$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32302e302f32342d3234203d3e20313337333439.roa File: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (raw, json) Hash identifier: hKC4O+Dbys8awahI6Y0F2x8aosLXlC3tFEHhosWplhc= Subject key identifier: 2E:1D:7C:69:DA:97:09:E8:9E:08:78:E9:EC:19:5F:8F:31:22:02:14 Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 0BDF0CAAE6E398A10998E5653D4DE0E1D6A1B0DA Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32302e302f32342d3234203d3e20313337333439.roa Signing time: Sun 03 May 2026 03:17:54 +0000 ROA not before: Sun 03 May 2026 03:12:54 +0000 ROA not after: Sun 02 May 2027 03:17:54 +0000 asID: 137349 IP address blocks: 157.66.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:df:0c:aa:e6:e3:98:a1:09:98:e5:65:3d:4d:e0:e1:d6:a1:b0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: May 3 03:12:54 2026 GMT Not After : May 2 03:17:54 2027 GMT Subject: CN=2E1D7C69DA9709E89E0878E9EC195F8F31220214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e5:75:e6:53:4d:44:2a:c6:6d:ab:96:56:52: 2b:02:9e:4d:3b:cf:e6:a6:a2:66:d8:97:bf:1f:90: 8f:f6:ce:07:d5:17:43:a1:97:f4:f1:60:e4:7f:cb: 2b:e3:20:f9:f5:a1:97:7b:17:00:c0:a9:02:a0:c9: 2f:8f:46:e1:21:76:6c:48:20:1d:b7:5a:39:dc:2d: 64:6a:84:c9:da:4b:a5:2e:22:2a:ee:24:c8:ba:4c: bd:75:e7:de:ae:4f:15:36:9d:93:98:d1:27:d3:98: ad:fa:59:9f:5f:bc:12:dc:2a:7d:1a:4e:ad:7c:97: cf:6c:4e:ac:3b:ef:86:f0:e1:c7:10:15:77:df:9a: f6:cf:13:8d:38:a2:35:8b:bc:0b:bc:70:b7:5b:4c: b1:df:ed:a6:d6:78:7e:04:4e:6b:b2:da:5c:16:be: 42:0c:ed:1f:16:7f:78:1b:81:8f:f3:59:37:38:41: c2:7c:be:a5:c3:6b:1e:f4:20:29:f6:6e:3f:83:18: 79:a2:67:a0:84:62:ea:81:ee:e4:eb:46:1b:68:1d: ba:68:9a:74:fd:a8:28:8a:2d:d7:a4:83:13:42:4f: 3b:46:12:54:b5:a9:71:51:e7:f0:76:0c:c7:97:5b: 9e:04:87:62:d2:da:03:5e:00:b2:e2:77:5e:e8:7f: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1D:7C:69:DA:97:09:E8:9E:08:78:E9:EC:19:5F:8F:31:22:02:14 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32302e302f32342d3234203d3e20313337333439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:75:ba:57:66:66:de:eb:8f:b7:6b:64:2f:6b:57:f3:54:17: cd:3f:f7:5e:4f:8c:c7:21:77:4c:93:99:d8:05:af:a1:f5:8e: 6a:49:51:68:43:a5:dc:31:da:4d:2a:4c:54:c2:7d:3e:d0:16: a2:ac:eb:08:d0:26:cf:96:63:f5:20:2b:aa:de:b0:4c:11:02: 4f:25:03:de:db:8c:d5:5f:36:77:56:04:64:d4:90:2a:c8:4f: 97:0d:ea:d5:42:b1:4b:0a:1d:52:d4:3f:39:01:0e:85:be:83: 8d:bb:42:f3:24:a5:f2:07:32:df:36:36:e9:d8:ae:55:c3:37: aa:df:15:dd:e5:64:5a:02:c8:f8:94:72:95:23:c1:eb:cb:b7: 4e:20:30:d9:f5:ce:34:ca:4c:a8:c4:2d:41:d0:b4:a0:8a:cb: cf:fb:ae:de:cf:54:01:02:80:5a:25:b4:c2:76:75:47:9c:03: 00:59:0f:24:03:cd:be:97:74:a3:85:63:1d:e6:0f:79:ce:a9: 15:71:1f:af:1e:61:37:d5:ff:78:8e:dc:5b:26:3e:06:80:74: d1:1e:b6:b3:f6:1d:f6:d4:88:b1:c6:fb:7f:98:5b:45:ea:92: f0:a8:f7:0e:ed:f0:89:1b:4c:b7:db:7c:35:9a:a3:79:b9:9e: b7:6e:67:ff -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUC98MqubjmKEJmOVlPU3g4dahsNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA1MDMwMzEyNTRaFw0yNzA1MDIwMzE3NTRaMDMxMTAvBgNV BAMTKDJFMUQ3QzY5REE5NzA5RTg5RTA4NzhFOUVDMTk1RjhGMzEyMjAyMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI5XXmU01EKsZtq5ZWUisCnk07 z+amombYl78fkI/2zgfVF0Ohl/TxYOR/yyvjIPn1oZd7FwDAqQKgyS+PRuEhdmxI IB23WjncLWRqhMnaS6UuIiruJMi6TL11596uTxU2nZOY0SfTmK36WZ9fvBLcKn0a Tq18l89sTqw774bw4ccQFXffmvbPE404ojWLvAu8cLdbTLHf7abWeH4ETmuy2lwW vkIM7R8Wf3gbgY/zWTc4QcJ8vqXDax70ICn2bj+DGHmiZ6CEYuqB7uTrRhtoHbpo mnT9qCiKLdekgxNCTztGElS1qXFR5/B2DMeXW54Eh2LS2gNeALLid17ofy2FAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQULh18adqXCeieCHjp7BlfjzEiAhQwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y1ZjVlZjE4LTZmZmEtNGQ2OS04 YzBjLTM1MThjZmE4NzU4ZS8wLzMxMzUzNzJlMzYzNjJlMzIzMDJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CFDANBgkqhkiG 9w0BAQsFAAOCAQEAbHW6V2Zm3uuPt2tkL2tX81QXzT/3Xk+MxyF3TJOZ2AWvofWO aklRaEOl3DHaTSpMVMJ9PtAWoqzrCNAmz5Zj9SArqt6wTBECTyUD3tuM1V82d1YE ZNSQKshPlw3q1UKxSwodUtQ/OQEOhb6DjbtC8ySl8gcy3zY26diuVcM3qt8V3eVk WgLI+JRylSPB68u3TiAw2fXONMpMqMQtQdC0oIrLz/uu3s9UAQKAWiW0wnZ1R5wD AFkPJAPNvpd0o4VjHeYPec6pFXEfrx5hN9X/eI7cWyY+BoB00R62s/Yd9tSIscb7 f5hbReqS8Kj3Du3wiRtMt9t8NZqjebmet25n/w== -----END CERTIFICATE-----Generated at Wed May 13 02:26:28 2026 by rpki-client