$ rpki-client -vvf rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa File: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (raw, json) Hash identifier: DKOQH9+FY5KWIJZ/d+jpR5uVEMysXkF+IGiRwUECgAs= Subject key identifier: 53:22:F3:3E:64:91:AD:CE:1C:57:13:85:AF:AE:EA:98:F1:23:A5:87 Certificate issuer: /CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Certificate serial: 0E85786D09B42A09DDD6B9DA4D586DDD4D046054 Authority key identifier: 05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa Signing time: Sun 03 May 2026 02:10:30 +0000 ROA not before: Sun 03 May 2026 02:05:30 +0000 ROA not after: Sun 02 May 2027 02:10:30 +0000 asID: 153139 IP address blocks: 157.66.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:85:78:6d:09:b4:2a:09:dd:d6:b9:da:4d:58:6d:dd:4d:04:60:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF Validity Not Before: May 3 02:05:30 2026 GMT Not After : May 2 02:10:30 2027 GMT Subject: CN=5322F33E6491ADCE1C571385AFAEEA98F123A587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:8c:c2:f5:64:cb:2f:3f:88:03:81:25:8b: fd:5a:6b:61:e5:d7:31:12:f7:67:20:df:58:19:f6: 1e:d7:f3:a5:0e:7c:6c:ed:63:98:81:79:2d:ff:40: eb:22:2c:04:27:97:95:49:fa:09:bf:b3:7f:b5:f0: 8f:31:61:30:1e:a3:3e:0e:ca:81:04:9f:d0:1a:10: eb:7a:91:af:cf:d1:9e:a0:d4:a8:00:06:62:f1:86: 44:f8:1f:82:84:41:f6:ee:42:56:1c:65:3c:b7:bf: 81:28:4d:70:75:f2:19:de:4c:46:a7:57:b0:a6:8d: 34:21:ae:76:63:b7:e6:5e:e1:b8:29:1a:0e:77:23: d4:6a:24:30:6e:cc:a8:d4:d2:29:3a:27:03:cb:20: d3:27:54:3e:98:36:de:ed:f3:72:f3:16:9a:40:7d: 1f:e4:7b:b2:2d:11:5c:86:7a:4a:38:5d:e1:f0:ef: 97:13:96:0a:9d:0b:43:14:b3:ee:63:3c:3b:5c:9e: b7:1c:1f:12:d5:44:6e:89:7d:ff:aa:0a:0c:a6:1a: 31:24:79:2f:6f:83:17:f1:0a:56:46:ec:cf:79:98: c4:ba:8d:81:da:b9:62:cb:7e:94:6f:3b:38:42:07: 22:b5:a2:cc:6e:31:79:70:3b:ec:ae:f2:9d:0e:91: 38:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:22:F3:3E:64:91:AD:CE:1C:57:13:85:AF:AE:EA:98:F1:23:A5:87 X509v3 Authority Key Identifier: keyid:05:60:E2:FD:01:C6:E7:DD:03:E4:D7:FF:B3:0B:7E:F7:C2:F4:9D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0560E2FD01C6E7DD03E4D7FFB30B7EF7C2F49DAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.172.