$ rpki-client -vvf rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa File: 3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa (raw, json) Hash identifier: RdSFCq5FmmEFwqUWQWODFaey3Jn4ol8h+jw95vgruqA= Subject key identifier: 6E:21:80:BA:A6:5B:3A:C0:39:A5:7D:48:2A:8C:5C:F1:25:CF:CB:8D Certificate issuer: /CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Certificate serial: 5A042C840196CE03F07B7D7B8CBB2F936882A0E2 Authority key identifier: 77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa Signing time: Sun 03 May 2026 02:47:11 +0000 ROA not before: Sun 03 May 2026 02:42:11 +0000 ROA not after: Sun 02 May 2027 02:47:11 +0000 asID: 136873 IP address blocks: 157.66.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 08:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:04:2c:84:01:96:ce:03:f0:7b:7d:7b:8c:bb:2f:93:68:82:a0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86 Validity Not Before: May 3 02:42:11 2026 GMT Not After : May 2 02:47:11 2027 GMT Subject: CN=6E2180BAA65B3AC039A57D482A8C5CF125CFCB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:65:f2:7f:5f:10:d3:23:a3:cc:3a:54:83: 61:7f:a2:fc:a8:83:4d:95:74:bd:1d:4f:51:1b:d5: 94:0a:50:94:09:d2:69:57:d8:0d:53:bc:3d:c8:7a: 41:fb:ba:91:34:2c:4c:a1:45:e5:1b:d1:76:1a:90: 9c:14:94:1e:e2:b2:89:75:42:7b:51:a5:d1:77:f1: 59:31:aa:50:bb:3e:16:e7:b1:95:09:b9:4c:19:5d: 3d:b4:4a:7e:64:c5:ca:83:d6:43:73:01:1c:bf:12: 18:fc:53:3d:c9:69:11:44:09:a0:88:80:c5:7b:8c: 67:b3:5f:2d:d1:be:64:3e:92:cc:2d:0e:be:f5:79: 6b:a1:e5:4a:30:08:a7:0c:f4:82:a1:c1:72:83:95: 5e:83:cf:0d:90:9e:e0:60:c9:62:7a:1d:67:19:f5: 4d:2a:d2:ff:5d:f2:7d:91:f2:37:0b:9b:2c:38:c7: fc:e5:59:53:70:61:da:46:9e:f3:0e:6b:7d:1a:b5: 2b:58:c4:4f:2b:2c:b3:f8:42:05:b4:53:40:62:1a: 9a:46:fa:6c:e2:e4:e4:2a:a8:a6:2b:2a:08:26:e0: 1c:4e:a8:a5:c2:1d:15:ce:a0:c2:44:c3:38:76:87: e5:da:d6:b3:aa:e7:66:cb:a2:ba:46:22:be:db:c1: d9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:21:80:BA:A6:5B:3A:C0:39:A5:7D:48:2A:8C:5C:F1:25:CF:CB:8D X509v3 Authority Key Identifier: keyid:77:BE:1A:4F:34:7F:A3:1A:5C:FC:46:1F:6A:5D:3C:19:E4:15:8F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/77BE1A4F347FA31A5CFC461F6A5D3C19E4158F86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/824d1ebb-aeeb-4945-9ef2-32ad9bfdeb19/0/3135372e36362e3132392e302f32342d3234203d3e20313336383733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.129.0/24 Signature Algorithm: sha256WithRSAEncryption 16:bd:7e:e1:29:f9:63:b2:10:63:fa:1a:c5:73:9e:2c:e4:53: 