$ rpki-client -vvf repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa File: 3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa (raw, json) Hash identifier: KkvJQplnBjbukv95T8BQ0d/19OGrj7A1kqwSs2880GU= Subject key identifier: 5D:1C:1F:91:57:A2:CE:EA:A7:F8:C8:84:49:20:9B:E6:0C:E3:30:E6 Certificate issuer: /CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Certificate serial: 126D8CB50B0922BF3F93A309459A26D4431C4C69 Authority key identifier: F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa Signing time: Thu 16 Apr 2026 09:02:35 +0000 ROA not before: Thu 16 Apr 2026 08:57:35 +0000 ROA not after: Thu 15 Apr 2027 09:02:35 +0000 asID: 153139 IP address blocks: 157.66.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6d:8c:b5:0b:09:22:bf:3f:93:a3:09:45:9a:26:d4:43:1c:4c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5BC050A20C516FEBC061A1B70E488BB426444BC Validity Not Before: Apr 16 08:57:35 2026 GMT Not After : Apr 15 09:02:35 2027 GMT Subject: CN=5D1C1F9157A2CEEAA7F8C88449209BE60CE330E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cf:04:30:58:4f:1b:77:3f:1a:9b:86:9b:85: d1:0c:48:80:0f:cc:ba:79:af:ad:11:a9:22:e1:22: de:05:66:d3:d9:eb:58:f0:27:cb:b0:d9:28:a5:f2: 76:e4:98:8f:ae:d4:b4:d8:7d:8d:c8:b6:7d:7f:10: 94:de:09:d8:5c:91:94:3e:69:c5:c4:2b:d7:5c:10: 74:8d:4c:09:07:8c:60:1d:b2:2b:15:c9:91:14:47: 7c:a9:b8:f4:6c:83:3e:39:64:66:a4:a4:69:3f:a2: c4:87:95:74:f8:b0:e3:5f:c5:48:f8:e6:d6:9a:fb: bf:09:ef:73:85:00:f7:76:d2:85:39:d9:a8:0f:ec: 1c:86:b7:12:c0:14:55:2a:72:fb:01:75:c8:5f:e4: a3:22:77:f0:69:37:98:c0:cb:fe:d2:8d:72:b6:ef: 98:d7:6a:73:01:85:4f:f6:74:aa:a1:bb:dc:ed:c9: 15:71:aa:a3:7d:b8:6f:8e:63:ee:8d:39:d9:5e:c5: b8:ef:74:72:cb:5d:59:3a:54:a9:1a:a9:2e:cb:1e: b4:10:3e:6c:79:73:25:1d:98:8a:54:5c:93:94:9d: 77:7c:76:53:bf:32:af:3e:d0:bb:60:3a:3a:5a:77: b9:87:ec:0a:4b:b0:23:7c:e2:8e:13:56:3c:85:4a: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:1C:1F:91:57:A2:CE:EA:A7:F8:C8:84:49:20:9B:E6:0C:E3:30:E6 X509v3 Authority Key Identifier: keyid:F5:BC:05:0A:20:C5:16:FE:BC:06:1A:1B:70:E4:88:BB:42:64:44:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/F5BC050A20C516FEBC061A1B70E488BB426444BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F5BC050A20C516FEBC061A1B70E488BB426444BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032f98a0-0947-4f7a-bee7-ffc3d05b940e/0/3135372e36362e3137322e302f32332d3234203d3e20313533313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.172.