$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313431303536.roa File: 3135372e32302e3231382e302f32342d3234203d3e20313431303536.roa (raw, json) Hash identifier: amufn5LXJwL9dAiLhQhIbvJncQves34m9l5dWhnZpi8= Subject key identifier: 5F:DA:59:B6:EB:A9:69:FF:22:51:37:9D:16:38:1A:1A:BC:F6:27:7B Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 616C2E49658DBDEA59FBBD4D671CA04FF245D9A2 Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313431303536.roa Signing time: Wed 04 Nov 2026 09:35:38 +0000 ROA not before: Wed 04 Nov 2026 09:30:38 +0000 ROA not after: Wed 03 Nov 2027 09:35:38 +0000 asID: 141056 IP address blocks: 157.20.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6c:2e:49:65:8d:bd:ea:59:fb:bd:4d:67:1c:a0:4f:f2:45:d9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Nov 4 09:30:38 2026 GMT Not After : Nov 3 09:35:38 2027 GMT Subject: CN=5FDA59B6EBA969FF2251379D16381A1ABCF6277B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:4c:c8:54:24:b9:45:96:93:a0:d8:27:46: ad:5b:82:78:7b:8c:02:a3:54:1f:19:bf:79:30:2d: f8:3b:1a:91:d6:1d:7b:6b:27:91:53:28:8b:b9:27: bd:a0:06:27:c1:30:f9:af:af:15:a3:d6:2b:35:76: 21:a8:fe:5f:7e:87:bc:ea:51:a4:f6:08:a7:31:04: fc:4d:e4:f0:e0:f7:eb:9a:4a:77:ae:7d:49:77:d4: be:38:70:cd:58:68:4f:42:b9:6c:c8:01:de:d6:0f: 59:c1:d1:99:6d:b9:cb:20:77:6a:37:c2:9e:3e:07: a1:35:61:c0:32:84:19:b5:94:42:67:61:fc:96:d3: 6a:df:ef:05:95:5a:a7:87:fd:b1:5a:f5:fc:3d:13: ca:e9:32:f8:e3:60:81:0e:31:d8:58:e8:03:cf:db: 68:b3:7a:55:56:41:3d:1b:50:dc:bd:47:bc:cc:5f: dd:68:81:45:4e:85:a0:a1:5d:82:91:5f:bb:97:f0: 67:d0:86:83:92:e8:cd:b8:e8:fd:3e:ad:46:61:bd: 09:b0:e0:1e:9c:90:90:15:6f:dc:3a:77:e1:7f:92: d0:10:4e:d8:16:24:f3:25:ad:b3:53:87:ce:6e:7a: 88:ad:7f:37:e6:28:33:a4:c1:2e:08:b5:8b:62:8a: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DA:59:B6:EB:A9:69:FF:22:51:37:9D:16:38:1A:1A:BC:F6:27:7B X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231382e302f32342d3234203d3e20313431303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.218.0/24 Signature Algorithm: sha256WithRSAEncryption 91:46:6b:eb:64:aa:99:9b:44:10:91:86:fa:9f:ad:20:34:85: 8c:10:dc:04:1f:b0:6e:08:3d:a7:81:0e:40:55:83:aa:86:90: 7a:ca:e9:5b:61:80:1e:58:e7:50:6f:e4:b0:f4:b4:79:d1:0d: 0b:3f:de:5c:86:6e:52:33:7c:d4:48:86:ba:99:ea:ad:e6:b1: ae:12:4e:cc:2f:dc:bb:dc:a8:b3:c2:2b:1d:82:ba:d4:d8:f3: 52:09:68:f2:32:8e:dc:bc:b7:5b:8d:d1:ef:29:88:32:5b:b9: 5a:2c:ce:99:b6:2b:90:b4:5b:c7:d0:88:9e:b7:84:28:43:88: 85:ae:7f:ec:65:9c:e6:b2:c1:b9:b9:b0:6d:17:66:a4:af:90: 07:95:31:86:69:e4:5f:f8:92:04:aa:b8:83:59:7e:6f:88:ef: 11:4e:e0:ea:8e:d9:62:cf:16:19:37:7f:b4:bc:e7:ba:c2:63: 1a:9b:f6:bb:a1:77:44:92:71:49:49:e4:81:76:be:a5:45:95: 85:20:ab:9e:56:f9:ff:21:d2:5b:90:7f:b8:ef:fa:7a:9a:eb: a9:b6:31:6e:a6:fe:57:60:fa:3a:33:a8:49:1b:a9:31:97:43: 6f:97:ef:34:f3:68:d4:e9:58:b3:2b:7a:9d:2d:23:17:14:5e: 84:2d:f6:a2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYWwuSWWNvepZ+71NZxygT/JF2aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjExMDQwOTMwMzhaFw0yNzExMDMwOTM1MzhaMDMxMTAvBgNV BAMTKDVGREE1OUI2RUJBOTY5RkYyMjUxMzc5RDE2MzgxQTFBQkNGNjI3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZEzIVCS5RZaToNgnRq1bgnh7 jAKjVB8Zv3kwLfg7GpHWHXtrJ5FTKIu5J72gBifBMPmvrxWj1is1diGo/l9+h7zq UaT2CKcxBPxN5PDg9+uaSneufUl31L44cM1YaE9CuWzIAd7WD1nB0Zltucsgd2o3 wp4+B6E1YcAyhBm1lEJnYfyW02rf7wWVWqeH/bFa9fw9E8rpMvjjYIEOMdhY6APP 22izelVWQT0bUNy9R7zMX91ogUVOhaChXYKRX7uX8GfQhoOS6M246P0+rUZhvQmw 4B6ckJAVb9w6d+F/ktAQTtgWJPMlrbNTh85ueoitfzfmKDOkwS4ItYtiikkFAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUX9pZtuupaf8iUTedFjgaGrz2J3swHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UyZTgzYWZlLTNiZGMtNDRiMi1h NzAyLWI0NTU1ZGFhNjVlYS8wLzMxMzUzNzJlMzIzMDJlMzIzMTM4MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTaMA0GCSqG SIb3DQEBCwUAA4IBAQCRRmvrZKqZm0QQkYb6n60gNIWMENwEH7BuCD2ngQ5AVYOq hpB6yulbYYAeWOdQb+Sw9LR50Q0LP95chm5SM3zUSIa6meqt5rGuEk7ML9y73Kiz wisdgrrU2PNSCWjyMo7cvLdbjdHvKYgyW7laLM6ZtiuQtFvH0Iiet4QoQ4iFrn/s ZZzmssG5ubBtF2akr5AHlTGGaeRf+JIEqriDWX5viO8RTuDqjtlizxYZN3+0vOe6 wmMam/a7oXdEknFJSeSBdr6lRZWFIKueVvn/IdJbkH+47/p6muuptjFupv5XYPo6 M6hJG6kxl0Nvl+8082jU6VizK3qdLSMXFF6ELfai -----END CERTIFICATE-----Generated at Sun Nov 15 01:17:30 2026 by rpki-client