$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa File: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (raw, json) Hash identifier: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4= Subject key identifier: A5:0F:3F:6E:13:C2:A2:45:05:4D:11:A8:7C:66:A7:8C:BC:16:10:18 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 616B9BA0C2A05ACA22079A96BF24B88308AAF503 Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa Signing time: Sun 03 May 2026 03:14:49 +0000 ROA not before: Sun 03 May 2026 03:09:49 +0000 ROA not after: Sun 02 May 2027 03:14:49 +0000 asID: 139981 IP address blocks: 157.66.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6b:9b:a0:c2:a0:5a:ca:22:07:9a:96:bf:24:b8:83:08:aa:f5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: May 3 03:09:49 2026 GMT Not After : May 2 03:14:49 2027 GMT Subject: CN=A50F3F6E13C2A245054D11A87C66A78CBC161018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:94:f4:22:6a:bf:bd:c6:fb:cf:64:ff:1d: de:6a:95:34:19:f4:57:47:92:92:f7:26:29:3d:90: d6:b5:1f:31:12:fa:28:54:19:91:01:6f:bd:03:7e: 53:11:2e:a4:e4:b4:f4:31:1c:d7:97:29:e1:de:0e: 27:8d:9c:3d:f6:33:bc:10:d5:aa:e3:1c:5e:05:ba: 0c:5e:59:eb:51:53:9f:00:fb:5f:e1:27:bf:48:14: f3:94:75:83:03:44:eb:f9:0e:c8:29:d9:9f:de:08: a1:83:a0:94:af:1a:31:d2:5b:01:72:e6:0e:61:37: 4d:37:e0:4b:fe:7c:6c:c4:be:c9:2c:66:a9:b7:41: eb:7b:c8:aa:57:35:83:90:87:97:a9:03:85:37:f1: c1:55:69:1b:6f:9c:81:a4:db:55:a8:5f:29:89:6f: 22:5f:e9:91:0b:17:d6:d2:93:38:42:ee:7c:86:51: e1:8d:5b:49:8f:4f:31:bb:ff:e1:41:13:00:38:38: 91:f6:76:45:a6:de:23:2f:2a:78:be:86:32:07:71: 90:64:d5:d7:49:13:59:7f:ed:28:8f:f8:fb:6d:09: 63:10:af:04:06:dd:5d:e2:6a:68:78:0d:6b:fc:de: d0:d7:72:5b:3e:29:f9:a4:ec:71:e5:8c:60:bb:4e: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:3F:6E:13:C2:A2:45:05:4D:11:A8:7C:66:A7:8C:BC:16:10:18 X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/3135372e36362e38342e302f32332d3234203d3e20313339393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:0e:5e:01:38:eb:e9:6b:f5:85:df:72:7a:69:c9:b6:bb:cf: 49:57:ec:96:a8:84:46:8b:8f:fc:1f:09:d1:67:54:ae:b2:03: eb:c0:d7:fa:5a:2e:5d:f8:3b:3b:26:9a:b1:6d:ca:e4:5c:b4: 85:5b:ae:0b:5c:4d:cb:15:f1:57:ed:aa:39:5b:dc:ad:42:8c: c1:05:d2:21:9a:47:56:fb:56:6e:7e:a3:64:f9:86:13:9f:a9: dd:b8:ce:8d:34:a3:af:99:c9:85:57:ad:41:df:86:56:3b:04: f2:4d:b6:d4:62:29:af:ca:55:77:04:98:b4:04:41:f9:7e:23: f1:d9:ca:ac:97:fa:05:c5:90:86:44:be:5d:2c:32:3c:82:a3: 5c:78:00:a4:bd:a6:02:cd:e2:38:1c:82:d7:be:3f:6e:2c:97: e1:ef:bb:70:da:5a:3f:56:c9:77:44:f3:3e:b1:cb:97:7a:0b: 13:34:ba:bc:ff:01:1f:70:f3:0d:bb:72:1e:3b:ba:c1:fc:d6: b8:89:05:d7:32:17:fc:c5:a5:8a:03:0f:b8:46:d9:36:19:da: 0a:06:28:e0:00:db:06:07:12:f7:9f:72:86:f6:6d:c0:7f:9d: 7f:1d:42:b9:fc:09:cd:11:a9:d9:86:c1:06:52:23:6a:72:05: ed:1d:04:36 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUYWuboMKgWsoiB5qWvyS4gwiq9QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA1MDMwMzA5NDlaFw0yNzA1MDIwMzE0NDlaMDMxMTAvBgNV BAMTKEE1MEYzRjZFMTNDMkEyNDUwNTREMTFBODdDNjZBNzhDQkMxNjEwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSpT0Imq/vcb7z2T/Hd5qlTQZ 9FdHkpL3Jik9kNa1HzES+ihUGZEBb70DflMRLqTktPQxHNeXKeHeDieNnD32M7wQ 1arjHF4FugxeWetRU58A+1/hJ79IFPOUdYMDROv5Dsgp2Z/eCKGDoJSvGjHSWwFy 5g5hN0034Ev+fGzEvsksZqm3Qet7yKpXNYOQh5epA4U38cFVaRtvnIGk21WoXymJ byJf6ZELF9bSkzhC7nyGUeGNW0mPTzG7/+FBEwA4OJH2dkWm3iMvKni+hjIHcZBk 1ddJE1l/7SiP+PttCWMQrwQG3V3iamh4DWv83tDXcls+Kfmk7HHljGC7TjIJAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUpQ8/bhPCokUFTRGofGanjLwWEBgwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2U5N2M2ODJhLTQ0OGItNDBlMi1h ODhmLTE2ZGY4M2RkMzMzNy8wLzMxMzUzNzJlMzYzNjJlMzgzNDJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzOTM5MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CVDANBgkqhkiG 9w0BAQsFAAOCAQEASw5eATjr6Wv1hd9yemnJtrvPSVfslqiERouP/B8J0WdUrrID 68DX+louXfg7OyaasW3K5Fy0hVuuC1xNyxXxV+2qOVvcrUKMwQXSIZpHVvtWbn6j ZPmGE5+p3bjOjTSjr5nJhVetQd+GVjsE8k221GIpr8pVdwSYtARB+X4j8dnKrJf6 BcWQhkS+XSwyPIKjXHgApL2mAs3iOByC174/biyX4e+7cNpaP1bJd0TzPrHLl3oL EzS6vP8BH3DzDbtyHju6wfzWuIkF1zIX/MWligMPuEbZNhnaCgYo4ADbBgcS959y hvZtwH+dfx1CufwJzRGp2YbBBlIjanIF7R0ENg== -----END CERTIFICATE-----Generated at Wed May 13 03:56:25 2026 by rpki-client