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:74:f7:37:4a:66:e3:9a:a4:06:3d:d7:b8:92:8a:02:27:cb: c9:24:d4:af:2f:f4:ce:4c:00:ac:bb:c9:15:b3:18:2c:bb:88: 69:18:54:88:e7:44:d8:3b:e5:56:f7:01:c5:4b:41:55:32:8c: 3c:51:87:98:d6:b2:3c:4e:9b:53:a6:3e:f3:ec:6a:72:dd:87: eb:9a:b5:c8:90:8d:8d:88:29:75:b8:09:0b:48:66:7b:cd:56: d8:8a:4f:50:8f:0b:5f:6d:4d:a5:2b:35:64:60:74:62:29:44: 4e:5f:e6:fe:b1:1f:f6:3a:34:ce:c4:67:d2:6b:6d:b2:53:ba: 2f:50:88:f4:b8:f8:09:ab:95:b1:88:e5:31:b7:d7:6c:40:1e: 20:a5:d2:28:55:a5:f4:42:b1:58:59:ca:79:d2:df:df:ec:95: 4c:75:9e:11:57:9d:25:bf:44:39:06:65:e8:62:25:0f:da:eb: b6:00:23:a4:47:96:18:c0:31:d9:f9:5e:da:a2:fc:f2:ad:a6: 65:96:a8:48:0a:12:4b:bb:aa:48:11:a4:c1:f2:e8:b3:a5:af: 48:21:82:e6:df:08:63:87:37:b8:a9:9c:21:09:eb:bc:eb:62: a0:c6:9d:21:ff:10:2e:f6:31:4a:ef:e2:d2:a7:ea:56:73:ac: 7b:26:be:07 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUEm2MtQsJIr8/k6MJRZom1EMcTGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0 MjY0NDRCQzAeFw0yNjA0MTYwODU3MzVaFw0yNzA0MTUwOTAyMzVaMDMxMTAvBgNV BAMTKDVEMUMxRjkxNTdBMkNFRUFBN0Y4Qzg4NDQ5MjA5QkU2MENFMzMwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzwQwWE8bdz8am4abhdEMSIAP zLp5r60RqSLhIt4FZtPZ61jwJ8uw2Sil8nbkmI+u1LTYfY3Itn1/EJTeCdhckZQ+ acXEK9dcEHSNTAkHjGAdsisVyZEUR3ypuPRsgz45ZGakpGk/osSHlXT4sONfxUj4 5taa+78J73OFAPd20oU52agP7ByGtxLAFFUqcvsBdchf5KMid/BpN5jAy/7SjXK2 75jXanMBhU/2dKqhu9ztyRVxqqN9uG+OY+6NOdlexbjvdHLLXVk6VKkaqS7LHrQQ Pmx5cyUdmIpUXJOUnXd8dlO/Mq8+0LtgOjpad7mH7ApLsCN84o4TVjyFSimJAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUXRwfkVeizuqn+MiESSCb5gzjMOYwHwYDVR0j BBgwFoAU9bwFCiDFFv68BhobcOSIu0JkRLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJmOThhMC0wOTQ3LTRmN2EtYmVlNy1mZmMzZDA1Yjk0MGUvMC9GNUJDMDUwQTIw QzUxNkZFQkMwNjFBMUI3MEU0ODhCQjQyNjQ0NEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjVCQzA1MEEyMEM1MTZGRUJDMDYxQTFCNzBFNDg4QkI0MjY0 NDRCQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzMmY5OGEwLTA5NDctNGY3YS1i ZWU3LWZmYzNkMDViOTQwZS8wLzMxMzUzNzJlMzYzNjJlMzEzNzMyMmUzMDJmMzIz MzJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnUKsMA0GCSqG SIb3DQEBCwUAA4IBAQAddPc3SmbjmqQGPde4kooCJ8vJJNSvL/TOTACsu8kVsxgs u4hpGFSI50TYO+VW9wHFS0FVMow8UYeY1rI8TptTpj7z7Gpy3YfrmrXIkI2NiCl1 uAkLSGZ7zVbYik9QjwtfbU2lKzVkYHRiKUROX+b+sR/2OjTOxGfSa22yU7ovUIj0 uPgJq5WxiOUxt9dsQB4gpdIoVaX0QrFYWcp50t/f7JVMdZ4RV50lv0Q5BmXoYiUP 2uu2ACOkR5YYwDHZ+V7aovzyraZllqhIChJLu6pIEaTB8uizpa9IIYLm3whjhze4 qZwhCeu862Kgxp0h/xAu9jFK7+LSp+pWc6x7Jr4H -----END CERTIFICATE-----Generated at Sat Apr 18 08:56:12 2026 by rpki-client