$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138312e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3138312e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 5tSZ7aHF60/iEum0L6WKt2ebaDDNmEs7aX27dT1Neoc= Subject key identifier: CB:C7:26:A6:BD:12:78:C4:65:0E:26:B1:40:1E:89:11:AF:41:92:4C Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 1973142C3A1A44219779FBAE4C337CCFA0258E35 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138312e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:32 +0000 ROA not before: Sun 03 May 2026 02:22:32 +0000 ROA not after: Sun 02 May 2027 02:27:32 +0000 asID: 63859 IP address blocks: 158.140.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:73:14:2c:3a:1a:44:21:97:79:fb:ae:4c:33:7c:cf:a0:25:8e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:32 2026 GMT Not After : May 2 02:27:32 2027 GMT Subject: CN=CBC726A6BD1278C4650E26B1401E8911AF41924C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:09:cb:98:49:b6:8d:56:1a:af:9d:31:0f: cc:ca:8c:61:b8:c8:13:48:55:82:b9:eb:3b:aa:8f: 10:88:bd:e8:01:27:0a:ef:96:9c:5b:d0:ed:de:8e: a9:17:1f:6c:44:19:9f:4d:13:c7:2f:5d:bb:65:f3: 2f:40:6a:bd:86:cb:8e:06:32:a5:05:d3:30:76:46: e5:c6:76:10:cc:07:97:3d:36:dd:dd:84:01:f9:f9: 50:41:3e:a6:fb:e9:ca:7d:ec:44:a9:3d:8b:7e:5f: 5d:0c:58:eb:3e:70:78:cf:8a:8e:bf:9c:d5:26:ee: c8:d0:54:c6:3f:20:25:ba:ef:f7:53:c6:62:b6:79: 40:7a:69:c9:18:8d:cd:02:41:bb:37:f9:c8:b3:d7: 3c:e5:b2:27:e3:0b:9a:13:75:0d:80:29:16:74:fa: 90:91:c3:d6:72:a9:b6:fa:c4:89:8c:d0:5f:ff:e2: 59:b9:7e:35:84:14:04:34:c5:10:d2:2a:02:51:2e: e0:f8:07:6b:41:84:e3:2e:e2:ea:96:dd:65:eb:ef: ed:4e:a0:05:b3:95:52:25:e3:d5:1f:fd:8f:4b:58: 6a:d4:be:88:51:0c:7a:82:24:85:13:16:5c:5a:9a: 27:98:45:24:f9:f1:e2:d9:7d:fc:14:3f:15:da:8b: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C7:26:A6:BD:12:78:C4:65:0E:26:B1:40:1E:89:11:AF:41:92:4C X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138312e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.181.0/24 Signature Algorithm: sha256WithRSAEncryption c7:42:71:ad:f4:3c:56:ea:4b:90:37:4f:fd:95:c6:5c:b8:64: dd:8e:1d:a1:ef:39:36:00:5e:d7:31:d5:55:58:5f:b8:f3:53: 0c:44:d8:00:90:00:b5:b2:48:ef:8f:07:a1:30:1b:0b:0e:db: 16:2c:e8:df:b1:67:00:a9:d1:8e:cc:ff:7d:a3:0a:a3:a4:80: aa:65:5a:21:da:34:59:ef:25:7e:f1:a7:80:44:17:8c:42:30: a2:45:01:7a:26:ae:5a:09:1a:fd:5d:bd:f5:61:48:69:40:2a: 2c:bd:0f:39:d2:44:58:09:dd:af:c9:d3:f1:3a:8e:74:6f:48: 76:e4:9f:c0:6a:d0:27:b9:df:ad:cb:b5:23:63:53:2d:20:fb: cc:3f:c6:a5:be:60:30:53:ee:cc:36:10:be:a8:09:99:66:3b: 6c:20:4a:0d:1b:a9:15:11:d4:e8:99:d0:3c:78:00:82:a4:de: 68:99:82:7a:7e:cf:d3:ea:4d:1e:1b:b3:77:5b:27:72:73:1a: 9d:d2:e2:6a:a7:28:2b:51:7d:b7:d1:43:20:f0:09:2b:da:ca: 3b:25:0e:dd:0f:b0:2c:bf:71:db:c7:19:a5:aa:a6:cc:99:36: db:3a:cc:0d:f2:5e:37:90:e5:c6:51:2e:3a:8e:ca:a9:f0:79: 9f:ce:3b:c3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGXMULDoaRCGXefuuTDN8z6AljjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMzJaFw0yNzA1MDIwMjI3MzJaMDMxMTAvBgNV BAMTKENCQzcyNkE2QkQxMjc4QzQ2NTBFMjZCMTQwMUU4OTExQUY0MTkyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcAnLmEm2jVYar50xD8zKjGG4 yBNIVYK56zuqjxCIvegBJwrvlpxb0O3ejqkXH2xEGZ9NE8cvXbtl8y9Aar2Gy44G MqUF0zB2RuXGdhDMB5c9Nt3dhAH5+VBBPqb76cp97ESpPYt+X10MWOs+cHjPio6/ nNUm7sjQVMY/ICW67/dTxmK2eUB6ackYjc0CQbs3+ciz1zzlsifjC5oTdQ2AKRZ0 +pCRw9Zyqbb6xImM0F//4lm5fjWEFAQ0xRDSKgJRLuD4B2tBhOMu4uqW3WXr7+1O oAWzlVIl49Uf/Y9LWGrUvohRDHqCJIUTFlxamieYRST58eLZffwUPxXai8trAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUy8cmpr0SeMRlDiaxQB6JEa9BkkwwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM4MzEyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy1MA0GCSqG SIb3DQEBCwUAA4IBAQDHQnGt9DxW6kuQN0/9lcZcuGTdjh2h7zk2AF7XMdVVWF+4 81MMRNgAkAC1skjvjwehMBsLDtsWLOjfsWcAqdGOzP99owqjpICqZVoh2jRZ7yV+ 8aeARBeMQjCiRQF6Jq5aCRr9Xb31YUhpQCosvQ850kRYCd2vydPxOo50b0h25J/A atAnud+ty7UjY1MtIPvMP8alvmAwU+7MNhC+qAmZZjtsIEoNG6kVEdTomdA8eACC pN5omYJ6fs/T6k0eG7N3Wydycxqd0uJqpygrUX230UMg8Akr2so7JQ7dD7Asv3Hb xxmlqqbMmTbbOswN8l43kOXGUS46jsqp8HmfzjvD -----END CERTIFICATE-----Generated at Wed May 13 23:07:13 2026 by rpki-client