$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa File: 3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa (raw, json) Hash identifier: /kRr5xomvVX4DE0OT7ERSRijAPYCeFTAeQql/0sli2g= Subject key identifier: EE:8A:73:E0:8B:C1:3B:E1:DB:01:DA:4A:90:81:91:A8:7B:36:14:9C Certificate issuer: /CN=A91862140000/serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Certificate serial: 4F5BE2142CEFF90C7A182AC7FD18074CD231E57E Authority key identifier: F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa Signing time: Sat 02 May 2026 09:23:33 +0000 ROA not before: Sat 02 May 2026 09:18:33 +0000 ROA not after: Sat 01 May 2027 09:23:33 +0000 asID: 136783 IP address blocks: 151.158.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 14:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5b:e2:14:2c:ef:f9:0c:7a:18:2a:c7:fd:18:07:4c:d2:31:e5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=F927DF3848ABABCA88FF3D95A1E5B16754C63A53 Validity Not Before: May 2 09:18:33 2026 GMT Not After : May 1 09:23:33 2027 GMT Subject: CN=EE8A73E08BC13BE1DB01DA4A908191A87B36149C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:14:0e:01:a6:b9:44:cb:6d:ac:19:b8:61:a0: 44:fa:0d:73:0f:cf:90:5b:86:e2:a7:ad:32:8c:9e: a4:54:25:6d:f0:9d:a2:00:d6:b6:9e:ef:a0:ab:92: 37:4e:67:a3:9c:82:f9:36:8f:d3:25:b7:08:d3:ee: ac:32:9b:a9:21:96:e3:21:af:1b:9c:aa:a1:c3:13: d0:e8:62:00:54:cb:cc:80:e8:cd:9a:db:63:98:4c: e2:18:d4:e8:c3:1e:94:ad:03:15:02:e5:2a:06:9d: 07:43:47:f1:8c:68:f4:2a:be:b5:d4:42:1b:a5:3a: cc:52:8e:0f:0b:1d:90:bc:4f:3c:f4:e9:7b:04:f2: db:e0:e0:20:65:4e:98:09:82:c1:b9:75:11:c8:9f: 12:9f:67:92:ff:6c:d4:7d:37:0d:8a:14:41:e6:83: b1:9a:3c:0b:ba:bc:a0:dd:c7:da:89:8c:69:29:67: a4:02:e5:42:63:fe:7a:b3:38:48:1d:0e:f8:d3:01: 8d:66:b4:bb:59:69:cd:d9:11:93:1b:b3:df:12:0e: ee:4f:58:95:e4:25:f7:25:0a:a3:53:01:de:f0:41: a2:d2:e4:32:63:75:43:46:37:36:7c:7a:31:d1:55: d4:3d:4f:c5:7e:08:0c:1a:2a:f1:87:a1:44:a2:d2: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8A:73:E0:8B:C1:3B:E1:DB:01:DA:4A:90:81:91:A8:7B:36:14:9C X509v3 Authority Key Identifier: keyid:F9:27:DF:38:48:AB:AB:CA:88:FF:3D:95:A1:E5:B1:67:54:C6:3A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/F927DF3848ABABCA88FF3D95A1E5B16754C63A53.