$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa File: 3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa (raw, json) Hash identifier: kTQiZ7hK+M7BbCy/GwseyxlIaws4BXvafRAJzzRJxhc= Subject key identifier: C6:57:D1:9F:74:D9:D5:77:87:2D:0D:C9:61:35:28:CB:71:97:58:96 Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 330CF73CA02E2BBE0B517EFE9AEF3D1A6848E792 Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa Signing time: Sun 03 May 2026 02:23:21 +0000 ROA not before: Sun 03 May 2026 02:18:21 +0000 ROA not after: Sun 02 May 2027 02:23:21 +0000 asID: 131454 IP address blocks: 151.158.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0c:f7:3c:a0:2e:2b:be:0b:51:7e:fe:9a:ef:3d:1a:68:48:e7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: May 3 02:18:21 2026 GMT Not After : May 2 02:23:21 2027 GMT Subject: CN=C657D19F74D9D577872D0DC9613528CB71975896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:9f:02:ec:df:82:e3:ae:ec:cb:9d:8a:5c: a3:93:93:16:49:0b:c9:44:5a:6b:13:a1:0b:f3:6a: 01:47:c5:06:8c:be:2a:a1:08:14:f9:22:86:e4:79: 39:52:c2:8c:ce:87:6b:91:d0:d5:88:33:03:7e:1d: c5:d2:96:3c:46:0b:c5:1a:76:10:eb:90:ec:65:54: e5:65:77:7a:16:af:50:8c:18:cd:45:37:9e:3f:5a: d0:5c:72:3a:c8:1e:b9:d3:7d:c3:2f:cf:be:c2:16: 56:e8:2d:2a:98:b4:d9:71:01:22:bb:ce:ac:14:dd: 93:e8:eb:07:f9:92:78:42:3b:84:97:11:43:6e:3c: a5:d5:42:21:04:02:4c:5e:7c:82:4b:61:67:35:30: a4:82:79:91:8d:3e:90:31:85:4f:05:e6:40:7f:7f: 6b:77:ba:a4:b5:7e:af:34:10:31:63:fc:61:bf:e9: fe:c0:e1:da:25:95:df:be:37:7c:1d:9c:d4:1c:37: 4b:ef:d7:39:07:f3:3f:8d:8f:7b:78:82:7b:17:33: 3a:f0:a9:4c:6e:b4:05:18:f0:14:8f:1a:ef:70:be: 77:37:77:6c:4b:d5:63:74:1d:5c:3d:e3:84:3f:13: 08:b8:7d:53:ae:18:22:e3:34:7f:79:e3:97:94:aa: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:57:D1:9F:74:D9:D5:77:87:2D:0D:C9:61:35:28:CB:71:97:58:96 X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37342e302f32332d3233203d3e20313331343534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.74.0/23 Signature Algorithm: sha256WithRSAEncryption a1:de:36:99:19:ad:99:3b:d4:1b:07:65:ea:81:b1:69:ba:b0: eb:c0:e8:b9:2a:1c:e3:38:6e:b7:82:5c:02:c1:b4:e9:8b:ee: 20:cd:bd:8c:cd:6c:43:63:51:aa:c9:1f:f9:52:5f:7e:80:5a: fe:28:6f:72:d9:e9:8f:a3:09:9d:84:7d:52:b0:31:ca:42:c9: ac:07:cf:00:4b:04:c4:c5:e1:87:8b:31:8d:2a:bc:48:a5:f5: 85:6b:7e:44:5d:3e:d9:85:71:89:b5:c7:ae:f3:c1:98:1f:87: 6c:4f:c3:aa:e1:ec:4f:4c:80:42:9c:27:58:91:ba:48:01:c7: 6e:2a:a7:62:7a:ed:73:d8:9b:6b:91:07:91:8e:3c:68:45:43: 62:88:26:31:9b:f3:cd:51:4c:50:fa:85:22:73:9e:05:90:dd: e7:7a:5f:dc:27:0b:3e:62:4b:7c:64:8c:29:c9:98:78:6d:4d: a6:54:92:b8:69:33:b5:22:3f:05:04:f6:b4:39:d2:59:86:28: 2d:0b:28:f0:af:d8:ff:d9:04:59:14:1e:fe:78:27:e6:37:d4: aa:db:e6:00:5c:b3:8e:a4:46:58:6c:3c:18:c4:6d:fc:3e:1a: ce:b2:c6:a9:83:16:26:ca:5b:1d:e0:35:61:b9:a4:39:ad:4e: 09:93:87:bc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMwz3PKAuK74LUX7+mu89GmhI55IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA1MDMwMjE4MjFaFw0yNzA1MDIwMjIzMjFaMDMxMTAvBgNV BAMTKEM2NTdEMTlGNzREOUQ1Nzc4NzJEMERDOTYxMzUyOENCNzE5NzU4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VZ8C7N+C467sy52KXKOTkxZJ C8lEWmsToQvzagFHxQaMviqhCBT5IobkeTlSwozOh2uR0NWIMwN+HcXSljxGC8Ua dhDrkOxlVOVld3oWr1CMGM1FN54/WtBccjrIHrnTfcMvz77CFlboLSqYtNlxASK7 zqwU3ZPo6wf5knhCO4SXEUNuPKXVQiEEAkxefIJLYWc1MKSCeZGNPpAxhU8F5kB/ f2t3uqS1fq80EDFj/GG/6f7A4dolld++N3wdnNQcN0vv1zkH8z+Nj3t4gnsXMzrw qUxutAUY8BSPGu9wvnc3d2xL1WN0HVw944Q/Ewi4fVOuGCLjNH9545eUqnIRAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUxlfRn3TZ1XeHLQ3JYTUoy3GXWJYwHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlZjE2ZjMxLTYwY2UtNDdhNy1h ZThkLTVhMjhjNTExYzk0Ny8xLzMxMzUzMTJlMzEzNTM4MmUzNzM0MmUzMDJmMzIz MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl55KMA0GCSqG SIb3DQEBCwUAA4IBAQCh3jaZGa2ZO9QbB2XqgbFpurDrwOi5KhzjOG63glwCwbTp i+4gzb2MzWxDY1GqyR/5Ul9+gFr+KG9y2emPowmdhH1SsDHKQsmsB88ASwTExeGH izGNKrxIpfWFa35EXT7ZhXGJtceu88GYH4dsT8Oq4exPTIBCnCdYkbpIAcduKqdi eu1z2JtrkQeRjjxoRUNiiCYxm/PNUUxQ+oUic54FkN3nel/cJws+Ykt8ZIwpyZh4 bU2mVJK4aTO1Ij8FBPa0OdJZhigtCyjwr9j/2QRZFB7+eCfmN9Sq2+YAXLOOpEZY bDwYxG38PhrOssapgxYmylsd4DVhuaQ5rU4Jk4e8 -----END CERTIFICATE-----Generated at Tue May 5 16:23:10 2026 by rpki-client