$ rpki-client -vvf rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa File: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (raw, json) Hash identifier: ac6CyTfBjiQzVpb4Xi4EMazJXA+5euh8xSCepgGjjfU= Subject key identifier: 49:B2:0E:64:10:63:C0:76:C5:2B:DA:13:3C:AC:CA:06:19:57:7B:DE Certificate issuer: /CN=C6270553A881A56C936E6AE13CAAEBE1ACD0C225 Certificate serial: 1E4AD103DFA67355D7866D673F5BA3E93E8ADE2B Authority key identifier: C6:27:05:53:A8:81:A5:6C:93:6E:6A:E1:3C:AA:EB:E1:AC:D0:C2:25 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa Signing time: Sun 03 May 2026 03:00:51 +0000 ROA not before: Sun 03 May 2026 02:55:51 +0000 ROA not after: Sun 02 May 2027 03:00:51 +0000 asID: 152797 IP address blocks: 157.66.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4a:d1:03:df:a6:73:55:d7:86:6d:67:3f:5b:a3:e9:3e:8a:de:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6270553A881A56C936E6AE13CAAEBE1ACD0C225 Validity Not Before: May 3 02:55:51 2026 GMT Not After : May 2 03:00:51 2027 GMT Subject: CN=49B20E641063C076C52BDA133CACCA0619577BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:f5:f8:f5:8c:d5:22:f1:63:51:03:22:3d: 6d:a1:ae:8c:08:dd:58:77:fd:13:86:5d:4a:43:76: 40:b7:d7:47:d0:76:20:5f:18:1b:db:f8:dd:80:43: 1a:38:54:25:67:b1:7b:40:2a:2d:78:c0:2e:f9:ca: ad:72:6c:83:05:2b:db:9e:3c:29:7d:39:ae:64:f1: 6d:47:83:56:a7:6c:66:a2:4c:72:70:15:19:74:d1: 8b:87:81:dc:e1:b4:95:e2:9b:fa:08:16:d2:0d:52: 25:cf:ba:6e:86:54:2c:7b:38:66:04:18:7a:ba:bd: 21:a0:6f:4d:14:1d:1e:e9:5b:45:1c:99:b9:a6:50: 49:46:11:2d:24:4a:3c:eb:ef:82:b5:c4:07:a9:68: a5:78:dc:76:7c:b0:c9:04:d6:f9:f4:ef:5a:c8:9f: 5f:8b:d1:ac:d5:9e:e5:33:75:5c:c6:68:03:0e:44: 08:a5:ec:80:5e:98:99:4e:4a:e7:f5:52:e4:77:51: d4:fb:db:6a:eb:b5:7b:9f:b5:43:d0:ec:14:78:af: 5c:da:13:4e:39:72:a9:36:61:12:73:66:18:aa:8f: d6:45:65:ef:3f:92:e6:d0:0f:bb:cd:68:f5:35:d0: 51:88:6d:1f:76:e0:2f:36:39:b2:df:d0:37:2b:b1: 9e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B2:0E:64:10:63:C0:76:C5:2B:DA:13:3C:AC:CA:06:19:57:7B:DE X509v3 Authority Key Identifier: keyid:C6:27:05:53:A8:81:A5:6C:93:6E:6A:E1:3C:AA:EB:E1:AC:D0:C2:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/C6270553A881A56C936E6AE13CAAEBE1ACD0C225.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.248.