$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa File: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (raw, json) Hash identifier: wyx8uHuSuItOBpo5Sy4M68blXovUWUC/+3CgkbnFTv8= Subject key identifier: CF:C8:99:0D:B0:17:8E:27:21:3C:37:AB:DE:C9:CA:02:EC:B9:56:BE Certificate issuer: /CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Certificate serial: 45660C443748D691A55CB4B7A5ABF6706A4B29C1 Authority key identifier: 88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa Signing time: Sun 03 May 2026 03:12:11 +0000 ROA not before: Sun 03 May 2026 03:07:11 +0000 ROA not after: Sun 02 May 2027 03:12:11 +0000 asID: 136846 IP address blocks: 157.15.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:66:0c:44:37:48:d6:91:a5:5c:b4:b7:a5:ab:f6:70:6a:4b:29:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53 Validity Not Before: May 3 03:07:11 2026 GMT Not After : May 2 03:12:11 2027 GMT Subject: CN=CFC8990DB0178E27213C37ABDEC9CA02ECB956BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:66:b7:78:cd:85:66:f1:fb:8d:28:2e:b3: 70:d0:af:e2:fa:ca:e2:ac:b5:22:bf:92:5f:29:49: 81:9b:22:a1:f6:ee:61:8b:0a:3d:15:b2:b7:c9:bc: b0:e6:7d:e7:c3:8a:56:ed:eb:8b:bf:2f:5b:72:78: d0:df:a5:d6:a7:d0:cd:c9:ca:ac:db:59:f3:0b:a3: 9e:c8:45:f5:8e:54:f5:58:88:54:77:4e:90:45:f5: 88:5c:5e:e2:e5:d5:d9:0e:57:dd:af:c6:51:39:99: 55:22:56:fb:12:3a:a3:cf:c0:a1:5b:ac:ed:4d:5a: 1e:8e:67:64:58:0e:42:e7:fa:5e:77:ff:f4:25:aa: d8:a5:92:2d:e2:59:6f:b7:b9:7c:a4:c2:00:5f:91: a6:5d:9a:94:fc:36:c7:bb:fd:e8:82:dc:8a:0c:f5: a3:9b:19:b2:39:1a:fb:46:9b:d9:3d:b5:38:5a:5c: c5:36:54:40:70:0f:b7:51:45:c0:44:f1:f4:62:4c: 5a:b4:c0:1c:2b:84:bc:75:01:0d:16:93:97:04:d5: 65:fe:98:fe:f3:f9:58:da:06:8d:e7:bf:2e:78:0f: 11:b4:9b:7f:cd:97:c0:7a:ea:9e:d4:2d:ae:64:16: 14:6e:de:7d:ff:c1:3f:3a:74:74:47:74:4b:bc:19: e0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C8:99:0D:B0:17:8E:27:21:3C:37:AB:DE:C9:CA:02:EC:B9:56:BE X509v3 Authority Key Identifier: keyid:88:47:8F:DC:AC:16:5B:15:9E:A5:AF:DF:D5:C0:AD:80:90:EF:DF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/88478FDCAC165B159EA5AFDFD5C0AD8090EFDF53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.120.0/24 Signature Algorithm: sha256WithRSAEncryption a2:9d:18:fe:23:14:5a:d6:c7:9f:6e:24:99:18:e7:e4:8e:70: f6:f2:64:cd:d9:37:1e:a4:65:42:f2:77:90:ed:96:61:98:3c: ff:a4:02:1b:07:8d:0c:57:2f:9c:18:42:94:b3:46:ae:04:0a: 