$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231392e302f32342d3234203d3e20313431303536.roa File: 3135372e32302e3231392e302f32342d3234203d3e20313431303536.roa (raw, json) Hash identifier: UVCPBM3XB9KSbJCj53MAfClqOKcywC16rGR30TDPY8U= Subject key identifier: B4:EF:59:7F:23:F8:9A:EF:B0:7F:C7:3B:11:69:1B:6B:8B:01:40:5C Certificate issuer: /CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Certificate serial: 3B8940335E9D7FE9572B3D5D5912460AD26D06FA Authority key identifier: 3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231392e302f32342d3234203d3e20313431303536.roa Signing time: Wed 04 Nov 2026 09:36:21 +0000 ROA not before: Wed 04 Nov 2026 09:31:21 +0000 ROA not after: Wed 03 Nov 2027 09:36:21 +0000 asID: 141056 IP address blocks: 157.20.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:89:40:33:5e:9d:7f:e9:57:2b:3d:5d:59:12:46:0a:d2:6d:06:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54 Validity Not Before: Nov 4 09:31:21 2026 GMT Not After : Nov 3 09:36:21 2027 GMT Subject: CN=B4EF597F23F89AEFB07FC73B11691B6B8B01405C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:61:b2:06:f0:82:e0:2e:0f:54:06:49:f2: d0:56:28:65:8e:aa:31:cc:89:e6:e0:80:79:13:9a: a9:7f:67:07:4f:d9:43:f7:29:a8:8e:9c:2c:ae:b5: 0a:39:b5:df:fe:5c:34:8d:dc:dd:0a:70:c7:78:d4: fe:d2:52:d2:2a:dc:31:ee:b5:15:9d:67:85:d3:55: a5:a1:db:fb:1a:fa:58:98:6a:d9:6d:2e:f6:a1:ea: e9:f6:c6:bd:62:d8:da:ce:27:58:56:21:0e:88:51: 47:b8:93:30:8d:f7:d6:35:a8:fd:00:61:17:3e:64: ae:fe:27:10:ab:3f:04:11:fa:c2:4a:49:5e:e3:93: 8c:23:79:59:be:e2:a7:0f:98:a3:52:ca:4a:3a:48: c3:75:09:f5:20:d5:22:4d:3b:7a:8f:76:82:12:89: b9:09:a5:52:8a:37:e3:83:a6:6a:1c:1e:d3:42:fa: 4b:a4:55:3c:18:4b:04:eb:40:5b:2f:47:8a:8f:1d: 4b:86:50:6b:3f:ee:d7:41:99:84:19:0c:48:9d:c9: 12:a4:36:8f:61:88:ad:f0:5e:04:5f:b4:ed:e5:0f: 27:68:79:0b:d0:89:45:fa:6c:82:a0:91:fd:84:f2: b1:85:b4:03:58:1e:7e:1a:ba:a4:5c:53:53:bc:a2: 86:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EF:59:7F:23:F8:9A:EF:B0:7F:C7:3B:11:69:1B:6B:8B:01:40:5C X509v3 Authority Key Identifier: keyid:3C:0B:D6:BB:1B:4C:B0:7D:C5:8F:6F:30:16:B5:EC:37:49:FE:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/3C0BD6BB1B4CB07DC58F6F3016B5EC3749FEFE54.