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:bc:2f:c8:2e:64:bc:78:53:64:6a:d3:4b:3d:7a:68:6d:c2: 6f:a6:55:59:14:2e:e7:75:ef:94:49:d6:51:f2:c6:e7:63:03: 24:b0:a1:4e:51:6f:24:f6:30:bc:69:2c:51:b1:c6:d9:c5:d3: 9f:a0:29:3d:e7:37:5c:27:87:bf:6a:bc:6e:65:7d:21:1d:77: 68:4d:a7:3b:35:47:4d:95:57:3f:34:12:a7:64:30:21:8a:5f: cf:78:ad:72:e6:a9:cd:d5:6e:ae:b2:e1:e0:fa:de:cb:95:0c: 13:b5:7a:79:00:c5:13:8f:2b:ed:01:6e:fc:dd:6c:7a:1e:92: 8e:41:0c:e9:1a:88:22:f6:dc:e3:89:f4:7b:e8:41:da:e3:9c: 93:89:de:80:b9:24:ba:bb:9d:80:c0:0c:97:08:04:96:44:06: dc:52:2a:49:57:98:c4:e2:bb:9a:24:4b:1d:0b:17:5a:8a:af: 42:0e:fc:89:9b:b9:fc:cf:7b:02:68:ae:e2:6a:0f:65:56:58: 63:25:18:04:38:dd:4c:cd:b7:97:4c:40:f0:aa:fb:3f:fc:fc: 92:c4:a8:4b:d0:6c:fd:95:55:22:12:10:53:ec:00:92:cd:25: bd:d1:9e:1f:0a:a8:0e:d2:aa:70:0d:3c:5d:c6:cf:42:2b:4b: 3e:e4:6b:9c -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUDoV4bQm0Kgnd1rnaTVht3U0EYFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2MEUyRkQwMUM2RTdERDAzRTREN0ZGQjMwQjdFRjdD MkY0OURBRjAeFw0yNjA1MDMwMjA1MzBaFw0yNzA1MDIwMjEwMzBaMDMxMTAvBgNV BAMTKDUzMjJGMzNFNjQ5MUFEQ0UxQzU3MTM4NUFGQUVFQTk4RjEyM0E1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqozC9WTLLz+IA4Eli/1aa2Hl 1zES92cg31gZ9h7X86UOfGztY5iBeS3/QOsiLAQnl5VJ+gm/s3+18I8xYTAeoz4O yoEEn9AaEOt6ka/P0Z6g1KgABmLxhkT4H4KEQfbuQlYcZTy3v4EoTXB18hneTEan V7CmjTQhrnZjt+Ze4bgpGg53I9RqJDBuzKjU0ik6JwPLINMnVD6YNt7t83LzFppA fR/ke7ItEVyGeko4XeHw75cTlgqdC0MUs+5jPDtcnrccHxLVRG6Jff+qCgymGjEk eS9vgxfxClZG7M95mMS6jYHauWLLfpRvOzhCByK1osxuMXlwO+yu8p0OkTglAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUUyLzPmSRrc4cVxOFr67qmPEjpYcwHwYDVR0j BBgwFoAUBWDi/QHG590D5Nf/swt+98L0na8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDMyZjk4YTAtMDk0Ny00ZjdhLWJlZTctZmZjM2QwNWI5NDBlLzAvMDU2MEUyRkQw MUM2RTdERDAzRTREN0ZGQjMwQjdFRjdDMkY0OURBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8wNTYwRTJGRDAxQzZFN0REMDNFNEQ3RkZCMzBCN0VGN0MyRjQ5 REFGLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAzMmY5OGEwLTA5NDctNGY3YS1i ZWU3LWZmYzNkMDViOTQwZS8wLzMxMzUzNzJlMzYzNjJlMzEzNzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKsMA0GCSqG SIb3DQEBCwUAA4IBAQBKvC/ILmS8eFNkatNLPXpobcJvplVZFC7nde+USdZR8sbn YwMksKFOUW8k9jC8aSxRscbZxdOfoCk95zdcJ4e/arxuZX0hHXdoTac7NUdNlVc/ NBKnZDAhil/PeK1y5qnN1W6usuHg+t7LlQwTtXp5AMUTjyvtAW783Wx6HpKOQQzp Gogi9tzjifR76EHa45yTid6AuSS6u52AwAyXCASWRAbcUipJV5jE4ruaJEsdCxda iq9CDvyJm7n8z3sCaK7iag9lVlhjJRgEON1MzbeXTEDwqvs//PySxKhL0Gz9lVUi EhBT7ACSzSW90Z4fCqgO0qpwDTxdxs9CK0s+5Guc -----END CERTIFICATE-----Generated at Wed May 13 04:26:12 2026 by rpki-client