$ rpki-client -vvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/3135372e36362e36372e302f32342d3234203d3e20313532373831.roa File: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (raw, json) Hash identifier: OfxEx4cxbUi1PsgMvuv5XcH2kiZ/xjVPvG8pLlZllKE= Subject key identifier: 93:9C:5A:B2:8F:32:8F:E1:4C:01:6F:56:C7:82:16:29:D4:16:72:18 Certificate issuer: /CN=E161BF656F0149CB290354E631915A62950E0DF7 Certificate serial: 36550B90CF7359C345CA7918E30E41CEE8421F18 Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/3135372e36362e36372e302f32342d3234203d3e20313532373831.roa Signing time: Sun 03 May 2026 02:43:43 +0000 ROA not before: Sun 03 May 2026 02:38:43 +0000 ROA not after: Sun 02 May 2027 02:43:43 +0000 asID: 152781 IP address blocks: 157.66.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:55:0b:90:cf:73:59:c3:45:ca:79:18:e3:0e:41:ce:e8:42:1f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7 Validity Not Before: May 3 02:38:43 2026 GMT Not After : May 2 02:43:43 2027 GMT Subject: CN=939C5AB28F328FE14C016F56C7821629D4167218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:b4:24:f1:a3:db:cf:a3:11:8c:ea:f2:24: c3:33:b7:aa:3a:f4:09:d7:f7:62:c2:11:7a:77:63: bf:c6:e6:bf:5f:67:70:cd:08:a3:bb:76:4f:cc:4c: a3:ae:20:ca:4a:b1:eb:9b:d9:bf:5b:2c:6f:a5:4d: f4:f2:8a:1d:60:ff:a2:64:3e:3a:4a:e2:71:60:3c: b1:3b:c9:de:1d:41:5e:f2:70:b2:94:18:46:a2:39: 02:66:08:1c:dc:d0:ed:17:cb:4c:2f:cc:3c:9f:17: 86:07:3a:57:a3:43:e3:9d:36:57:45:a9:00:df:88: 5c:fa:3b:0b:2a:7d:c8:ee:65:04:f3:e2:f8:9a:f3: d8:b8:62:73:cb:bf:4d:e7:e6:19:ce:0b:c3:6e:ef: 4e:a5:d4:cd:ff:96:f2:8e:09:12:0f:aa:8e:78:8f: b2:57:69:48:c9:1f:57:00:fd:54:ea:58:2c:06:cd: fa:a4:e9:2a:e4:05:61:5c:33:0f:ba:15:4c:93:6d: 0e:70:28:49:31:5b:86:39:cf:63:93:11:29:67:9f: aa:1a:08:40:89:ca:3c:66:90:4a:94:7d:b1:23:55: 55:c6:12:e9:c8:a5:53:1c:18:f2:25:3e:05:0c:21: 9b:10:32:92:70:4f:93:76:50:b8:f3:f4:76:0b:a5: 29:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9C:5A:B2:8F:32:8F:E1:4C:01:6F:56:C7:82:16:29:D4:16:72:18 X509v3 Authority Key Identifier: keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/3135372e36362e36372e302f32342d3234203d3e20313532373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.67.