$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa File: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (raw, json) Hash identifier: QAd6aTZOH1XxHGA7Gr128UzSMTQ9i29lq8bejyTBhso= Subject key identifier: 33:DB:00:F3:69:55:FA:22:9A:99:B9:8F:F1:CC:7E:DC:F1:A7:3C:1B Certificate issuer: /CN=1A3FAE72210F536C22392A8609A526D7557AD82C Certificate serial: 43C58CA21609AF0A57A47112BDAC60C8F9539DE6 Authority key identifier: 1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa Signing time: Sun 03 May 2026 03:03:23 +0000 ROA not before: Sun 03 May 2026 02:58:23 +0000 ROA not after: Sun 02 May 2027 03:03:23 +0000 asID: 152771 IP address blocks: 157.66.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c5:8c:a2:16:09:af:0a:57:a4:71:12:bd:ac:60:c8:f9:53:9d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A3FAE72210F536C22392A8609A526D7557AD82C Validity Not Before: May 3 02:58:23 2026 GMT Not After : May 2 03:03:23 2027 GMT Subject: CN=33DB00F36955FA229A99B98FF1CC7EDCF1A73C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dc:83:4b:d4:d9:4e:4a:73:1e:4c:54:fd:b4: b1:9e:41:9b:b4:91:ad:9b:ad:02:7c:12:62:3e:19: 07:99:59:99:3e:96:15:99:2f:35:82:a7:00:ff:1a: 4c:0b:08:8b:8e:4b:29:0b:f7:5c:b1:fd:4e:ef:3e: 4c:1c:12:b4:6b:43:56:21:05:c1:65:18:12:13:e6: df:eb:7d:a3:da:7c:30:02:21:6c:d5:5f:4b:dc:16: 7c:74:63:e0:a9:c7:26:b3:38:e9:8a:59:0b:01:ea: 2e:01:ab:c5:7f:17:bb:14:ae:ae:af:01:8e:1e:74: 5d:e2:bb:1a:0d:79:dc:83:a3:a1:88:5a:4a:14:a2: ed:d8:2f:f3:1e:26:74:79:97:9f:4e:6b:ff:54:d3: 51:0a:20:20:72:14:58:22:89:2f:9e:d3:f2:58:40: 78:6a:49:21:13:8f:e6:b7:00:a9:64:16:2e:b4:56: 16:ca:7f:71:96:27:ee:85:3f:f7:27:34:f5:b4:c3: dd:13:2c:eb:dd:cd:ce:fa:62:5a:e9:ce:53:90:9b: 1e:dd:23:35:ec:41:cd:5f:3f:05:20:34:45:cf:5f: ea:d0:3b:e4:4c:5c:f5:a3:1a:ad:b0:d0:cd:47:7c: 1a:3d:91:a7:cb:a4:46:51:69:dd:96:00:53:0b:f6: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DB:00:F3:69:55:FA:22:9A:99:B9:8F:F1:CC:7E:DC:F1:A7:3C:1B X509v3 Authority Key Identifier: keyid:1A:3F:AE:72:21:0F:53:6C:22:39:2A:86:09:A5:26:D7:55:7A:D8:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/1A3FAE72210F536C22392A8609A526D7557AD82C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/1A3FAE72210F536C22392A8609A526D7557AD82C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.123.0/24 Signature Algorithm: sha256WithRSAEncryption a8:12:3a:d1:b0:ec:26:5a:52:08:4a:72:40:ed:d5:c8:e2:09: c5:30:ff:ff:20:5f:b1:fa:c0:33:52:05:e4:d3:2c:6a:fa:b5: 