$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa File: 3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa (raw, json) Hash identifier: ccmy2LH8bOvIWU+GPrMO4FL2775rB00lVz7jkl8O1gM= Subject key identifier: E4:BA:B3:63:D9:8D:AD:8C:21:12:5E:62:23:CA:25:9B:F6:68:9A:03 Certificate issuer: /CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Certificate serial: 210ED97B1CFC19802144C871A7B47CF9E2032700 Authority key identifier: 0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa Signing time: Sun 03 May 2026 03:15:02 +0000 ROA not before: Sun 03 May 2026 03:10:02 +0000 ROA not after: Sun 02 May 2027 03:15:02 +0000 asID: 152421 IP address blocks: 157.20.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0e:d9:7b:1c:fc:19:80:21:44:c8:71:a7:b4:7c:f9:e2:03:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6 Validity Not Before: May 3 03:10:02 2026 GMT Not After : May 2 03:15:02 2027 GMT Subject: CN=E4BAB363D98DAD8C21125E6223CA259BF6689A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:e3:fc:50:00:f0:19:76:b7:a5:f5:87:3f: 54:58:cb:c8:a9:23:c0:33:9a:f6:21:04:5e:3f:9a: d8:38:33:08:54:70:8f:22:55:d0:d6:3d:be:99:af: 99:58:6f:60:cd:18:33:fe:ce:fd:d3:bc:ad:93:0f: a3:da:28:8a:1c:70:d8:d8:45:2b:72:c0:cb:64:c6: 3e:69:ec:93:f9:02:f2:c2:f4:1b:0f:dc:d0:c5:5f: e1:10:8b:cc:4e:6f:0a:d8:42:84:32:ef:30:66:7a: 78:db:10:b5:4d:4b:6a:94:2a:0e:16:76:af:79:ad: de:97:ae:ad:4a:d8:8c:62:33:8b:0f:1c:8e:b0:ab: 98:1b:c9:cb:64:86:23:3e:b7:eb:38:89:0e:69:46: 99:9f:2f:7c:3b:a7:95:9b:8c:b9:a1:e8:3b:0b:8b: da:20:3d:3f:68:32:89:6a:57:c7:e3:ff:4d:f0:ae: b5:94:8b:1e:38:5c:4d:6b:52:09:56:8d:7f:b3:ab: 12:a5:d7:a7:ac:dc:9d:a4:08:4d:13:50:a5:c5:62: e1:2e:4b:f6:55:fd:7c:ba:c2:73:fe:6c:9c:53:03: cd:3c:5e:c8:82:51:65:1c:f8:58:9e:aa:8d:a4:ca: c0:71:00:8b:c7:46:77:e1:e7:98:5d:98:e6:be:72: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BA:B3:63:D9:8D:AD:8C:21:12:5E:62:23:CA:25:9B:F6:68:9A:03 X509v3 Authority Key Identifier: keyid:0A:9E:60:F4:AC:7A:C7:1E:24:68:93:5B:CA:5D:0D:97:0A:AC:E8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0A9E60F4AC7AC71E2468935BCA5D0D970AACE8F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea4f7934-cdc7-4082-83fb-df7d4f8219af/0/3135372e32302e3134352e302f32342d3234203d3e20313532343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.145.0/24 Signature Algorithm: sha256WithRSAEncryption 66:56:37:67:59:d8:90:c9:47:6e:bd:78:a3:4a:0c:5e:89:89: 48:11:05:35:6a:2a:8b:52:ac:c0:9b:e8:8a:9b:96:cc:ce:90: 