52:87:77:72:9a:63:e7:b0:ad:8b:6e:31:3f:5e:67:d7:7e:12: 72:10:91:5c:aa:0c:f9:67:d3:3f:fa:81:9a:06:ae:00:77:0d: 67:0c:74:cf:04:74:68:a4:ca:ac:6a:06:b8:e8:02:82:21:36: 46:03:b1:02:95:56:e6:5f:83:45:04:44:c2:ff:5e:f8:6f:f2: 25:c9:8f:da:60:a0:13:23:e3:41:50:18:58:80:2c:b4:7d:66: 65:28:e2:c2:9f:f2:7a:0e:74:82:45:be:ac:a8:19:50:9d:ea: a8:a7:67:4c:f3:c1:66:c4:14:ce:71:2d:5e:1f:d4:cd:99:b0: ee:9b:ef:19:93:9b:be:60:14:b7:39:bd:3e:60:b2:69:3f:ea: e4:fa:73:8f:a3:37:9f:31:89:1c:9b:a0:c3:4d:2f:26:58:b0: d8:72:fc:6b:a2:55:a7:c2:25:e9:b3:6e:7d:3a:32:93:a2:18: 2d:41:13:37:d6:02:e6:b4:f0:7b:07:09:74:a1:8b:18:2d:4e: f6:99:a7:4d:4e:08:3b:a0:e2:7b:c5:e0:35:12:e3:eb:98:75: 1f:36:59:1a:48:6f:21:c4:8a:0e:19:f9:1f:ad:e2:ba:e9:77: dc:18:59:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUWgQshAGWzgPwe317jLsvk2iCoOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdCRTFBNEYzNDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlF NDE1OEY4NjAeFw0yNjA1MDMwMjQyMTFaFw0yNzA1MDIwMjQ3MTFaMDMxMTAvBgNV BAMTKDZFMjE4MEJBQTY1QjNBQzAzOUE1N0Q0ODJBOEM1Q0YxMjVDRkNCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1WXyf18Q0yOjzDpUg2F/ovyo g02VdL0dT1Eb1ZQKUJQJ0mlX2A1TvD3IekH7upE0LEyhReUb0XYakJwUlB7isol1 QntRpdF38VkxqlC7PhbnsZUJuUwZXT20Sn5kxcqD1kNzARy/Ehj8Uz3JaRFECaCI gMV7jGezXy3RvmQ+kswtDr71eWuh5UowCKcM9IKhwXKDlV6Dzw2QnuBgyWJ6HWcZ 9U0q0v9d8n2R8jcLmyw4x/zlWVNwYdpGnvMOa30atStYxE8rLLP4QgW0U0BiGppG +mzi5OQqqKYrKggm4BxOqKXCHRXOoMJEwzh2h+Xa1rOq52bLorpGIr7bwdnxAgMB AAGjggI0MIICMDAdBgNVHQ4EFgQUbiGAuqZbOsA5pX1IKoxc8SXPy40wHwYDVR0j BBgwFoAUd74aTzR/oxpc/EYfal08GeQVj4YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODI0ZDFlYmItYWVlYi00OTQ1LTllZjItMzJhZDliZmRlYjE5LzAvNzdCRTFBNEYz NDdGQTMxQTVDRkM0NjFGNkE1RDNDMTlFNDE1OEY4Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83N0JFMUE0RjM0N0ZBMzFBNUNGQzQ2MUY2QTVEM0MxOUU0MTU4 Rjg2LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgyNGQxZWJiLWFlZWItNDk0NS05 ZWYyLTMyYWQ5YmZkZWIxOS8wLzMxMzUzNzJlMzYzNjJlMzEzMjM5MmUzMDJmMzIz NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnUKBMA0GCSqG SIb3DQEBCwUAA4IBAQAWvX7hKfljshBj+hrFc54s5FNSh3dymmPnsK2LbjE/XmfX fhJyEJFcqgz5Z9M/+oGaBq4Adw1nDHTPBHRopMqsaga46AKCITZGA7EClVbmX4NF BETC/174b/IlyY/aYKATI+NBUBhYgCy0fWZlKOLCn/J6DnSCRb6sqBlQneqop2dM 88FmxBTOcS1eH9TNmbDum+8Zk5u+YBS3Ob0+YLJpP+rk+nOPozefMYkcm6DDTS8m WLDYcvxrolWnwiXps259OjKTohgtQRM31gLmtPB7Bwl0oYsYLU72madNTgg7oOJ7 xeA1EuPrmHUfNlkaSG8hxIoOGfkfreK66XfcGFnJ -----END CERTIFICATE-----Generated at Tue May 5 13:26:52 2026 by rpki-client