$ rpki-client -vvf repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa File: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (raw, json) Hash identifier: OPt+rRhjeG41N/mJaT0mB4Dryaw/j8pB0Q5pO3mWwpU= Subject key identifier: 1F:88:D7:BA:E5:F8:25:A8:AC:2F:1A:54:37:39:D4:11:02:AA:1A:4B Certificate issuer: /CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Certificate serial: 70B9FE52DEA8F421526818BA251249AAA9AEB2A7 Authority key identifier: EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa Signing time: Tue 17 Mar 2026 11:00:01 +0000 ROA not before: Tue 17 Mar 2026 10:55:01 +0000 ROA not after: Tue 16 Mar 2027 11:00:01 +0000 asID: 140016 IP address blocks: 157.66.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b9:fe:52:de:a8:f4:21:52:68:18:ba:25:12:49:aa:a9:ae:b2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA Validity Not Before: Mar 17 10:55:01 2026 GMT Not After : Mar 16 11:00:01 2027 GMT Subject: CN=1F88D7BAE5F825A8AC2F1A543739D41102AA1A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:47:14:d7:a9:6a:38:29:ec:64:92:50:3f: e3:1b:58:94:d6:c4:47:8b:df:f1:f2:83:0d:aa:08: bf:87:fd:a0:b0:4c:e9:f1:f6:69:e0:79:14:41:eb: c8:de:a9:27:36:06:82:f0:43:ce:0a:77:9c:e4:a3: 19:2f:78:f8:bd:85:d6:59:81:8d:74:ad:fa:22:00: d5:51:35:98:11:46:58:f4:05:2c:31:38:9a:35:be: fb:25:3a:84:6d:b8:01:76:75:ba:a8:d6:49:92:12: fd:82:9a:4e:e9:40:21:b6:18:6e:6f:05:ec:20:79: 1c:aa:a7:8a:7c:77:1d:86:46:66:32:d1:95:01:72: 0c:c7:43:38:97:c0:28:bc:36:48:74:55:ad:6c:d2: dc:60:b9:8a:e4:6f:a4:48:38:80:82:a4:1f:11:84: 4e:c3:80:8c:26:f1:51:ac:dc:76:59:14:06:b8:b9: 08:bf:fc:30:3a:4f:90:8e:e4:08:b5:07:ca:d7:0b: f3:91:04:72:97:b5:01:d5:00:c5:0e:a7:ef:22:fa: 2b:4f:70:39:e5:69:79:5d:77:d0:69:a2:6c:c0:96: 22:c1:7c:57:43:5e:48:eb:5c:17:d0:3f:70:5d:4e: 99:64:aa:c1:43:4f:85:5c:b4:f3:10:c3:ad:bc:8b: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:88:D7:BA:E5:F8:25:A8:AC:2F:1A:54:37:39:D4:11:02:AA:1A:4B X509v3 Authority Key Identifier: keyid:EF:AF:3D:BC:84:57:8E:58:6E:A4:A0:4F:C3:5E:6A:46:FA:0E:28:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EFAF3DBC84578E586EA4A04FC35E6A46FA0E28EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.36.0/24 Signature Algorithm: sha256WithRSAEncryption a4:9c:0a:c3:ca:56:4f:0c:7e:a5:1a:83:1f:9a:37:03:d3:71: 6f:94:c5:1d:35:e7:a3:d9:6d:44:31:99:ea:97:a1:3e:77:85: df:a3:96:9e:9a:d9:59:c9:09:5b:e6:ca:cb:db:6a:5b:c0:22: 