$ rpki-client -vvf rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa File: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (raw, json) Hash identifier: vffHdk9OOgHjUn3gX3E1MpxE/+kaQ1DhpiQKkuuDY58= Subject key identifier: C8:31:F5:10:13:A0:75:1F:70:AB:2B:2F:4F:A0:45:84:2A:9D:D9:4E Certificate issuer: /CN=A65F65BF2DB9317754BA910F052FC09429259CBC Certificate serial: 46055FC00413875B2EBB091CBC0FCA698373E68F Authority key identifier: A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa Signing time: Sun 03 May 2026 03:11:23 +0000 ROA not before: Sun 03 May 2026 03:06:23 +0000 ROA not after: Sun 02 May 2027 03:11:23 +0000 asID: 152416 IP address blocks: 157.20.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:05:5f:c0:04:13:87:5b:2e:bb:09:1c:bc:0f:ca:69:83:73:e6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65F65BF2DB9317754BA910F052FC09429259CBC Validity Not Before: May 3 03:06:23 2026 GMT Not After : May 2 03:11:23 2027 GMT Subject: CN=C831F51013A0751F70AB2B2F4FA045842A9DD94E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:25:09:16:fb:21:31:a3:25:39:fc:7f:53:5d: a8:2a:6b:58:8e:37:27:87:d2:33:73:db:ea:37:20: 36:dc:91:c8:a9:a8:3d:51:0a:8f:e3:f1:c5:cb:d2: dd:11:a3:6e:81:f5:f9:30:f8:47:f3:b1:70:ea:7b: 5b:d6:74:4b:10:ad:9b:79:26:83:fc:a7:ff:06:12: ae:16:d8:cd:58:d3:88:44:b3:de:9e:aa:8b:13:89: 7c:fb:f0:2b:74:bd:22:98:b7:f3:62:76:ee:20:51: 5d:8d:54:bf:67:37:12:e6:a3:b2:fc:b8:a0:4d:7e: 2b:13:66:3b:a0:4a:10:94:f6:76:b3:2a:58:c2:40: 34:ce:3f:fd:9e:49:88:be:0a:21:c4:f2:1f:c9:9d: 52:dd:ae:7c:5e:72:6c:cf:cd:aa:2e:1a:7d:06:ce: 17:22:40:ee:6e:c0:21:d1:ff:4f:50:86:35:d3:23: be:47:42:d4:98:b7:95:74:61:b6:26:8c:e4:54:85: e5:83:f4:af:1e:89:f0:8e:51:4e:1d:0c:4c:53:78: ad:4a:7c:2c:67:25:fc:4c:2f:b4:e6:31:6c:e6:b3: 2d:e3:39:ad:63:9e:ac:63:af:3f:9c:db:8b:1d:9d: e2:2e:d4:bf:15:df:14:22:35:6f:28:cb:b9:ce:94: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:31:F5:10:13:A0:75:1F:70:AB:2B:2F:4F:A0:45:84:2A:9D:D9:4E X509v3 Authority Key Identifier: keyid:A6:5F:65:BF:2D:B9:31:77:54:BA:91:0F:05:2F:C0:94:29:25:9C:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/A65F65BF2DB9317754BA910F052FC09429259CBC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/A65F65BF2DB9317754BA910F052FC09429259CBC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.208.0/24 Signature Algorithm: sha256WithRSAEncryption 70:b5:f1:db:f4:e8:e1:29:22:ba:80:32:11:7a:c9:da:e5:cd: 