$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32312e302f32342d3234203d3e20313431353932.roa File: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (raw, json) Hash identifier: g/M/W8nBgP5S2ayXN1SiAqh0ligQCCsMJq/IueYk4OY= Subject key identifier: AA:0D:47:25:D6:DF:6B:3D:8D:D1:F2:ED:3E:E8:36:36:CE:13:CA:67 Certificate issuer: /CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Certificate serial: 087F731BEE0E8FD0E75C9520F3A18F6075A4D942 Authority key identifier: D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32312e302f32342d3234203d3e20313431353932.roa Signing time: Sun 03 May 2026 03:17:53 +0000 ROA not before: Sun 03 May 2026 03:12:53 +0000 ROA not after: Sun 02 May 2027 03:17:53 +0000 asID: 141592 IP address blocks: 157.66.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 10:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7f:73:1b:ee:0e:8f:d0:e7:5c:95:20:f3:a1:8f:60:75:a4:d9:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF Validity Not Before: May 3 03:12:53 2026 GMT Not After : May 2 03:17:53 2027 GMT Subject: CN=AA0D4725D6DF6B3D8DD1F2ED3EE83636CE13CA67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:db:8f:61:91:cf:e0:7c:02:49:73:9a:71: b7:d8:7b:2e:f0:a8:7c:b5:37:31:7f:f1:da:a0:2b: 91:b0:db:0a:ad:93:2b:fe:70:20:64:37:d3:85:da: d4:8b:ee:26:b7:c3:82:b6:e2:b3:2b:06:60:36:ff: 6a:c8:9e:20:84:69:44:39:f4:2a:a8:29:0c:f5:a8: de:9f:b2:62:3e:bd:18:ed:22:3b:53:dd:94:79:29: 41:20:f0:4a:25:f1:54:65:83:b3:b8:3a:f3:c5:27: 79:c7:3b:4d:8d:86:b1:c9:3d:2e:3b:24:e4:75:d9: b1:16:e9:50:52:9b:44:7a:aa:5c:8e:3c:ec:7b:b9: 10:82:3b:24:28:b8:a7:96:1b:ec:dd:f7:2c:36:74: 8c:41:bd:b8:c0:1e:f6:46:06:cd:84:6d:cd:2e:2a: 2a:91:dd:bf:80:db:38:f4:46:92:9d:3a:5e:58:03: 13:b3:15:de:19:9d:57:f4:53:17:93:c3:dd:c9:52: 97:6d:71:35:a5:4f:23:cc:6c:d6:4a:af:0b:34:98: 75:23:21:8e:c3:f6:dd:09:e3:b4:ba:2a:0b:a4:e9: c2:cd:e7:b5:b6:cd:f3:88:54:fc:4a:50:03:81:cf: c3:22:1e:95:29:66:a5:64:0a:98:f5:9e:93:5e:46: a5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0D:47:25:D6:DF:6B:3D:8D:D1:F2:ED:3E:E8:36:36:CE:13:CA:67 X509v3 Authority Key Identifier: keyid:D6:0F:BD:2B:1B:51:51:C3:F4:07:34:AE:4A:95:27:7F:C9:BD:8C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D60FBD2B1B5151C3F40734AE4A95277FC9BD8CBF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/3135372e36362e32312e302f32342d3234203d3e20313431353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.21.0/24 Signature Algorithm: sha256WithRSAEncryption 46:34:d9:41:bf:c6:48:d4:48:63:81:da:4f:87:55:c0:57:3c: