$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32332d3233203d3e20313431303536.roa File: 3135372e32302e3231382e302f32332d3233203d3e20313431303536.roa (raw, json) Hash identifier: pGCyYsaibQ+UQHF2d085YFoN6msKEDfYPYxMI79HHsc= Subject key identifier: B9:F2:23:41:77:A1:FC:89:F3:F2:91:EF:C7:FD:E6:9E:7A:F6:D1:A6 Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 293242F40A3EB987C3797B6EF1F407A4F2BF4E84 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32332d3233203d3e20313431303536.roa Signing time: Wed 04 Nov 2026 09:35:16 +0000 ROA not before: Wed 04 Nov 2026 09:30:16 +0000 ROA not after: Wed 03 Nov 2027 09:35:16 +0000 asID: 141056 IP address blocks: 157.20.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:32:42:f4:0a:3e:b9:87:c3:79:7b:6e:f1:f4:07:a4:f2:bf:4e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Nov 4 09:30:16 2026 GMT Not After : Nov 3 09:35:16 2027 GMT Subject: CN=B9F2234177A1FC89F3F291EFC7FDE69E7AF6D1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:a5:23:8d:03:ef:f9:35:9b:b2:b0:b5:c1: 61:7c:d7:0b:63:3c:48:f1:79:f6:49:d9:b1:c3:e0: 47:98:22:8e:2a:b1:81:2e:b5:89:8a:82:6c:40:7f: 59:11:8d:bc:19:61:de:49:db:ff:9d:30:0a:a3:3d: f7:e9:25:15:d4:df:01:76:b9:07:2d:fc:a4:4a:4c: 5c:9b:ce:b1:78:8d:2d:f2:cf:57:80:40:5e:42:02: d2:ff:a4:3d:30:4b:c8:dc:49:c7:8e:0a:a4:37:09: 0e:38:a4:26:45:57:87:d7:50:30:1f:2d:96:2f:b9: e6:b9:97:28:3a:c6:50:dd:39:dd:8c:32:ab:97:46: e8:b3:f0:34:6d:e1:b6:e8:42:fc:23:fa:58:43:39: 9c:8f:0b:21:ef:35:39:98:30:3d:8e:35:2e:58:56: d2:5f:7a:62:3f:27:ae:b5:ad:e7:31:c6:9e:a3:f3: 00:ca:01:6c:a0:25:72:13:4c:4e:a9:74:ba:c6:80: c2:29:52:6d:b1:2e:f5:fd:3f:d8:2a:ca:69:51:bd: 36:da:2d:94:fb:18:f6:ae:2e:c4:e2:d3:bb:f6:93: de:6c:d4:20:4a:65:0d:b5:05:d0:8a:bc:43:9c:24: 1b:fd:a5:33:00:c8:be:c2:78:dc:e1:c8:5c:d9:13: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:23:41:77:A1:FC:89:F3:F2:91:EF:C7:FD:E6:9E:7A:F6:D1:A6 X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32332d3233203d3e20313431303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.218.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:3e:84:02:56:cb:6b:91:b9:9c:6c:a7:5f:2a:70:e6:06:a8: f8:f1:cd:f2:a5:3d:cf:9a:54:0c:e9:69:e5:29:49:e4:b5:98: d9:84:4f:33:51:ba:1c:bd:f8:a4:25:bc:02:e4:3d:8a:3f:b3: a6:f0:90:56:b8:83:7b:6e:c1:8e:61:13:f7:b0:18:6b:18:ff: 15:20:6c:e0:5e:08:51:0d:8f:9b:da:00:57:5c:b9:6c:ac:e4: 53:74:0c:be:e8:62:e3:9a:6c:3d:4d:f2:54:14:03:b6:0c:4e: 11:1e:7b:91:50:eb:67:fb:13:d0:b8:e3:aa:26:22:11:11:57: 68:28:d2:23:32:d3:b8:7f:da:b1:66:72:b9:1c:b4:41:db:c0: 32:f0:d1:31:31:24:5b:ab:3f:16:7f:dd:58:95:65:1d:68:45: 22:cd:3d:b2:a8:f4:68:ef:ad:17:c9:f8:fb:ad:ce:7f:10:9f: 42:34:6d:82:81:14:aa:6f:33:bb:56:fa:58:c3:b2:14:b1:cb: c6:7e:3a:7d:ff:71:7d:b9:c5:b5:63:3e:a5:57:db:1b:c3:3f: 89:97:db:2e:84:59:dd:2c:d6:86:9b:c4:90:a4:f4:17:d3:bc: 21:8b:75:07:f4:72:0b:89:30:f9:d5:f7:83:53:65:c5:99:27: 3d:16:39:29 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKTJC9Ao+uYfDeXtu8fQHpPK/ToQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjExMDQwOTMwMTZaFw0yNzExMDMwOTM1MTZaMDMxMTAvBgNV BAMTKEI5RjIyMzQxNzdBMUZDODlGM0YyOTFFRkM3RkRFNjlFN0FGNkQxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEqUjjQPv+TWbsrC1wWF81wtj PEjxefZJ2bHD4EeYIo4qsYEutYmKgmxAf1kRjbwZYd5J2/+dMAqjPffpJRXU3wF2 uQct/KRKTFybzrF4jS3yz1eAQF5CAtL/pD0wS8jcSceOCqQ3CQ44pCZFV4fXUDAf LZYvuea5lyg6xlDdOd2MMquXRuiz8DRt4bboQvwj+lhDOZyPCyHvNTmYMD2ONS5Y VtJfemI/J661recxxp6j8wDKAWygJXITTE6pdLrGgMIpUm2xLvX9P9gqymlRvTba LZT7GPauLsTi07v2k95s1CBKZQ21BdCKvEOcJBv9pTMAyL7CeNzhyFzZExRbAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUufIjQXeh/Inz8pHvx/3mnnr20aYwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UyZTgzYWZlLTNiZGMtNDRiMi1h NzAyLWI0NTU1ZGFhNjVlYS8wLzMxMzUzNzJlMzIzMDJlMzIzMTM4MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzNDMxMzAzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRTaMA0GCSqG SIb3DQEBCwUAA4IBAQAPPoQCVstrkbmcbKdfKnDmBqj48c3ypT3PmlQM6WnlKUnk tZjZhE8zUbocvfikJbwC5D2KP7Om8JBWuIN7bsGOYRP3sBhrGP8VIGzgXghRDY+b 2gBXXLlsrORTdAy+6GLjmmw9TfJUFAO2DE4RHnuRUOtn+xPQuOOqJiIREVdoKNIj MtO4f9qxZnK5HLRB28Ay8NExMSRbqz8Wf91YlWUdaEUizT2yqPRo760Xyfj7rc5/ EJ9CNG2CgRSqbzO7VvpYw7IUscvGfjp9/3F9ucW1Yz6lV9sbwz+Jl9suhFndLNaG m8SQpPQX07whi3UH9HILiTD51feDU2XFmSc9Fjkp -----END CERTIFICATE-----Generated at Sun Nov 15 01:09:44 2026 by rpki-client