$ rpki-client -vvf repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/3135372e36362e31362e302f32332d3234203d3e20313336303839.roa File: 3135372e36362e31362e302f32332d3234203d3e20313336303839.roa (raw, json) Hash identifier: lIUEbJC9CctoXZT3wQ14d0emV/Z5kJ9geBHJjSnZgGw= Subject key identifier: F8:E3:BF:40:4F:68:79:07:E0:71:F4:A7:1B:54:A6:47:98:21:7D:B2 Certificate issuer: /CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Certificate serial: 3412F9910C1C001590EF076CD065125221289F82 Authority key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/3135372e36362e31362e302f32332d3234203d3e20313336303839.roa Signing time: Thu 26 Mar 2026 14:00:03 +0000 ROA not before: Thu 26 Mar 2026 13:55:03 +0000 ROA not after: Thu 25 Mar 2027 14:00:03 +0000 asID: 136089 IP address blocks: 157.66.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:12:f9:91:0c:1c:00:15:90:ef:07:6c:d0:65:12:52:21:28:9f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Validity Not Before: Mar 26 13:55:03 2026 GMT Not After : Mar 25 14:00:03 2027 GMT Subject: CN=F8E3BF404F687907E071F4A71B54A64798217DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:b2:13:f8:7c:f0:b0:cb:a5:9b:45:82:28: c3:44:ca:5c:70:97:95:cc:cf:f6:bb:a4:2e:5d:84: dc:e7:c2:f4:ca:13:94:c3:ce:38:6c:e5:e8:e3:8d: 6c:f5:a0:2e:53:1f:27:62:de:ea:1f:82:fa:ef:11: 7d:ca:16:c5:cb:0c:62:20:83:d0:8b:e3:de:f3:37: 3a:5d:6e:39:c4:51:b6:ce:ce:27:0d:0a:2d:ec:1f: 71:de:42:bf:fd:39:d0:27:b9:80:88:da:45:f1:d3: 51:52:19:99:2a:0e:b6:a4:dd:65:21:63:33:25:aa: b8:79:a9:f4:4d:39:8f:16:8a:74:4f:31:bb:31:aa: 51:91:37:f1:01:96:fa:e1:f5:bf:35:6b:70:cc:87: a9:2b:50:e7:aa:b1:fb:cb:50:de:8e:8e:41:05:0d: 26:7e:3d:5f:92:f4:8e:e9:68:c4:fa:bf:1d:ee:e4: 72:28:46:9d:82:37:d0:7d:5b:ad:a3:24:61:ee:48: 76:8b:07:bd:39:16:53:a8:20:53:8e:87:05:5c:fc: 13:de:a7:c6:75:9e:61:d3:85:06:a2:8f:66:63:e6: bc:fa:77:9f:17:22:2a:99:dc:93:bd:f1:74:dc:28: a5:28:e8:0e:dd:81:07:db:3b:53:ed:58:86:b7:04: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E3:BF:40:4F:68:79:07:E0:71:F4:A7:1B:54:A6:47:98:21:7D:B2 X509v3 Authority Key Identifier: keyid:30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/3135372e36362e31362e302f32332d3234203d3e20313336303839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.16.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:92:fb:43:0b:5f:d3:3b:0f:e3:1a:84:1c:b9:1f:27:c1:78: dd:b9:2b:df:95:1a:3a:3c:73:25:2c:e0:a7:21:16:8f:e9:73: b2:ce:42:17:f2:a9:74:1d:47:99:52:ab:cd:ee:37:c9:63:b4: 2a:65:1d:db:29:89:51:b5:08:cc:fd:f8:f4:1b:ab:ce:3d:74: 7c:7f:96:f9:9e:52:66:91:9e:c0:52:50:dd:8c:b1:26:31:15: 3e:cc:e3:26:ed:57:71:55:00:f9:cc:21:27:90:44:5f:f1:65: 4f:e8:54:c0:67:a3:50:26:1b:fe:31:c7:e4:cb:87:e9:2e:ab: ba:46:a5:a4:dd:77:9a:97:92:81:7b:eb:5d:dd:7a:93:2c:18: 48:2d:ee:a0:f0:06:7a:5b:d2:50:20:62:d6:f1:65:04:47:43: 3d:43:b2:35:aa:44:55:d2:da:96:c1:02:d4:39:26:e0:20:2a: 7a:8a:00:29:14:a7:04:cf:9e:4f:fe:ad:b6:38:9a:d9:b5:0a: 40:b9:60:b3:e9:6e:68:91:33:ec:53:73:c6:a7:29:92:c5:cb: 9c:a0:19:00:bb:5d:06:47:20:ca:67:2e:66:db:a8:78:5a:21: dd:e6:4c:f9:14:17:77:ea:97:4b:19:54:cf:6f:20:f7:07:09: ac:4d:07:0e -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUNBL5kQwcABWQ7wds0GUSUiEon4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUy MTA2RjFCNDAeFw0yNjAzMjYxMzU1MDNaFw0yNzAzMjUxNDAwMDNaMDMxMTAvBgNV BAMTKEY4RTNCRjQwNEY2ODc5MDdFMDcxRjRBNzFCNTRBNjQ3OTgyMTdEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6rIT+HzwsMulm0WCKMNEylxw l5XMz/a7pC5dhNznwvTKE5TDzjhs5ejjjWz1oC5THydi3uofgvrvEX3KFsXLDGIg g9CL497zNzpdbjnEUbbOzicNCi3sH3HeQr/9OdAnuYCI2kXx01FSGZkqDrak3WUh YzMlqrh5qfRNOY8WinRPMbsxqlGRN/EBlvrh9b81a3DMh6krUOeqsfvLUN6OjkEF DSZ+PV+S9I7paMT6vx3u5HIoRp2CN9B9W62jJGHuSHaLB705FlOoIFOOhwVc/BPe p8Z1nmHThQaij2Zj5rz6d58XIiqZ3JO98XTcKKUo6A7dgQfbO1PtWIa3BKApAgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU+OO/QE9oeQfgcfSnG1SmR5ghfbIwHwYDVR0j BBgwFoAUMIpRAED9+bwot7Y9MgPkDiEG8bQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMC8zMDhBNTEwMDQw RkRGOUJDMjhCN0I2M0QzMjAzRTQwRTIxMDZGMUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA4QTUxMDA0MEZERjlCQzI4QjdCNjNEMzIwM0U0MEUyMTA2 RjFCNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ZWQ4ZDZjLWYwZmEtNDdjYy1h ZWFhLWI0ZTNlZTExNjg4Mi8wLzMxMzUzNzJlMzYzNjJlMzEzNjJlMzAyZjMyMzMy ZDMyMzQyMDNkM2UyMDMxMzMzNjMwMzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ1CEDANBgkqhkiG 9w0BAQsFAAOCAQEAS5L7Qwtf0zsP4xqEHLkfJ8F43bkr35UaOjxzJSzgpyEWj+lz ss5CF/KpdB1HmVKrze43yWO0KmUd2ymJUbUIzP349Burzj10fH+W+Z5SZpGewFJQ 3YyxJjEVPszjJu1XcVUA+cwhJ5BEX/FlT+hUwGejUCYb/jHH5MuH6S6rukalpN13 mpeSgXvrXd16kywYSC3uoPAGelvSUCBi1vFlBEdDPUOyNapEVdLalsEC1Dkm4CAq eooAKRSnBM+eT/6ttjia2bUKQLlgs+luaJEz7FNzxqcpksXLnKAZALtdBkcgymcu ZtuoeFoh3eZM+RQXd+qXSxlUz28g9wcJrE0HDg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:05 2026 by rpki-client