ee:16:80:bd:22:27:62:29:bd:32:1e:4f:e7:8b:5b:ad:82:8b: 65:83:f7:9a:4c:5a:38:60:ad:ef:d8:41:84:73:6d:42:02:1d: ee:15:26:d9:4c:c5:58:f5:f2:fc:40:d8:a3:8a:3e:fc:49:d8: 7f:bf:18:ed:b3:de:4b:51:65:1d:03:bd:da:fb:ca:70:e7:ba: b4:62:81:01:4f:b5:e6:46:6a:8d:4d:d1:9e:64:52:96:f6:df: 52:d8:fe:3d:43:bc:2b:15:84:34:87:27:3c:99:f1:8e:6f:46: 1c:cb:66:c8:9b:ab:03:28:3c:88:11:0b:48:36:a4:f6:17:2c: 15:57:4a:33:4e:42:6c:40:23:97:fd:6b:aa:e2:a3:34:dc:15: 82:20:da:5c:cb:18:6c:e3:91:66:a2:4d:d4:e1:9b:bd:88:d0: eb:03:e8:ac:29:ec:bc:e3:82:33:72:88:2a:8f:54:4d:3a:60: 43:73:56:77:01:49:98:35:53:1a:17:92:3c:9e:04:32:45:b0: b7:cb:48:66:38:bb:af:db:81:48:b4:a0:ad:b1:db:57:77:0d: 3a:d6:6c:f4:8e:18:31:71:da:55:7c:15:9c:ce:c7:7a:74:19: 25:52:80:8f -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUCH9zG+4Oj9DnXJUg86GPYHWk2UIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYwRkJEMkIxQjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZD OUJEOENCRjAeFw0yNjA1MDMwMzEyNTNaFw0yNzA1MDIwMzE3NTNaMDMxMTAvBgNV BAMTKEFBMEQ0NzI1RDZERjZCM0Q4REQxRjJFRDNFRTgzNjM2Q0UxM0NBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXt9uPYZHP4HwCSXOacbfYey7w qHy1NzF/8dqgK5Gw2wqtkyv+cCBkN9OF2tSL7ia3w4K24rMrBmA2/2rIniCEaUQ5 9CqoKQz1qN6fsmI+vRjtIjtT3ZR5KUEg8Eol8VRlg7O4OvPFJ3nHO02NhrHJPS47 JOR12bEW6VBSm0R6qlyOPOx7uRCCOyQouKeWG+zd9yw2dIxBvbjAHvZGBs2Ebc0u KiqR3b+A2zj0RpKdOl5YAxOzFd4ZnVf0UxeTw93JUpdtcTWlTyPMbNZKrws0mHUj IY7D9t0J47S6Kguk6cLN57W2zfOIVPxKUAOBz8MiHpUpZqVkCpj1npNeRqUlAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQUqg1HJdbfaz2N0fLtPug2Ns4TymcwHwYDVR0j BBgwFoAU1g+9KxtRUcP0BzSuSpUnf8m9jL8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjVmNWVmMTgtNmZmYS00ZDY5LThjMGMtMzUxOGNmYTg3NThlLzAvRDYwRkJEMkIx QjUxNTFDM0Y0MDczNEFFNEE5NTI3N0ZDOUJEOENCRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjBGQkQyQjFCNTE1MUMzRjQwNzM0QUU0QTk1Mjc3RkM5QkQ4 Q0JGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y1ZjVlZjE4LTZmZmEtNGQ2OS04 YzBjLTM1MThjZmE4NzU4ZS8wLzMxMzUzNzJlMzYzNjJlMzIzMTJlMzAyZjMyMzQy ZDMyMzQyMDNkM2UyMDMxMzQzMTM1MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ1CFTANBgkqhkiG 9w0BAQsFAAOCAQEARjTZQb/GSNRIY4HaT4dVwFc87haAvSInYim9Mh5P54tbrYKL ZYP3mkxaOGCt79hBhHNtQgId7hUm2UzFWPXy/EDYo4o+/EnYf78Y7bPeS1FlHQO9 2vvKcOe6tGKBAU+15kZqjU3RnmRSlvbfUtj+PUO8KxWENIcnPJnxjm9GHMtmyJur Ayg8iBELSDak9hcsFVdKM05CbEAjl/1rquKjNNwVgiDaXMsYbOORZqJN1OGbvYjQ 6wPorCnsvOOCM3KIKo9UTTpgQ3NWdwFJmDVTGheSPJ4EMkWwt8tIZji7r9uBSLSg rbHbV3cNOtZs9I4YMXHaVXwVnM7HenQZJVKAjw== -----END CERTIFICATE-----Generated at Wed May 13 02:50:24 2026 by rpki-client