$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa File: 3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa (raw, json) Hash identifier: Ho6tdl1he9FR1/62MiqnACr306KYnR/YSxoabj/m7M4= Subject key identifier: B6:01:42:2D:85:B8:BE:FA:41:05:DB:F2:71:E5:15:C6:67:D3:98:1A Certificate issuer: /CN=A65A7370A28DA71B1C11B89E09D51753C498246D Certificate serial: 2BF6A7E7C39918474FF7ECB8123130C4DA81C462 Authority key identifier: A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa Signing time: Sun 03 May 2026 02:23:22 +0000 ROA not before: Sun 03 May 2026 02:18:22 +0000 ROA not after: Sun 02 May 2027 02:23:22 +0000 asID: 131454 IP address blocks: 151.158.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 09:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f6:a7:e7:c3:99:18:47:4f:f7:ec:b8:12:31:30:c4:da:81:c4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A65A7370A28DA71B1C11B89E09D51753C498246D Validity Not Before: May 3 02:18:22 2026 GMT Not After : May 2 02:23:22 2027 GMT Subject: CN=B601422D85B8BEFA4105DBF271E515C667D3981A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:9e:09:b6:c9:f0:cc:18:06:f0:cc:c0:05: 74:26:fa:ec:22:57:3e:f5:21:19:e4:9b:66:01:7f: ae:48:d5:9e:e8:dc:69:4d:7c:8d:1e:67:b1:77:9d: 8c:a8:ef:6b:fe:bd:50:22:5d:e3:fd:8d:4d:9c:62: fa:70:bf:d4:54:a5:ee:28:d5:c7:fd:6b:5d:d8:fe: 31:18:4e:85:91:62:7b:54:e2:25:75:62:fb:62:42: 75:ad:9e:e6:6d:ee:8b:ee:25:0e:5e:a7:a3:2f:0a: a6:84:7a:cc:a8:46:6a:fe:47:a6:bf:35:12:70:fc: aa:b3:77:b2:ad:8c:8d:e0:03:da:60:e4:83:ad:61: 8c:95:32:f0:28:1f:25:f4:4e:c1:a8:05:a3:aa:cc: 24:eb:75:c8:2d:53:53:4e:e7:2d:0b:03:1f:96:ba: 65:48:bd:41:fb:23:da:ef:69:2e:2b:3a:44:d8:b5: 4c:d7:c5:06:99:6d:01:3b:6c:53:ad:5f:d2:6e:a8: 4b:a2:3c:2c:10:85:55:03:cd:1f:67:cb:c3:bb:7f: fa:91:77:b1:20:68:09:40:13:bd:2b:a6:e5:64:3b: f0:4d:3f:a1:a2:47:19:5a:a9:7b:9f:32:0b:65:8f: 89:2e:6a:47:1a:fa:00:aa:72:99:8b:cf:35:0a:ec: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:01:42:2D:85:B8:BE:FA:41:05:DB:F2:71:E5:15:C6:67:D3:98:1A X509v3 Authority Key Identifier: keyid:A6:5A:73:70:A2:8D:A7:1B:1C:11:B8:9E:09:D5:17:53:C4:98:24:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/A65A7370A28DA71B1C11B89E09D51753C498246D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/A65A7370A28DA71B1C11B89E09D51753C498246D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/1/3135312e3135382e37352e302f32342d3234203d3e20313331343534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:89:41:db:f2:7d:c4:70:ef:e4:6a:7e:6a:9e:dd:0a:cb:1c: 