$ rpki-client -vvf rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34332e302f32342d3234203d3e20313532333635.roa File: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (raw, json) Hash identifier: aVxwuIGWn+Jb5KGrsTQwKAmXv03fAWvd+HD6KJE66iw= Subject key identifier: 8E:45:51:DC:78:80:13:26:B8:86:21:ED:94:9C:EB:1C:0F:6C:3A:A0 Certificate issuer: /CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Certificate serial: 56D110CC89D78453EB1A0FB06EB9BCF9A7E1D6FF Authority key identifier: EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34332e302f32342d3234203d3e20313532333635.roa Signing time: Sun 03 May 2026 03:13:51 +0000 ROA not before: Sun 03 May 2026 03:08:51 +0000 ROA not after: Sun 02 May 2027 03:13:51 +0000 asID: 152365 IP address blocks: 157.15.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d1:10:cc:89:d7:84:53:eb:1a:0f:b0:6e:b9:bc:f9:a7:e1:d6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E Validity Not Before: May 3 03:08:51 2026 GMT Not After : May 2 03:13:51 2027 GMT Subject: CN=8E4551DC78801326B88621ED949CEB1C0F6C3AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ad:20:0f:d4:64:1f:1c:3e:50:d0:2b:3b:94: 75:04:78:48:59:fe:d1:6f:ed:e2:73:c4:03:b6:37: 28:4b:b5:46:a4:da:e8:44:03:f0:39:7c:af:bf:1a: e9:ca:39:d1:40:fc:a1:06:51:22:df:72:1e:10:7b: 47:34:43:cc:e4:aa:c6:2b:9d:f8:81:c8:b9:02:15: db:06:c1:16:39:d9:40:c6:8b:06:75:ec:42:0c:cd: ba:b4:6f:20:2e:8b:13:16:aa:75:9a:d7:8b:22:85: 52:9e:b3:54:12:c4:69:52:b5:2c:1a:f0:23:a2:b8: 92:17:c3:0e:73:a3:ea:88:40:4c:d9:88:db:3f:7e: bf:66:5d:04:79:11:3b:8e:17:f5:0b:66:ee:d8:c3: 96:96:b0:4c:45:3a:75:d8:a4:7e:67:8d:f0:d1:12: 60:5c:d8:1e:44:44:bd:e9:42:ec:47:ac:e7:06:ef: 92:81:43:fc:15:99:60:79:b8:8f:6f:88:f2:ed:4c: b2:5f:5d:02:91:a1:42:2a:34:52:a0:fb:89:a0:31: 7f:04:6a:4d:2b:72:ad:fb:a2:1e:f7:f7:73:da:86: 5d:dc:45:6a:a2:da:c6:66:2e:33:a3:42:59:d3:92: 0b:fb:2a:8f:51:1f:a1:38:14:4a:71:b0:24:83:09: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:45:51:DC:78:80:13:26:B8:86:21:ED:94:9C:EB:1C:0F:6C:3A:A0 X509v3 Authority Key Identifier: keyid:EE:FF:02:42:4D:8D:55:9C:41:36:A2:96:EB:DB:CF:6E:1A:6B:8D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/EEFF02424D8D559C4136A296EBDBCF6E1A6B8D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/3135372e31352e34332e302f32342d3234203d3e20313532333635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.43.0/24 Signature Algorithm: sha256WithRSAEncryption 39:82:10:ca:44:ff:60:47:b4:bd:73:0d:19:13:dd:9e:1e:2a: ce:6b:98:53:60:3d:7a:fa:35:15:0e:15:e0:39:fd:57:ca:74: d5:da:56:b8:3a:32:60:57:1e:99:a6:49:3c:4d:7a:4d:29:4a: f6:f8:1c:1d:90:41:8e:e8:d2:b0:fc:99:8f:08:95:01:40:dc: a4:64:f7:69:f7:5c:0f:b4:e1:dd:5c:0a:33:ad:64:1a:32:f1: 47:c0:ae:b5:3b:33:e0:f3:54:41:e8:29:66:8b:f3:6f:3a:12: a2:17:3a:3b:4c:02:8e:07:a4:aa:a6:d0:1d:5b:e4:5c:30:92: a3:1b:1d:09:21:68:86:6b:8a:a8:9f:7c:57:e1:77:be:92:ab: 53:53:3e:6f:0c:44:60:1d:c7:e7:80:cf:04:cb:d4:9d:91:97: 4b:54:6e:59:65:ac:64:21:2f:e6:76:4a:b1:62:da:19:26:88: 0d:3b:14:89:9c:8b:67:5a:69:84:3a:f5:04:17:c9:9d:e8:81: 4d:a6:56:53:f3:e2:4a:cb:49:44:3a:6b:d5:48:b0:95:98:47: fd:fc:03:60:01:93:16:38:ae:16:01:9c:f8:a8:5c:2d:43:da: b7:1e:0d:6e:85:80:64:30:1f:62:58:d3:64:6a:4f:2d:aa:6e: 4a:3d:5b:af -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUVtEQzInXhFPrGg+wbrm8+afh1v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVGRjAyNDI0RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUx QTZCOEQwRTAeFw0yNjA1MDMwMzA4NTFaFw0yNzA1MDIwMzEzNTFaMDMxMTAvBgNV BAMTKDhFNDU1MURDNzg4MDEzMjZCODg2MjFFRDk0OUNFQjFDMEY2QzNBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrSAP1GQfHD5Q0Cs7lHUEeEhZ /tFv7eJzxAO2NyhLtUak2uhEA/A5fK+/GunKOdFA/KEGUSLfch4Qe0c0Q8zkqsYr nfiByLkCFdsGwRY52UDGiwZ17EIMzbq0byAuixMWqnWa14sihVKes1QSxGlStSwa 8COiuJIXww5zo+qIQEzZiNs/fr9mXQR5ETuOF/ULZu7Yw5aWsExFOnXYpH5njfDR EmBc2B5ERL3pQuxHrOcG75KBQ/wVmWB5uI9viPLtTLJfXQKRoUIqNFKg+4mgMX8E ak0rcq37oh7393Pahl3cRWqi2sZmLjOjQlnTkgv7Ko9RH6E4FEpxsCSDCfaDAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUjkVR3HiAEya4hiHtlJzrHA9sOqAwHwYDVR0j BBgwFoAU7v8CQk2NVZxBNqKW69vPbhprjQ4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1MzMtOWRmODJhZmM1OTczLzAvRUVGRjAyNDI0 RDhENTU5QzQxMzZBMjk2RUJEQkNGNkUxQTZCOEQwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FRUZGMDI0MjREOEQ1NTlDNDEzNkEyOTZFQkRCQ0Y2RTFBNkI4 RDBFLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U1ZGU3MWFjLTdmOWYtNDdkNC05 NTMzLTlkZjgyYWZjNTk3My8wLzMxMzUzNzJlMzEzNTJlMzQzMzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ0PKzANBgkqhkiG 9w0BAQsFAAOCAQEAOYIQykT/YEe0vXMNGRPdnh4qzmuYU2A9evo1FQ4V4Dn9V8p0 1dpWuDoyYFcemaZJPE16TSlK9vgcHZBBjujSsPyZjwiVAUDcpGT3afdcD7Th3VwK M61kGjLxR8CutTsz4PNUQegpZovzbzoSohc6O0wCjgekqqbQHVvkXDCSoxsdCSFo hmuKqJ98V+F3vpKrU1M+bwxEYB3H54DPBMvUnZGXS1RuWWWsZCEv5nZKsWLaGSaI DTsUiZyLZ1pphDr1BBfJneiBTaZWU/PiSstJRDpr1UiwlZhH/fwDYAGTFjiuFgGc +KhcLUPatx4NboWAZDAfYljTZGpPLapuSj1brw== -----END CERTIFICATE-----Generated at Wed May 13 04:51:03 2026 by rpki-client