35:24:c3:3b:1a:26:c0:d6:7d:bc:ba:20:00:83:52:ef:68:6d: b1:ae:56:af:b1:fc:10:95:70:ab:38:94:02:f3:a2:55:a2:75: 80:2e:6e:45:29:ea:79:74:aa:ee:86:69:19:de:0b:49:93:d9: 1f:ef:f8:44:43:8f:d5:45:9e:9d:da:a2:81:9d:30:b6:ca:10: 2e:ea:c9:3e:00:14:6a:b9:04:60:a8:81:1c:7d:54:91:92:6f: 79:10:37:2a:e4:d1:85:32:81:0b:48:c0:d0:e9:6e:80:6a:02: ed:b4:cb:cf:86:d6:a3:ab:de:6a:0f:37:b2:da:48:85:1c:dc: 67:25:8f:b6:3b:6c:7f:7c:be:25:53:27:d3:c9:a3:2c:07:4b: 5f:47:99:d6:92:29:eb:24:4d:2a:30:1b:fa:0d:8b:a9:51:45: ea:cc:ac:49:a1:55:39:fe:3e:a3:9b:4d:0d:c5:f0:de:00:83: 58:b1:e7:25:68:fc:81:99:c5:f6:9b:07:a4:e2:19:9b:1d:0f: 0e:50:cc:7d -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURWYMRDdI1pGlXLS3pav2cGpLKcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg0NzhGRENBQzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5 MEVGREY1MzAeFw0yNjA1MDMwMzA3MTFaFw0yNzA1MDIwMzEyMTFaMDMxMTAvBgNV BAMTKENGQzg5OTBEQjAxNzhFMjcyMTNDMzdBQkRFQzlDQTAyRUNCOTU2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRma3eM2FZvH7jSgus3DQr+L6 yuKstSK/kl8pSYGbIqH27mGLCj0VsrfJvLDmfefDilbt64u/L1tyeNDfpdan0M3J yqzbWfMLo57IRfWOVPVYiFR3TpBF9YhcXuLl1dkOV92vxlE5mVUiVvsSOqPPwKFb rO1NWh6OZ2RYDkLn+l53//Qlqtilki3iWW+3uXykwgBfkaZdmpT8Nse7/eiC3IoM 9aObGbI5GvtGm9k9tThaXMU2VEBwD7dRRcBE8fRiTFq0wBwrhLx1AQ0Wk5cE1WX+ mP7z+VjaBo3nvy54DxG0m3/Nl8B66p7ULa5kFhRu3n3/wT86dHRHdEu8GeCHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUz8iZDbAXjichPDer3snKAuy5Vr4wHwYDVR0j BBgwFoAUiEeP3KwWWxWepa/f1cCtgJDv31MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZiNDY2YzYtMzc0My00OTVmLWIxYTgtMjYwN2NjOTk1NzNmLzAvODg0NzhGRENB QzE2NUIxNTlFQTVBRkRGRDVDMEFEODA5MEVGREY1My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84ODQ3OEZEQ0FDMTY1QjE1OUVBNUFGREZENUMwQUQ4MDkwRUZE RjUzLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2RmYjQ2NmM2LTM3NDMtNDk1Zi1i MWE4LTI2MDdjYzk5NTczZi8wLzMxMzUzNzJlMzEzNTJlMzEzMjMwMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnQ94MA0GCSqG SIb3DQEBCwUAA4IBAQCinRj+IxRa1sefbiSZGOfkjnD28mTN2TcepGVC8neQ7ZZh mDz/pAIbB40MVy+cGEKUs0auBAo1JMM7GibA1n28uiAAg1LvaG2xrlavsfwQlXCr OJQC86JVonWALm5FKep5dKruhmkZ3gtJk9kf7/hEQ4/VRZ6d2qKBnTC2yhAu6sk+ ABRquQRgqIEcfVSRkm95EDcq5NGFMoELSMDQ6W6AagLttMvPhtajq95qDzey2kiF HNxnJY+2O2x/fL4lUyfTyaMsB0tfR5nWkinrJE0qMBv6DYupUUXqzKxJoVU5/j6j m00NxfDeAINYseclaPyBmcX2mwek4hmbHQ8OUMx9 -----END CERTIFICATE-----Generated at Wed May 13 07:39:31 2026 by rpki-client