9b:7a:ca:36:fe:24:87:56:83:a9:8a:7b:9c:c3:4e:80:54:e6: c0:eb:f7:ef:14:ba:35:1f:ad:f1:bb:fa:bb:0c:fd:59:4d:82: 34:84:a4:75:38:4e:c5:4b:f0:2f:bf:3a:ba:36:c3:42:e9:b8: 8d:7a:e1:a5:de:e7:0c:c5:23:f8:f1:8e:23:d8:d0:8f:23:0a: ce:e6:31:60:19:1f:e5:86:50:7b:40:2c:4a:4e:06:38:ec:3f: fa:05:4d:8d:14:7a:53:f1:29:17:2b:ba:0c:23:5f:81:d6:d1: 1b:9d:90:61:e1:46:40:41:99:15:cc:f7:3c:1a:e2:25:4e:10: 95:8d:f3:f7:c5:bb:9c:e7:75:82:0a:e2:dc:e9:37:31:ec:03: 4a:00:84:1d:8a:6a:18:73:82:41:9d:0d:fe:3b:94:db:37:40: c3:84:2c:26:06:50:c2:4e:eb:43:e4:ec:8d:35:63:50:8d:66: 76:0a:e3:e1:bb:81:a4:71:23:fc:59:f2:6e:98:6f:fe:5b:a3: 38:f2:e4:ef:18:fa:bb:5c:a8:0e:f4:82:b4:6f:9e:b8:b2:4c: e1:8e:22:a7:2f:1d:c2:f9:7f:f4:6d:18:41:11:b1:b1:3b:36: f3:20:b0:43 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUK/an58OZGEdP9+y4EjEwxNqBxGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY1QTczNzBBMjhEQTcxQjFDMTFCODlFMDlENTE3NTND NDk4MjQ2RDAeFw0yNjA1MDMwMjE4MjJaFw0yNzA1MDIwMjIzMjJaMDMxMTAvBgNV BAMTKEI2MDE0MjJEODVCOEJFRkE0MTA1REJGMjcxRTUxNUM2NjdEMzk4MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJV54JtsnwzBgG8MzABXQm+uwi Vz71IRnkm2YBf65I1Z7o3GlNfI0eZ7F3nYyo72v+vVAiXeP9jU2cYvpwv9RUpe4o 1cf9a13Y/jEYToWRYntU4iV1YvtiQnWtnuZt7ovuJQ5ep6MvCqaEesyoRmr+R6a/ NRJw/Kqzd7KtjI3gA9pg5IOtYYyVMvAoHyX0TsGoBaOqzCTrdcgtU1NO5y0LAx+W umVIvUH7I9rvaS4rOkTYtUzXxQaZbQE7bFOtX9JuqEuiPCwQhVUDzR9ny8O7f/qR d7EgaAlAE70rpuVkO/BNP6GiRxlaqXufMgtlj4kuakca+gCqcpmLzzUK7EKXAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUtgFCLYW4vvpBBdvyceUVxmfTmBowHwYDVR0j BBgwFoAUplpzcKKNpxscEbieCdUXU8SYJG0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmVmMTZmMzEtNjBjZS00N2E3LWFlOGQtNWEyOGM1MTFjOTQ3LzEvQTY1QTczNzBB MjhEQTcxQjFDMTFCODlFMDlENTE3NTNDNDk4MjQ2RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMy9BNjVBNzM3MEEyOERBNzFCMUMxMUI4OUUwOUQ1MTc1M0M0OTgy NDZELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzJlZjE2ZjMxLTYwY2UtNDdhNy1h ZThkLTVhMjhjNTExYzk0Ny8xLzMxMzUzMTJlMzEzNTM4MmUzNzM1MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl55LMA0GCSqG SIb3DQEBCwUAA4IBAQB8iUHb8n3EcO/kan5qnt0Kyxybeso2/iSHVoOpinucw06A VObA6/fvFLo1H63xu/q7DP1ZTYI0hKR1OE7FS/Avvzq6NsNC6biNeuGl3ucMxSP4 8Y4j2NCPIwrO5jFgGR/lhlB7QCxKTgY47D/6BU2NFHpT8SkXK7oMI1+B1tEbnZBh 4UZAQZkVzPc8GuIlThCVjfP3xbuc53WCCuLc6Tcx7ANKAIQdimoYc4JBnQ3+O5Tb N0DDhCwmBlDCTutD5OyNNWNQjWZ2CuPhu4GkcSP8WfJumG/+W6M48uTvGPq7XKgO 9IK0b564skzhjiKnLx3C+X/0bRhBEbGxOzbzILBD -----END CERTIFICATE-----Generated at Tue May 5 16:23:48 2026 by rpki-client