30:6f:fd:30:6e:da:76:50:2f:24:48:ba:cc:53:78:5c: 4f:e2:a4:84:ea:6b:bc:62:89:0f:86:cb:72:bb:e6:55:05:14: 36:c8:2d:15:c8:12:1b:c8:19:c8:0f:b6:9e:2a:43:cc:33:a0: aa:ff:9e:cb:19:44:27:b8:8f:64:6e:1d:90:10:20:7b:68:5e: b9:40:af:fc:2e:68:64:22:1a:c6:d0:60:60:3c:88:4d:4a:21: 1c:d0:1d:01:ea:d9:c9:38:c0:2c:65:27:24:cc:67:b4:bc:8c: 71:d6:ca:a5:0a:93:5f:de:79:34:21:71:2b:4e:6b:52:ea:db: 46:27:13:79:ea:c3:b6:43:ea:77:f9:f4:15:0d:4a:c1:c4:ac: 5f:af:83:c8:ce:9c:ed:9c:c6:f0:64:3e:05:23:f3:5a:10:41: ea:c8:d6:76:44:a5:40:e8:da:12:27:41:c8:22:38:78:30:c1: 8a:cc:3d:fc:8d:d2:b9:0f:c3:c2:d1:a4:d2:e6:e9:e0:3b:fd: 55:13:b4:c7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUeOmRB4VUK73bZP4LrSZWYcaScd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGN0E1QzZGNTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQy NjA2OUMyQjAeFw0yNjA1MDMwMzAzMzFaFw0yNzA1MDIwMzA4MzFaMDMxMTAvBgNV BAMTKDI2RTFEQzlBMTBBNTU4RDUyRjI4N0ZCRThGMDU1MTI2NThDMUIzQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhkSVhMipKgwXNOFgDTabde1q JGCXybTE/09tA6Pf6N54lCmupx0mVdY0sgw32MQfY7CWT+mfzL7yWmupxdmR/sca OcBlWOOuAg4yiMBVV5e1ElujfqkMtTPJPDeZF+eqqsXNoK7pgtuTG2jFKzz13FFN prlMoundqfQjktEycnV0L5CVSFbu089f91i4JRoLk3Ot/kXN7Uq5wAWYj6/G5BWI +HEKcYRTTIyf9JHRguwS8Ci7pjBk8VKRVxP145KRlnwy9gHCL2r4Oxa4YAOPy8sW dnygwM0wyTZIAkG9lFMeTHWVwMLOjBogtHsZ7dc0eS3daPvdxOedPgUMNdVPAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUJuHcmhClWNUvKH++jwVRJljBs8YwHwYDVR0j BBgwFoAUSvelxvVMX9vYlXp/5bckJCYGnCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE1OWEzNjItOTUwYy00NWMyLWFlY2MtODJiMjE0YmNlNDc0LzAvNEFGN0E1QzZG NTRDNUZEQkQ4OTU3QTdGRTVCNzI0MjQyNjA2OUMyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80QUY3QTVDNkY1NEM1RkRCRDg5NTdBN0ZFNUI3MjQyNDI2MDY5 QzJCLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxNTlhMzYyLTk1MGMtNDVjMi1h ZWNjLTgyYjIxNGJjZTQ3NC8wLzMxMzUzNzJlMzIzMDJlMzEzNTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRSeMA0GCSqG SIb3DQEBCwUAA4IBAQB8Y9T0QvWTVO5BvKW+1462XVk27tDKuOsfkpmlqwWAyFth +98LaRNpcZa6oijgrjJXULDPmkbXvjBv/TBu2nZQLyRIusxTeFxP4qSE6mu8YokP hstyu+ZVBRQ2yC0VyBIbyBnID7aeKkPMM6Cq/57LGUQnuI9kbh2QECB7aF65QK/8 LmhkIhrG0GBgPIhNSiEc0B0B6tnJOMAsZSckzGe0vIxx1sqlCpNf3nk0IXErTmtS 6ttGJxN56sO2Q+p3+fQVDUrBxKxfr4PIzpztnMbwZD4FI/NaEEHqyNZ2RKVA6NoS J0HIIjh4MMGKzD38jdK5D8PC0aTS5ungO/1VE7TH -----END CERTIFICATE-----Generated at Wed May 13 06:26:42 2026 by rpki-client