7b:49:0b:75:fa:42:c8:07:03:f0:6c:ca:46:e7:7d:15:8c:70: df:49:f9:68:cc:6f:d1:04:aa:93:c6:8c:26:07:67:61:36:88: 6d:d6:91:85:d3:f1:a6:7d:3c:1f:c7:f4:91:18:e7:87:06:ce: 91:13:61:21:f1:0a:bd:0e:39:2f:c0:ea:f7:4f:50:fc:2b:99: 51:b8:d5:92:56:64:e4:3c:fc:fe:63:5c:1d:c6:a6:d4:48:c2: 3f:bd:6e:09:04:01:1e:89:a0:d9:f9:66:20:dd:57:5d:3e:65: 9c:98:1c:e5:fc:de:2f:1c:3c:2e:af:7f:0f:e3:1d:e5:82:d1: 9a:f4:19:60:15:83:d6:ee:86:0b:66:07:0b:8e:08:9a:50:8f: 94:99:71:f5:f3:ae:c0:19:db:bb:ff:40:e1:6f:87:90:f5:40: 08:f0:72:f4:b5:8a:7c:7b:9a:24:17:36:60:a0:c9:15:c5:b6: b7:14:a1:2d:7b:67:26:37:16:e8:83:f7:42:07:d1:ac:e7:0b: a7:4f:c3:53:0f:a6:54:c5:9e:ed:95:89:cb:0b:68:3c:db:87: 60:13:fc:1b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUQ8WMohYJrwpXpHESvaxgyPlTneYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzRkFFNzIyMTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1 NTdBRDgyQzAeFw0yNjA1MDMwMjU4MjNaFw0yNzA1MDIwMzAzMjNaMDMxMTAvBgNV BAMTKDMzREIwMEYzNjk1NUZBMjI5QTk5Qjk4RkYxQ0M3RURDRjFBNzNDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3INL1NlOSnMeTFT9tLGeQZu0 ka2brQJ8EmI+GQeZWZk+lhWZLzWCpwD/GkwLCIuOSykL91yx/U7vPkwcErRrQ1Yh BcFlGBIT5t/rfaPafDACIWzVX0vcFnx0Y+CpxyazOOmKWQsB6i4Bq8V/F7sUrq6v AY4edF3iuxoNedyDo6GIWkoUou3YL/MeJnR5l59Oa/9U01EKICByFFgiiS+e0/JY QHhqSSETj+a3AKlkFi60VhbKf3GWJ+6FP/cnNPW0w90TLOvdzc76YlrpzlOQmx7d IzXsQc1fPwUgNEXPX+rQO+RMXPWjGq2w0M1HfBo9kafLpEZRad2WAFML9i7bAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUM9sA82lV+iKambmP8cx+3PGnPBswHwYDVR0j BBgwFoAUGj+uciEPU2wiOSqGCaUm11V62CwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiMDg4NDUtZGY4Mi00NGMyLTk3NmQtNmQ3NGI4MTE2NmY0LzAvMUEzRkFFNzIy MTBGNTM2QzIyMzkyQTg2MDlBNTI2RDc1NTdBRDgyQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xQTNGQUU3MjIxMEY1MzZDMjIzOTJBODYwOUE1MjZENzU1N0FE ODJDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MxYjA4ODQ1LWRmODItNDRjMi05 NzZkLTZkNzRiODExNjZmNC8wLzMxMzUzNzJlMzYzNjJlMzEzMjMzMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnUJ7MA0GCSqG SIb3DQEBCwUAA4IBAQCoEjrRsOwmWlIISnJA7dXI4gnFMP//IF+x+sAzUgXk0yxq +rV7SQt1+kLIBwPwbMpG530VjHDfSflozG/RBKqTxowmB2dhNoht1pGF0/GmfTwf x/SRGOeHBs6RE2Eh8Qq9DjkvwOr3T1D8K5lRuNWSVmTkPPz+Y1wdxqbUSMI/vW4J BAEeiaDZ+WYg3VddPmWcmBzl/N4vHDwur38P4x3lgtGa9BlgFYPW7oYLZgcLjgia UI+UmXH1867AGdu7/0Dhb4eQ9UAI8HL0tYp8e5okFzZgoMkVxba3FKEte2cmNxbo g/dCB9Gs5wunT8NTD6ZUxZ7tlYnLC2g824dgE/wb -----END CERTIFICATE-----Generated at Wed May 13 05:55:31 2026 by rpki-client