$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138342e302f32342d3234203d3e203633383539.roa File: 3135382e3134302e3138342e302f32342d3234203d3e203633383539.roa (raw, json) Hash identifier: 7cAniIV+RV9VHwY0cfEnkE4NXWeA4H8LVS1x1R0dJ0o= Subject key identifier: 17:7E:53:8B:E8:4A:8D:A0:9C:88:61:D5:99:78:02:00:DD:2A:BB:20 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 081B8C2F6BEE7FAA460FFB8CA92F3E923ABAF137 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138342e302f32342d3234203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:24 +0000 ROA not before: Sun 03 May 2026 02:22:24 +0000 ROA not after: Sun 02 May 2027 02:27:24 +0000 asID: 63859 IP address blocks: 158.140.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:1b:8c:2f:6b:ee:7f:aa:46:0f:fb:8c:a9:2f:3e:92:3a:ba:f1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:24 2026 GMT Not After : May 2 02:27:24 2027 GMT Subject: CN=177E538BE84A8DA09C8861D599780200DD2ABB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:86:bf:c5:0f:c0:c8:a0:b0:24:bb:8f:aa:1b: 54:7d:d0:df:f1:1a:6c:11:b2:37:34:9d:3c:06:89: 23:64:ea:7b:b7:8b:66:92:75:4a:3e:ec:48:79:82: ed:ec:a0:bc:fe:74:87:fd:01:2f:33:c3:9c:a5:15: c3:0d:64:85:bb:b1:bf:be:8d:67:04:b2:2b:93:df: 55:71:65:6d:11:9b:26:3a:f5:50:a4:b3:23:a7:c3: 71:de:0d:fc:92:26:75:75:bc:2c:22:b2:ae:b6:76: 63:ed:4f:7b:6e:c4:a0:39:74:07:d1:5d:89:f4:b3: d6:e1:9e:6a:a7:50:0c:b7:9b:02:40:b6:e4:7e:81: 45:d6:e6:bb:1b:ca:cd:49:93:d4:d8:a9:a6:c8:01: 01:29:de:66:c9:45:fe:10:8d:0f:0f:72:16:42:7d: a1:21:91:11:00:52:7a:d1:36:47:8e:15:fc:26:b5: 7c:21:35:3f:cb:24:54:17:bd:6d:91:f4:95:84:65: 64:23:55:ea:44:b2:a9:0a:f4:42:08:f7:20:14:8c: 1e:1b:e9:db:ed:21:7e:ca:0e:fe:73:ab:34:ea:32: 81:67:bf:39:ac:dd:97:50:61:ef:6b:86:62:51:69: 3c:3b:a9:ba:ad:37:f3:a1:32:81:3b:ce:d7:c5:ba: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7E:53:8B:E8:4A:8D:A0:9C:88:61:D5:99:78:02:00:DD:2A:BB:20 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3138342e302f32342d3234203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.184.0/24 Signature Algorithm: sha256WithRSAEncryption cd:ef:38:c2:26:75:dd:27:ab:b1:06:30:9b:c4:e0:21:d3:9f: 49:f4:92:49:a0:04:ee:10:bc:d6:3f:80:a2:76:86:ec:16:b3: d5:1d:76:02:3b:e3:40:ea:9a:79:b5:b5:53:0d:12:7e:8c:be: a6:fe:51:8a:39:a1:98:ac:a9:e8:75:f9:2a:e7:f0:1a:54:d2: 6a:4c:f3:27:55:78:6f:6c:9b:69:7f:44:2d:8d:8c:2d:81:67: 27:09:20:53:85:ba:75:11:e4:76:5d:7b:40:1b:cd:a0:3c:cb: b2:04:3e:8b:89:42:6d:36:2c:78:f9:24:a7:ce:05:df:c0:c1: 34:1b:3d:64:b0:6a:d9:01:71:5e:d4:64:81:e5:fb:35:46:1a: 7b:b5:e7:e4:3a:94:0c:27:eb:1d:4e:eb:54:47:6b:64:05:c6: f2:d0:71:04:53:24:d3:ed:4f:99:ef:16:5a:78:b0:eb:5e:d1: 63:ac:2c:3f:cf:38:71:bd:3a:de:0c:b4:40:9f:fd:c5:b6:78: b2:ea:c6:1d:57:10:0a:d4:dd:f6:f6:44:9e:44:24:d1:ab:4d: fc:ce:1a:3b:53:bb:f4:92:e0:f9:fc:e8:64:ed:c4:3f:6e:fe: 82:d6:b8:2e:6d:d9:ef:cc:f9:11:5e:65:2a:8f:da:74:87:14: 06:97:c9:c0 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCBuML2vuf6pGD/uMqS8+kjq68TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjRaFw0yNzA1MDIwMjI3MjRaMDMxMTAvBgNV BAMTKDE3N0U1MzhCRTg0QThEQTA5Qzg4NjFENTk5NzgwMjAwREQyQUJCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIhr/FD8DIoLAku4+qG1R90N/x GmwRsjc0nTwGiSNk6nu3i2aSdUo+7Eh5gu3soLz+dIf9AS8zw5ylFcMNZIW7sb++ jWcEsiuT31VxZW0RmyY69VCksyOnw3HeDfySJnV1vCwisq62dmPtT3tuxKA5dAfR XYn0s9bhnmqnUAy3mwJAtuR+gUXW5rsbys1Jk9TYqabIAQEp3mbJRf4QjQ8PchZC faEhkREAUnrRNkeOFfwmtXwhNT/LJFQXvW2R9JWEZWQjVepEsqkK9EII9yAUjB4b 6dvtIX7KDv5zqzTqMoFnvzms3ZdQYe9rhmJRaTw7qbqtN/OhMoE7ztfFug41AgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUF35Ti+hKjaCciGHVmXgCAN0quyAwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM4MzQyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnoy4MA0GCSqG SIb3DQEBCwUAA4IBAQDN7zjCJnXdJ6uxBjCbxOAh059J9JJJoATuELzWP4Cidobs FrPVHXYCO+NA6pp5tbVTDRJ+jL6m/lGKOaGYrKnodfkq5/AaVNJqTPMnVXhvbJtp f0QtjYwtgWcnCSBThbp1EeR2XXtAG82gPMuyBD6LiUJtNix4+SSnzgXfwME0Gz1k sGrZAXFe1GSB5fs1Rhp7tefkOpQMJ+sdTutUR2tkBcby0HEEUyTT7U+Z7xZaeLDr XtFjrCw/zzhxvTreDLRAn/3Ftniy6sYdVxAK1N329kSeRCTRq038zho7U7v0kuD5 /Ohk7cQ/bv6C1rgubdnvzPkRXmUqj9p0hxQGl8nA -----END CERTIFICATE-----Generated at Wed May 13 23:07:32 2026 by rpki-client