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/-SffOEirq8qI_z2VoeWxZ1TGOlM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/3/3135312e3135382e3230332e302f32342d3234203d3e20313336373833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.203.0/24 Signature Algorithm: sha256WithRSAEncryption a7:f7:c0:12:cf:e7:eb:bb:e9:00:6e:1c:1a:cb:4d:4e:31:67: 38:9f:f4:6a:65:77:9d:00:98:25:b6:e6:49:75:52:26:7b:62: 61:73:5e:94:f2:4a:bb:ce:53:83:e3:86:c8:b6:c6:43:00:3e: 9e:04:7c:d5:bd:34:f7:c5:f0:ea:b7:4e:90:68:7c:06:20:a9: 17:a0:83:90:b8:c0:7c:80:64:8a:0c:15:1a:65:4f:b9:6c:90: 0a:52:28:00:81:3b:45:b9:89:6b:92:3c:9d:9a:dd:c6:13:44: 97:46:21:5c:14:9c:cd:d3:bc:c7:bf:8e:49:0e:7a:04:43:97: 0d:fe:81:3e:db:02:3e:00:d4:50:95:34:56:d0:03:8b:e8:2f: 7d:89:10:b3:d8:0c:f2:38:36:88:9b:62:58:0b:f7:aa:52:24: 06:82:1b:55:a5:a0:ae:3c:c6:f5:44:0b:63:0c:c3:7f:c5:18: 5a:e8:8a:72:52:d2:a2:7e:14:f0:cd:43:51:f6:b6:1b:f1:41: f5:08:03:cc:e8:76:22:7a:4e:d9:d8:a2:36:ce:57:e0:8d:27: f3:48:37:8d:83:5d:ec:05:14:fc:51:9e:ad:ec:4e:61:42:d4: 24:f7:a0:f4:03:74:65:4b:91:de:5a:04:c3:c5:aa:ec:fc:cc: d8:1e:a2:16 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUT1viFCzv+Qx6GCrH/RgHTNIx5X4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhGOTI3REYzODQ4 QUJBQkNBODhGRjNEOTVBMUU1QjE2NzU0QzYzQTUzMB4XDTI2MDUwMjA5MTgzM1oX DTI3MDUwMTA5MjMzM1owMzExMC8GA1UEAxMoRUU4QTczRTA4QkMxM0JFMURCMDFE QTRBOTA4MTkxQTg3QjM2MTQ5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAUDgGmuUTLbawZuGGgRPoNcw/PkFuG4qetMoyepFQlbfCdogDWtp7voKuS N05no5yC+TaP0yW3CNPurDKbqSGW4yGvG5yqocMT0OhiAFTLzIDozZrbY5hM4hjU 6MMelK0DFQLlKgadB0NH8Yxo9Cq+tdRCG6U6zFKODwsdkLxPPPTpewTy2+DgIGVO mAmCwbl1EcifEp9nkv9s1H03DYoUQeaDsZo8C7q8oN3H2omMaSlnpALlQmP+erM4 SB0O+NMBjWa0u1lpzdkRkxuz3xIO7k9YleQl9yUKo1MB3vBBotLkMmN1Q0Y3Nnx6 MdFV1D1PxX4IDBoq8YehRKLSiu8CAwEAAaOCAf8wggH7MB0GA1UdDgQWBBTuinPg i8E74dsB2kqQgZGoezYUnDAfBgNVHSMEGDAWgBT5J984SKuryoj/PZWh5bFnVMY6 UzAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzMvRjkyN0RGMzg0OEFCQUJDQTg4 RkYzRDk1QTFFNUIxNjc1NEM2M0E1My5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1 RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvLVNmZk9FaXJxOHFJX3oyVm9lV3ha MVRHT2xNLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMy8zMTM1MzEyZTMxMzUz ODJlMzIzMDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODMzLnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAl57LMA0GCSqGSIb3DQEBCwUAA4IBAQCn98ASz+fru+kAbhway01O MWc4n/RqZXedAJgltuZJdVIme2Jhc16U8kq7zlOD44bItsZDAD6eBHzVvTT3xfDq t06QaHwGIKkXoIOQuMB8gGSKDBUaZU+5bJAKUigAgTtFuYlrkjydmt3GE0SXRiFc FJzN07zHv45JDnoEQ5cN/oE+2wI+ANRQlTRW0AOL6C99iRCz2AzyODaIm2JYC/eq UiQGghtVpaCuPMb1RAtjDMN/xRha6IpyUtKifhTwzUNR9rYb8UH1CAPM6HYiek7Z 2KI2zlfgjSfzSDeNg13sBRT8UZ6t7E5hQtQk96D0A3RlS5HeWgTDxars/MzYHqIW -----END CERTIFICATE-----Generated at Tue May 5 14:56:01 2026 by rpki-client