$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 98DAya7qqfJYAo9aDPn/Aan9gV2CXG+af93dHm1MO0M= Subject key identifier: 2C:82:C5:F9:8D:54:00:E1:FC:BA:EE:04:5A:03:E1:D1:5E:A4:59:B2 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 4A66294BF6EF898B17FCA15A072DA19083D43314 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:33 +0000 ROA not before: Sun 03 May 2026 02:22:33 +0000 ROA not after: Sun 02 May 2027 02:27:33 +0000 asID: 63859 IP address blocks: 158.140.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:66:29:4b:f6:ef:89:8b:17:fc:a1:5a:07:2d:a1:90:83:d4:33:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:33 2026 GMT Not After : May 2 02:27:33 2027 GMT Subject: CN=2C82C5F98D5400E1FCBAEE045A03E1D15EA459B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:91:1d:16:be:1c:27:3e:f2:0b:12:d1:9c: a9:dd:4d:29:1f:94:90:4c:ef:29:44:77:8e:f7:5a: 1e:34:f1:6b:30:99:c0:9d:e8:7e:45:0c:8c:f6:4f: 04:04:38:f6:0c:4b:cd:ca:72:fc:da:45:9f:e6:0b: 01:6f:04:11:30:43:72:a7:99:72:81:41:99:9b:94: fd:7b:59:94:87:6b:c5:82:87:07:f6:f6:6c:50:0e: 36:fe:ae:59:2b:8a:d3:12:d8:8c:de:d1:b9:2f:87: 19:5b:db:92:2e:4b:97:99:20:3d:7b:55:9d:36:1a: 2e:a3:d3:c8:76:1d:1e:af:e0:f7:f5:71:27:8c:90: 24:31:37:0f:cb:37:2c:73:6a:22:f0:cc:c7:54:45: 93:34:34:db:30:b1:c2:67:bf:27:1f:0a:ab:8b:a6: ae:af:7e:19:6f:ff:15:24:0a:7e:3c:a2:76:51:c7: 96:91:c8:7c:a2:00:cb:fd:c4:ca:ef:af:9c:3d:57: af:a4:de:ee:b2:cf:8e:27:7d:e0:83:6f:1d:2a:6f: f1:39:66:3b:6d:fb:18:0f:e3:87:bd:4e:4b:35:26: 3e:54:b0:07:a5:5a:41:91:17:2d:f0:40:81:e6:97: ff:8f:c4:ca:c4:c7:be:e4:14:36:6f:83:1d:3c:9b: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:82:C5:F9:8D:54:00:E1:FC:BA:EE:04:5A:03:E1:D1:5E:A4:59:B2 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3136302e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.160.0/24 Signature Algorithm: sha256WithRSAEncryption 24:93:4a:31:6f:7e:20:c5:0e:ef:e7:22:4f:53:48:b8:ca:70: 4a:ce:53:7e:3c:70:62:26:bd:f0:fc:a1:06:8e:67:73:15:34: 6a:b2:21:47:92:ca:66:57:70:e5:a0:cf:06:1d:a9:a3:a3:fa: b7:fe:31:66:58:27:33:3a:b5:55:f6:2d:df:20:b7:79:2f:2f: 25:52:15:b4:92:87:f9:87:f4:b9:ce:9e:cd:36:76:19:d6:9c: f0:6a:55:9e:eb:9e:c3:bb:2e:1c:f4:f3:c7:ad:a9:af:2a:b7: 64:a3:eb:73:09:5d:1d:a9:21:7c:af:10:32:8d:d5:b2:42:9c: f1:ed:13:94:95:85:9e:c4:1f:83:41:fc:9d:cd:45:3d:4f:ba: d2:7b:d0:9d:08:a6:5a:0b:f3:50:df:f4:e8:51:11:f0:ec:22: 94:eb:a2:aa:3b:5c:6c:20:d4:d1:df:58:30:20:4a:19:af:b4: 81:5f:90:28:20:5a:a1:41:a6:8d:2c:4b:d4:9b:90:c9:5a:9a: 07:15:8d:e1:f7:47:1d:10:df:e8:7d:a6:9f:16:29:18:7b:b0: ed:54:b3:57:fb:65:07:3c:15:c7:aa:6b:94:f4:28:80:9c:aa: 70:2f:6a:91:89:a2:97:6c:c0:93:14:20:f6:44:4b:7d:ce:c6: 5f:5e:db:70 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUSmYpS/bviYsX/KFaBy2hkIPUMxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMzNaFw0yNzA1MDIwMjI3MzNaMDMxMTAvBgNV BAMTKDJDODJDNUY5OEQ1NDAwRTFGQ0JBRUUwNDVBMDNFMUQxNUVBNDU5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfpEdFr4cJz7yCxLRnKndTSkf lJBM7ylEd473Wh408WswmcCd6H5FDIz2TwQEOPYMS83KcvzaRZ/mCwFvBBEwQ3Kn mXKBQZmblP17WZSHa8WChwf29mxQDjb+rlkritMS2Ize0bkvhxlb25IuS5eZID17 VZ02Gi6j08h2HR6v4Pf1cSeMkCQxNw/LNyxzaiLwzMdURZM0NNswscJnvycfCquL pq6vfhlv/xUkCn48onZRx5aRyHyiAMv9xMrvr5w9V6+k3u6yz44nfeCDbx0qb/E5 Zjtt+xgP44e9Tks1Jj5UsAelWkGRFy3wQIHml/+PxMrEx77kFDZvgx08m9dhAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQULILF+Y1UAOH8uu4EWgPh0V6kWbIwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM2MzAyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoygMA0GCSqG SIb3DQEBCwUAA4IBAQAkk0oxb34gxQ7v5yJPU0i4ynBKzlN+PHBiJr3w/KEGjmdz FTRqsiFHkspmV3DloM8GHamjo/q3/jFmWCczOrVV9i3fILd5Ly8lUhW0kof5h/S5 zp7NNnYZ1pzwalWe657Duy4c9PPHramvKrdko+tzCV0dqSF8rxAyjdWyQpzx7ROU lYWexB+DQfydzUU9T7rSe9CdCKZaC/NQ3/ToURHw7CKU66KqO1xsINTR31gwIEoZ r7SBX5AoIFqhQaaNLEvUm5DJWpoHFY3h90cdEN/ofaafFikYe7DtVLNX+2UHPBXH qmuU9CiAnKpwL2qRiaKXbMCTFCD2REt9zsZfXttw -----END CERTIFICATE-----Generated at Wed May 13 23:07:33 2026 by rpki-client