$ rpki-client -vvf rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3139302e302f32332d3233203d3e203633383539.roa File: 3135382e3134302e3139302e302f32332d3233203d3e203633383539.roa (raw, json) Hash identifier: duRCOFyApimu+VfA8srkd97qFJ/WePHr7gTmJwT7ZQA= Subject key identifier: 01:79:7F:D4:37:F9:0B:79:87:4A:3D:D4:51:2E:FF:46:27:8E:0D:A6 Certificate issuer: /CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Certificate serial: 57DFA92A12BE44456021DC68F7A6FAF5E2196717 Authority key identifier: 57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3139302e302f32332d3233203d3e203633383539.roa Signing time: Sun 03 May 2026 02:27:26 +0000 ROA not before: Sun 03 May 2026 02:22:26 +0000 ROA not after: Sun 02 May 2027 02:27:26 +0000 asID: 63859 IP address blocks: 158.140.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:df:a9:2a:12:be:44:45:60:21:dc:68:f7:a6:fa:f5:e2:19:67:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579C296CFBD13B33CD249F0CE7D1C489D7106B97 Validity Not Before: May 3 02:22:26 2026 GMT Not After : May 2 02:27:26 2027 GMT Subject: CN=01797FD437F90B79874A3DD4512EFF46278E0DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:aa:f6:1d:2b:f6:d2:fa:35:8e:99:96:2a:f5: 37:a3:af:d8:41:bd:c1:24:e8:ef:5d:30:49:6e:11: 40:a2:9c:77:fa:e3:b2:6c:c7:23:76:10:96:c7:d8: 8b:9c:b8:0f:ee:ed:e7:33:7b:f5:2a:59:37:56:47: 88:40:b0:9b:a5:6a:8f:fa:f6:8b:15:04:ee:d6:f7: b3:c8:0a:65:62:06:5e:ad:a1:0f:cc:6c:4a:65:5d: ce:3f:86:84:a8:66:aa:68:10:9e:80:a1:ab:86:b5: b9:be:fc:80:a6:16:f5:72:f8:79:e2:57:dd:da:60: 84:7f:cf:a8:a6:b7:c3:c9:a0:2e:b4:3e:f3:9a:5d: 02:ea:a2:32:d7:82:d0:e5:9c:f5:b9:65:66:3b:3c: a7:87:36:c6:52:60:58:05:dd:6b:d2:f6:c0:2b:5f: 69:32:87:31:27:27:cc:bf:b2:28:52:62:a4:91:a7: 8c:f8:f1:b9:9f:70:cf:aa:ca:32:5a:9a:35:43:28: e9:ab:2d:7e:39:1e:7b:68:cb:f5:5a:13:47:5e:78: 6c:ce:84:fd:aa:9b:27:49:ea:98:f8:54:ce:b7:22: 34:76:75:31:24:7a:56:e4:9c:de:2b:59:87:e0:ad: f2:ba:e7:a8:df:03:19:4f:84:a7:fd:42:b0:0d:db: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:7F:D4:37:F9:0B:79:87:4A:3D:D4:51:2E:FF:46:27:8E:0D:A6 X509v3 Authority Key Identifier: keyid:57:9C:29:6C:FB:D1:3B:33:CD:24:9F:0C:E7:D1:C4:89:D7:10:6B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/579C296CFBD13B33CD249F0CE7D1C489D7106B97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/3135382e3134302e3139302e302f32332d3233203d3e203633383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.140.190.0/23 Signature Algorithm: sha256WithRSAEncryption b9:e8:24:19:a2:05:3a:73:f9:05:ac:4d:01:17:e1:ef:c7:7a: