$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa File: 3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa (raw, json) Hash identifier: I54kfkk6hYbr7mBDfS6anco7Wej9QeAnBCITEhtkyWw= Subject key identifier: F4:F1:57:49:BA:D5:2A:0B:14:81:A0:D3:C4:3A:7D:51:E1:17:23:C8 Certificate issuer: /CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Certificate serial: 1042E8BF0BC78B68D267CDEC49E1CDB5C18794E5 Authority key identifier: 9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa Signing time: Sun 03 May 2026 03:10:36 +0000 ROA not before: Sun 03 May 2026 03:05:36 +0000 ROA not after: Sun 02 May 2027 03:10:36 +0000 asID: 38149 IP address blocks: 150.129.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:42:e8:bf:0b:c7:8b:68:d2:67:cd:ec:49:e1:cd:b5:c1:87:94:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BE1F1BA8091631A409BE939BDB0733274F4AAC4 Validity Not Before: May 3 03:05:36 2026 GMT Not After : May 2 03:10:36 2027 GMT Subject: CN=F4F15749BAD52A0B1481A0D3C43A7D51E11723C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:ff:fa:52:31:c4:ed:35:1b:25:61:28:d8: a2:20:b5:45:0c:3f:aa:1b:3a:dc:9b:8f:e5:85:ce: 1e:ba:74:30:55:62:b0:f9:0e:db:9d:12:a7:b2:98: c7:94:a8:65:32:b3:44:1f:d5:07:74:49:06:22:93: 12:fb:cd:35:56:00:fc:ab:37:c8:84:94:9b:1b:f4: 2f:96:5b:65:9f:f0:81:d5:b2:ed:b1:72:ad:fc:9d: 83:8d:32:08:fe:e3:bf:48:a7:45:db:dd:d1:d1:05: 39:f2:cb:f2:10:5c:0f:25:46:c7:87:ec:7b:70:e4: 0b:6f:4b:af:54:09:1b:e6:04:de:f1:4a:ec:64:9e: 1b:6e:10:66:0c:7a:ea:2b:18:0e:c3:45:ba:a6:94: c0:58:c9:19:ad:d6:82:ad:60:a5:55:db:34:b4:d1: 86:39:fc:2a:90:ab:eb:0f:7a:24:6b:37:7f:e4:cf: 6a:28:84:e6:b3:19:3d:2f:64:6d:79:ac:b9:f1:ee: 9c:3e:b2:25:4e:04:38:14:b5:39:01:cd:50:31:05: e7:39:20:60:33:d8:a5:46:53:c2:5a:f8:7a:5e:e9: ac:36:bf:e2:7d:97:5d:76:f9:25:d8:eb:3c:50:e7: 79:9f:68:1e:60:e6:60:ad:82:cd:a5:a0:c1:a3:4d: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:57:49:BA:D5:2A:0B:14:81:A0:D3:C4:3A:7D:51:E1:17:23:C8 X509v3 Authority Key Identifier: keyid:9B:E1:F1:BA:80:91:63:1A:40:9B:E9:39:BD:B0:73:32:74:F4:AA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BE1F1BA8091631A409BE939BDB0733274F4AAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/3135302e3132392e3138392e302f32342d3234203d3e203338313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.189.