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2e83afe-3bdc-44b2-a702-b4555daa65ea/0/3135372e32302e3231392e302f32342d3234203d3e20313431303536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.219.0/24 Signature Algorithm: sha256WithRSAEncryption 47:ee:8d:f1:d9:97:25:4d:c2:44:a7:8d:32:d2:c7:2c:1f:62: 53:c4:9c:01:b7:c0:b1:b0:f7:a1:25:e9:c3:73:f2:7a:9f:1e: 92:38:53:88:66:0a:c2:95:78:fd:53:14:c7:e5:f0:c8:1d:e5: 88:62:d2:14:72:c8:df:45:55:04:0b:3f:c0:48:15:64:74:87: 06:54:7c:e5:fc:17:5d:7b:9b:6f:6b:e5:ca:4a:8f:c5:47:59: 5f:49:64:49:77:b9:6a:6f:16:ed:71:5d:4e:c5:4e:10:47:37: f4:ee:df:2d:72:fb:fc:3d:9a:f3:a1:84:e9:f4:1a:87:f5:fd: 79:4e:42:55:af:9d:cf:31:87:ba:6f:fe:51:90:8a:bd:f8:13: 00:d1:0a:18:c4:61:a8:82:46:76:e5:2a:d2:20:27:55:c2:5a: 1f:7d:91:40:85:3c:46:8e:1a:b8:dc:d0:85:22:a7:0e:1f:85: a9:61:a0:f7:2f:c2:04:f7:b9:b4:70:28:39:3d:6f:8d:46:fb: 02:ea:3b:e1:1d:b5:7a:55:22:39:11:4a:09:c3:05:f9:bd:41: bc:e1:81:11:52:2e:7a:e9:0f:b5:cd:39:c6:07:b8:4e:f1:88: 91:f8:a0:49:a3:25:c6:a3:1d:74:99:99:7d:05:e9:6f:c9:ae: d8:cc:4e:d1 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUO4lAM16df+lXKz1dWRJGCtJtBvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwQkQ2QkIxQjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0 OUZFRkU1NDAeFw0yNjExMDQwOTMxMjFaFw0yNzExMDMwOTM2MjFaMDMxMTAvBgNV BAMTKEI0RUY1OTdGMjNGODlBRUZCMDdGQzczQjExNjkxQjZCOEIwMTQwNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAN2GyBvCC4C4PVAZJ8tBWKGWO qjHMiebggHkTmql/ZwdP2UP3KaiOnCyutQo5td/+XDSN3N0KcMd41P7SUtIq3DHu tRWdZ4XTVaWh2/sa+liYatltLvah6un2xr1i2NrOJ1hWIQ6IUUe4kzCN99Y1qP0A YRc+ZK7+JxCrPwQR+sJKSV7jk4wjeVm+4qcPmKNSyko6SMN1CfUg1SJNO3qPdoIS ibkJpVKKN+ODpmocHtNC+kukVTwYSwTrQFsvR4qPHUuGUGs/7tdBmYQZDEidyRKk No9hiK3wXgRftO3lDydoeQvQiUX6bIKgkf2E8rGFtANYHn4auqRcU1O8oobhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtO9ZfyP4mu+wf8c7EWkba4sBQFwwHwYDVR0j BBgwFoAUPAvWuxtMsH3Fj28wFrXsN0n+/lQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTJlODNhZmUtM2JkYy00NGIyLWE3MDItYjQ1NTVkYWE2NWVhLzAvM0MwQkQ2QkIx QjRDQjA3REM1OEY2RjMwMTZCNUVDMzc0OUZFRkU1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8zQzBCRDZCQjFCNENCMDdEQzU4RjZGMzAxNkI1RUMzNzQ5RkVG RTU0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2UyZTgzYWZlLTNiZGMtNDRiMi1h NzAyLWI0NTU1ZGFhNjVlYS8wLzMxMzUzNzJlMzIzMDJlMzIzMTM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRTbMA0GCSqG SIb3DQEBCwUAA4IBAQBH7o3x2ZclTcJEp40y0scsH2JTxJwBt8CxsPehJenDc/J6 nx6SOFOIZgrClXj9UxTH5fDIHeWIYtIUcsjfRVUECz/ASBVkdIcGVHzl/Bdde5tv a+XKSo/FR1lfSWRJd7lqbxbtcV1OxU4QRzf07t8tcvv8PZrzoYTp9BqH9f15TkJV r53PMYe6b/5RkIq9+BMA0QoYxGGogkZ25SrSICdVwloffZFAhTxGjhq43NCFIqcO H4WpYaD3L8IE97m0cCg5PW+NRvsC6jvhHbV6VSI5EUoJwwX5vUG84YERUi566Q+1 zTnGB7hO8YiR+KBJoyXGox10mZl9Belvya7YzE7R -----END CERTIFICATE-----Generated at Sun Nov 15 06:39:40 2026 by rpki-client