$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34312e302f32342d3234203d3e20313532373934.roa File: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (raw, json) Hash identifier: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA= Subject key identifier: F6:D9:FC:3C:73:76:A2:86:1D:C8:52:7D:4C:51:26:02:15:77:56:F6 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 758D18C72E1A832B7475C1E50716F2AE6ECA6824 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34312e302f32342d3234203d3e20313532373934.roa Signing time: Sat 04 Oct 2025 13:00:00 +0000 ROA not before: Sat 04 Oct 2025 12:55:00 +0000 ROA not after: Sat 03 Oct 2026 13:00:00 +0000 asID: 152794 IP address blocks: 157.66.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8d:18:c7:2e:1a:83:2b:74:75:c1:e5:07:16:f2:ae:6e:ca:68:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Oct 4 12:55:00 2025 GMT Not After : Oct 3 13:00:00 2026 GMT Subject: CN=F6D9FC3C7376A2861DC8527D4C512602157756F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:c4:60:25:1f:dd:0a:f0:e6:4d:41:a7:ba: 57:48:4c:b0:62:f3:b2:2c:d6:06:97:94:c2:b0:60: 73:de:be:55:30:5b:99:e8:a3:40:9a:c2:b0:6a:df: 45:12:99:64:4c:64:31:68:fb:f5:3c:27:74:ad:3d: 1c:25:5c:fa:54:0b:b7:cb:b6:58:90:a4:a4:6e:b3: ab:fd:3e:bb:94:f1:fb:b5:89:f1:3e:b5:91:9e:e1: 38:c0:d5:ac:ee:38:c4:73:6e:ab:ca:ba:ff:cc:b1: a0:42:eb:f5:46:d7:41:09:ae:1f:de:e7:71:ed:c2: 22:83:bc:34:c2:c7:8d:3e:0f:0a:c5:27:77:64:11: 8f:c6:f3:33:56:37:9e:dd:30:78:10:89:81:18:4c: eb:dd:83:30:d5:02:f9:ce:ea:71:d9:9e:53:3a:9f: fa:05:93:a7:1f:a0:f1:f1:58:70:bb:6c:37:6e:83: d0:3a:38:41:7e:3e:3e:8d:8b:d9:1e:70:65:63:4d: 3b:97:cd:b7:d8:73:67:f0:a1:87:36:f8:d8:7e:d2: ce:5b:3b:44:c3:fe:76:58:d6:8b:d0:0c:95:38:57: 01:bf:de:47:09:09:f3:dc:bb:16:a9:ac:85:67:49: a6:25:57:a0:cc:fd:b5:11:f4:db:92:02:ea:26:d3: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:FC:3C:73:76:A2:86:1D:C8:52:7D:4C:51:26:02:15:77:56:F6 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/3135372e36362e34312e302f32342d3234203d3e20313532373934.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.41.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:b2:37:05:c9:a3:6a:09:cd:98:88:cc:48:e7:f2:dd:d5:ea: 34:14:5f:61:f9:84:f1:40:b5:d7:65:45:f3:93:46:47:3b:99: 13:ab:33:e7:ee:59:bd:de:0c:47:53:87:40:df:05:75:87:e5: 8b:b1:3d:55:0e:c2:19:ae:0e:a6:53:aa:f5:c1:d4:29:07:0c: a4:72:db:43:cd:20:36:3b:44:0a:e5:73:9c:b7:26:4f:17:64: 70:14:20:89:97:75:c6:4d:df:f6:f8:03:d5:be:a0:fe:0c:d6: 6b:9c:fc:a6:4e:7e:cd:fa:09:31:32:bd:5a:33:90:d5:4f:f3: a3:f3:2f:e7:3b:79:ef:da:22:ae:eb:57:fe:d9:31:3d:15:39: 55:0c:31:20:9d:73:7c:b8:40:e5:5b:cb:ac:aa:71:33:09:c3: c7:ae:b2:d0:4f:5a:c8:92:12:bf:8a:86:c5:c5:9e:25:88:a5: 9b:62:fc:a8:c8:1e:0c:72:e6:fe:ff:6a:25:98:f3:59:75:7d: ce:89:33:26:7a:c3:76:71:2b:f9:12:72:9b:47:d1:b2:90:9e: 85:00:cc:e3:da:66:1c:b6:47:bf:e3:1a:cb:9b:93:05:7f:4b: 31:16:9d:a8:d2:8d:fa:c9:1d:1d:ec:aa:9b:da:ee:a4:54:e4: 31:61:e0:d4 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUdY0Yxy4agyt0dcHlBxbyrm7KaCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTEwMDQxMjU1MDBaFw0yNjEwMDMxMzAwMDBaMDMxMTAvBgNV BAMTKEY2RDlGQzNDNzM3NkEyODYxREM4NTI3RDRDNTEyNjAyMTU3NzU2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpcRgJR/dCvDmTUGnuldITLBi 87Is1gaXlMKwYHPevlUwW5noo0CawrBq30USmWRMZDFo+/U8J3StPRwlXPpUC7fL tliQpKRus6v9PruU8fu1ifE+tZGe4TjA1azuOMRzbqvKuv/MsaBC6/VG10EJrh/e 53HtwiKDvDTCx40+DwrFJ3dkEY/G8zNWN57dMHgQiYEYTOvdgzDVAvnO6nHZnlM6 n/oFk6cfoPHxWHC7bDdug9A6OEF+Pj6Ni9kecGVjTTuXzbfYc2fwoYc2+Nh+0s5b O0TD/nZY1ovQDJU4VwG/3kcJCfPcuxaprIVnSaYlV6DM/bUR9NuSAuom095xAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9tn8PHN2ooYdyFJ9TFEmAhV3VvYwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3ZjJjMTkwLTMwZjUtNGYxOS1i ZmNhLTBiOTg3YTUyZmQ1NS8wLzMxMzUzNzJlMzYzNjJlMzQzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CKTANBgkqhkiG 9w0BAQsFAAOCAQEAnbI3BcmjagnNmIjMSOfy3dXqNBRfYfmE8UC112VF85NGRzuZ E6sz5+5Zvd4MR1OHQN8FdYfli7E9VQ7CGa4OplOq9cHUKQcMpHLbQ80gNjtECuVz nLcmTxdkcBQgiZd1xk3f9vgD1b6g/gzWa5z8pk5+zfoJMTK9WjOQ1U/zo/Mv5zt5 79oirutX/tkxPRU5VQwxIJ1zfLhA5VvLrKpxMwnDx66y0E9ayJISv4qGxcWeJYil m2L8qMgeDHLm/v9qJZjzWXV9zokzJnrDdnEr+RJym0fRspCehQDM49pmHLZHv+Ma y5uTBX9LMRadqNKN+skdHeyqm9rupFTkMWHg1A== -----END CERTIFICATE-----Generated at Tue Oct 21 07:20:49 2025 by rpki-client