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:d0:29:9d:dd:ac:90:eb:11:18:0e:c9:69:9b:df:26:00:34: cb:b0:4e:84:e4:d3:32:f5:28:2a:3f:9b:f0:0c:72:37:de:e4: b9:bb:9a:f6:93:a3:ee:12:56:8f:18:75:c4:01:03:b7:cc:db: 3d:b5:97:07:a0:bd:0e:ed:77:82:46:75:64:7a:41:64:ef:7c: 2d:9e:7d:13:b7:fa:d1:d3:af:98:6c:13:7e:2f:2c:1d:a1:26: 41:d5:5d:10:21:b5:fa:f3:84:67:8f:79:c8:de:2b:56:66:0f: 65:15:d9:27:55:b7:0f:a9:dc:d4:86:93:30:e1:96:b2:e2:83: e4:4a:28:1d:90:90:cc:49:99:b2:85:a4:bf:5a:92:bc:79:66: 97:e4:43:b3:e1:50:61:b2:d1:29:c0:5c:fd:25:fc:b3:2a:c7: c6:21:2b:8d:92:74:21:32:92:ce:01:b4:4e:7c:76:c7:5d:c0: 9e:22:27:52:12:44:25:64:ff:71:d9:59:03:78:14:d6:f7:21: 25:39:22:83:9a:8a:07:f6:5b:49:ab:2e:48:17:84:eb:ac:f5: 13:f4:a4:82:0e:df:3f:81:ff:ca:49:06:fa:b4:a6:cb:ae:f0: e7:b8:2e:4d:2c:82:c9:cb:b1:02:d0:7b:97:ec:2a:71:5c:76: 90:9b:56:cb -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEELovwvHi2jSZ83sSeHNtcGHlOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJFMUYxQkE4MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3 NEY0QUFDNDAeFw0yNjA1MDMwMzA1MzZaFw0yNzA1MDIwMzEwMzZaMDMxMTAvBgNV BAMTKEY0RjE1NzQ5QkFENTJBMEIxNDgxQTBEM0M0M0E3RDUxRTExNzIzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghf/6UjHE7TUbJWEo2KIgtUUM P6obOtybj+WFzh66dDBVYrD5DtudEqeymMeUqGUys0Qf1Qd0SQYikxL7zTVWAPyr N8iElJsb9C+WW2Wf8IHVsu2xcq38nYONMgj+479Ip0Xb3dHRBTnyy/IQXA8lRseH 7Htw5AtvS69UCRvmBN7xSuxknhtuEGYMeuorGA7DRbqmlMBYyRmt1oKtYKVV2zS0 0YY5/CqQq+sPeiRrN3/kz2oohOazGT0vZG15rLnx7pw+siVOBDgUtTkBzVAxBec5 IGAz2KVGU8Ja+Hpe6aw2v+J9l112+SXY6zxQ53mfaB5g5mCtgs2loMGjTRqDAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU9PFXSbrVKgsUgaDTxDp9UeEXI8gwHwYDVR0j BBgwFoAUm+HxuoCRYxpAm+k5vbBzMnT0qsQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDhlM2IzOWMtZGExMS00NWVlLWFhYjMtNWNiMTRlYzQ0NzBjLzAvOUJFMUYxQkE4 MDkxNjMxQTQwOUJFOTM5QkRCMDczMzI3NEY0QUFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QkUxRjFCQTgwOTE2MzFBNDA5QkU5MzlCREIwNzMzMjc0RjRB QUM0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzljLWRhMTEtNDVlZS1h YWIzLTVjYjE0ZWM0NDcwYy8wLzMxMzUzMDJlMzEzMjM5MmUzMTM4MzkyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAloG9MA0GCSqG SIb3DQEBCwUAA4IBAQB70Cmd3ayQ6xEYDslpm98mADTLsE6E5NMy9SgqP5vwDHI3 3uS5u5r2k6PuElaPGHXEAQO3zNs9tZcHoL0O7XeCRnVkekFk73wtnn0Tt/rR06+Y bBN+LywdoSZB1V0QIbX684Rnj3nI3itWZg9lFdknVbcPqdzUhpMw4Zay4oPkSigd kJDMSZmyhaS/WpK8eWaX5EOz4VBhstEpwFz9JfyzKsfGISuNknQhMpLOAbROfHbH XcCeIidSEkQlZP9x2VkDeBTW9yElOSKDmooH9ltJqy5IF4TrrPUT9KSCDt8/gf/K SQb6tKbLrvDnuC5NLILJy7EC0HuX7CpxXHaQm1bL -----END CERTIFICATE-----Generated at Wed May 13 06:56:21 2026 by rpki-client