$ rpki-client -vvf repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/3135372e36362e302e302f32332d3234203d3e20313430343737.roa File: 3135372e36362e302e302f32332d3234203d3e20313430343737.roa (raw, json) Hash identifier: yBju0MDFhL8uMJfmhps7SGNhOm4xqJV+hqct3Jk+rrI= Subject key identifier: 24:B9:8A:4C:F1:56:06:BF:DD:B1:3D:32:0F:33:B4:86:76:C5:39:F7 Certificate issuer: /CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Certificate serial: 3D737DDC54CE0802C602D0A54BDA9CE6657D9B7C Authority key identifier: 40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/3135372e36362e302e302f32332d3234203d3e20313430343737.roa Signing time: Tue 07 Apr 2026 10:00:03 +0000 ROA not before: Tue 07 Apr 2026 09:55:03 +0000 ROA not after: Tue 06 Apr 2027 10:00:03 +0000 asID: 140477 IP address blocks: 157.66.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 12:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:73:7d:dc:54:ce:08:02:c6:02:d0:a5:4b:da:9c:e6:65:7d:9b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40949C7C9DD0D3F899681FF2EB53E49C8F852BAA Validity Not Before: Apr 7 09:55:03 2026 GMT Not After : Apr 6 10:00:03 2027 GMT Subject: CN=24B98A4CF15606BFDDB13D320F33B48676C539F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:ba:88:31:30:70:c2:d3:51:6d:e5:35:71: 21:0e:a0:4e:53:a1:cb:25:d6:47:d4:56:3a:99:34: 87:53:7f:2b:3f:b8:53:48:a4:a7:86:dd:3c:e6:1d: 4f:0b:a2:7b:a5:a2:fd:c7:f5:ec:25:39:1b:b9:42: 29:51:33:17:46:3f:d1:1b:8b:92:46:25:5c:8a:ea: cb:ac:fc:50:79:0e:00:9f:37:43:51:ec:da:ba:76: 03:e0:28:12:9d:a2:cd:01:93:6f:77:11:2d:2b:b2: e6:b5:28:d0:37:a4:b1:a0:01:54:cd:64:bd:fc:ed: f0:24:06:ea:55:af:9f:65:df:fe:d4:ea:b5:e9:b3: 3a:3c:2f:85:f0:d0:52:c2:c6:5e:3a:fc:f2:60:93: 47:40:73:90:27:33:17:fd:6d:9f:58:ac:0a:ec:67: ce:3f:25:dc:4a:7f:42:37:87:01:a5:72:b3:88:33: 8e:e5:3e:9e:58:d7:14:dd:39:fe:aa:5a:ea:f9:f2: e4:4d:d5:e0:b8:40:8c:77:98:e4:e8:7a:5f:52:dd: 29:1a:b8:02:42:a4:84:db:08:7a:97:d4:42:bc:d6: 64:18:0a:84:a0:81:3f:c7:e7:86:d8:8d:38:6e:f1: fe:68:eb:fc:a3:9d:91:f9:68:82:09:3d:bf:f6:6a: 62:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B9:8A:4C:F1:56:06:BF:DD:B1:3D:32:0F:33:B4:86:76:C5:39:F7 X509v3 Authority Key Identifier: keyid:40:94:9C:7C:9D:D0:D3:F8:99:68:1F:F2:EB:53:E4:9C:8F:85:2B:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/40949C7C9DD0D3F899681FF2EB53E49C8F852BAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89dae97f-1ad1-4b34-8fe9-1bc65b0908f3/0/3135372e36362e302e302f32332d3234203d3e20313430343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.0.0/23 Signature