$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa File: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (raw, json) Hash identifier: e0KMuAk3wKVRfXy4hiXD02tyuukRyMl2I0WHnvKBFvM= Subject key identifier: 82:43:13:89:8A:13:34:0F:70:66:8C:9D:79:2C:97:89:E1:54:74:B8 Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 4CF9CF9554DD4A99B4EB291F468C1AF95196B0EE Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa Signing time: Tue 24 Mar 2026 01:00:01 +0000 ROA not before: Tue 24 Mar 2026 00:55:01 +0000 ROA not after: Tue 23 Mar 2027 01:00:01 +0000 asID: 139981 IP address blocks: 157.66.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f9:cf:95:54:dd:4a:99:b4:eb:29:1f:46:8c:1a:f9:51:96:b0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Mar 24 00:55:01 2026 GMT Not After : Mar 23 01:00:01 2027 GMT Subject: CN=824313898A13340F70668C9D792C9789E15474B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:47:73:cb:c0:14:cf:3b:bd:50:bf:ce:79: bb:53:f5:b6:d5:75:2f:ed:45:d2:50:5e:d6:ff:b9: 1a:ab:00:f7:1c:0a:94:d2:b5:92:69:a9:b5:40:bc: f2:21:25:89:5a:c7:73:73:5f:a4:ea:35:4c:eb:fe: 64:8d:dc:28:7d:cb:d5:b8:6d:2a:87:e2:d6:6f:f9: 53:9e:85:dc:79:03:28:cf:48:ba:00:11:88:86:ad: 00:de:7f:3d:0a:3f:bc:89:86:61:68:79:16:20:1d: 8a:6a:2f:03:c0:84:83:b8:d5:4e:8c:b2:42:66:c8: 04:74:16:16:2b:0e:51:49:0b:c9:55:b1:82:07:af: 8b:94:25:2c:65:df:62:3b:9a:4e:af:fe:5e:52:ff: 7d:65:1b:90:c5:af:07:ec:9a:10:ba:9b:d2:1b:ac: 8e:56:2a:6f:7d:e0:0a:11:09:78:14:3a:39:36:a8: 0c:36:39:39:99:06:f9:dc:b7:6a:90:00:1e:b6:49: 12:ed:88:0b:b0:72:75:d8:0f:34:85:57:9a:90:a6: 3b:a5:c0:8e:f6:f7:89:5f:9b:44:13:28:d6:50:8b: 18:ed:da:0b:b5:40:ff:0f:f0:87:23:5f:45:58:71: 7c:cd:e2:aa:40:ae:ba:88:cd:1a:77:f2:40:bc:92: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:43:13:89:8A:13:34:0F:70:66:8C:9D:79:2C:97:89:E1:54:74:B8 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:07:54:bb:ca:1f:e0:c6:fc:36:07:2e:ac:b2:c0:71:f4:8b: dd:12:5b:0b:12:bd:af:e5:3d:04:3d:de:d0:a1:a6:04:06:e1: 0e:3e:0c:f2:5a:e7:87:7c:9f:a8:4d:d2:60:39:4b:3b:ad:a8: 57:c8:13:65:ad:4d:10:dd:c3:a7:1a:d7:d6:da:b2:2b:92:37: 57:f5:68:b9:d8:5c:98:41:a8:f1:d7:2c:ee:0a:38:b9:34:6b: 56:50:9b:8f:a6:2b:3f:21:d3:ca:f2:78:73:a5:a2:53:a1:d1: 04:d7:88:95:32:b3:7a:a5:8e:0b:e7:71:3f:3d:e2:ab:73:08: ef:7e:e0:b7:2b:6a:55:fd:7a:09:b0:d2:f8:bb:10:18:64:0f: d0:77:01:ba:a9:b7:42:e1:41:aa:a9:d9:5c:7e:17:d9:f2:42: d2:d6:5b:b8:26:9c:f9:71:d6:07:5f:cd:e4:05:f3:2e:e7:9c: e8:23:ac:07:69:84:90:57:2d:f9:26:c0:45:73:33:0e:d5:60: 21:73:59:ea:b8:b4:01:8f:11:28:0d:65:17:36:8d:b8:5e:78: cb:0c:9a:d4:eb:97:b7:02:ca:9a:8c:ed:04:b2:69:84:bf:cb: a3:d1:90:c5:3d:87:6f:ba:67:35:c5:18:96:fb:19:b2:a2:06: 5e:f0:66:a6 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUTPnPlVTdSpm06ykfRowa+VGWsO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNjAzMjQwMDU1MDFaFw0yNzAzMjMwMTAwMDFaMDMxMTAvBgNV BAMTKDgyNDMxMzg5OEExMzM0MEY3MDY2OEM5RDc5MkM5Nzg5RTE1NDc0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp0kdzy8AUzzu9UL/OebtT9bbV dS/tRdJQXtb/uRqrAPccCpTStZJpqbVAvPIhJYlax3NzX6TqNUzr/mSN3Ch9y9W4 bSqH4tZv+VOehdx5AyjPSLoAEYiGrQDefz0KP7yJhmFoeRYgHYpqLwPAhIO41U6M skJmyAR0FhYrDlFJC8lVsYIHr4uUJSxl32I7mk6v/l5S/31lG5DFrwfsmhC6m9Ib rI5WKm994AoRCXgUOjk2qAw2OTmZBvnct2qQAB62SRLtiAuwcnXYDzSFV5qQpjul wI7294lfm0QTKNZQixjt2gu1QP8P8IcjX0VYcXzN4qpArrqIzRp38kC8kl1RAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUgkMTiYoTNA9wZoydeSyXieFUdLgwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5N2M2ODJhLTQ0OGItNDBlMi1h ODhmLTE2ZGY4M2RkMzMzNy8wLzMxMzUzNzJlMzYzNjJlMzgzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CVDANBgkqhkiG 9w0BAQsFAAOCAQEASgdUu8of4Mb8NgcurLLAcfSL3RJbCxK9r+U9BD3e0KGmBAbh Dj4M8lrnh3yfqE3SYDlLO62oV8gTZa1NEN3DpxrX1tqyK5I3V/VoudhcmEGo8dcs 7go4uTRrVlCbj6YrPyHTyvJ4c6WiU6HRBNeIlTKzeqWOC+dxPz3iq3MI737gtytq Vf16CbDS+LsQGGQP0HcBuqm3QuFBqqnZXH4X2fJC0tZbuCac+XHWB1/N5AXzLuec 6COsB2mEkFct+SbARXMzDtVgIXNZ6ri0AY8RKA1lFzaNuF54ywya1OuXtwLKmozt BLJphL/Lo9GQxT2Hb7pnNcUYlvsZsqIGXvBmpg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:03 2026 by rpki-client