$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa File: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (raw, json) Hash identifier: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk= Subject key identifier: FA:9A:2C:87:11:9E:9A:7D:47:CD:1B:4B:7F:E1:D4:96:F2:D1:19:8D Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 31761A46D8FAC70A01C7793350145CC224C03159 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa Signing time: Sun 12 Oct 2025 08:00:00 +0000 ROA not before: Sun 12 Oct 2025 07:55:00 +0000 ROA not after: Sun 11 Oct 2026 08:00:00 +0000 asID: 152794 IP address blocks: 157.66.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:76:1a:46:d8:fa:c7:0a:01:c7:79:33:50:14:5c:c2:24:c0:31:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Oct 12 07:55:00 2025 GMT Not After : Oct 11 08:00:00 2026 GMT Subject: CN=FA9A2C87119E9A7D47CD1B4B7FE1D496F2D1198D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:e7:fb:3f:89:20:9a:8c:41:1e:a8:1d:d8: b3:e3:39:e8:09:61:78:1f:7a:56:f4:7c:c9:c3:f7: c2:bb:62:c1:29:38:48:2b:bc:47:5a:da:e6:9a:c4: 0b:a9:b2:c5:3b:0b:e1:57:67:c3:3d:42:a4:20:d3: b2:88:25:1e:a4:f8:8a:8f:92:8f:c4:92:9c:8f:43: fd:fd:b5:9e:ed:6b:8a:e7:0c:da:03:59:70:1b:02: 88:75:bc:e7:02:ef:73:33:01:23:64:6d:07:1f:3f: fc:a2:c2:2f:45:cf:c4:a4:1d:3f:31:5c:9b:e9:66: e2:d3:57:7e:47:41:2f:b9:64:41:54:cf:61:6e:8d: bc:0e:1e:2c:44:6f:4f:3f:66:e2:69:27:89:72:46: 6e:89:ab:73:bf:68:53:1b:57:57:58:b9:9e:59:5b: 83:57:a8:14:1d:fa:43:3a:2a:1c:56:b8:79:cc:c8: 4b:3d:75:e0:17:ca:fd:c0:48:3c:71:ee:11:1c:a4: 86:f8:61:e0:4b:42:6d:48:a9:74:f8:a7:ec:af:9d: 9b:b5:c1:b9:50:08:93:49:ef:61:59:62:0f:62:69: 49:b4:cf:af:91:33:91:e1:ca:48:1e:4a:30:13:7e: 44:a0:91:85:1e:3d:42:75:c1:8b:6e:43:af:20:6b: 8c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9A:2C:87:11:9E:9A:7D:47:CD:1B:4B:7F:E1:D4:96:F2:D1:19:8D X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34302e302f32332d3233203d3e20313532373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.40.0/23 Signature Algorithm: sha256WithRSAEncryption 88:cd:13:05:26:35:9a:36:bd:f6:24:e5:96:c4:12:23:9e:8e: 73:a7:a9:e5:bf:a9:98:32:52:ec:8a:a4:81:49:dd:87:d9:94: b7:51:bd:93:b5:24:50:b9:b4:33:d1:75:4a:8f:68:c3:b5:29: 93:8b:5c:d2:a3:cb:cf:9c:c7:b6:1c:62:a8:aa:fa:f6:b5:c8: 84:f8:01:18:5d:36:61:b1:fd:3f:b6:c1:06:f6:70:72:80:57: 52:15:f0:19:60:99:47:31:d6:f5:a1:aa:1e:d9:86:76:ca:ce: 4a:13:e7:36:ff:67:92:3e:81:6f:22:cc:68:61:76:71:c2:3b: d6:0a:46:01:af:ee:8a:54:99:44:0a:da:b5:57:1f:cd:ea:45: ac:da:6b:f5:8b:aa:4d:69:45:dd:6a:6f:6d:24:19:94:e6:fb: 98:48:b6:37:ca:f7:fb:00:53:4f:29:fc:19:c6:22:6d:e7:93: d7:81:87:22:45:09:ff:97:f9:5a:55:1a:36:93:d2:ab:fc:8d: 2d:45:c9:8d:13:40:55:f2:0f:46:32:26:11:cc:b5:4e:28:65: e8:0d:2c:a4:a0:d8:69:4d:59:66:e5:9f:86:07:e3:69:a8:a1: 53:6b:e8:0f:d8:ff:e5:f7:5d:e0:5e:6e:26:b5:4b:62:0c:2c: 03:59:9c:d8 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUMXYaRtj6xwoBx3kzUBRcwiTAMVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTEwMTIwNzU1MDBaFw0yNjEwMTEwODAwMDBaMDMxMTAvBgNV BAMTKEZBOUEyQzg3MTE5RTlBN0Q0N0NEMUI0QjdGRTFENDk2RjJEMTE5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/ef7P4kgmoxBHqgd2LPjOegJ YXgfelb0fMnD98K7YsEpOEgrvEda2uaaxAupssU7C+FXZ8M9QqQg07KIJR6k+IqP ko/EkpyPQ/39tZ7ta4rnDNoDWXAbAoh1vOcC73MzASNkbQcfP/yiwi9Fz8SkHT8x XJvpZuLTV35HQS+5ZEFUz2FujbwOHixEb08/ZuJpJ4lyRm6Jq3O/aFMbV1dYuZ5Z W4NXqBQd+kM6KhxWuHnMyEs9deAXyv3ASDxx7hEcpIb4YeBLQm1IqXT4p+yvnZu1 wblQCJNJ72FZYg9iaUm0z6+RM5HhykgeSjATfkSgkYUePUJ1wYtuQ68ga4xzAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+poshxGemn1HzRtLf+HUlvLRGY0wHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3ZjJjMTkwLTMwZjUtNGYxOS1i ZmNhLTBiOTg3YTUyZmQ1NS8wLzMxMzUzNzJlMzYzNjJlMzQzMDJlMzAyZjMyMzMy ZDMyMzMyMDNkM2UyMDMxMzUzMjM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CKDANBgkqhkiG 9w0BAQsFAAOCAQEAiM0TBSY1mja99iTllsQSI56Oc6ep5b+pmDJS7IqkgUndh9mU t1G9k7UkULm0M9F1So9ow7Upk4tc0qPLz5zHthxiqKr69rXIhPgBGF02YbH9P7bB BvZwcoBXUhXwGWCZRzHW9aGqHtmGdsrOShPnNv9nkj6BbyLMaGF2ccI71gpGAa/u ilSZRAratVcfzepFrNpr9YuqTWlF3WpvbSQZlOb7mEi2N8r3+wBTTyn8GcYibeeT 14GHIkUJ/5f5WlUaNpPSq/yNLUXJjRNAVfIPRjImEcy1Tihl6A0spKDYaU1ZZuWf hgfjaaihU2voD9j/5fdd4F5uJrVLYgwsA1mc2A== -----END CERTIFICATE-----Generated at Tue Oct 21 04:43:55 2025 by rpki-client