01:c2:10:bf:2c:1b:85:80:71:97:4a:35:86:cf:81:60:9b:6d: 63:c9:ce:b2:cc:0a:fe:62:f0:0a:0f:12:c3:11:39:64:8c:08: 13:cf:56:18:a2:68:fc:2e:a8:44:bd:2a:b7:02:24:eb:60:0f: b5:78:be:3a:7a:25:8e:de:e1:ac:eb:18:60:74:0c:62:4c:dc: c6:87:28:55:86:78:bc:e8:d2:d5:23:41:e9:74:8d:fc:e6:e6: d3:5e:e4:1e:2a:58:f6:b7:2f:86:b1:3a:ad:dc:9b:7f:69:f5: 96:ab:01:c7:e8:55:45:7d:5b:9d:1f:6c:57:a0:99:89:41:74: b0:7a:1b:44:56:32:54:87:7a:04:99:29:f3:5b:e0:8b:79:67: 9b:75:f2:3b:17:98:1c:b1:07:58:df:e9:60:84:17:1e:a5:ce: f7:62:df:ac:0c:4f:52:d7:81:49:6b:06:5b:f4:6b:74:f0:f5: 08:05:28:2d:f8:ce:5c:0b:48:64:fc:54:57:c8:4a:bc:c3:94: 16:85:98:66:f2:fb:ce:97:b7:4f:2e:cb:ac:6b:dd:02:d5:75: 8e:fc:82:e2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUIQ7Zexz8GYAhRMhxp7R8+eIDJwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE5RTYwRjRBQzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcw QUFDRThGNjAeFw0yNjA1MDMwMzEwMDJaFw0yNzA1MDIwMzE1MDJaMDMxMTAvBgNV BAMTKEU0QkFCMzYzRDk4REFEOEMyMTEyNUU2MjIzQ0EyNTlCRjY2ODlBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFceP8UADwGXa3pfWHP1RYy8ip I8AzmvYhBF4/mtg4MwhUcI8iVdDWPb6Zr5lYb2DNGDP+zv3TvK2TD6PaKIoccNjY RStywMtkxj5p7JP5AvLC9BsP3NDFX+EQi8xObwrYQoQy7zBmenjbELVNS2qUKg4W dq95rd6Xrq1K2IxiM4sPHI6wq5gbyctkhiM+t+s4iQ5pRpmfL3w7p5WbjLmh6DsL i9ogPT9oMolqV8fj/03wrrWUix44XE1rUglWjX+zqxKl16es3J2kCE0TUKXFYuEu S/ZV/Xy6wnP+bJxTA808XsiCUWUc+Fieqo2kysBxAIvHRnfh55hdmOa+cr0xAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQU5LqzY9mNrYwhEl5iI8olm/ZomgMwHwYDVR0j BBgwFoAUCp5g9Kx6xx4kaJNbyl0Nlwqs6PYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE0Zjc5MzQtY2RjNy00MDgyLTgzZmItZGY3ZDRmODIxOWFmLzAvMEE5RTYwRjRB QzdBQzcxRTI0Njg5MzVCQ0E1RDBEOTcwQUFDRThGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wQTlFNjBGNEFDN0FDNzFFMjQ2ODkzNUJDQTVEMEQ5NzBBQUNF OEY2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2VhNGY3OTM0LWNkYzctNDA4Mi04 M2ZiLWRmN2Q0ZjgyMTlhZi8wLzMxMzUzNzJlMzIzMDJlMzEzNDM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnRSRMA0GCSqG SIb3DQEBCwUAA4IBAQBmVjdnWdiQyUduvXijSgxeiYlIEQU1aiqLUqzAm+iKm5bM zpABwhC/LBuFgHGXSjWGz4Fgm21jyc6yzAr+YvAKDxLDETlkjAgTz1YYomj8LqhE vSq3AiTrYA+1eL46eiWO3uGs6xhgdAxiTNzGhyhVhni86NLVI0HpdI385ubTXuQe Klj2ty+GsTqt3Jt/afWWqwHH6FVFfVudH2xXoJmJQXSwehtEVjJUh3oEmSnzW+CL eWebdfI7F5gcsQdY3+lghBcepc73Yt+sDE9S14FJawZb9Gt08PUIBSgt+M5cC0hk /FRXyEq8w5QWhZhm8vvOl7dPLsusa90C1XWO/ILi -----END CERTIFICATE-----Generated at Wed May 13 02:37:28 2026 by rpki-client