a1:07:d3:44:da:25:70:f6:80:78:4a:d2:5e:5f:ac:7e:83:fb: 0f:32:d5:9b:17:c3:e4:82:5c:cb:0d:8f:07:42:a5:65:44:02: ec:74:6f:e6:d6:af:ba:d1:44:17:de:5c:63:08:75:0d:68:72: 99:dd:29:b8:ec:ca:3b:2e:97:94:55:7b:5b:2d:33:d5:d4:f6: 88:43:48:7e:87:f4:73:af:06:da:d7:1d:98:57:a3:4c:85:db: 35:f9:13:62:80:b9:dc:bc:b0:9f:6a:48:43:92:f6:40:33:7a: e3:bb:bf:3c:56:22:96:da:65:dd:42:bc:58:d4:b7:6d:3a:ec: 13:87:12:71:af:3e:c9:09:7c:47:d7:16:88:42:16:00:0b:43: 28:0f:8b:1d:8d:c9:c1:e5:b4:b1:d5:6a:03:bb:bc:e9:00:8f: da:ff:cc:9f:1c:46:15:13:21:8c:f4:24:9a:68:05:b8:dd:5f: 51:f7:1a:24:20:fb:70:fa:6e:a8:9c:ca:30:0f:d3:0e:c0:fe: 3f:34:04:e0:f7:e3:a4:72:1f:92:1a:53:ff:de:19:49:6e:4a: 63:a2:72:38:bb:3f:0e:2f:d4:71:0a:86:b0:5b:1c:82:7f:2a: af:a7:dc:e4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUV9+pKhK+REVgIdxo96b69eIZZxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5QzI5NkNGQkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlE NzEwNkI5NzAeFw0yNjA1MDMwMjIyMjZaFw0yNzA1MDIwMjI3MjZaMDMxMTAvBgNV BAMTKDAxNzk3RkQ0MzdGOTBCNzk4NzRBM0RENDUxMkVGRjQ2Mjc4RTBEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqvYdK/bS+jWOmZYq9Tejr9hB vcEk6O9dMEluEUCinHf647JsxyN2EJbH2IucuA/u7ecze/UqWTdWR4hAsJulao/6 9osVBO7W97PICmViBl6toQ/MbEplXc4/hoSoZqpoEJ6AoauGtbm+/ICmFvVy+Hni V93aYIR/z6imt8PJoC60PvOaXQLqojLXgtDlnPW5ZWY7PKeHNsZSYFgF3WvS9sAr X2kyhzEnJ8y/sihSYqSRp4z48bmfcM+qyjJamjVDKOmrLX45Hntoy/VaE0deeGzO hP2qmydJ6pj4VM63IjR2dTEkelbknN4rWYfgrfK656jfAxlPhKf9QrAN2/BHAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUAXl/1Df5C3mHSj3UUS7/RieODaYwHwYDVR0j BBgwFoAUV5wpbPvROzPNJJ8M59HEidcQa5cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2JiYjI3MzQtZTVmYS00MGViLTg1OTgtYjdjZDEwMTM0M2NhLzAvNTc5QzI5NkNG QkQxM0IzM0NEMjQ5RjBDRTdEMUM0ODlENzEwNkI5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC81NzlDMjk2Q0ZCRDEzQjMzQ0QyNDlGMENFN0QxQzQ4OUQ3MTA2 Qjk3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0LWU1ZmEtNDBlYi04 NTk4LWI3Y2QxMDEzNDNjYS8wLzMxMzUzODJlMzEzNDMwMmUzMTM5MzAyZTMwMmYz MjMzMmQzMjMzMjAzZDNlMjAzNjMzMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnoy+MA0GCSqG SIb3DQEBCwUAA4IBAQC56CQZogU6c/kFrE0BF+Hvx3qhB9NE2iVw9oB4StJeX6x+ g/sPMtWbF8PkglzLDY8HQqVlRALsdG/m1q+60UQX3lxjCHUNaHKZ3Sm47Mo7LpeU VXtbLTPV1PaIQ0h+h/Rzrwba1x2YV6NMhds1+RNigLncvLCfakhDkvZAM3rju788 ViKW2mXdQrxY1LdtOuwThxJxrz7JCXxH1xaIQhYAC0MoD4sdjcnB5bSx1WoDu7zp AI/a/8yfHEYVEyGM9CSaaAW43V9R9xokIPtw+m6onMowD9MOwP4/NATg9+Okch+S GlP/3hlJbkpjonI4uz8OL9RxCoawWxyCfyqvp9zk -----END CERTIFICATE-----Generated at Wed May 13 23:07:14 2026 by rpki-client