55:67:51:19:b1:a6:2d:a9:76:8b:b9:cc:32:db:11:e2:cc:95: 8c:d9:57:8d:63:a4:1f:39:68:e5:0d:1b:3c:3a:05:89:e8:95: 19:25:6d:6f:ab:fe:cd:b6:86:8a:da:bc:26:f8:4e:40:90:9e: 8c:32:cb:3e:3e:9e:89:c2:34:54:74:4c:b7:15:98:c8:2b:1c: 63:4a:04:94:6c:01:56:7f:8d:07:cf:1f:bb:6f:5c:ae:b0:03: e4:e5:d5:3c:3d:d0:d3:85:a9:94:95:4b:5e:d9:c0:71:10:df: 8e:17:79:8a:6d:7f:2b:74:e1:9f:06:3a:df:ba:3e:a4:a6:6f: 5c:06:30:0d:ae:29:31:9a:94:84:6f:07:c2:12:34:5e:49:00: 4e:16:02:62:e5:ef:8c:29:a9:89:45:8b:89:d4:0e:2f:60:cd: 84:eb:a0:86:4b:cf:ff:b5:1d:3b:ed:bc:de:73:5d:69:02:94: 16:04:ab:36:d3:59:82:4e:13:5b:4f:7a:a8:64:c9:78:78:c7: bd:73:2f:7e:29:aa:5d:c4:c6:7f:93:42:89:46:4d:4a:97:88: ed:e0:f5:df:2a:b0:7f:05:21:1c:65:d9:68:79:03:ab:ef:54: da:25:2a:3d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURgVfwAQTh1suuwkcvA/KaYNz5o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1RjY1QkYyREI5MzE3NzU0QkE5MTBGMDUyRkMwOTQy OTI1OUNCQzAeFw0yNjA1MDMwMzA2MjNaFw0yNzA1MDIwMzExMjNaMDMxMTAvBgNV BAMTKEM4MzFGNTEwMTNBMDc1MUY3MEFCMkIyRjRGQTA0NTg0MkE5REQ5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMJQkW+yExoyU5/H9TXagqa1iO NyeH0jNz2+o3IDbckcipqD1RCo/j8cXL0t0Ro26B9fkw+EfzsXDqe1vWdEsQrZt5 JoP8p/8GEq4W2M1Y04hEs96eqosTiXz78Ct0vSKYt/Nidu4gUV2NVL9nNxLmo7L8 uKBNfisTZjugShCU9nazKljCQDTOP/2eSYi+CiHE8h/JnVLdrnxecmzPzaouGn0G zhciQO5uwCHR/09QhjXTI75HQtSYt5V0YbYmjORUheWD9K8eifCOUU4dDExTeK1K fCxnJfxML7TmMWzmsy3jOa1jnqxjrz+c24sdneIu1L8V3xQiNW8oy7nOlPBFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUyDH1EBOgdR9wqysvT6BFhCqd2U4wHwYDVR0j BBgwFoAUpl9lvy25MXdUupEPBS/AlCklnLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGM0MDk0ZDItZTE4ZC00ODQwLTg0ZmEtYzU3NTdhZjU4MGYxLzAvQTY1RjY1QkYy REI5MzE3NzU0QkE5MTBGMDUyRkMwOTQyOTI1OUNCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9BNjVGNjVCRjJEQjkzMTc3NTRCQTkxMEYwNTJGQzA5NDI5MjU5 Q0JDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RjNDA5NGQyLWUxOGQtNDg0MC04 NGZhLWM1NzU3YWY1ODBmMS8wLzMxMzUzNzJlMzIzMDJlMzIzMDM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTQMA0GCSqG SIb3DQEBCwUAA4IBAQBwtfHb9OjhKSK6gDIResna5c1VZ1EZsaYtqXaLucwy2xHi zJWM2VeNY6QfOWjlDRs8OgWJ6JUZJW1vq/7NtoaK2rwm+E5AkJ6MMss+Pp6JwjRU dEy3FZjIKxxjSgSUbAFWf40Hzx+7b1yusAPk5dU8PdDThamUlUte2cBxEN+OF3mK bX8rdOGfBjrfuj6kpm9cBjANrikxmpSEbwfCEjReSQBOFgJi5e+MKamJRYuJ1A4v YM2E66CGS8//tR077bzec11pApQWBKs201mCThNbT3qoZMl4eMe9cy9+KapdxMZ/ k0KJRk1Kl4jt4PXfKrB/BSEcZdloeQOr71TaJSo9 -----END CERTIFICATE-----Generated at Wed May 13 02:36:52 2026 by rpki-client