$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/4/3135342e382e39362e302f32302d3234203d3e203137393935.roa File: 3135342e382e39362e302f32302d3234203d3e203137393935.roa (raw, json) Hash identifier: oaM8GwV5AZdsBHjYgC9SesH19GpKHhG046RTE+xVIHE= Subject key identifier: 74:F4:8C:AA:60:40:58:95:F5:F5:E1:32:D3:A9:4A:50:B2:F0:FC:45 Certificate issuer: /CN=A91862140000/serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Certificate serial: 6B072E35F4AC4C28920E441105A2D3F990CD6155 Authority key identifier: 12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/3135342e382e39362e302f32302d3234203d3e203137393935.roa Signing time: Thu 15 Oct 2026 07:33:50 +0000 ROA not before: Thu 15 Oct 2026 07:28:50 +0000 ROA not after: Thu 14 Oct 2027 07:33:50 +0000 asID: 17995 IP address blocks: 154.8.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 11:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:07:2e:35:f4:ac:4c:28:92:0e:44:11:05:a2:d3:f9:90:cd:61:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=124204BA9582D5A13FD20F9ED0174AF2D51747E7 Validity Not Before: Oct 15 07:28:50 2026 GMT Not After : Oct 14 07:33:50 2027 GMT Subject: CN=74F48CAA60405895F5F5E132D3A94A50B2F0FC45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ab:3d:a4:e3:56:87:16:0c:60:e3:5b:d4:b9: 36:9b:51:7c:b6:72:48:99:e9:15:22:15:61:99:d8: 20:33:13:58:61:e3:36:a8:e1:ca:d2:9f:cb:82:3f: 7d:51:b1:cd:7d:4f:12:bf:1a:dc:08:8b:f9:80:31: 00:4a:4b:1e:71:d4:46:64:b8:83:6b:52:8f:a5:25: 3a:93:5b:7e:10:3a:47:a9:34:b8:c8:79:93:b0:65: 3f:23:69:73:ca:85:60:88:87:a1:fd:49:9d:d5:8d: 63:c2:09:d4:d9:96:f4:9e:df:d6:e1:c4:94:56:c5: 3a:56:c7:41:6c:52:82:6f:8b:a2:87:5e:da:ed:b0: 9b:79:e4:6c:0e:ff:5b:fc:b7:09:8c:75:23:e9:63: 2d:84:ab:20:74:20:60:79:6b:dc:bc:04:bd:29:54: cd:11:6f:e3:54:1b:52:3b:70:b6:3b:36:8c:49:50: 85:20:e2:d1:bf:d4:d0:55:89:35:32:9c:a3:5a:1b: fa:13:0f:d8:46:d5:c5:74:5c:4b:bf:04:9e:07:5c: 75:13:c7:25:fd:44:a3:6d:10:bf:71:f4:2f:e8:1d: d9:1d:ca:80:3d:d0:b4:26:36:5c:f5:6a:d8:fa:8e: 56:04:af:e1:2e:7c:be:38:d0:6a:25:e9:9e:6f:9e: 3a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F4:8C:AA:60:40:58:95:F5:F5:E1:32:D3:A9:4A:50:B2:F0:FC:45 X509v3 Authority Key Identifier: keyid:12:42:04:BA:95:82:D5:A1:3F:D2:0F:9E:D0:17:4A:F2:D5:17:47:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/124204BA9582D5A13FD20F9ED0174AF2D51747E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/EkIEupWC1aE_0g-e0BdK8tUXR-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/4/3135342e382e39362e302f32302d3234203d3e203137393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 154.8.96.0/20 