$ rpki-client -vvf rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/3135372e36362e3132322e302f32342d3234203d3e203633383538.roa File: 3135372e36362e3132322e302f32342d3234203d3e203633383538.roa (raw, json) Hash identifier: TDJxU3359vrwAFB04SP7SYHre1Ki2hvpSBCNPL07USs= Subject key identifier: D6:6D:92:70:D0:53:28:B0:6A:15:ED:05:32:C5:36:4B:C0:52:F9:DF Certificate issuer: /CN=468662DE4789E1663881A25708CA5FBF0EC39637 Certificate serial: 243C7AD2ADFEFCE360A330F093B236AD91909350 Authority key identifier: 46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/3135372e36362e3132322e302f32342d3234203d3e203633383538.roa Signing time: Sun 03 May 2026 03:07:39 +0000 ROA not before: Sun 03 May 2026 03:02:39 +0000 ROA not after: Sun 02 May 2027 03:07:39 +0000 asID: 63858 IP address blocks: 157.66.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3c:7a:d2:ad:fe:fc:e3:60:a3:30:f0:93:b2:36:ad:91:90:93:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468662DE4789E1663881A25708CA5FBF0EC39637 Validity Not Before: May 3 03:02:39 2026 GMT Not After : May 2 03:07:39 2027 GMT Subject: CN=D66D9270D05328B06A15ED0532C5364BC052F9DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:cb:d0:7c:a8:6f:96:9e:57:3b:2c:83:ca: be:cf:30:a0:f6:17:b4:94:46:e8:86:64:c4:71:2e: 52:9b:0e:a2:27:17:f7:ec:27:0e:92:48:c2:6b:2b: 33:26:93:b3:86:f7:91:23:f1:07:c0:15:de:c4:77: 6c:28:74:e7:bd:83:9e:ec:a1:7b:bf:eb:ef:96:94: 3c:1a:e0:b1:25:0a:97:5e:72:28:5f:52:2a:b5:de: 2f:a3:1e:97:20:3c:e8:eb:52:55:a4:43:81:67:c7: e9:9e:ba:17:15:08:1f:76:0c:9c:87:0f:83:db:dc: 28:83:df:7d:da:eb:36:11:51:8c:f6:65:44:b2:14: 9e:4f:ab:21:f4:5e:23:92:7d:87:8a:8c:a1:25:0e: d0:91:b9:93:e8:6a:24:d1:b2:cb:e0:88:fd:50:5d: e5:d6:94:75:e7:ba:e5:fa:a6:14:cb:df:f5:db:6d: c6:bc:93:65:db:4d:3f:1c:3b:20:4c:d9:ff:41:c1: a7:e0:d4:85:17:73:ed:22:0b:e9:d7:45:b7:80:f8: 0e:e3:16:46:8f:67:eb:f1:2a:4b:7f:8f:2d:d6:11: a5:a8:dc:97:7c:4b:c0:86:2f:41:7b:ea:68:29:65: 98:7d:2d:59:e2:76:e5:6b:ab:10:27:59:91:aa:e9: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6D:92:70:D0:53:28:B0:6A:15:ED:05:32:C5:36:4B:C0:52:F9:DF X509v3 Authority Key Identifier: keyid:46:86:62:DE:47:89:E1:66:38:81:A2:57:08:CA:5F:BF:0E:C3:96:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/468662DE4789E1663881A25708CA5FBF0EC39637.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/468662DE4789E1663881A25708CA5FBF0EC39637.