61:6e:51:1a:ea:5f:67:d7:f4:ab:00:9d:23:0c:6e:0b:6a:53: d3:52:ac:70:ae:32:73:40:0f:a9:30:ab:91:61:87:be:92:b4: 8b:eb:c4:84:c3:e7:e9:7b:b8:61:c6:1f:63:56:d3:12:44:e2: 29:9e:7f:16:fc:db:0b:9e:59:da:8d:28:d0:88:a9:1b:86:79: aa:a3:45:fa:9b:7f:64:4a:4d:f6:25:dd:ad:fc:8a:39:c9:f5: 14:ed:39:25:01:be:72:db:a7:3d:5b:1a:e1:02:39:1f:0a:f2: 61:01:6c:a0:3c:57:0f:06:3f:bd:27:21:28:5d:4f:95:2d:f3: 8f:12:e1:9e:cc:a1:47:5b:04:5b:77:77:6b:5d:d7:0d:93:39: 25:e3:14:3a:7b:ec:c3:71:11:26:a3:8e:fd:69:f8:57:02:7e: 06:75:d4:70:a6:e5:15:ef:5a:c1:68:09:53:c0:96:81:9d:fe: 0e:52:df:fc:0a:3c:3c:25:2e:17:f1:02:7c:0b:f2:a0:9a:83: 24:40:50:56 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUcLn+Ut6o9CFSaBi6JRJJqqmusqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZG QTBFMjhFQTAeFw0yNjAzMTcxMDU1MDFaFw0yNzAzMTYxMTAwMDFaMDMxMTAvBgNV BAMTKDFGODhEN0JBRTVGODI1QThBQzJGMUE1NDM3MzlENDExMDJBQTFBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcEcU16lqOCnsZJJQP+MbWJTW xEeL3/Hygw2qCL+H/aCwTOnx9mngeRRB68jeqSc2BoLwQ84Kd5zkoxkvePi9hdZZ gY10rfoiANVRNZgRRlj0BSwxOJo1vvslOoRtuAF2dbqo1kmSEv2Cmk7pQCG2GG5v BewgeRyqp4p8dx2GRmYy0ZUBcgzHQziXwCi8Nkh0Va1s0txguYrkb6RIOICCpB8R hE7DgIwm8VGs3HZZFAa4uQi//DA6T5CO5Ai1B8rXC/ORBHKXtQHVAMUOp+8i+itP cDnlaXldd9BpomzAliLBfFdDXkjrXBfQP3BdTplkqsFDT4VctPMQw628i/HlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUH4jXuuX4JaisLxpUNznUEQKqGkswHwYDVR0j BBgwFoAU7689vIRXjlhupKBPw15qRvoOKOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZjllMWE4YS0zOWYxLTRmZTItODMyYS1iYjJmMjA5MmZiZjYvMC9FRkFGM0RCQzg0 NTc4RTU4NkVBNEEwNEZDMzVFNkE0NkZBMEUyOEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUZBRjNEQkM4NDU3OEU1ODZFQTRBMDRGQzM1RTZBNDZGQTBF MjhFQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmOWUxYThhLTM5ZjEtNGZlMi04 MzJhLWJiMmYyMDkyZmJmNi8wLzMxMzUzNzJlMzYzNjJlMzMzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDMwMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CJDANBgkqhkiG 9w0BAQsFAAOCAQEApJwKw8pWTwx+pRqDH5o3A9Nxb5TFHTXno9ltRDGZ6pehPneF 36OWnprZWckJW+bKy9tqW8AiYW5RGupfZ9f0qwCdIwxuC2pT01KscK4yc0APqTCr kWGHvpK0i+vEhMPn6Xu4YcYfY1bTEkTiKZ5/FvzbC55Z2o0o0IipG4Z5qqNF+pt/ ZEpN9iXdrfyKOcn1FO05JQG+ctunPVsa4QI5HwryYQFsoDxXDwY/vSchKF1PlS3z jxLhnsyhR1sEW3d3a13XDZM5JeMUOnvsw3ERJqOO/Wn4VwJ+BnXUcKblFe9awWgJ U8CWgZ3+DlLf/Ao8PCUuF/ECfAvyoJqDJEBQVg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:21:07 2026 by rpki-client