Signature Algorithm: sha256WithRSAEncryption 12:4c:c8:1c:da:91:f5:c7:a4:cf:23:93:ed:22:17:b8:1a:09: 8e:b1:a5:4d:fe:cc:a4:86:fc:1c:8b:d7:a6:3d:06:43:f9:b3: c2:5d:4c:80:40:5f:35:c7:f3:e2:25:05:04:78:f9:98:6f:79: fc:64:82:cb:c2:83:06:0c:75:8d:43:a9:b7:e7:71:4f:bf:02: 1a:4c:cf:96:09:be:98:8f:e3:42:d6:42:1e:c3:01:4e:4d:a1: 63:47:51:26:3a:93:f6:c5:2a:bc:82:c2:7a:f9:16:c1:39:9e: f1:81:a2:a9:b6:3d:ee:63:0c:03:1f:29:d5:55:53:a9:9e:85: 14:e6:cb:b0:0a:f3:84:f6:58:11:c8:05:39:36:ad:4c:51:83: 60:d7:44:ca:d6:d0:1f:8f:0a:07:04:b3:71:3a:2e:74:89:4a: 7c:e2:43:36:22:30:88:c9:15:85:ac:a1:87:a5:5f:a6:d4:2f: cf:a6:04:c6:00:9e:72:bf:d3:69:23:a2:5a:8e:12:1b:27:4c: c4:aa:da:3c:c5:e4:66:84:5f:de:f2:bd:21:c7:a6:cd:62:27: 3d:9d:e8:f4:ac:4a:e4:f4:d6:13:c4:6e:42:34:92:b1:b6:cb: bf:ba:02:84:a4:21:45:66:6c:1b:c1:74:16:07:a3:a9:76:6d: cf:a2:aa:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUawcuNfSsTCiSDkQRBaLT+ZDNYVUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjQyMDRCQTk1 ODJENUExM0ZEMjBGOUVEMDE3NEFGMkQ1MTc0N0U3MB4XDTI2MTAxNTA3Mjg1MFoX DTI3MTAxNDA3MzM1MFowMzExMC8GA1UEAxMoNzRGNDhDQUE2MDQwNTg5NUY1RjVF MTMyRDNBOTRBNTBCMkYwRkM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOSrPaTjVocWDGDjW9S5NptRfLZySJnpFSIVYZnYIDMTWGHjNqjhytKfy4I/ fVGxzX1PEr8a3AiL+YAxAEpLHnHURmS4g2tSj6UlOpNbfhA6R6k0uMh5k7BlPyNp c8qFYIiHof1JndWNY8IJ1NmW9J7f1uHElFbFOlbHQWxSgm+Loode2u2wm3nkbA7/ W/y3CYx1I+ljLYSrIHQgYHlr3LwEvSlUzRFv41QbUjtwtjs2jElQhSDi0b/U0FWJ NTKco1ob+hMP2EbVxXRcS78EngdcdRPHJf1Eo20Qv3H0L+gd2R3KgD3QtCY2XPVq 2PqOVgSv4S58vjjQaiXpnm+eOp0CAwEAAaOCAfYwggHyMB0GA1UdDgQWBBR09Iyq YEBYlfX14TLTqUpQsvD8RTAfBgNVHSMEGDAWgBQSQgS6lYLVoT/SD57QF0ry1RdH 5zAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0fBGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtp LXJzeW5jLmlkbmljLm5ldC9yZXBvL0lETklDLzQvMTI0MjA0QkE5NTgyRDVBMTNG RDIwRjlFRDAxNzRBRjJENTE3NDdFNy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2 MTAxRDY2MTFFMkE2MkY4NzdDNzJGRDFGRjIvRWtJRXVwV0MxYUVfMGctZTBCZEs4 dFVYUi1jLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9JRE5JQy80LzMxMzUzNDJlMzgyZTM5 MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE mghgMA0GCSqGSIb3DQEBCwUAA4IBAQASTMgc2pH1x6TPI5PtIhe4GgmOsaVN/syk hvwci9emPQZD+bPCXUyAQF81x/PiJQUEePmYb3n8ZILLwoMGDHWNQ6m353FPvwIa TM+WCb6Yj+NC1kIewwFOTaFjR1EmOpP2xSq8gsJ6+RbBOZ7xgaKptj3uYwwDHynV VVOpnoUU5suwCvOE9lgRyAU5Nq1MUYNg10TK1tAfjwoHBLNxOi50iUp84kM2IjCI yRWFrKGHpV+m1C/PpgTGAJ5yv9NpI6JajhIbJ0zEqto8xeRmhF/e8r0hx6bNYic9 nej0rErk9NYTxG5CNJKxtsu/ugKEpCFFZmwbwXQWB6Opdm3Poqqt -----END CERTIFICATE-----Generated at Tue Nov 10 14:36:47 2026 by rpki-client