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:7d:59:56:9b:d0:14:d6:a0:0f:12:8b:a3:60:e9:18:bb:fd: 01:e0:af:09:49:68:31:27:0a:3e:80:f8:87:54:cb:dd:f1:0b: 2d:06:58:5c:7c:88:c0:09:13:51:f7:8d:2d:d1:4b:1c:9a:14: b2:67:ab:8a:9e:cb:5b:58:e8:04:5c:5c:0a:9b:40:d0:cc:ed: 26:cc:f6:2e:b7:f4:ef:ab:5e:49:de:34:56:91:8a:8b:d0:f9: 22:46:76:3e:01:96:e0:5b:fe:41:9b:ac:79:54:b5:0a:c4:cf: cd:58:62:33:2c:6a:75:49:a4:a2:59:f0:d0:53:cc:37:79:9b: 32:82:52:f6:fc:57:db:9b:0d:9d:17:22:8e:40:50:3d:34:39: c5:05:90:be:86:94:eb:12:b3:74:c8:4e:e4:d0:16:2d:29:c4: 58:38:45:c5:ea:14:c9:99:8a:7a:be:7e:c4:c4:ff:c3:61:00: a7:d7:b9:1d:b9:69:6d:4c:68:d5:6c:93:eb:5e:af:aa:4c:5b: 42:25:70:7a:e5:df:46:f0:49:44:34:5b:4b:bc:c4:fc:d4:37: 48:86:01:c1:61:f5:56:a0:2f:a0:45:d3:5e:83:c7:60:8f:f2: 10:0b:f2:07:d0:ad:16:92:2a:60:9f:58:0e:bc:3c:16:ab:52: 8c:c8:2d:96 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNlULkM9zWcNFynkY4w5BzuhCHxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE2MUJGNjU2RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5 NTBFMERGNzAeFw0yNjA1MDMwMjM4NDNaFw0yNzA1MDIwMjQzNDNaMDMxMTAvBgNV BAMTKDkzOUM1QUIyOEYzMjhGRTE0QzAxNkY1NkM3ODIxNjI5RDQxNjcyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFubQk8aPbz6MRjOryJMMzt6o6 9AnX92LCEXp3Y7/G5r9fZ3DNCKO7dk/MTKOuIMpKseub2b9bLG+lTfTyih1g/6Jk PjpK4nFgPLE7yd4dQV7ycLKUGEaiOQJmCBzc0O0Xy0wvzDyfF4YHOlejQ+OdNldF qQDfiFz6OwsqfcjuZQTz4via89i4YnPLv03n5hnOC8Nu706l1M3/lvKOCRIPqo54 j7JXaUjJH1cA/VTqWCwGzfqk6SrkBWFcMw+6FUyTbQ5wKEkxW4Y5z2OTESlnn6oa CECJyjxmkEqUfbEjVVXGEunIpVMcGPIlPgUMIZsQMpJwT5N2ULjz9HYLpSnTAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUk5xaso8yj+FMAW9Wx4IWKdQWchgwHwYDVR0j BBgwFoAU4WG/ZW8BScspA1TmMZFaYpUODfcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzY3MGFlNzYtOTU5NC00OTgwLWI0MTAtNDkxYTYzMTlmZjNhLzAvRTE2MUJGNjU2 RjAxNDlDQjI5MDM1NEU2MzE5MTVBNjI5NTBFMERGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9FMTYxQkY2NTZGMDE0OUNCMjkwMzU0RTYzMTkxNUE2Mjk1MEUw REY3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzc2NzBhZTc2LTk1OTQtNDk4MC1i NDEwLTQ5MWE2MzE5ZmYzYS8wLzMxMzUzNzJlMzYzNjJlMzYzNzJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzUzMjM3MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CQzANBgkqhkiG 9w0BAQsFAAOCAQEAWn1ZVpvQFNagDxKLo2DpGLv9AeCvCUloMScKPoD4h1TL3fEL LQZYXHyIwAkTUfeNLdFLHJoUsmerip7LW1joBFxcCptA0MztJsz2Lrf076teSd40 VpGKi9D5IkZ2PgGW4Fv+QZuseVS1CsTPzVhiMyxqdUmkolnw0FPMN3mbMoJS9vxX 25sNnRcijkBQPTQ5xQWQvoaU6xKzdMhO5NAWLSnEWDhFxeoUyZmKer5+xMT/w2EA p9e5HblpbUxo1WyT616vqkxbQiVweuXfRvBJRDRbS7zE/NQ3SIYBwWH1VqAvoEXT XoPHYI/yEAvyB9CtFpIqYJ9YDrw8FqtSjMgtlg== -----END CERTIFICATE-----Generated at Wed May 13 12:40:13 2026 by rpki-client