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cecf5d94-7f1f-43bf-b7aa-220f0c156ec0/0/3135372e36362e3132322e302f32342d3234203d3e203633383538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.122.0/24 Signature Algorithm: sha256WithRSAEncryption 67:a9:58:9d:44:c2:e1:a9:6e:9c:cf:8f:56:5f:c1:eb:16:c7: 6d:b3:73:0f:a8:97:8a:40:57:0a:64:48:e4:3f:92:d5:f8:88: 05:2a:b2:a9:3f:76:ec:bb:28:eb:fa:45:28:f0:f3:b0:af:9b: 22:65:8e:f8:4f:34:2f:70:44:5a:93:97:15:a5:d7:b9:45:92: 15:bb:96:60:41:f7:38:c6:d9:8c:ad:0e:78:54:9e:36:67:f5: c3:3b:b9:13:8f:f8:b3:49:0f:5b:4b:64:ae:88:0b:3e:ef:03: bc:de:a0:f7:1f:9f:a0:3b:8c:78:36:1e:12:32:c1:15:11:23: 14:b1:63:9f:4c:38:a4:37:6b:a6:62:64:9d:ae:fd:1a:bf:cc: 33:3e:51:bf:7f:3b:40:98:ad:42:46:6e:f2:44:1e:b0:d2:23: a3:6f:91:d4:75:39:c1:2a:30:75:1e:f4:d1:80:a2:37:48:5b: de:40:99:51:bf:f2:e1:37:73:7f:92:57:58:c1:0b:68:4e:89: 9e:ff:9b:95:c1:39:97:b4:13:9d:70:3f:7f:14:cb:10:90:7a: e3:be:01:01:e6:20:4e:b7:d3:7c:7d:9d:c2:58:63:e8:64:76: 45:cc:57:5f:86:eb:89:7a:90:d2:18:9f:ca:65:92:c4:56:ac: 24:fd:57:bd -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUJDx60q3+/ONgozDwk7I2rZGQk1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDY4NjYyREU0Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYw RUMzOTYzNzAeFw0yNjA1MDMwMzAyMzlaFw0yNzA1MDIwMzA3MzlaMDMxMTAvBgNV BAMTKEQ2NkQ5MjcwRDA1MzI4QjA2QTE1RUQwNTMyQzUzNjRCQzA1MkY5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqUMvQfKhvlp5XOyyDyr7PMKD2 F7SURuiGZMRxLlKbDqInF/fsJw6SSMJrKzMmk7OG95Ej8QfAFd7Ed2wodOe9g57s oXu/6++WlDwa4LElCpdecihfUiq13i+jHpcgPOjrUlWkQ4Fnx+meuhcVCB92DJyH D4Pb3CiD333a6zYRUYz2ZUSyFJ5PqyH0XiOSfYeKjKElDtCRuZPoaiTRssvgiP1Q XeXWlHXnuuX6phTL3/Xbbca8k2XbTT8cOyBM2f9Bwafg1IUXc+0iC+nXRbeA+A7j FkaPZ+vxKkt/jy3WEaWo3Jd8S8CGL0F76mgpZZh9LVniduVrqxAnWZGq6T89AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU1m2ScNBTKLBqFe0FMsU2S8BS+d8wHwYDVR0j BBgwFoAURoZi3keJ4WY4gaJXCMpfvw7DljcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2VjZjVkOTQtN2YxZi00M2JmLWI3YWEtMjIwZjBjMTU2ZWMwLzAvNDY4NjYyREU0 Nzg5RTE2NjM4ODFBMjU3MDhDQTVGQkYwRUMzOTYzNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80Njg2NjJERTQ3ODlFMTY2Mzg4MUEyNTcwOENBNUZCRjBFQzM5 NjM3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NlY2Y1ZDk0LTdmMWYtNDNiZi1i N2FhLTIyMGYwYzE1NmVjMC8wLzMxMzUzNzJlMzYzNjJlMzEzMjMyMmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzYzMzM4MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CejANBgkqhkiG 9w0BAQsFAAOCAQEAZ6lYnUTC4alunM+PVl/B6xbHbbNzD6iXikBXCmRI5D+S1fiI BSqyqT927Lso6/pFKPDzsK+bImWO+E80L3BEWpOXFaXXuUWSFbuWYEH3OMbZjK0O eFSeNmf1wzu5E4/4s0kPW0tkrogLPu8DvN6g9x+foDuMeDYeEjLBFREjFLFjn0w4 pDdrpmJkna79Gr/MMz5Rv387QJitQkZu8kQesNIjo2+R1HU5wSowdR700YCiN0hb 3kCZUb/y4Tdzf5JXWMELaE6Jnv+blcE5l7QTnXA/fxTLEJB6474BAeYgTrfTfH2d wlhj6GR2RcxXX4briXqQ0hifymWSxFasJP1XvQ== -----END CERTIFICATE-----Generated at Wed May 13 02:27:32 2026 by rpki-client