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:d4:bc:9c:58:22:3f:12:fd:58:0e:ad:34:1d:d9:66:95:56: e6:38:79:8b:2c:d4:70:46:ad:d5:0b:20:3f:1d:91:d2:66:44: 1b:b3:bd:cb:b8:14:ce:23:96:31:1e:3c:1e:dd:5d:90:c5:66: 31:25:6f:cd:c7:29:ea:8a:dd:d4:dd:9a:55:da:77:df:08:51: 6d:da:a3:64:20:15:8b:7f:c9:2f:6b:a3:db:5f:b9:bc:53:b1: 32:e6:3f:44:9d:ed:8a:fb:6b:4a:8f:f3:53:e3:a0:9c:8d:69: a9:3e:2d:e5:ed:16:76:c7:ae:32:10:0f:a6:d1:7e:c3:fc:3c: 98:5d:0d:03:d6:e7:5d:0b:e1:a7:88:db:cf:64:63:47:8c:f0: 40:06:3c:f6:6a:d2:5b:05:b5:b5:f0:94:76:0e:c4:78:7a:ac: b5:31:98:b2:1b:2f:f0:fd:94:d4:b2:dc:fb:cb:00:7a:e6:69: d2:fc:ac:d5:69:1c:18:11:11:0f:e1:79:21:bb:b7:47:e8:cb: 9a:e5:2b:45:6f:52:2e:e6:b6:5d:31:b2:e1:8e:c1:e3:6c:13: af:eb:ea:07:e7:fd:03:9b:e6:61:b0:d4:c2:8e:c6:57:4f:eb: dd:9a:47:ec:82:d1:17:a8:36:2f:89:53:7a:c6:da:bf:c9:fb: c8:9d:96:31 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUHkrRA9+mc1XXhm1nP1uj6T6K3iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyNzA1NTNBODgxQTU2QzkzNkU2QUUxM0NBQUVCRTFB Q0QwQzIyNTAeFw0yNjA1MDMwMjU1NTFaFw0yNzA1MDIwMzAwNTFaMDMxMTAvBgNV BAMTKDQ5QjIwRTY0MTA2M0MwNzZDNTJCREExMzNDQUNDQTA2MTk1NzdCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD/X49YzVIvFjUQMiPW2hrowI 3Vh3/ROGXUpDdkC310fQdiBfGBvb+N2AQxo4VCVnsXtAKi14wC75yq1ybIMFK9ue PCl9Oa5k8W1Hg1anbGaiTHJwFRl00YuHgdzhtJXim/oIFtINUiXPum6GVCx7OGYE GHq6vSGgb00UHR7pW0UcmbmmUElGES0kSjzr74K1xAepaKV43HZ8sMkE1vn071rI n1+L0azVnuUzdVzGaAMORAil7IBemJlOSuf1UuR3UdT722rrtXuftUPQ7BR4r1za E045cqk2YRJzZhiqj9ZFZe8/kubQD7vNaPU10FGIbR924C82ObLf0DcrsZ5VAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUSbIOZBBjwHbFK9oTPKzKBhlXe94wHwYDVR0j BBgwFoAUxicFU6iBpWyTbmrhPKrr4azQwiUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM5OTFmN2EtMGE3MS00ZjBkLTkzM2YtZWNmODEzNTMwMjc0LzAvQzYyNzA1NTNB ODgxQTU2QzkzNkU2QUUxM0NBQUVCRTFBQ0QwQzIyNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9DNjI3MDU1M0E4ODFBNTZDOTM2RTZBRTEzQ0FBRUJFMUFDRDBD MjI1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IzOTkxZjdhLTBhNzEtNGYwZC05 MzNmLWVjZjgxMzUzMDI3NC8wLzMxMzUzNzJlMzYzNjJlMzIzNDM4MmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzczOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUL4MA0GCSqG SIb3DQEBCwUAA4IBAQAq1LycWCI/Ev1YDq00HdlmlVbmOHmLLNRwRq3VCyA/HZHS ZkQbs73LuBTOI5YxHjwe3V2QxWYxJW/Nxynqit3U3ZpV2nffCFFt2qNkIBWLf8kv a6PbX7m8U7Ey5j9Ene2K+2tKj/NT46CcjWmpPi3l7RZ2x64yEA+m0X7D/DyYXQ0D 1uddC+GniNvPZGNHjPBABjz2atJbBbW18JR2DsR4eqy1MZiyGy/w/ZTUstz7ywB6 5mnS/KzVaRwYEREP4Xkhu7dH6Mua5StFb1Iu5rZdMbLhjsHjbBOv6+oH5/0Dm+Zh sNTCjsZXT+vdmkfsgtEXqDYviVN6xtq/yfvInZYx -----END CERTIFICATE-----Generated at Wed May 13 07:46:31 2026 by rpki-client