$ rpki-client -vvf rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa File: 3135372e36362e33362e302f32342d3234203d3e20313430303136.roa (raw, json) Hash identifier: Td28/CJkhSrDBpr5GMD46a5qt8s5yGrgfbAD8PtUEzk= Subject key identifier: B3:40:21:08:EF:51:FC:5A:6E:15:98:8C:47:1F:89:6D:31:7E:D4:C8 Certificate issuer: /CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD Certificate serial: 0122B8C1819DC3C1590163FA5AD6F6E2E391919B Authority key identifier: 6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa Signing time: Sun 03 May 2026 02:37:16 +0000 ROA not before: Sun 03 May 2026 02:32:16 +0000 ROA not after: Sun 02 May 2027 02:37:16 +0000 asID: 140016 IP address blocks: 157.66.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:22:b8:c1:81:9d:c3:c1:59:01:63:fa:5a:d6:f6:e2:e3:91:91:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD Validity Not Before: May 3 02:32:16 2026 GMT Not After : May 2 02:37:16 2027 GMT Subject: CN=B3402108EF51FC5A6E15988C471F896D317ED4C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:08:a8:26:60:c5:27:61:9b:cd:ce:d7:71: 14:24:1c:d2:b9:f1:86:f0:b9:99:11:86:5b:5b:08: 64:29:52:f2:4b:2d:3b:42:3b:15:93:57:de:d0:25: ee:b9:55:c4:b5:0c:3d:26:fc:cf:a1:7b:89:2b:7b: 68:74:2f:d8:60:6e:33:be:18:95:9f:be:77:fb:88: 44:74:20:9b:1b:96:76:01:19:74:d8:fe:18:55:a7: c4:89:f2:77:f3:db:e3:d1:e0:a8:1e:af:cc:2b:97: 44:aa:6b:e5:c3:93:61:2d:57:04:3b:04:7a:99:97: 35:ba:f6:28:eb:fe:4a:aa:33:e6:e6:d1:18:54:79: 44:2e:e2:94:eb:6d:5f:c4:ec:7a:86:86:e0:dd:c3: 7e:e6:6f:04:92:34:84:8b:9c:19:5b:60:b1:d1:3d: 78:9a:fc:c5:bf:a6:92:0f:e4:c3:a1:37:a8:06:b3: 8a:c6:18:89:ef:b7:a2:2e:3e:db:bf:ac:ea:9d:31: 39:ff:fc:77:09:49:7e:7a:6c:08:93:4d:50:6a:ba: f1:52:bf:cb:d5:8a:03:48:c3:db:3b:d9:7e:0c:95: 2d:94:00:d4:63:ba:36:c3:eb:77:e0:72:4a:96:cf: 0b:15:40:9e:b8:74:c0:53:a6:00:ae:df:d8:a9:c1: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:40:21:08:EF:51:FC:5A:6E:15:98:8C:47:1F:89:6D:31:7E:D4:C8 X509v3 Authority Key Identifier: keyid:6B:9B:F1:E1:9F:7B:AA:8F:C4:BB:47:0A:E1:9E:C4:18:6F:6F:BB:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/6B9BF1E19F7BAA8FC4BB470AE19EC4186F6FBBBD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5f9e1a8a-39f1-4fe2-832a-bb2f2092fbf6/0/3135372e36362e33362e302f32342d3234203d3e20313430303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.36.0/24 Signature Algorithm: sha256WithRSAEncryption 19:12:96:02:65:db:fb:d3:07:84:83:13:8e:74:0a:0f:48:7d: a3:e3:8b:06:de:dd:45:e5:4d:2a:90:af:86:87:94:d8:bc:07: fb:a1:33:62:04:ed:02:15:b2:ab:08:6c:53:74:10:27:c0:34: 98:aa:bf:fb:2b:88:7c:ad:ed:ba:8e:1e:c1:08:73:8e:9b:f6: 80:18:07:d0:01:b7:73:cc:32:a5:f5:50:b2:da:33:e3:90:17: cc:02:bb:41:26:e4:a9:b9:f5:c5:68:68:55:21:b8:d7:4e:64: 5f:96:a9:22:07:bd:0d:f9:af:65:57:9e:82:7a:8a:c8:c4:66: b4:95:6e:b4:a5:9a:c1:a5:7f:49:5d:65:84:16:ca:0b:46:2f: 3a:71:73:15:8e:11:11:40:77:92:91:a1:6f:b0:13:ad:67:b2: 4c:0a:8f:b1:f3:fe:fb:ba:87:64:3b:11:36:69:9e:f5:d3:fb: d9:09:13:25:f5:f3:be:84:65:57:76:90:b3:69:fa:8f:64:50: 8c:95:63:d9:04:3e:0e:02:56:cc:4f:4c:40:e2:5a:46:b4:2f: 58:5e:b2:63:fb:cc:a6:38:b4:d6:00:12:00:e8:75:df:00:fc: af:ab:36:6e:d8:c3:b5:c3:4a:b2:ad:8d:c7:dc:8b:09:23:e6: 48:3f:31:98 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUASK4wYGdw8FZAWP6Wtb24uORkZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI5QkYxRTE5RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2 RjZGQkJCRDAeFw0yNjA1MDMwMjMyMTZaFw0yNzA1MDIwMjM3MTZaMDMxMTAvBgNV BAMTKEIzNDAyMTA4RUY1MUZDNUE2RTE1OTg4QzQ3MUY4OTZEMzE3RUQ0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyAioJmDFJ2Gbzc7XcRQkHNK5 8YbwuZkRhltbCGQpUvJLLTtCOxWTV97QJe65VcS1DD0m/M+he4kre2h0L9hgbjO+ GJWfvnf7iER0IJsblnYBGXTY/hhVp8SJ8nfz2+PR4Kger8wrl0Sqa+XDk2EtVwQ7 BHqZlzW69ijr/kqqM+bm0RhUeUQu4pTrbV/E7HqGhuDdw37mbwSSNISLnBlbYLHR PXia/MW/ppIP5MOhN6gGs4rGGInvt6IuPtu/rOqdMTn//HcJSX56bAiTTVBquvFS v8vVigNIw9s72X4MlS2UANRjujbD63fgckqWzwsVQJ64dMBTpgCu39ipwdg3AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUs0AhCO9R/FpuFZiMRx+JbTF+1MgwHwYDVR0j BBgwFoAUa5vx4Z97qo/Eu0cK4Z7EGG9vu70wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWY5ZTFhOGEtMzlmMS00ZmUyLTgzMmEtYmIyZjIwOTJmYmY2LzAvNkI5QkYxRTE5 RjdCQUE4RkM0QkI0NzBBRTE5RUM0MTg2RjZGQkJCRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82QjlCRjFFMTlGN0JBQThGQzRCQjQ3MEFFMTlFQzQxODZGNkZC QkJELmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmOWUxYThhLTM5ZjEtNGZlMi04 MzJhLWJiMmYyMDkyZmJmNi8wLzMxMzUzNzJlMzYzNjJlMzMzNjJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMDMwMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CJDANBgkqhkiG 9w0BAQsFAAOCAQEAGRKWAmXb+9MHhIMTjnQKD0h9o+OLBt7dReVNKpCvhoeU2LwH +6EzYgTtAhWyqwhsU3QQJ8A0mKq/+yuIfK3tuo4ewQhzjpv2gBgH0AG3c8wypfVQ stoz45AXzAK7QSbkqbn1xWhoVSG4105kX5apIge9DfmvZVeegnqKyMRmtJVutKWa waV/SV1lhBbKC0YvOnFzFY4REUB3kpGhb7ATrWeyTAqPsfP++7qHZDsRNmme9dP7 2QkTJfXzvoRlV3aQs2n6j2RQjJVj2QQ+DgJWzE9MQOJaRrQvWF6yY/vMpji01gAS AOh13wD8r6s2btjDtcNKsq2Nx9yLCSPmSD8xmA== -----END CERTIFICATE-----Generated at Wed May 13 02:33:57 2026 by rpki-client