Algorithm: sha256WithRSAEncryption 65:e6:be:47:79:12:d3:9b:7e:41:a0:36:43:3f:bf:a9:fe:9a: 54:b9:7c:37:01:0e:77:73:6c:b7:81:25:3b:8d:c7:76:b4:3d: ed:31:4d:14:63:da:93:2d:b4:6e:42:ab:37:a8:b9:ea:5a:c8: da:32:bc:cb:04:7c:6e:98:8f:65:81:89:fa:c4:fd:13:90:cb: bc:82:73:b1:5f:10:87:9c:f3:49:05:40:59:1e:6f:e0:6b:04: 10:41:27:46:46:5f:bb:48:fd:a0:01:b9:28:57:3c:f6:7a:c3: 90:13:2a:6d:73:7b:0f:2e:11:03:ba:58:3a:5a:3c:f1:32:67: 77:df:5f:4a:2a:4e:34:6d:75:f1:8e:dd:2c:ee:98:c4:0f:b7: bc:32:a3:c1:15:9e:09:05:af:83:10:42:cd:38:7b:14:09:21: 45:b3:4f:c4:4d:35:b3:c5:6e:8e:df:38:4e:85:c1:ab:9b:24: 2f:7a:53:cb:30:df:d9:6c:a3:0f:54:f4:ab:85:6e:3f:3e:4c: d3:ea:87:05:04:e3:e3:a8:04:fa:59:2e:31:f3:78:20:38:1f: 80:f6:58:a3:a0:e8:2d:19:20:4b:c3:0c:e1:ed:b4:93:8e:64: a6:9d:0c:97:bc:05:da:b8:ea:ba:43:ca:05:65:cf:0e:15:83: 52:00:c5:4c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUPXN93FTOCALGAtClS9qc5mV9m3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4 Rjg1MkJBQTAeFw0yNjA0MDcwOTU1MDNaFw0yNzA0MDYxMDAwMDNaMDMxMTAvBgNV BAMTKDI0Qjk4QTRDRjE1NjA2QkZEREIxM0QzMjBGMzNCNDg2NzZDNTM5RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUWbqIMTBwwtNRbeU1cSEOoE5T ocsl1kfUVjqZNIdTfys/uFNIpKeG3TzmHU8Lonulov3H9ewlORu5QilRMxdGP9Eb i5JGJVyK6sus/FB5DgCfN0NR7Nq6dgPgKBKdos0Bk293ES0rsua1KNA3pLGgAVTN ZL387fAkBupVr59l3/7U6rXpszo8L4Xw0FLCxl46/PJgk0dAc5AnMxf9bZ9YrArs Z84/JdxKf0I3hwGlcrOIM47lPp5Y1xTdOf6qWur58uRN1eC4QIx3mOToel9S3Ska uAJCpITbCHqX1EK81mQYCoSggT/H54bYjThu8f5o6/yjnZH5aIIJPb/2amIvAgMB AAGjggIwMIICLDAdBgNVHQ4EFgQUJLmKTPFWBr/dsT0yDzO0hnbFOfcwHwYDVR0j BBgwFoAUQJScfJ3Q0/iZaB/y61PknI+FK6owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWRhZTk3Zi0xYWQxLTRiMzQtOGZlOS0xYmM2NWIwOTA4ZjMvMC80MDk0OUM3QzlE RDBEM0Y4OTk2ODFGRjJFQjUzRTQ5QzhGODUyQkFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDA5NDlDN0M5REQwRDNGODk5NjgxRkYyRUI1M0U0OUM4Rjg1 MkJBQS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5ZGFlOTdmLTFhZDEtNGIzNC04 ZmU5LTFiYzY1YjA5MDhmMy8wLzMxMzUzNzJlMzYzNjJlMzAyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzMTM0MzAzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdQgAwDQYJKoZIhvcN AQELBQADggEBAGXmvkd5EtObfkGgNkM/v6n+mlS5fDcBDndzbLeBJTuNx3a0Pe0x TRRj2pMttG5CqzeouepayNoyvMsEfG6Yj2WBifrE/ROQy7yCc7FfEIec80kFQFke b+BrBBBBJ0ZGX7tI/aABuShXPPZ6w5ATKm1zew8uEQO6WDpaPPEyZ3ffX0oqTjRt dfGO3SzumMQPt7wyo8EVngkFr4MQQs04exQJIUWzT8RNNbPFbo7fOE6FwaubJC96 U8sw39lsow9U9KuFbj8+TNPqhwUE4+OoBPpZLjHzeCA4H4D2WKOg6C0ZIEvDDOHt tJOOZKadDJe8Bdq46rpDygVlzw4Vg1IAxUw= -----END CERTIFICATE-----Generated at Sat Apr 18 05:37:14 2026 by rpki-client