$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa File: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (raw, json) Hash identifier: FB472ElcOvg/ylc+xiayFIvGK9fHP8MxdL79QVbGvdA= Subject key identifier: 83:81:BB:82:C6:DF:DA:CC:18:34:4F:AE:2E:00:FC:75:24:22:26:27 Certificate issuer: /CN=489207A82A4F1A3B6758139186A867CE751999B7 Certificate serial: 2C12328217706DBDF6774504C8F02DF824C95133 Authority key identifier: 48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa Signing time: Sun 03 May 2026 03:17:32 +0000 ROA not before: Sun 03 May 2026 03:12:32 +0000 ROA not after: Sun 02 May 2027 03:17:32 +0000 asID: 152415 IP address blocks: 157.20.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:12:32:82:17:70:6d:bd:f6:77:45:04:c8:f0:2d:f8:24:c9:51:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=489207A82A4F1A3B6758139186A867CE751999B7 Validity Not Before: May 3 03:12:32 2026 GMT Not After : May 2 03:17:32 2027 GMT Subject: CN=8381BB82C6DFDACC18344FAE2E00FC7524222627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:cf:e2:bb:bb:33:c2:98:52:7a:df:f8:bd: b7:05:a0:04:64:9f:c4:6c:40:b5:ef:81:17:c2:91: fe:a6:89:89:46:ea:5e:b4:5e:62:3a:a5:58:d8:77: 60:38:3b:70:cb:24:f5:a5:e1:1d:62:71:dc:9b:c1: 8a:3c:23:80:5b:72:25:47:01:7c:51:fd:d3:cf:f5: 7d:f7:c5:3c:34:25:b6:74:d4:32:96:64:1d:45:e3: ea:19:e2:48:41:7d:e7:07:cf:59:5c:0f:b2:58:86: b4:fb:ef:47:a1:fc:cd:14:4d:80:4b:89:69:3d:94: 78:dd:8f:e8:43:b9:cf:20:30:2f:85:4b:4a:da:b0: a7:d4:f4:83:ec:16:b1:6b:67:b7:ab:ad:1d:9d:89: af:ed:80:2f:7f:9f:3e:c1:12:e8:9a:cc:0d:11:19: d8:d3:35:5f:82:84:7b:b3:34:1d:5f:ac:61:a1:07: 4c:66:27:dc:da:c1:6a:c0:27:35:28:91:10:0c:b8: 28:f8:35:45:77:77:9d:c0:c0:eb:3f:d5:7d:8c:03: dd:b1:b2:90:80:98:76:dd:f5:9e:ae:f4:e1:c0:be: a2:f9:31:ba:db:50:a7:d0:98:36:0c:ca:59:57:31: cb:48:db:42:18:40:70:18:c0:a1:48:c7:9a:9d:36: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:81:BB:82:C6:DF:DA:CC:18:34:4F:AE:2E:00:FC:75:24:22:26:27 X509v3 Authority Key Identifier: keyid:48:92:07:A8:2A:4F:1A:3B:67:58:13:91:86:A8:67:CE:75:19:99:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/489207A82A4F1A3B6758139186A867CE751999B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/489207A82A4F1A3B6758139186A867CE751999B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.212.0/23 Signature Algorithm: sha256WithRSAEncryption 61:b2:7d:fa:98:42:ab:45:4c:b0:b2:fd:bc:28:fc:7b:22:87: f8:c8:21:8a:1c:30:b0:45:d0:00:32:90:ce:7b:65:e2:9e:93: fa:3f:f6:e9:80:a4:5f:fc:f0:96:04:a0:62:bd:e9:bd:64:a4: b5:40:c7:f4:ac:08:08:a3:0e:2b:c7:01:b9:71:7b:b1:3f:2d: ea:77:6c:96:1b:8c:c5:89:74:f0:6e:25:b1:af:29:b2:bd:29: 72:9d:18:97:19:d2:63:8c:ad:a0:d6:93:b5:b4:23:ef:4d:0c: 31:85:a2:87:ef:b2:55:2c:7e:73:a9:29:26:57:62:1a:27:c0: 93:e3:33:37:65:53:88:9b:87:48:aa:76:35:b4:a5:af:88:9f: df:70:da:da:5a:74:a7:80:17:a9:7b:44:e6:2a:71:ca:5e:ba: 93:61:c0:19:07:4a:22:4b:b8:e8:57:9d:24:4b:33:85:5f:9f: b7:3b:3e:7f:85:5a:9f:11:7e:cc:e4:29:e9:6b:56:9f:a0:90: 2e:5c:7c:d1:51:29:cd:2d:b5:67:37:93:22:d7:31:03:bf:0d: 60:86:5d:2c:da:c1:f4:69:ac:19:af:36:42:86:f7:c2:77:e0: b5:5e:72:5a:e4:36:8a:10:7b:16:fc:69:4f:a3:c5:7a:59:6c: de:27:71:88 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULBIyghdwbb32d0UEyPAt+CTJUTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg5MjA3QTgyQTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3 NTE5OTlCNzAeFw0yNjA1MDMwMzEyMzJaFw0yNzA1MDIwMzE3MzJaMDMxMTAvBgNV BAMTKDgzODFCQjgyQzZERkRBQ0MxODM0NEZBRTJFMDBGQzc1MjQyMjI2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9c/iu7szwphSet/4vbcFoARk n8RsQLXvgRfCkf6miYlG6l60XmI6pVjYd2A4O3DLJPWl4R1icdybwYo8I4BbciVH AXxR/dPP9X33xTw0JbZ01DKWZB1F4+oZ4khBfecHz1lcD7JYhrT770eh/M0UTYBL iWk9lHjdj+hDuc8gMC+FS0rasKfU9IPsFrFrZ7errR2dia/tgC9/nz7BEuiazA0R GdjTNV+ChHuzNB1frGGhB0xmJ9zawWrAJzUokRAMuCj4NUV3d53AwOs/1X2MA92x spCAmHbd9Z6u9OHAvqL5MbrbUKfQmDYMyllXMctI20IYQHAYwKFIx5qdNll3AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUg4G7gsbf2swYNE+uLgD8dSQiJicwHwYDVR0j BBgwFoAUSJIHqCpPGjtnWBORhqhnznUZmbcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjNiNDdhYjYtZDFmMS00ZDJlLTljZmMtODA4NGE0YmFjZjBiLzAvNDg5MjA3QTgy QTRGMUEzQjY3NTgxMzkxODZBODY3Q0U3NTE5OTlCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80ODkyMDdBODJBNEYxQTNCNjc1ODEzOTE4NkE4NjdDRTc1MTk5 OUI3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YzYjQ3YWI2LWQxZjEtNGQyZS05 Y2ZjLTgwODRhNGJhY2YwYi8wLzMxMzUzNzJlMzIzMDJlMzIzMTMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzQzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnRTUMA0GCSqG SIb3DQEBCwUAA4IBAQBhsn36mEKrRUywsv28KPx7Iof4yCGKHDCwRdAAMpDOe2Xi npP6P/bpgKRf/PCWBKBivem9ZKS1QMf0rAgIow4rxwG5cXuxPy3qd2yWG4zFiXTw biWxrymyvSlynRiXGdJjjK2g1pO1tCPvTQwxhaKH77JVLH5zqSkmV2IaJ8CT4zM3 ZVOIm4dIqnY1tKWviJ/fcNraWnSngBepe0TmKnHKXrqTYcAZB0oiS7joV50kSzOF X5+3Oz5/hVqfEX7M5Cnpa1afoJAuXHzRUSnNLbVnN5Mi1zEDvw1ghl0s2sH0aawZ rzZChvfCd+C1XnJa5DaKEHsW/GlPo8V6WWzeJ3GI -----END CERTIFICATE-----Generated at Wed May 13 02:48:11 2026 by rpki-client